2
2
<Project >
3
3
<PropertyGroup >
4
4
<ManagePackageVersionsCentrally >true</ManagePackageVersionsCentrally >
5
- <NoWarn >NU1507</ NoWarn >
5
+ <CentralPackageTransitivePinningEnabled >true</ CentralPackageTransitivePinningEnabled >
6
6
</PropertyGroup >
7
+
8
+ <!-- Global packages (private, build-time packages for all projects) -->
9
+ <ItemGroup >
10
+ <GlobalPackageReference Include =" Nerdbank.GitVersioning" Version =" 3.6.133" />
11
+ <GlobalPackageReference Include =" StyleCop.Analyzers" Version =" 1.2.0-beta.507" />
12
+ <GlobalPackageReference Include =" Umbraco.Code" Version =" 2.0.0" />
13
+ <GlobalPackageReference Include =" Umbraco.GitVersioning.Extensions" Version =" 0.2.0" />
14
+ </ItemGroup >
15
+
16
+ <!-- Microsoft packages -->
7
17
<ItemGroup >
8
- <PackageVersion Include =" Asp.Versioning.Mvc" Version =" 7.1.0" />
9
- <PackageVersion Include =" Asp.Versioning.Mvc.ApiExplorer" Version =" 7.1.0" />
10
- <PackageVersion Include =" Dazinator.Extensions.FileProviders" Version =" 2.0.0" />
11
- <PackageVersion Include =" Examine" Version =" 3.1.0" />
12
- <PackageVersion Include =" Examine.Core" Version =" 3.1.0" />
13
- <PackageVersion Include =" HtmlAgilityPack" Version =" 1.11.54" />
14
- <PackageVersion Include =" K4os.Compression.LZ4" Version =" 1.3.6" />
15
- <PackageVersion Include =" MailKit" Version =" 4.3.0" />
16
- <PackageVersion Include =" Markdown" Version =" 2.2.1" />
17
- <PackageVersion Include =" MessagePack" Version =" 2.5.129" />
18
18
<PackageVersion Include =" Microsoft.AspNetCore.Mvc.NewtonsoftJson" Version =" 8.0.0" />
19
19
<PackageVersion Include =" Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation" Version =" 8.0.0" />
20
+ <PackageVersion Include =" Microsoft.CodeAnalysis.CSharp" Version =" 4.8.0" />
20
21
<PackageVersion Include =" Microsoft.Data.Sqlite" Version =" 8.0.0" />
21
- <PackageVersion Include =" Microsoft.CSharp" Version =" 4.7.0" />
22
- <PackageVersion Include =" Microsoft.EntityFrameworkCore.SqlServer" Version =" 8.0.0" />
23
22
<PackageVersion Include =" Microsoft.EntityFrameworkCore.Sqlite" Version =" 8.0.0" />
23
+ <PackageVersion Include =" Microsoft.EntityFrameworkCore.SqlServer" Version =" 8.0.0" />
24
+ <PackageVersion Include =" Microsoft.EntityFrameworkCore.Design" Version =" 8.0.0" />
25
+ <PackageVersion Include =" Microsoft.Extensions.Configuration.Abstractions" Version =" 8.0.0" />
26
+ <PackageVersion Include =" Microsoft.Extensions.Configuration.Json" Version =" 8.0.0" />
27
+ <PackageVersion Include =" Microsoft.Extensions.DependencyInjection" Version =" 8.0.0" />
24
28
<PackageVersion Include =" Microsoft.Extensions.FileProviders.Embedded" Version =" 8.0.0" />
25
29
<PackageVersion Include =" Microsoft.Extensions.FileProviders.Physical" Version =" 8.0.0" />
26
30
<PackageVersion Include =" Microsoft.Extensions.Hosting.Abstractions" Version =" 8.0.0" />
31
+ <PackageVersion Include =" Microsoft.Extensions.Http" Version =" 8.0.0" />
27
32
<PackageVersion Include =" Microsoft.Extensions.Identity.Core" Version =" 8.0.0" />
33
+ <PackageVersion Include =" Microsoft.Extensions.Identity.Stores" Version =" 8.0.0" />
28
34
<PackageVersion Include =" Microsoft.Extensions.Logging" Version =" 8.0.0" />
29
35
<PackageVersion Include =" Microsoft.Extensions.Options" Version =" 8.0.0" />
30
36
<PackageVersion Include =" Microsoft.Extensions.Options.ConfigurationExtensions" Version =" 8.0.0" />
31
37
<PackageVersion Include =" Microsoft.Extensions.Options.DataAnnotations" Version =" 8.0.0" />
32
- <PackageVersion Include =" Microsoft.Extensions.Configuration.Abstractions" Version =" 8.0.0" />
33
- <PackageVersion Include =" Microsoft.Extensions.Configuration.Json" Version =" 8.0.0" />
34
- <PackageVersion Include =" Microsoft.Extensions.DependencyInjection" Version =" 8.0.0" />
35
- <PackageVersion Include =" Microsoft.Extensions.Http" Version =" 8.0.0" />
36
- <PackageVersion Include =" Microsoft.Extensions.Identity.Stores" Version =" 8.0.0" />
38
+ <PackageVersion Include =" System.Runtime.Caching" Version =" 8.0.0" />
39
+ </ItemGroup >
40
+
41
+ <!-- Umbraco packages -->
42
+ <ItemGroup >
43
+ <PackageVersion Include =" Umbraco.JsonSchema.Extensions" Version =" 0.3.0" />
44
+ <PackageVersion Include =" Umbraco.CSharpTest.Net.Collections" Version =" 15.0.0" />
45
+ </ItemGroup >
46
+
47
+ <!-- Third-party packages -->
48
+ <ItemGroup >
49
+ <PackageVersion Include =" Asp.Versioning.Mvc" Version =" 7.1.0" />
50
+ <PackageVersion Include =" Asp.Versioning.Mvc.ApiExplorer" Version =" 7.1.0" />
51
+ <PackageVersion Include =" Dazinator.Extensions.FileProviders" Version =" 2.0.0" />
52
+ <PackageVersion Include =" Examine" Version =" 3.1.0" />
53
+ <PackageVersion Include =" Examine.Core" Version =" 3.1.0" />
54
+ <PackageVersion Include =" HtmlAgilityPack" Version =" 1.11.54" />
55
+ <PackageVersion Include =" K4os.Compression.LZ4" Version =" 1.3.6" />
56
+ <PackageVersion Include =" MailKit" Version =" 4.3.0" />
57
+ <PackageVersion Include =" Markdown" Version =" 2.2.1" />
58
+ <PackageVersion Include =" MessagePack" Version =" 2.5.140" />
37
59
<PackageVersion Include =" MiniProfiler.AspNetCore.Mvc" Version =" 4.3.8" />
38
60
<PackageVersion Include =" MiniProfiler.Shared" Version =" 4.3.8" />
39
61
<PackageVersion Include =" ncrontab" Version =" 3.3.3" />
40
62
<PackageVersion Include =" Newtonsoft.Json" Version =" 13.0.3" />
63
+ <PackageVersion Include =" NPoco" Version =" 5.7.1" />
41
64
<PackageVersion Include =" NPoco.SqlServer" Version =" 5.7.1" />
42
- <PackageVersion Include =" Swashbuckle.AspNetCore" Version =" 6.5.0" />
43
- <PackageVersion Include =" OpenIddict.Abstractions" Version =" 4.10.0" />
44
- <PackageVersion Include =" OpenIddict.AspNetCore" Version =" 4.10.0" />
45
- <PackageVersion Include =" OpenIddict.EntityFrameworkCore" Version =" 4.10.0" />
65
+ <PackageVersion Include =" OpenIddict.Abstractions" Version =" 4.10.1" />
66
+ <PackageVersion Include =" OpenIddict.AspNetCore" Version =" 4.10.1" />
67
+ <PackageVersion Include =" OpenIddict.EntityFrameworkCore" Version =" 4.10.1" />
46
68
<PackageVersion Include =" Serilog" Version =" 3.1.1" />
47
69
<PackageVersion Include =" Serilog.AspNetCore" Version =" 8.0.0" />
48
70
<PackageVersion Include =" Serilog.Enrichers.Process" Version =" 2.0.2" />
55
77
<PackageVersion Include =" Serilog.Sinks.Async" Version =" 1.5.0" />
56
78
<PackageVersion Include =" Serilog.Sinks.File" Version =" 5.0.0" />
57
79
<PackageVersion Include =" Serilog.Sinks.Map" Version =" 1.0.2" />
58
- <PackageVersion Include =" SixLabors.ImageSharp" Version =" 3.0.2 " />
59
- <PackageVersion Include =" SixLabors.ImageSharp.Web" Version =" 3.0.1 " />
80
+ <PackageVersion Include =" SixLabors.ImageSharp" Version =" 3.1.0 " />
81
+ <PackageVersion Include =" SixLabors.ImageSharp.Web" Version =" 3.1.0 " />
60
82
<PackageVersion Include =" Smidge.InMemory" Version =" 4.3.0" />
61
83
<PackageVersion Include =" Smidge.Nuglify" Version =" 4.3.0" />
62
- <PackageVersion Include =" System.IO.FileSystem.AccessControl" Version =" 5.0.0" />
63
- <PackageVersion Include =" System.Security.Cryptography.Pkcs" Version =" 8.0.0" />
64
- <PackageVersion Include =" System.Threading.Tasks.Dataflow" Version =" 8.0.0" />
65
- <PackageVersion Include =" System.ComponentModel.Annotations" Version =" 5.0.0" />
66
- <PackageVersion Include =" System.Reflection.Emit.Lightweight" Version =" 4.7.0" />
67
- <PackageVersion Include =" System.Runtime.Caching" Version =" 8.0.0" />
68
- <PackageVersion Include =" Umbraco.CSharpTest.Net.Collections" Version =" 15.0.0" />
84
+ <PackageVersion Include =" Swashbuckle.AspNetCore" Version =" 6.5.0" />
85
+ </ItemGroup >
86
+
87
+ <!-- Transitive pinned versions -->
88
+ <ItemGroup >
89
+ <!-- NPoco.SqlServer brings in a vulnerable version of Azure.Identity -->
90
+ <PackageVersion Include =" Azure.Identity" Version =" 1.10.4" />
91
+ <!-- Umbraco.Code depends on an outdated Microsoft.CodeAnalysis.CSharp.Workspaces version-->
92
+ <PackageVersion Include =" Microsoft.CodeAnalysis.CSharp.Workspaces" Version =" 4.8.0" />
93
+ <!-- Dazinator.Extensions.FileProviders brings in a vulnerable version of System.Net.Http -->
94
+ <PackageVersion Include =" System.Net.Http" Version =" 4.3.4" />
69
95
</ItemGroup >
70
- </Project >
96
+ </Project >
0 commit comments