JobTrack/Directory.Packages.props at main · lookbusy1344/JobTrack · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
<Project>
  <PropertyGroup>
    <ManagePackageVersionsCentrally>true</ManagePackageVersionsCentrally>
    <CentralPackageTransitivePinningEnabled>true</CentralPackageTransitivePinningEnabled>
  </PropertyGroup>
  <ItemGroup Label="Shared analyzers (Directory.Build.props)">
    <PackageVersion Include="NodaTime" Version="3.3.4" />
    <PackageVersion Include="Roslynator.Analyzers" Version="5.0.0" />
    <PackageVersion Include="Microsoft.VisualStudio.Threading.Analyzers" Version="18.7.23" />
    <PackageVersion Include="lookbusy1344.RecordValueAnalyser" Version="1.3.1" />
    <PackageVersion Include="Microsoft.CodeAnalysis.PublicApiAnalyzers" Version="5.6.0" />
  </ItemGroup>
  <ItemGroup Label="Test infrastructure">
    <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="18.10.1" />
    <PackageVersion Include="xunit" Version="2.9.3" />
    <PackageVersion Include="xunit.runner.visualstudio" Version="4.0.0" />
    <PackageVersion Include="coverlet.collector" Version="10.0.1" />
    <PackageVersion Include="AwesomeAssertions" Version="9.6.0" />
    <PackageVersion Include="FsCheck" Version="3.4.0" />
    <PackageVersion Include="FsCheck.Xunit" Version="3.4.0" />
    <PackageVersion Include="Microsoft.AspNetCore.Mvc.Testing" Version="10.0.12" />
    <!-- Browser automation for plan §8.5/8.7 responsive, keyboard, and accessibility evidence
         (fix-plan §2.5). Requires a one-time `playwright install` browser-binary download outside
         this repo's usual `dotnet restore` (docs/operations/browser-testing.md). -->
    <PackageVersion Include="Microsoft.Playwright" Version="1.63.0" />
    <!-- Automated accessibility scan (fix-plan §2.5 "as a supplement, not the only acceptance
         evidence"); bundles axe-core, so no separate script fetch is needed at test time. -->
    <PackageVersion Include="Deque.AxeCore.Playwright" Version="4.13.0" />
  </ItemGroup>
  <ItemGroup Label="Identity">
    <!-- Microsoft.Extensions.Identity.Core: carries no ASP.NET Core dependency, used for
         IPasswordHasher<T> in the bootstrap command (ADR 0005) and as JobTrack.Identity's store
         abstractions (ADR 0022). JobTrack.Identity separately takes EF Core + provider
         PackageReferences (ADR 0022) without a FrameworkReference to Microsoft.AspNetCore.App. -->
    <PackageVersion Include="Microsoft.Extensions.Identity.Core" Version="10.0.12" />
    <!-- Microsoft.AspNetCore.DataProtection: encrypts the TOTP shared secret at rest
         (authenticator_key_protected, ADR 0037). A standalone NuGet package, not a
         FrameworkReference — available to JobTrack.Identity without the ASP.NET Core shared
         framework, consistent with ADR 0022's constraint. -->
    <PackageVersion Include="Microsoft.AspNetCore.DataProtection" Version="10.0.12" />
    <!-- Microsoft.AspNetCore.DataProtection.EntityFrameworkCore: the multi-instance PostgreSQL key
         repository (ADR 0066 Stage 2, docs/plans/2026-07-26-multi-instance-web-deployment-plan.md
         §2.2). A standalone NuGet package like its non-EF sibling above. -->
    <PackageVersion Include="Microsoft.AspNetCore.DataProtection.EntityFrameworkCore" Version="10.0.12" />
  </ItemGroup>
  <ItemGroup Label="Database providers">
    <PackageVersion Include="Npgsql" Version="10.0.3" />
    <PackageVersion Include="Microsoft.Data.Sqlite" Version="10.0.12" />
    <!-- Microsoft.Data.Sqlite 10.0.9 pulls the deprecated, vulnerable
         SQLitePCLRaw.lib.e_sqlite3 2.1.11 (GHSA-2m69-gcr7-jv3q) transitively;
         pin the bundle to the version that depends on its SourceGear.sqlite3
         successor instead. -->
    <PackageVersion Include="SQLitePCLRaw.bundle_e_sqlite3" Version="3.0.5" />
  </ItemGroup>
  <ItemGroup Label="EF Core (impl plan §7.4, ADR 0010)">
    <PackageVersion Include="Microsoft.EntityFrameworkCore" Version="10.0.12" />
    <PackageVersion Include="Microsoft.EntityFrameworkCore.Relational" Version="10.0.12" />
    <PackageVersion Include="Microsoft.EntityFrameworkCore.Sqlite" Version="10.0.12" />
    <PackageVersion Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="10.0.3" />
    <PackageVersion Include="Npgsql.EntityFrameworkCore.PostgreSQL.NodaTime" Version="10.0.3" />
  </ItemGroup>
  <ItemGroup Label="Packaging (impl plan §7.5 - source link)">
    <PackageVersion Include="Microsoft.SourceLink.GitHub" Version="10.0.401" />
  </ItemGroup>
  <ItemGroup Label="ASP.NET Core host extensions">
    <PackageVersion Include="Microsoft.AspNetCore.OpenApi" Version="10.0.12" />
    <PackageVersion Include="Microsoft.OpenApi" Version="2.12.0" />
  </ItemGroup>
  <ItemGroup Label="Two-factor enrolment (ADR 0037)">
    <!-- Offline QR image rendering for the authenticator-app enrolment page; no network calls. -->
    <PackageVersion Include="QRCoder" Version="1.8.0" />
  </ItemGroup>
</Project>