Directory.Packages.props

<Project>
  <PropertyGroup>
    <ManagePackageVersionsCentrally>true</ManagePackageVersionsCentrally>
    <CentralPackageTransitivePinningEnabled>true</CentralPackageTransitivePinningEnabled>
  </PropertyGroup>
  <!-- Umbraco -->
  <ItemGroup>
    <PackageVersion Include="Umbraco.Cms.Web.Website" Version="[17.3.5, 18.0.0)" />
    <PackageVersion Include="Umbraco.Cms.Web.Common" Version="[17.3.5, 18.0.0)" />
    <PackageVersion Include="Umbraco.Cms.Core" Version="[17.3.5, 18.0.0)" />
    <PackageVersion Include="Umbraco.Cms.Infrastructure" Version="[17.3.5, 18.0.0)" />
    <PackageVersion Include="uSync" Version="[17.0.0, 18.0.0)" />
  </ItemGroup>
  <!-- EF Core (test project only — not in the RCL) -->
  <ItemGroup>
    <PackageVersion Include="Microsoft.EntityFrameworkCore.Sqlite" Version="10.0.4" />
  </ItemGroup>
  <!-- WebAuthn -->
  <ItemGroup>
    <PackageVersion Include="Fido2.AspNet" Version="4.0.1" />
  </ItemGroup>
  <!-- Tests -->
  <ItemGroup>
    <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
    <PackageVersion Include="xunit" Version="2.9.3" />
    <PackageVersion Include="xunit.runner.visualstudio" Version="3.1.4" />
    <PackageVersion Include="coverlet.collector" Version="6.0.4" />
    <PackageVersion Include="FluentAssertions" Version="7.2.0" />
    <PackageVersion Include="NSubstitute" Version="5.3.0" />
    <PackageVersion Include="Microsoft.AspNetCore.Mvc.Testing" Version="10.0.0" />
  </ItemGroup>
  <!-- Transitive vulnerability overrides -->
  <ItemGroup>
    <PackageVersion Include="MailKit" Version="4.16.0" />
    <PackageVersion Include="System.Security.Cryptography.Xml" Version="10.0.7" />
  </ItemGroup>
  <!-- Demo site -->
  <ItemGroup>
    <PackageVersion Include="Umbraco.Cms" Version="17.3.5" />
    <PackageVersion Include="Microsoft.ICU.ICU4C.Runtime" Version="72.1.0.3" />
  </ItemGroup>
</Project>