Paperless/Directory.Packages.props at main · ANcpLua/Paperless · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
<Project>

  <Import Project="Version.props" />

  <PropertyGroup>
    <ManagePackageVersionsCentrally>true</ManagePackageVersionsCentrally>
    <!-- Apply central versions to transitive deps too, so the GHSA pins below propagate
         into Pipeline (which still runs on Microsoft.NET.Sdk for NUKE compatibility). -->
    <CentralPackageTransitivePinningEnabled>true</CentralPackageTransitivePinningEnabled>
  </PropertyGroup>

  <ItemGroup>
    <!-- API versioning -->
    <PackageVersion Include="Asp.Versioning.Http.Client" Version="$(AspVersioningHttpClientVersion)" />
    <PackageVersion Include="Asp.Versioning.Mvc.ApiExplorer" Version="$(AspVersioningMvcApiExplorerVersion)" />

    <!-- Health checks -->
    <PackageVersion Include="AspNetCore.HealthChecks.Elasticsearch" Version="$(AspNetCoreHealthChecksVersion)" />
    <PackageVersion Include="AspNetCore.HealthChecks.NpgSql" Version="$(AspNetCoreHealthChecksVersion)" />

    <!-- EF Core 10 -->
    <PackageVersion Include="Microsoft.EntityFrameworkCore" Version="$(MicrosoftEntityFrameworkCoreVersion)" />
    <PackageVersion Include="Microsoft.EntityFrameworkCore.Abstractions" Version="$(MicrosoftEntityFrameworkCoreVersion)" />
    <PackageVersion Include="Microsoft.EntityFrameworkCore.Analyzers" Version="$(MicrosoftEntityFrameworkCoreVersion)" />
    <PackageVersion Include="Microsoft.EntityFrameworkCore.Design" Version="$(MicrosoftEntityFrameworkCoreVersion)" />
    <PackageVersion Include="Microsoft.EntityFrameworkCore.InMemory" Version="$(MicrosoftEntityFrameworkCoreVersion)" />
    <!-- Transitive pin: Hangfire.PostgreSql 1.21.1 pulls EF Core Relational 10.0.4 — force-unify to 10.0.8 via CentralPackageTransitivePinningEnabled -->
    <PackageVersion Include="Microsoft.EntityFrameworkCore.Relational" Version="$(MicrosoftEntityFrameworkCoreVersion)" />
    <PackageVersion Include="Npgsql" Version="$(NpgsqlVersion)" />
    <PackageVersion Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="$(NpgsqlEntityFrameworkCoreVersion)" />

    <!-- ASP.NET Core 10 -->
    <PackageVersion Include="Microsoft.AspNetCore.OpenApi" Version="$(MicrosoftAspNetCoreVersion)" />
    <PackageVersion Include="Microsoft.AspNetCore.Mvc.Testing" Version="$(MicrosoftAspNetCoreMvcTestingVersion)" />

    <!-- Microsoft.Extensions.* runtime line (10.0.x cadence) -->
    <PackageVersion Include="Microsoft.Extensions.Hosting" Version="$(MicrosoftExtensionsVersion)" />
    <PackageVersion Include="Microsoft.Extensions.Http.Resilience" Version="$(MicrosoftExtensionsHttpResilienceVersion)" />
    <PackageVersion Include="Microsoft.Extensions.Logging.Abstractions" Version="$(MicrosoftExtensionsVersion)" />
    <PackageVersion Include="Microsoft.Extensions.Options.DataAnnotations" Version="$(MicrosoftExtensionsVersion)" />
    <!-- Testing/telemetry extensions track a faster 10.6.x cadence -->
    <PackageVersion Include="Microsoft.Extensions.Diagnostics.Testing" Version="$(MicrosoftExtensionsTestingVersion)" />
    <PackageVersion Include="Microsoft.Extensions.Telemetry.Abstractions" Version="$(MicrosoftExtensionsTestingVersion)" />
    <PackageVersion Include="Microsoft.Extensions.TimeProvider.Testing" Version="$(MicrosoftExtensionsTestingVersion)" />

    <!-- Test stack (AwesomeAssertions + AwesomeAssertions.Analyzers come from ANcpLua.NET.Sdk.Test). -->
    <PackageVersion Include="MartinCostello.Logging.XUnit.v3" Version="$(MartinCostelloLoggingXUnitV3Version)" />
    <PackageVersion Include="Microsoft.Testing.Extensions.CodeCoverage" Version="$(MicrosoftTestingExtensionsCodeCoverageVersion)" />
    <PackageVersion Include="Microsoft.Testing.Extensions.TrxReport" Version="$(MicrosoftTestingExtensionsTrxReportVersion)" />
    <PackageVersion Include="Moq" Version="$(MoqVersion)" />
    <!-- Runner-free xUnit core (IAsyncLifetime, ICollectionFixture, [CollectionDefinition], Assert) for
         the Paperless.TestSupport library. Shares the .mtp-v2 version so no second xunit lineage is
         pulled; the .mtp-v2 *runner* targets require OutputType=Exe and reject a class library, so the
         support lib references extensibility.core directly (the package the runner error recommends). -->
    <PackageVersion Include="xunit.v3.extensibility.core" Version="$(XunitV3MtpV2Version)" />
    <PackageVersion Include="xunit.v3.mtp-v2" Version="$(XunitV3MtpV2Version)" />

    <!-- Testably (in-memory filesystem) -->
    <PackageVersion Include="Testably.Abstractions" Version="$(TestablyAbstractionsVersion)" />
    <PackageVersion Include="Testably.Abstractions.FileSystem.Interface" Version="$(TestablyAbstractionsVersion)" />
    <PackageVersion Include="Testably.Abstractions.Testing" Version="$(TestablyAbstractionsTestingVersion)" />

    <!-- Testcontainers -->
    <PackageVersion Include="Testcontainers.Elasticsearch" Version="$(TestcontainersVersion)" />
    <PackageVersion Include="Testcontainers.Minio" Version="$(TestcontainersVersion)" />
    <PackageVersion Include="Testcontainers.PostgreSql" Version="$(TestcontainersVersion)" />
    <PackageVersion Include="Testcontainers.RabbitMq" Version="$(TestcontainersVersion)" />

    <!-- Domain libraries -->
    <PackageVersion Include="CreatePdf.NET" Version="$(CreatePdfNETVersion)" />
    <PackageVersion Include="DotNetEnv" Version="$(DotNetEnvVersion)" />
    <PackageVersion Include="Elastic.Clients.Elasticsearch" Version="$(ElasticClientsElasticsearchVersion)" />
    <PackageVersion Include="ErrorOrX" Version="$(ErrorOrXVersion)" />
    <PackageVersion Include="ErrorOrX.Generators" Version="$(ErrorOrXVersion)" />
    <PackageVersion Include="Hangfire" Version="$(HangfireVersion)" />
    <PackageVersion Include="Hangfire.AspNetCore" Version="$(HangfireVersion)" />
    <PackageVersion Include="Hangfire.MemoryStorage" Version="$(HangfireMemoryStorageVersion)" />
    <PackageVersion Include="Hangfire.PostgreSql" Version="$(HangfirePostgreSqlVersion)" />
    <PackageVersion Include="JetBrains.Annotations" Version="$(JetBrainsAnnotationsVersion)" />
    <PackageVersion Include="Mapster.DependencyInjection" Version="$(MapsterDependencyInjectionVersion)" />
    <PackageVersion Include="MapsterExtensions.Generator" Version="$(MapsterExtensionsGeneratorVersion)" />
    <PackageVersion Include="Minio" Version="$(MinioVersion)" />
    <PackageVersion Include="Newtonsoft.Json" Version="$(NewtonsoftJsonVersion)" />
    <PackageVersion Include="Scalar.AspNetCore" Version="$(ScalarAspNetCoreVersion)" />
    <PackageVersion Include="SWEN3.Paperless.RabbitMq" Version="$(SwenPaperlessRabbitMqVersion)" />

    <!-- Transitive security overrides: close GHSA-g4vj-cjjj-v7hg (NuGet.Packaging 6.12.1
         pulled by Nuke.Common), GHSA-37gx-xxp4-5rgx / GHSA-w3x6-4m5h-cxqf
         (System.Security.Cryptography.Xml 9.0.0), and GHSA-v5pm-xwqc-g5wc
         (Microsoft.OpenApi 2.0.0 pulled by Microsoft.AspNetCore.OpenApi 10.0.8;
         2.7.5 is the first patched 2.x release). Effective because the SDK turns on
         CentralPackageTransitivePinningEnabled. -->
    <PackageVersion Include="Microsoft.OpenApi" Version="2.7.5" />
    <PackageVersion Include="NuGet.Packaging" Version="7.6.0" />
    <PackageVersion Include="System.Security.Cryptography.Xml" Version="10.0.9" />
  </ItemGroup>

</Project>