SimpleModule/Directory.Packages.props at main · antosubash/SimpleModule · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
<Project>
  <PropertyGroup>
    <ManagePackageVersionsCentrally>true</ManagePackageVersionsCentrally>
    <!-- Pin transitive dependencies to the central versions below. Needed so the
         "Security overrides" at the bottom of this file actually replace the vulnerable
         versions pulled in transitively by EF Core / Aspire (they are not direct refs).
         Requires every centrally-managed version to be >= what the graph needs
         transitively (e.g. Npgsql was bumped 9.0.4 -> 10.0.3 to match EF Core PG 10). -->
    <CentralPackageTransitivePinningEnabled>true</CentralPackageTransitivePinningEnabled>
  </PropertyGroup>
  <ItemGroup>
    <!-- Aspire -->
    <PackageVersion Include="Aspire.Hosting.PostgreSQL" Version="13.1.2" />
    <PackageVersion Include="Microsoft.Extensions.Http.Resilience" Version="10.1.0" />
    <PackageVersion Include="Microsoft.Extensions.ServiceDiscovery" Version="10.1.0" />
    <PackageVersion Include="Microsoft.OpenApi" Version="2.7.5" />
    <PackageVersion Include="OpenTelemetry.Exporter.OpenTelemetryProtocol" Version="1.15.3" />
    <PackageVersion Include="OpenTelemetry.Extensions.Hosting" Version="1.15.3" />
    <PackageVersion Include="OpenTelemetry.Instrumentation.AspNetCore" Version="1.15.2" />
    <PackageVersion Include="OpenTelemetry.Instrumentation.Http" Version="1.15.1" />
    <PackageVersion Include="OpenTelemetry.Instrumentation.Runtime" Version="1.15.1" />
    <!-- Analyzers -->
    <PackageVersion Include="NetEscapades.EnumGenerators" Version="1.0.0-beta11" />
    <PackageVersion Include="Roslynator.Analyzers" Version="4.12.11" />
    <!-- Source Generator -->
    <PackageVersion Include="Microsoft.CodeAnalysis.Analyzers" Version="4.14.0" />
    <PackageVersion Include="Microsoft.CodeAnalysis.CSharp" Version="5.0.0" />
    <!-- EF Core -->
    <PackageVersion Include="Microsoft.Data.Sqlite" Version="10.0.3" />
    <PackageVersion Include="Microsoft.EntityFrameworkCore" Version="10.0.3" />
    <PackageVersion Include="Microsoft.EntityFrameworkCore.Sqlite" Version="10.0.3" />
    <PackageVersion Include="Npgsql" Version="10.0.3" />
    <PackageVersion Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.3" />
    <PackageVersion Include="Microsoft.EntityFrameworkCore.InMemory" Version="10.0.3" />
    <PackageVersion Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="10.0.0" />
    <PackageVersion Include="Microsoft.EntityFrameworkCore.SqlServer" Version="10.0.3" />
    <!-- Spatial / GIS (NetTopologySuite + provider extensions) -->
    <PackageVersion Include="NetTopologySuite" Version="2.6.0" />
    <PackageVersion Include="NetTopologySuite.IO.GeoJSON4STJ" Version="4.0.0" />
    <PackageVersion Include="Npgsql.EntityFrameworkCore.PostgreSQL.NetTopologySuite" Version="10.0.0" />
    <PackageVersion Include="Microsoft.EntityFrameworkCore.SqlServer.NetTopologySuite" Version="10.0.3" />
    <PackageVersion Include="Microsoft.EntityFrameworkCore.Sqlite.NetTopologySuite" Version="10.0.3" />
    <!-- Identity -->
    <PackageVersion Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="10.0.3" />
    <PackageVersion Include="Microsoft.AspNetCore.Authentication.OpenIdConnect" Version="10.0.3" />
    <PackageVersion Include="Microsoft.AspNetCore.Identity.EntityFrameworkCore" Version="10.0.3" />
    <!-- OpenIddict -->
    <PackageVersion Include="OpenIddict.AspNetCore" Version="6.3.0" />
    <PackageVersion Include="OpenIddict.EntityFrameworkCore" Version="6.3.0" />
    <!-- API -->
    <PackageVersion Include="Microsoft.AspNetCore.OpenApi" Version="10.0.3" />
    <PackageVersion Include="Swashbuckle.AspNetCore" Version="10.1.4" />
    <!-- Testing -->
    <PackageVersion Include="xunit.v3" Version="1.1.0" />
    <PackageVersion Include="xunit.runner.visualstudio" Version="3.1.0" />
    <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="17.13.0" />
    <PackageVersion Include="FluentAssertions" Version="8.3.0" />
    <PackageVersion Include="Microsoft.Extensions.TimeProvider.Testing" Version="9.10.0" />
    <PackageVersion Include="NSubstitute" Version="5.3.0" />
    <PackageVersion Include="Bogus" Version="35.6.1" />
    <PackageVersion Include="Microsoft.AspNetCore.Mvc.Testing" Version="10.0.3" />
    <PackageVersion Include="BenchmarkDotNet" Version="0.14.0" />
    <PackageVersion Include="NBomber" Version="6.3.0" />
    <PackageVersion Include="NBomber.Http" Version="6.2.0" />
    <!-- Value Objects -->
    <PackageVersion Include="Vogen" Version="8.0.5" />
    <!-- Azure -->
    <PackageVersion Include="Azure.Storage.Blobs" Version="12.24.0" />
    <!-- AWS -->
    <PackageVersion Include="AWSSDK.S3" Version="3.7.500.2" />
    <!-- Background Jobs -->
    <PackageVersion Include="Cronos" Version="0.8.4" />
    <!-- Caching -->
    <PackageVersion Include="ZiggyCreatures.FusionCache" Version="2.6.0" />
    <!-- Validation -->
    <PackageVersion Include="FluentValidation" Version="12.1.1" />
    <PackageVersion Include="FluentValidation.DependencyInjectionExtensions" Version="12.1.1" />
    <!-- Messaging / Event Bus -->
    <PackageVersion Include="WolverineFx" Version="5.31.0" />
    <PackageVersion Include="WolverineFx.EntityFrameworkCore" Version="5.31.0" />
    <PackageVersion Include="WolverineFx.Sqlite" Version="5.31.0" />
    <PackageVersion Include="WolverineFx.Postgresql" Version="5.31.0" />
    <PackageVersion Include="WolverineFx.SqlServer" Version="5.31.0" />
    <PackageVersion Include="Scrutor" Version="7.0.0" />
    <!-- Email -->
    <PackageVersion Include="MailKit" Version="4.16.0" />
    <!-- CLI -->
    <PackageVersion Include="Spectre.Console.Cli" Version="0.49.1" />
    <!-- AI / LLM Providers -->
    <PackageVersion Include="Microsoft.Extensions.AI" Version="10.4.1" />
    <PackageVersion Include="Microsoft.Extensions.AI.Abstractions" Version="10.4.1" />
    <PackageVersion Include="Microsoft.Extensions.AI.Ollama" Version="9.7.0-preview.1.25356.2" />
    <PackageVersion Include="Microsoft.Extensions.AI.OpenAI" Version="10.4.1" />
    <PackageVersion Include="Azure.AI.OpenAI" Version="2.1.0" />
    <PackageVersion Include="OpenAI" Version="2.9.1" />
    <PackageVersion Include="Anthropic.SDK" Version="5.10.0" />
    <!-- RAG / Vector -->
    <PackageVersion Include="Microsoft.Extensions.VectorData.Abstractions" Version="10.1.0" />
    <PackageVersion
      Include="Microsoft.SemanticKernel.Connectors.InMemory"
      Version="1.74.0-preview"
    />
    <PackageVersion
      Include="Microsoft.SemanticKernel.Connectors.Postgres"
      Version="1.51.0-preview"
    />
    <!-- Security overrides: patched versions of transitive packages flagged by the CI
         vulnerable-packages audit gate. Not referenced directly anywhere; transitive
         pinning (top of file) is what makes these apply. -->
    <!-- GHSA-hv8m-jj95-wg3x (High): MessagePack before 2.5.301, pulled via Aspire/Wolverine. -->
    <PackageVersion Include="MessagePack" Version="2.5.302" />
    <!-- GHSA-2m69-gcr7-jv3q (High): the SQLite native lib bundled by SQLitePCLRaw 2.1.11
         (via Microsoft.EntityFrameworkCore.Sqlite). The patched line is 3.x; the family is
         version-split there (core/bundle/provider = 3.0.3, native lib = SQLite-versioned 3.50.3). -->
    <PackageVersion Include="SQLitePCLRaw.core" Version="3.0.3" />
    <PackageVersion Include="SQLitePCLRaw.bundle_e_sqlite3" Version="3.0.3" />
    <PackageVersion Include="SQLitePCLRaw.provider.e_sqlite3" Version="3.0.3" />
    <PackageVersion Include="SQLitePCLRaw.lib.e_sqlite3" Version="3.50.3" />
  </ItemGroup>
</Project>