Skip to content

Commit ca0cb7f

Browse files
dgee2claude
andauthored
Upgrade all .NET packages to latest versions (#1217)
Bring every NuGet package in the backend solution up to its latest release. `dotnet list package --outdated` is now empty across all nine projects. Aspire-family packages were updated with `aspire update` (CLI 13.4.6), which handles the AppHost SDK alongside the hosting/component packages: - Aspire.AppHost.Sdk, Aspire.Hosting.JavaScript/.Redis/.SqlServer and Aspire.Microsoft.EntityFrameworkCore.SqlServer: 13.3.5 -> 13.4.6 Two Aspire-adjacent packages the CLI does not reach were bumped with `dotnet add package`: - Aspire.Hosting.Testing 13.3.5 -> 13.4.6 - CommunityToolkit.Aspire.Hosting.JavaScript.Extensions 13.3.0 -> 13.4.0 Remaining updates: - EF Core (SqlServer, Design, InMemory), JwtBearer and Microsoft.Extensions.ApiDescription.Server: 10.0.8 -> 10.0.10 - Microsoft.Extensions.Http.Resilience/.ServiceDiscovery: 10.6.0 -> 10.8.0 - All five OpenTelemetry packages -> 1.17.0 - Vogen 8.0.5 -> 8.0.7, AwesomeAssertions 9.4.0 -> 9.5.0, Microsoft.Testing.Platform 2.2.3 -> 2.3.3, GitHubActionsTestLogger 3.0.4 -> 3.0.5 The explicit MessagePack pin in Menu.AppHost is removed. It existed to force the transitive MessagePack reference past the vulnerabilities in 2.5.192; Aspire 13.4.6 brings StreamJsonRpc 2.25.29, which resolves 2.5.302 on its own, so the pin is now a no-op. `dotnet list package --vulnerable --include-transitive` reports nothing without it. MessagePack 3.1.8 was deliberately not taken, as that is a major-version bump away from what StreamJsonRpc expects. Co-authored-by: Claude <noreply@anthropic.com>
1 parent 7e449b4 commit ca0cb7f

8 files changed

Lines changed: 32 additions & 34 deletions

File tree

backend/Menu.AppHost/Menu.AppHost.csproj

Lines changed: 5 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
<Project Sdk="Aspire.AppHost.Sdk/13.3.5">
1+
<Project Sdk="Aspire.AppHost.Sdk/13.4.6">
22

33
<PropertyGroup>
44
<OutputType>Exe</OutputType>
@@ -9,12 +9,10 @@
99
</PropertyGroup>
1010

1111
<ItemGroup>
12-
<PackageReference Include="Aspire.Hosting.JavaScript" Version="13.3.5" />
13-
<PackageReference Include="Aspire.Hosting.Redis" Version="13.3.5" />
14-
<PackageReference Include="Aspire.Hosting.SqlServer" Version="13.3.5" />
15-
<PackageReference Include="CommunityToolkit.Aspire.Hosting.JavaScript.Extensions" Version="13.3.0" />
16-
<!-- Pin transitive MessagePack (via Aspire.Hosting -> StreamJsonRpc) past known vulnerabilities in 2.5.192 -->
17-
<PackageReference Include="MessagePack" Version="2.5.302" />
12+
<PackageReference Include="Aspire.Hosting.JavaScript" Version="13.4.6" />
13+
<PackageReference Include="Aspire.Hosting.Redis" Version="13.4.6" />
14+
<PackageReference Include="Aspire.Hosting.SqlServer" Version="13.4.6" />
15+
<PackageReference Include="CommunityToolkit.Aspire.Hosting.JavaScript.Extensions" Version="13.4.0" />
1816
</ItemGroup>
1917

2018
<ItemGroup>

backend/Menu.MigrationService/Menu.MigrationService.csproj

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@
99
</PropertyGroup>
1010

1111
<ItemGroup>
12-
<PackageReference Include="Aspire.Microsoft.EntityFrameworkCore.SqlServer" Version="13.3.5" />
12+
<PackageReference Include="Aspire.Microsoft.EntityFrameworkCore.SqlServer" Version="13.4.6" />
1313
</ItemGroup>
1414

1515
<ItemGroup>

backend/Menu.ServiceDefaults/Menu.ServiceDefaults.csproj

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -10,13 +10,13 @@
1010
<ItemGroup>
1111
<FrameworkReference Include="Microsoft.AspNetCore.App" />
1212

13-
<PackageReference Include="Microsoft.Extensions.Http.Resilience" Version="10.6.0" />
14-
<PackageReference Include="Microsoft.Extensions.ServiceDiscovery" Version="10.6.0" />
15-
<PackageReference Include="OpenTelemetry.Exporter.OpenTelemetryProtocol" Version="1.15.3" />
16-
<PackageReference Include="OpenTelemetry.Extensions.Hosting" Version="1.15.3" />
17-
<PackageReference Include="OpenTelemetry.Instrumentation.AspNetCore" Version="1.15.2" />
18-
<PackageReference Include="OpenTelemetry.Instrumentation.Http" Version="1.15.1" />
19-
<PackageReference Include="OpenTelemetry.Instrumentation.Runtime" Version="1.15.1" />
13+
<PackageReference Include="Microsoft.Extensions.Http.Resilience" Version="10.8.0" />
14+
<PackageReference Include="Microsoft.Extensions.ServiceDiscovery" Version="10.8.0" />
15+
<PackageReference Include="OpenTelemetry.Exporter.OpenTelemetryProtocol" Version="1.17.0" />
16+
<PackageReference Include="OpenTelemetry.Extensions.Hosting" Version="1.17.0" />
17+
<PackageReference Include="OpenTelemetry.Instrumentation.AspNetCore" Version="1.17.0" />
18+
<PackageReference Include="OpenTelemetry.Instrumentation.Http" Version="1.17.0" />
19+
<PackageReference Include="OpenTelemetry.Instrumentation.Runtime" Version="1.17.0" />
2020
</ItemGroup>
2121

2222
</Project>

backend/MenuApi.Integration.Tests/MenuApi.Integration.Tests.csproj

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -22,9 +22,9 @@
2222
</PropertyGroup>
2323

2424
<ItemGroup>
25-
<PackageReference Include="Aspire.Hosting.Testing" Version="13.3.5" />
25+
<PackageReference Include="Aspire.Hosting.Testing" Version="13.4.6" />
2626
<PackageReference Include="AutoFixture.Xunit3" Version="4.19.0" />
27-
<PackageReference Include="AwesomeAssertions" Version="9.4.0" />
27+
<PackageReference Include="AwesomeAssertions" Version="9.5.0" />
2828
<PackageReference Include="AwesomeAssertions.Analyzers" Version="9.0.8">
2929
<PrivateAssets>all</PrivateAssets>
3030
<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
@@ -33,9 +33,9 @@
3333
<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
3434
<PrivateAssets>all</PrivateAssets>
3535
</PackageReference>
36-
<PackageReference Include="GitHubActionsTestLogger" Version="3.0.4" />
36+
<PackageReference Include="GitHubActionsTestLogger" Version="3.0.5" />
3737
<PackageReference Include="MartinCostello.Logging.XUnit.v3" Version="0.7.1" />
38-
<PackageReference Include="Microsoft.Testing.Platform" Version="2.2.3" />
38+
<PackageReference Include="Microsoft.Testing.Platform" Version="2.3.3" />
3939
<PackageReference Include="xunit.v3.mtp-v2" Version="3.2.2" />
4040
</ItemGroup>
4141

backend/MenuApi.Tests/MenuApi.Tests.csproj

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@
2626
<ItemGroup>
2727
<PackageReference Include="AutoFixture.Xunit3" Version="4.19.0" />
2828
<PackageReference Include="FluentValidation" Version="12.1.1" />
29-
<PackageReference Include="AwesomeAssertions" Version="9.4.0" />
29+
<PackageReference Include="AwesomeAssertions" Version="9.5.0" />
3030
<PackageReference Include="AwesomeAssertions.Analyzers" Version="9.0.8">
3131
<PrivateAssets>all</PrivateAssets>
3232
<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
@@ -36,9 +36,9 @@
3636
<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
3737
</PackageReference>
3838
<PackageReference Include="FakeItEasy" Version="9.0.1" />
39-
<PackageReference Include="GitHubActionsTestLogger" Version="3.0.4" />
40-
<PackageReference Include="Microsoft.EntityFrameworkCore.InMemory" Version="10.0.8" />
41-
<PackageReference Include="Microsoft.Testing.Platform" Version="2.2.3" />
39+
<PackageReference Include="GitHubActionsTestLogger" Version="3.0.5" />
40+
<PackageReference Include="Microsoft.EntityFrameworkCore.InMemory" Version="10.0.10" />
41+
<PackageReference Include="Microsoft.Testing.Platform" Version="2.3.3" />
4242
<PackageReference Include="xunit.v3.mtp-v2" Version="3.2.2" />
4343
</ItemGroup>
4444

backend/MenuApi/MenuApi.csproj

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -30,22 +30,22 @@
3030
</ItemGroup>
3131

3232
<ItemGroup>
33-
<PackageReference Include="Aspire.Microsoft.EntityFrameworkCore.SqlServer" Version="13.3.5" />
33+
<PackageReference Include="Aspire.Microsoft.EntityFrameworkCore.SqlServer" Version="13.4.6" />
3434
<PackageReference Include="FluentValidation" Version="12.1.1" />
3535
<PackageReference Include="FluentValidation.DependencyInjectionExtensions" Version="12.1.1" />
36-
<PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.8">
36+
<PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.10">
3737
<PrivateAssets>all</PrivateAssets>
3838
<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
3939
</PackageReference>
4040
<PackageReference Include="Microsoft.ApplicationInsights.AspNetCore" Version="3.1.2" />
41-
<PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="10.0.8" />
42-
<PackageReference Include="Microsoft.Extensions.ApiDescription.Server" Version="10.0.8">
41+
<PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="10.0.10" />
42+
<PackageReference Include="Microsoft.Extensions.ApiDescription.Server" Version="10.0.10">
4343
<PrivateAssets>all</PrivateAssets>
4444
<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
4545
</PackageReference>
4646
<PackageReference Include="Microsoft.VisualStudio.Azure.Containers.Tools.Targets" Version="1.23.0" />
4747
<PackageReference Include="Riok.Mapperly" Version="4.3.1" />
48-
<PackageReference Include="Vogen" Version="8.0.5" />
48+
<PackageReference Include="Vogen" Version="8.0.7" />
4949
</ItemGroup>
5050

5151
<ItemGroup>

backend/MenuDB.Tests/MenuDB.Tests.csproj

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -16,15 +16,15 @@
1616
</PropertyGroup>
1717

1818
<ItemGroup>
19-
<PackageReference Include="Microsoft.EntityFrameworkCore.InMemory" Version="10.0.8" />
20-
<PackageReference Include="Microsoft.Testing.Platform" Version="2.2.3" />
19+
<PackageReference Include="Microsoft.EntityFrameworkCore.InMemory" Version="10.0.10" />
20+
<PackageReference Include="Microsoft.Testing.Platform" Version="2.3.3" />
2121
<PackageReference Include="xunit.v3.mtp-v2" Version="3.2.2" />
22-
<PackageReference Include="AwesomeAssertions" Version="9.4.0" />
22+
<PackageReference Include="AwesomeAssertions" Version="9.5.0" />
2323
<PackageReference Include="AwesomeAssertions.Analyzers" Version="9.0.8">
2424
<PrivateAssets>all</PrivateAssets>
2525
<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
2626
</PackageReference>
27-
<PackageReference Include="GitHubActionsTestLogger" Version="3.0.4" />
27+
<PackageReference Include="GitHubActionsTestLogger" Version="3.0.5" />
2828
<PackageReference Include="coverlet.collector" Version="10.0.1">
2929
<PrivateAssets>all</PrivateAssets>
3030
<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>

backend/MenuDB/MenuDB.csproj

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -7,8 +7,8 @@
77
</PropertyGroup>
88

99
<ItemGroup>
10-
<PackageReference Include="Microsoft.EntityFrameworkCore.SqlServer" Version="10.0.8" />
11-
<PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.8">
10+
<PackageReference Include="Microsoft.EntityFrameworkCore.SqlServer" Version="10.0.10" />
11+
<PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.10">
1212
<PrivateAssets>all</PrivateAssets>
1313
<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
1414
</PackageReference>

0 commit comments

Comments
 (0)