Skip to content

Add transitive NuGet dependencies to centralized package management#226

Merged
trejjam merged 1 commit intomainfrom
feature/add-transitive-dependencies-to-package-lock
Dec 22, 2025
Merged

Add transitive NuGet dependencies to centralized package management#226
trejjam merged 1 commit intomainfrom
feature/add-transitive-dependencies-to-package-lock

Conversation

@trejjam
Copy link
Member

@trejjam trejjam commented Dec 22, 2025

Summary

  • Adds all transitive NuGet dependencies to Directory.Packages.props for explicit version control
  • Regenerates package lock files to reflect centrally managed transitive dependencies

Changes

Transitive Dependencies

  • Extracted 60 transitive dependencies from packages.lock.json files
  • Added to Directory.Packages.props with framework-independent configuration
  • All dependencies are now centrally managed with explicit versions

Lock Files

  • Regenerated with dotnet restore --force-evaluate
  • Transitive dependencies now marked as CentralTransitive instead of Transitive
  • Lock files updated to reflect pinned transitive dependency versions from Directory.Packages.props

Benefits

  • Reproducible builds - Lock files ensure exact package versions across all environments
  • Security - CI validates packages haven't changed unexpectedly
  • Transparency - All transitive dependencies explicitly versioned and visible
  • Control - Pin transitive dependency versions when needed for stability
  • Better dependency management - Centralized version control prevents version conflicts

Verification

dotnet clean - Succeeded
dotnet restore - No warnings
dotnet build - Build succeeded with 0 warnings, 0 errors
dotnet test - All 9 tests passed (net8.0, net9.0, net10.0)
dotnet restore --locked-mode - Verified lock files are valid

…ement

Extracts all transitive dependencies from packages.lock.json files and adds
them to Directory.Packages.props for explicit version control and better
dependency management.

- Added 60 transitive dependencies to Directory.Packages.props
- Regenerated lock files to reflect centrally managed transitive dependencies
- All transitive dependencies now marked as 'CentralTransitive' in lock files
- Ensures reproducible builds and transparent dependency tracking
@trejjam trejjam added this pull request to the merge queue Dec 22, 2025
Merged via the queue into main with commit 6ddfd86 Dec 22, 2025
2 checks passed
@trejjam trejjam deleted the feature/add-transitive-dependencies-to-package-lock branch December 22, 2025 21:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant