DrawTogether.NET/Directory.Packages.props at dev · petabridge/DrawTogether.NET · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
<Project>
  <PropertyGroup Label="SharedVersions">
    <ManagePackageVersionsCentrally>true</ManagePackageVersionsCentrally>
    <!-- Required so the transitive-only security pins below actually take effect. -->
    <CentralPackageTransitivePinningEnabled>true</CentralPackageTransitivePinningEnabled>
    <AkkaVersion>1.5.70</AkkaVersion>
    <AkkaHostingVersion>1.5.70</AkkaHostingVersion>
    <AkkaManagementVersion>1.5.70</AkkaManagementVersion>
    <PetabridgeCmdVersion>1.4.5</PetabridgeCmdVersion>
    <AspireVersion>13.3.5</AspireVersion>
    <PlaywrightVersion>1.64.1</PlaywrightVersion>
    <MsftVersion>10.0.7</MsftVersion>
  </PropertyGroup>
  <!-- Akka.NET Package Versions -->
  <ItemGroup>
    <PackageVersion Include="Akka" Version="$(AkkaVersion)" />
    <PackageVersion Include="Akka.Cluster.Hosting" Version="$(AkkaHostingVersion)" />
    <PackageVersion Include="Akka.Discovery.Azure" Version="$(AkkaManagementVersion)" />
    <PackageVersion Include="Akka.Discovery.KubernetesApi" Version="$(AkkaManagementVersion)" />
    <PackageVersion Include="Akka.Hosting" Version="$(AkkaHostingVersion)" />
    <PackageVersion Include="Akka.Management" Version="$(AkkaManagementVersion)" />
    <PackageVersion Include="Akka.Persistence.Sql.Hosting" Version="1.5.59" />
    <PackageVersion Include="Akka.Streams" Version="$(AkkaVersion)" />
    <PackageVersion Include="Akka.Streams.TestKit" Version="$(AkkaVersion)" />
    <PackageVersion Include="Aspire.Hosting.Docker" Version="13.1.1-preview.1.26105.8" />
    <PackageVersion Include="Aspire.Hosting.Kubernetes" Version="13.1.1-preview.1.26105.8" />
    <!-- 2.78.0+ is required by Aspire.Hosting.AppHost / Aspire.Hosting.Testing; enabling
         transitive pinning turned this long-standing downgrade into a NU1109 error. -->
    <PackageVersion Include="Grpc.Tools" Version="2.78.0">
      <PrivateAssets>all</PrivateAssets>
      <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
    </PackageVersion>
    <PackageVersion Include="Microsoft.EntityFrameworkCore.SqlServer" Version="$(MsftVersion)" />
    <PackageVersion Include="MudBlazor" Version="7.15.0" />
    <PackageVersion Include="Petabridge.Cmd.Cluster" Version="$(PetabridgeCmdVersion)" />
    <PackageVersion Include="Petabridge.Cmd.Cluster.Sharding" Version="$(PetabridgeCmdVersion)" />
  </ItemGroup>
  <!-- Akka.Aspire Plugin Packages -->
  <ItemGroup>
    <PackageVersion Include="Akka.Aspire.Hosting" Version="1.5.70" />
    <PackageVersion Include="Akka.Aspire" Version="1.5.70" />
    <PackageVersion Include="Akka.Discovery.Redis" Version="1.5.70" />
    <PackageVersion Include="Aspire.Hosting.Redis" Version="$(AspireVersion)" />
  </ItemGroup>
  <!-- ASP.NET Package Versions -->
  <ItemGroup>
    <PackageVersion Include="Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore" Version="$(MsftVersion)" />
    <PackageVersion Include="Microsoft.AspNetCore.Identity.EntityFrameworkCore" Version="$(MsftVersion)" />
    <PackageVersion Include="Microsoft.EntityFrameworkCore.Tools" Version="$(MsftVersion)">
      <PrivateAssets>all</PrivateAssets>
      <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
    </PackageVersion>
    <PackageVersion Include="Microsoft.Extensions.Hosting" Version="$(MsftVersion)" />
    <PackageVersion Include="Microsoft.AspNetCore.Identity.UI" Version="$(MsftVersion)" />
    <PackageVersion Include="Microsoft.AspNetCore.SignalR.Client" Version="$(MsftVersion)" />
  </ItemGroup>
  <!-- Aspire Package Versions -->
  <ItemGroup>
    <PackageVersion Include="Aspire.Hosting.AppHost" Version="$(AspireVersion)" />
    <PackageVersion Include="Aspire.Hosting.SqlServer" Version="$(AspireVersion)" />
    <PackageVersion Include="Aspire.Microsoft.EntityFrameworkCore.SqlServer" Version="$(AspireVersion)" />
  </ItemGroup>
  <!-- FluentEmail Package Versions -->
  <ItemGroup>
    <PackageVersion Include="FluentEmail.Mailgun" Version="3.0.2" />
    <PackageVersion Include="FluentEmail.Razor" Version="3.0.2" />
  </ItemGroup>
  <!-- OTEL Package Versions -->
  <ItemGroup>
    <PackageVersion Include="OpenTelemetry.Instrumentation.AspNetCore" Version="1.15.0" />
    <PackageVersion Include="OpenTelemetry.Instrumentation.Http" Version="1.15.0" />
    <PackageVersion Include="OpenTelemetry.Instrumentation.Runtime" Version="1.15.0" />
    <PackageVersion Include="OpenTelemetry.Exporter.OpenTelemetryProtocol" Version="1.15.3" />
    <PackageVersion Include="OpenTelemetry.Extensions.Hosting" Version="1.15.3" />
  </ItemGroup>
  <!-- Utility Package Versions -->
  <ItemGroup>
    <PackageVersion Include="Microsoft.SourceLink.GitHub" Version="10.0.102" />
  </ItemGroup>
  <!-- Security pins: these three packages only arrive transitively, so they need
       CentralPackageTransitivePinningEnabled above to take effect. Remove them
       once the direct dependencies ship patched versions on their own. -->
  <ItemGroup Label="Security pins">
    <!-- MsftVersion 10.0.7 -> EFCore/SqlClient pulls Pkcs 10.0.7 (GHSA-846f-f764-76mx, high) -->
    <PackageVersion Include="System.Security.Cryptography.Pkcs" Version="10.0.14" />
    <!-- Aspire.Hosting -> StreamJsonRpc 2.22.23 pulls MessagePack 2.5.192
         (GHSA-hv8m-jj95-wg3x, GHSA-vh6j-jc39-fggf, high) -->
    <PackageVersion Include="MessagePack" Version="2.5.307" />
    <!-- DrawTogether.Actors and the E2E tests resolve OTel.Api below 1.15.3
         (GHSA-g94r-2vxg-569j, GHSA-8785-wc3w-h8q6, moderate) -->
    <PackageVersion Include="OpenTelemetry.Api" Version="1.15.3" />
    <!-- FluentEmail.Mailgun 3.0.2 pulls Newtonsoft.Json 12.0.3
         (GHSA-5crp-9r3c-p9vr, high) -->
    <PackageVersion Include="Newtonsoft.Json" Version="13.0.4" />
  </ItemGroup>
  <!-- Test Package Versions -->
  <ItemGroup>
    <PackageVersion Include="Aspire.Hosting.Testing" Version="$(AspireVersion)" />
    <PackageVersion Include="Microsoft.Playwright" Version="$(PlaywrightVersion)" />
    <PackageVersion Include="Microsoft.Playwright.MSTest" Version="$(PlaywrightVersion)" />
    <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="18.0.1" />
    <PackageVersion Include="xunit" Version="2.9.3" />
    <PackageVersion Include="xunit.runner.visualstudio" Version="3.1.5">
      <PrivateAssets>all</PrivateAssets>
      <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
    </PackageVersion>
    <PackageVersion Include="FluentAssertions" Version="6.12.0" />
    <PackageVersion Include="coverlet.collector" Version="6.0.4" />
    <PackageVersion Include="Verify.Xunit" Version="17.10.2" />
    <PackageVersion Include="Verify.DiffPlex" Version="1.3.0" />
    <!-- 1.5.62 is the last Akka.Hosting.TestKit on xunit v2 (Akka.TestKit.Xunit2); 1.5.67+ switched to xunit v3 and breaks the v2-based test projects -->
    <PackageVersion Include="Akka.Hosting.TestKit" Version="1.5.62" />
  </ItemGroup>
</Project>