|
1 | 1 | <Project>
|
2 | 2 | <PropertyGroup Condition=" '$(TargetFramework)' == 'net8.0'">
|
3 |
| - <FrameworkVersionRuntime>8.0.0</FrameworkVersionRuntime> |
4 |
| - <FrameworkVersionTesting>8.0.11</FrameworkVersionTesting> |
5 |
| - <WilsonVersion>8.0.1</WilsonVersion> |
| 3 | + <AspNetCoreVersion>8.0.1</AspNetCoreVersion> |
| 4 | + <!-- EF must be at least 8.0.10 so that 'Microsoft.Extensions.Caching.Memory' |
| 5 | + is at least 8.0.1, which addresses a known high severity vulnerability. |
| 6 | + The SQL Server EF provider that is commonly used has a transitive |
| 7 | + vulnerability in 8.0.10 that is fixed in 8.0.11, so going to 8.0.11 seems |
| 8 | + prudent. --> |
| 9 | + <EFCoreVersion>8.0.11</EFCoreVersion> |
| 10 | + <IdentityServerVersion>7.1.0-rc.1</IdentityServerVersion> |
| 11 | + <MicrosoftExtensionsVersion>8.0.1</MicrosoftExtensionsVersion> |
| 12 | + <YarpVersion>2.1.0</YarpVersion> |
| 13 | + </PropertyGroup> |
| 14 | + |
| 15 | + <PropertyGroup Condition=" '$(TargetFramework)' == 'net9.0'"> |
| 16 | + <AspNetCoreVersion>9.0.0</AspNetCoreVersion> |
| 17 | + <EFCoreVersion>9.0.0</EFCoreVersion> |
| 18 | + <IdentityServerVersion>7.1.0-rc.1</IdentityServerVersion> |
| 19 | + <MicrosoftExtensionsVersion>9.0.0</MicrosoftExtensionsVersion> |
6 | 20 | <YarpVersion>2.1.0</YarpVersion>
|
7 |
| - <IdentityServerVersion>7.1.0-preview.1</IdentityServerVersion> |
8 | 21 | </PropertyGroup>
|
9 | 22 |
|
10 | 23 | <ItemGroup>
|
11 |
| - <!-- build --> |
| 24 | + <!-- Build --> |
12 | 25 | <PackageReference Include="MinVer" Version="4.2.0" PrivateAssets="all" />
|
13 | 26 | <PackageReference Include="Microsoft.SourceLink.GitHub" Version="1.1.1" PrivateAssets="All" />
|
14 | 27 |
|
15 |
| - <!-- runtime --> |
| 28 | + <!-- Duende --> |
| 29 | + <PackageReference Update="Duende.AccessTokenManagement.OpenIdConnect" Version="3.1.1" /> |
16 | 30 | <PackageReference Update="Duende.IdentityModel" Version="7.0.0" />
|
17 |
| - <PackageReference Update="Duende.AccessTokenManagement.OpenIdConnect" Version="3.1.0-preview.1" /> |
18 |
| - <!-- Need this version because so 'Microsoft.Extensions.Caching.Memory' is at least 8.0.1 that addresses known high severity vulnerability --> |
19 |
| - <PackageReference Update="Microsoft.EntityFrameworkCore.Relational" Version="8.0.10" /> |
20 |
| - <PackageReference Update="Microsoft.Extensions.Http" Version="$(FrameworkVersionRuntime)" /> |
21 |
| - <PackageReference Update="Microsoft.AspNetCore.Components.WebAssembly" Version="$(FrameworkVersionRuntime)" /> |
22 |
| - <PackageReference Update="Microsoft.AspNetCore.Components.WebAssembly.Server" Version="$(FrameworkVersionRuntime)" /> |
23 |
| - <PackageReference Update="Microsoft.AspNetCore.Components.WebAssembly.Authentication" Version="$(FrameworkVersionRuntime)" /> |
24 |
| - <PackageReference Update="Microsoft.AspNetCore.Components.Authorization" Version="$(FrameworkVersionRuntime)" /> |
25 |
| - <PackageReference Update="Yarp.ReverseProxy" Version="$(YarpVersion)" /> |
| 31 | + <PackageReference Update="Duende.IdentityServer" Version="$(IdentityServerVersion)" /> |
26 | 32 |
|
27 |
| - <!-- samples --> |
| 33 | + <!-- ASP.NET Core --> |
| 34 | + <PackageReference Update="Microsoft.AspNetCore.Authentication.JwtBearer" Version="$(AspNetCoreVersion)" /> |
| 35 | + <PackageReference Update="Microsoft.AspNetCore.Authentication.OpenIdConnect" Version="$(AspNetCoreVersion)" /> |
| 36 | + <PackageReference Update="Microsoft.AspNet Core.Components.WebAssembly" Version="$(AspNetCoreVersion)" /> |
| 37 | + <PackageReference Update="Microsoft.AspNetCore.Components.WebAssembly.Server" Version="$(AspNetCoreVersion)" /> |
| 38 | + <PackageReference Update="Microsoft.AspNetCore.Components.WebAssembly.Authentication" Version="$(AspNetCoreVersion)" /> |
| 39 | + <PackageReference Update="Microsoft.AspNetCore.Components.Authorization" Version="$(AspNetCoreVersion)" /> |
| 40 | + |
| 41 | + <!-- Entity Framework Core --> |
| 42 | + <PackageReference Update="Microsoft.EntityFrameworkCore.Design" Version="$(EFCoreVersion)" /> |
| 43 | + <PackageReference Update="Microsoft.EntityFrameworkCore.InMemory" Version="$(EFCoreVersion)" /> |
| 44 | + <PackageReference Update="Microsoft.EntityFrameworkCore.Relational" Version="$(EFCoreVersion)" /> |
| 45 | + <PackageReference Update="Microsoft.EntityFrameworkCore.Sqlite" Version="$(EFCoreVersion)" /> |
| 46 | + <PackageReference Update="Microsoft.EntityFrameworkCore.SqlServer" Version="$(EFCoreVersion)" /> |
| 47 | + |
| 48 | + <!-- Microsoft Extensions --> |
| 49 | + <PackageReference Update="Microsoft.Extensions.Http" Version="$(MicrosoftExtensionsVersion)" /> |
| 50 | + |
| 51 | + <!-- Other --> |
| 52 | + <PackageReference Update="Yarp.ReverseProxy" Version="$(YarpVersion)" /> |
28 | 53 | <PackageReference Update="Serilog.AspNetCore" Version="8.0.3" />
|
29 |
| - <PackageReference Update="Microsoft.IdentityModel.JsonWebTokens" Version="$(WilsonVersion)" /> |
30 |
| - <PackageReference Update="System.IdentityModel.Tokens.Jwt" Version="$(WilsonVersion)" /> |
31 |
| - |
32 |
| - <!-- testing --> |
33 |
| - <PackageReference Update="Microsoft.EntityFrameworkCore.InMemory" Version="$(FrameworkVersionTesting)" /> |
34 |
| - <PackageReference Update="Microsoft.AspNetCore.Authentication.JwtBearer" Version="$(FrameworkVersionTesting)" /> |
35 |
| - <PackageReference Update="Microsoft.AspNetCore.TestHost" Version="$(FrameworkVersionTesting)" /> |
36 |
| - <PackageReference Update="Microsoft.Extensions.TimeProvider.Testing" Version="$(FrameworkVersionTesting)" /> |
37 |
| - |
38 |
| - <PackageReference Update="Duende.IdentityServer" Version="$(IdentityServerVersion)" /> |
39 |
| - |
40 |
| - <PackageReference Update="Microsoft.NET.Test.Sdk" Version="17.12.0" /> |
41 |
| - <PackageReference Update="xunit" Version="2.9.2" /> |
42 |
| - <PackageReference Update="xunit.runner.visualstudio" Version="2.8.2"> |
| 54 | + |
| 55 | + |
| 56 | + <!-- Testing --> |
| 57 | + <PackageReference Update="coverlet.collector" Version="6.0.0"> |
43 | 58 | <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
|
44 | 59 | <PrivateAssets>all</PrivateAssets>
|
45 | 60 | </PackageReference>
|
46 | 61 | <PackageReference Update="FluentAssertions" Version="6.7.0" />
|
47 |
| - <PackageReference Update="coverlet.collector" Version="6.0.0"> |
| 62 | + <PackageReference Update="Microsoft.AspNetCore.TestHost" Version="$(AspNetCoreVersion)" /> |
| 63 | + <PackageReference Update="Microsoft.Extensions.TimeProvider.Testing" Version="8.8.0" /> |
| 64 | + <PackageReference Update="Microsoft.NET.Test.Sdk" Version="17.12.0" /> |
| 65 | + <PackageReference Update="xunit" Version="2.9.2" /> |
| 66 | + <PackageReference Update="xunit.runner.visualstudio" Version="2.8.2"> |
48 | 67 | <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
|
49 | 68 | <PrivateAssets>all</PrivateAssets>
|
50 | 69 | </PackageReference>
|
|
0 commit comments