Datasync/Directory.Packages.props at refs/heads/main · CommunityToolkit/Datasync · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
<Project>
  <PropertyGroup>
    <ManagePackageVersionsCentrally>true</ManagePackageVersionsCentrally>
    <CentralPackageTransitivePinningEnabled>true</CentralPackageTransitivePinningEnabled>
  </PropertyGroup>
  <PropertyGroup>
    <DotNetVersion>10.0.9</DotNetVersion>
    <EFCoreVersion>10.0.9</EFCoreVersion>
    <TestContainersVersion>4.12.0</TestContainersVersion>
    <ODataVersion>8.4.3</ODataVersion>
  </PropertyGroup>
  <ItemGroup>
    <PackageVersion Include="AutoMapper" Version="16.1.1" />
    <PackageVersion Include="AwesomeAssertions" Version="9.4.0" />
    <PackageVersion Include="Azure.Identity" Version="1.17.1" />
    <PackageVersion Include="LiteDB" Version="5.0.21" />
    <PackageVersion Include="Microsoft.AspNetCore.Mvc.Testing" Version="$(DotNetVersion)" />
    <PackageVersion Include="Microsoft.AspNetCore.OData" Version="9.4.1" />
    <PackageVersion Include="Microsoft.AspNetCore.OpenApi" Version="$(DotNetVersion)" />
    <PackageVersion Include="Microsoft.Azure.Cosmos" Version="3.61.0" />
    <PackageVersion Include="Microsoft.EntityFrameworkCore" Version="$(EFCoreVersion)" />
    <PackageVersion Include="Microsoft.EntityFrameworkCore.Cosmos" Version="$(EFCoreVersion)" />
    <PackageVersion Include="Microsoft.EntityFrameworkCore.InMemory" Version="$(EFCoreVersion)" />
    <PackageVersion Include="Microsoft.EntityFrameworkCore.Proxies" Version="$(EFCoreVersion)" />
    <PackageVersion Include="Microsoft.EntityFrameworkCore.Sqlite" Version="$(EFCoreVersion)" />
    <PackageVersion Include="Microsoft.EntityFrameworkCore.Relational" Version="$(EFCoreVersion)" />
    <PackageVersion Include="Microsoft.EntityFrameworkCore.SqlServer" Version="$(EFCoreVersion)" />
    <PackageVersion Include="Microsoft.Extensions.Caching.Memory" Version="$(DotNetVersion)" />
    <PackageVersion Include="Microsoft.Extensions.DependencyInjection.Abstractions" Version="$(DotNetVersion)" />
    <PackageVersion Include="Microsoft.Extensions.Http" Version="$(DotNetVersion)" />
    <PackageVersion Include="Microsoft.Extensions.Logging.Abstractions" Version="$(DotNetVersion)" />
    <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="18.6.0" />
    <PackageVersion Include="Microsoft.OData.Core" Version="$(ODataVersion)" />
    <!--
      Microsoft.AspNetCore.OpenApi/NSwag.AspNetCore/Swashbuckle.AspNetCore all float a transitive
      dependency on Microsoft.OpenApi 2.0.0, which has a known high-severity vulnerability (NU1903,
      GHSA-v5pm-xwqc-g5wc - a crafted OpenAPI document with a circular schema reference can crash the
      process). Pin explicitly to the patched 2.x release; CentralPackageTransitivePinningEnabled above
      forces this version across all transitive references.
    -->
    <PackageVersion Include="Microsoft.OpenApi" Version="2.7.5" />
    <PackageVersion Include="Microsoft.SourceLink.GitHub" Version="10.0.300" />
    <PackageVersion Include="Microsoft.Spatial" Version="8.4.3" />
    <PackageVersion Include="Newtonsoft.Json" Version="13.0.4" />
    <PackageVersion Include="MongoDB.Driver" Version="3.9.0" />
    <PackageVersion Include="NSubstitute" Version="5.3.0" />
    <PackageVersion Include="NSwag.AspNetCore" Version="14.7.1" />
    <PackageVersion Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="10.0.2" />
    <!--
      Microsoft.EntityFrameworkCore.Sqlite floats a transitive dependency on
      SQLitePCLRaw.bundle_e_sqlite3 2.1.11, which pulls in the deprecated
      SQLitePCLRaw.lib.e_sqlite3 2.1.11 and has a known high-severity vulnerability
      (NU1903, GHSA-2m69-gcr7-jv3q / CVE-2025-6965 - SQLite versions before 3.50.2
      have a memory corruption issue). The SQLitePCLRaw 3.x line replaces
      lib.e_sqlite3 entirely with SourceGear.sqlite3 (>= 3.50.2), so pin explicitly
      to the patched 3.x release; CentralPackageTransitivePinningEnabled above
      forces this version across all transitive references.
    -->
    <PackageVersion Include="SQLitePCLRaw.bundle_e_sqlite3" Version="3.0.3" />
    <PackageVersion Include="Swashbuckle.AspNetCore" Version="10.2.1" />
    <PackageVersion Include="System.Formats.Asn1" Version="$(DotNetVersion)" />
    <PackageVersion Include="System.Linq.Async" Version="7.0.0" />
    <PackageVersion Include="System.Net.Http" Version="4.3.4" />
    <PackageVersion Include="System.Text.Json" Version="$(DotNetVersion)" />
    <PackageVersion Include="System.Threading.Tasks.Dataflow" Version="$(DotNetVersion)" />
    <PackageVersion Include="TestContainers.MongoDb" Version="$(TestContainersVersion)" />
    <PackageVersion Include="TestContainers.MsSql" Version="$(TestContainersVersion)" />
    <PackageVersion Include="TestContainers.PostgreSql" Version="$(TestContainersVersion)" />
    <PackageVersion Include="xunit.v3" Version="3.2.2" />
    <PackageVersion Include="xunit.v3.core" Version="3.2.2" />
    <PackageVersion Include="xunit.v3.assert" Version="3.2.2" />
    <PackageVersion Include="xunit.runner.visualstudio" Version="3.1.5" />
    <PackageVersion Include="coverlet.collector" Version="10.0.1" />
    <PackageVersion Include="coverlet.msbuild" Version="10.0.1" />
    <PackageVersion Include="Ulid" Version="1.4.1" />
    <!-- XUnit.Combinatorial v2.x targets xUnit v3 (xunit.v3.extensibility.core) -->
    <PackageVersion Include="XUnit.Combinatorial" Version="2.0.24" />
  </ItemGroup>
</Project>