weasel/Directory.Packages.props at master · JasperFx/weasel · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
<Project>
  <PropertyGroup>
    <ManagePackageVersionsCentrally>true</ManagePackageVersionsCentrally>
  </PropertyGroup>
  <ItemGroup>
    <PackageVersion Include="BenchmarkDotNet" Version="0.15.8" />
    <!-- Build-only: build/SupervisedTests.cs drives the CI test projects through Bobcat's
         supervisor (JasperFx/bobcat#565). Referenced by build/build.csproj alone, never by a
         shipped package or a test project. The supervisor drives the test executables over
         Microsoft.Testing.Platform's wire protocol and never loads them. -->
    <PackageVersion Include="Bobcat.Supervisor" Version="1.0.0" />
    <PackageVersion Include="coverlet.collector" Version="6.0.4" />
    <PackageVersion Include="Meziantou.Analyzer" Version="2.0.260" />
    <PackageVersion Include="Microsoft.VisualStudio.Threading.Analyzers" Version="17.12.19" />
    <PackageVersion Include="Patched.DistributedLock.Postgres" Version="1.3.3" />
    <PackageVersion Include="DotNet.ReproducibleBuilds" Version="1.2.39" />
    <PackageVersion Include="FirebirdSql.Data.FirebirdClient" Version="10.3.4" />
    <PackageVersion Include="JasperFx" Version="2.90.2" />
    <PackageVersion Include="JasperFx.Events" Version="2.90.2" />
    <PackageVersion Include="Microsoft.Data.Sqlite" Version="10.0.9" />
    <!-- Override the transitive SQLitePCLRaw 2.1.11 (vulnerable native lib,
         GHSA-2m69-gcr7-jv3q) with 3.0.3, which ships the patched SQLite build. -->
    <PackageVersion Include="SQLitePCLRaw.bundle_e_sqlite3" Version="3.0.3" />
    <PackageVersion Include="Microsoft.Data.SqlClient" Version="6.1.3" />
    <!-- EF Core versions are framework-conditional - see below -->
    <PackageVersion Include="Microsoft.Extensions.Hosting" Version="10.0.0" />
    <PackageVersion Include="Microsoft.Extensions.Logging.Abstractions" Version="9.0.4" />
    <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
    <PackageVersion Include="MySqlConnector" Version="2.4.0" />
    <PackageVersion Include="Microsoft.CodeAnalysis.CSharp" Version="4.14.0" />
    <PackageVersion Include="Npgsql" Version="9.0.4" />
    <!-- Npgsql EF Core is framework-conditional - see below -->
    <PackageVersion Include="Npgsql.NetTopologySuite" Version="9.0.4" />
    <PackageVersion Include="NSubstitute" Version="5.3.0" />
    <PackageVersion Include="Nuke.Common" Version="9.0.4" />
    <!-- Oracle EF Core is framework-conditional - see below -->
    <PackageVersion Include="Oracle.ManagedDataAccess.Core" Version="23.7.0" />
    <!-- Pomelo EF Core is framework-conditional - see below -->
    <PackageVersion Include="Shouldly" Version="4.3.0" />
    <PackageVersion Include="xunit.v3" Version="3.2.2" />
    <!-- The assertion/attribute surface without the runner, for Weasel.Testing: a library of
         shared test bases is not itself a test project and must not build as an Exe. -->
    <PackageVersion Include="xunit.v3.extensibility.core" Version="3.2.2" />
    <PackageVersion Include="xunit.runner.visualstudio" Version="3.1.5" />
  </ItemGroup>
  <!-- Override the transitive System.Security.Cryptography.Pkcs (GHSA-846f-f764-76mx /
       CVE-2026-84008, high: SignedCms.CheckSignature DoS). Microsoft.Data.SqlClient 6.1.3 pins
       9.0.4 and Oracle.ManagedDataAccess.Core 23.7.0 pins 8.0.0; even SqlClient 7.1.1 still pins
       9.0.18. Weasel.SqlServer and Weasel.Oracle reference it directly so the patched floor lands
       in their published nuspecs. Drop once both drivers depend on a patched version. -->
  <ItemGroup Condition="'$(TargetFramework)' == 'net9.0'">
    <PackageVersion Include="System.Security.Cryptography.Pkcs" Version="9.0.21" />
  </ItemGroup>
  <ItemGroup Condition="'$(TargetFramework)' == 'net10.0'">
    <PackageVersion Include="System.Security.Cryptography.Pkcs" Version="10.0.13" />
  </ItemGroup>
  <!-- EF Core 9.x for net9.0 -->
  <ItemGroup Condition="'$(TargetFramework)' == 'net9.0'">
    <PackageVersion Include="Microsoft.EntityFrameworkCore.Relational" Version="9.0.0" />
    <PackageVersion Include="Microsoft.EntityFrameworkCore.SqlServer" Version="9.0.1" />
    <PackageVersion Include="FirebirdSql.EntityFrameworkCore.Firebird" Version="12.0.0" />
    <PackageVersion Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="9.0.4" />
    <PackageVersion Include="Oracle.EntityFrameworkCore" Version="9.23.60" />
    <PackageVersion Include="Pomelo.EntityFrameworkCore.MySql" Version="9.0.0-preview.2.efcore.9.0.0" />
  </ItemGroup>
  <!-- EF Core 10.x for net10.0 -->
  <ItemGroup Condition="'$(TargetFramework)' == 'net10.0'">
    <PackageVersion Include="Microsoft.EntityFrameworkCore.Relational" Version="10.0.0" />
    <PackageVersion Include="Microsoft.EntityFrameworkCore.SqlServer" Version="10.0.0" />
    <PackageVersion Include="FirebirdSql.EntityFrameworkCore.Firebird" Version="13.0.0" />
    <PackageVersion Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="10.0.0" />
  </ItemGroup>
</Project>