HHostingByteSoftware
Ctrl K
ComunidadGuías…

Directory.Packages.props

Rama dev · réplica de lectura del repositorio original.

Archivo original ↗Preguntar a KiBot
<Project>
  <PropertyGroup>
    <ManagePackageVersionsCentrally>true</ManagePackageVersionsCentrally>
    <CentralPackageTransitivePinningEnabled>true</CentralPackageTransitivePinningEnabled>
  </PropertyGroup>
  <ItemGroup>
    <!-- API & Web -->
    <PackageVersion Include="Asp.Versioning.Http" Version="10.0.1" />
    <PackageVersion Include="Asp.Versioning.Mvc" Version="10.0.1" />
    <PackageVersion Include="Asp.Versioning.Mvc.ApiExplorer" Version="10.0.1" />
    <PackageVersion Include="AspNetCore.SwaggerUI.Themes" Version="3.0.2" />
    <PackageVersion Include="Makaretu.Dns" Version="2.0.1" />
    <PackageVersion Include="Grpc.AspNetCore" Version="2.71.0" />
    <PackageVersion Include="Grpc.Net.Client" Version="2.71.0" />
    <PackageVersion Include="protobuf-net.Grpc" Version="1.2.2" />
    <PackageVersion Include="protobuf-net.Grpc.AspNetCore" Version="1.2.2" />
    <!--
      Transitive dependency of both Grpc.AspNetCore (plugin IPC) and Sharpcaster
      (Chromecast). Left unpinned, each project resolved its own graph
      independently and the build copied Sharpcaster's Google.Protobuf 3.32.0
      over with Grpc's older 3.30.2 in NoMercy.Service's output — Sharpcaster's
      compiled reference then failed to load at runtime with a FileNotFoundException,
      crashing the process from a background thread the moment a chromecast
      heartbeat fired. Pinning one version across the whole solution is what
      Central Package Management exists to guarantee.
    -->
    <PackageVersion Include="Google.Protobuf" Version="3.32.0" />
    <PackageVersion Include="Makaretu.Dns.Multicast" Version="0.27.0" />
    <PackageVersion Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="10.0.7" />
    <PackageVersion Include="Microsoft.AspNetCore.Http.Extensions" Version="2.3.9" />
    <PackageVersion Include="Microsoft.AspNetCore.Mvc" Version="2.3.9" />
    <PackageVersion Include="Microsoft.AspNetCore.Mvc.Abstractions" Version="2.3.12" />
    <PackageVersion Include="Microsoft.AspNetCore.Mvc.NewtonsoftJson" Version="10.0.7" />
    <PackageVersion Include="Microsoft.AspNetCore.Mvc.Testing" Version="10.0.7" />
    <PackageVersion Include="Microsoft.AspNetCore.SignalR.Client" Version="10.0.13" />
    <PackageVersion
      Include="Microsoft.AspNetCore.SignalR.Protocols.NewtonsoftJson"
      Version="10.0.13"
    />
    <PackageVersion Include="Microsoft.Extensions.Configuration.Json" Version="10.0.7" />
    <PackageVersion Include="Microsoft.Extensions.FileProviders.Embedded" Version="10.0.7" />
    <PackageVersion Include="Microsoft.Extensions.Http" Version="10.0.7" />
    <PackageVersion Include="Microsoft.Extensions.Localization" Version="10.0.7" />
    <PackageVersion Include="Microsoft.IdentityModel.Protocols.OpenIdConnect" Version="8.17.0" />
    <PackageVersion Include="MimeMapping" Version="4.0.0" />
    <!-- 1.15.1 is the latest published — patches GHSA-g94r-2vxg-569j
             (transitive OpenTelemetry.Api 1.15.0 vuln). -->
    <PackageVersion Include="OpenTelemetry.Instrumentation.Http" Version="1.15.1" />
    <PackageVersion Include="System.IdentityModel.Tokens.Jwt" Version="8.22.0" />
    <!-- Swagger -->
    <!-- Pin Microsoft.OpenApi to the patched 2.7.5: Swashbuckle 10.1.7 pulls the
             transitive 2.4.1, which carries NU1903 / GHSA-v5pm-xwqc-g5wc (circular schema
             reference can terminate parsing). 2.7.5 is the first patched 2.x release. -->
    <PackageVersion Include="Microsoft.OpenApi" Version="2.7.5" />
    <PackageVersion Include="Swashbuckle.AspNetCore.Newtonsoft" Version="10.1.7" />
    <PackageVersion Include="Swashbuckle.AspNetCore.Swagger" Version="10.1.7" />
    <PackageVersion Include="Swashbuckle.AspNetCore.SwaggerGen" Version="10.1.7" />
    <PackageVersion Include="Swashbuckle.AspNetCore.SwaggerUI" Version="10.1.7" />
    <PackageVersion Include="Microsoft.AspNetCore.DataProtection" Version="10.0.7" />
    <!-- Entity Framework -->
    <PackageVersion Include="FlexLabs.EntityFrameworkCore.Upsert" Version="10.0.0" />
    <PackageVersion Include="Microsoft.EntityFrameworkCore" Version="10.0.7" />
    <PackageVersion Include="Microsoft.EntityFrameworkCore.Abstractions" Version="10.0.7" />
    <PackageVersion Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.7" />
    <PackageVersion Include="Microsoft.EntityFrameworkCore.InMemory" Version="10.0.7" />
    <PackageVersion Include="Microsoft.EntityFrameworkCore.Relational" Version="10.0.7" />
    <PackageVersion Include="Microsoft.Data.Sqlite" Version="10.0.7" />
    <PackageVersion Include="PuppeteerSharp" Version="25.10.0" />
    <PackageVersion Include="Microsoft.EntityFrameworkCore.Sqlite" Version="10.0.7" />
    <PackageVersion Include="Microsoft.EntityFrameworkCore.Sqlite.Core" Version="10.0.7" />
    <!-- Security: pin the native SQLite binary to 3.50.3 (SQLite 3.50.3) to patch
             NU1903 in SQLitePCLRaw.lib.e_sqlite3 2.1.11, which bundles a vulnerable
             SQLite. Transitive pin only; the managed SQLitePCLRaw / Microsoft.Data.Sqlite
             stack stays at the EF-Core-10-tested 2.1.11. -->
    <PackageVersion Include="SQLitePCLRaw.lib.e_sqlite3" Version="3.50.3" />
    <!-- Security: pin System.Formats.Asn1 to patch NU1903 (GHSA-447r-wph3-92pm),
             pulled transitively at 5.0.0 by the Roslyn analyzer-testing packages.
             10.0.9 is framework-aligned (net10.0). -->
    <PackageVersion Include="System.Formats.Asn1" Version="10.0.9" />
    <PackageVersion Include="Microsoft.EntityFrameworkCore.Tools" Version="10.0.7" />
    <!-- Serialization -->
    <PackageVersion Include="Newtonsoft.Json" Version="13.0.4" />
    <!-- Logging -->
    <PackageVersion Include="Serilog" Version="4.3.1" />
    <PackageVersion Include="Serilog.Expressions" Version="5.1.0-dev-02301" />
    <PackageVersion Include="Serilog.Formatting.Compact" Version="3.0.0" />
    <PackageVersion Include="Serilog.Sinks.Console" Version="6.1.1" />
    <PackageVersion Include="Serilog.Sinks.File" Version="7.0.0" />
    <!-- Media & Encoding -->
    <PackageVersion Include="Magick.NET-Q8-AnyCPU" Version="14.16.0" />
    <PackageVersion Include="MediaBrowser.Model.Signed" Version="3.0.647" />
    <PackageVersion Include="SubtitlesParserV2" Version="2.4.0" />
    <PackageVersion Include="TagLibSharp" Version="2.3.0" />
    <!-- Providers -->
    <PackageVersion Include="AcoustID.NET" Version="1.3.3" />
    <PackageVersion Include="ExtendedNumerics.BigRational" Version="3000.0.2.132" />
    <PackageVersion Include="MusixmatchClientLib" Version="1.1.9" />
    <!-- Plugin System -->
    <PackageVersion Include="Microsoft.Extensions.DependencyInjection" Version="10.0.13" />
    <PackageVersion
      Include="Microsoft.Extensions.DependencyInjection.Abstractions"
      Version="10.0.13"
    />
    <PackageVersion Include="Microsoft.Extensions.Logging" Version="10.0.13" />
    <PackageVersion Include="Microsoft.Extensions.Hosting.Abstractions" Version="10.0.7" />
    <PackageVersion Include="Microsoft.Extensions.Logging.Abstractions" Version="10.0.13" />
    <PackageVersion Include="Microsoft.Extensions.TimeProvider.Testing" Version="10.9.0" />
    <!-- Hosting -->
    <PackageVersion Include="Microsoft.Extensions.Hosting" Version="10.0.7" />
    <PackageVersion Include="Microsoft.Extensions.Hosting.WindowsServices" Version="10.0.7" />
    <PackageVersion Include="Microsoft.Extensions.Hosting.Systemd" Version="10.0.7" />
    <!-- Avalonia (Tray App) -->
    <PackageVersion Include="Avalonia" Version="12.0.0" />
    <PackageVersion Include="Avalonia.Desktop" Version="12.0.0" />
    <PackageVersion Include="Avalonia.Themes.Fluent" Version="12.0.0" />
    <!-- Diagnostics -->
    <PackageVersion Include="System.Diagnostics.PerformanceCounter" Version="10.0.10" />
    <PackageVersion Include="Vortice.DXGI" Version="3.8.3" />
    <!-- System & Infrastructure -->
    <PackageVersion Include="CommandLineParser" Version="2.9.1" />
    <PackageVersion Include="DeviceId" Version="6.11.0" />
    <PackageVersion Include="DeviceId.Linux" Version="6.11.0" />
    <PackageVersion Include="DeviceId.Mac" Version="6.11.0" />
    <PackageVersion Include="DeviceId.Windows" Version="6.11.0" />
    <PackageVersion Include="DeviceId.Windows.Mmi" Version="6.11.0" />
    <PackageVersion Include="DnsClient" Version="1.8.0" />
    <PackageVersion Include="H.NotifyIcon" Version="2.4.1" />
    <PackageVersion Include="Humanizer" Version="3.0.10" />
    <PackageVersion Include="Humanizer.Core" Version="3.0.10" />
    <PackageVersion Include="I18N.DotNet" Version="1.3.1" />
    <!-- Pinned at 0.5.0: 0.54 rewrites the window-builder API (Window/SetStartUrl
             are gone) and NoMercy.App is the InfiniFrame shell being retired for the
             Compose Desktop client — porting it to the new API is wasted work. -->
    <PackageVersion Include="InfiniLore.InfiniFrame" Version="0.5.0" />
    <PackageVersion Include="InfiniLore.InfiniFrame.WebServer" Version="0.5.0" />
    <PackageVersion Include="Microsoft.CodeAnalysis" Version="5.3.0" />
    <PackageVersion Include="Microsoft.CodeAnalysis.Analyzers" Version="5.3.0-2.25625.1" />
    <PackageVersion Include="Microsoft.CodeAnalysis.Common" Version="5.3.0" />
    <PackageVersion Include="Microsoft.CodeAnalysis.CSharp" Version="5.3.0" />
    <PackageVersion Include="Microsoft.CodeAnalysis.CSharp.Workspaces" Version="5.3.0" />
    <PackageVersion Include="Microsoft.CodeAnalysis.Workspaces.Common" Version="5.3.0" />
    <PackageVersion Include="Microsoft.CodeAnalysis.Workspaces.MSBuild" Version="5.3.0" />
    <PackageVersion
      Include="Microsoft.CodeAnalysis.CSharp.Analyzer.Testing.XUnit"
      Version="1.1.2"
    />
    <PackageVersion Include="Microsoft.CodeAnalysis.Analyzer.Testing" Version="1.1.2" />
    <PackageVersion Include="Microsoft.CodeAnalysis.CSharp.CodeFix.Testing.XUnit" Version="1.1.2" />
    <PackageVersion Include="Mono.Nat" Version="3.0.4" />
    <PackageVersion Include="NCrontab" Version="3.4.0" />
    <PackageVersion Include="Pastel" Version="7.0.1" />
    <PackageVersion Include="Polly" Version="8.6.6" />
    <PackageVersion Include="QRCoder" Version="1.8.0" />
    <PackageVersion Include="SecureStore" Version="1.3.0" />
    <PackageVersion Include="Sharpcaster" Version="3.0.0" />
    <PackageVersion Include="Stowage" Version="2.0.1" />
    <PackageVersion Include="Stun.Net" Version="10.0.6" />
    <PackageVersion Include="System.CommandLine" Version="2.0.10" />
    <PackageVersion Include="System.Management" Version="10.0.10" />
    <PackageVersion Include="Ulid" Version="1.4.1" />
    <!-- Cryptography -->
    <PackageVersion Include="BouncyCastle.Cryptography" Version="2.7.0" />
    <PackageVersion Include="System.Security.Cryptography.Xml" Version="10.0.13" />
    <PackageVersion Include="Tmds.DBus.Protocol" Version="0.92.0" />
    <!-- AWS -->
    <PackageVersion Include="AWSSDK.S3" Version="4.0.101.6" />
    <!-- WebDAV -->
    <PackageVersion Include="WebDav.Client" Version="2.9.0" />
    <!-- NoMercy fork of SMBLibrary with a public Connect(address, transport, port); source github.com/NoMercy-Entertainment/nomercy-smblibrary. -->
    <PackageVersion Include="NoMercy.SMBLibrary" Version="1.5.7-nomercy.1" />
    <!-- Testing -->
    <PackageVersion Include="coverlet.collector" Version="10.0.1" />
    <PackageVersion Include="Testcontainers" Version="4.13.0" />
    <PackageVersion Include="FluentAssertions" Version="8.10.0" />
    <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="18.8.1" />
    <PackageVersion Include="Moq" Version="4.20.72" />
    <PackageVersion Include="xunit" Version="2.9.3" />
    <PackageVersion Include="xunit.runner.visualstudio" Version="3.1.5" />
    <PackageVersion Include="Xunit.SkippableFact" Version="1.5.61" />
  </ItemGroup>
  <!-- Transitive security pins: override vulnerable legacy 4.3.0 shims (NU1902/NU1903). -->
  <ItemGroup>
    <PackageVersion Include="System.Net.Http" Version="4.3.4" />
    <PackageVersion Include="System.Text.RegularExpressions" Version="4.3.1" />
    <PackageVersion Include="System.Private.Uri" Version="4.3.2" />
    <!-- SSH.NET transitive via Testcontainers: 2025.1.0 carries NU1903 / GHSA-q939-rpr3-3284
         (ScpClient recursive download allows arbitrary file write via server-controlled SCP
         filenames). 2026.0.0 is the patched release. -->
    <PackageVersion Include="SSH.NET" Version="2026.0.0" />
    <!-- GHSA-846f-f764-76mx (2026-10-13): Pkcs <= 10.0.12 arrives transitively; 10.0.13 is the patched release. -->
    <PackageVersion Include="System.Security.Cryptography.Pkcs" Version="10.0.13" />
  </ItemGroup>
</Project>