MPCoreDeveloper · dependabot · Jun 29, 2026
diff --git a/Examples/EventSourcing/OrderManagement.Tests/OrderManagement.Tests.csproj b/Examples/EventSourcing/OrderManagement.Tests/OrderManagement.Tests.csproj
@@ -1,41 +1,41 @@
-<Project Sdk="Microsoft.NET.Sdk">
-
-  <PropertyGroup>
-    <TargetFramework>net10.0</TargetFramework>
-    <LangVersion>14.0</LangVersion>
-    <ImplicitUsings>enable</ImplicitUsings>
-    <Nullable>enable</Nullable>
-    <IsPackable>false</IsPackable>
-    <IsTestProject>true</IsTestProject>
-    <UseLocalSharpCoreDbSources Condition="'$(UseLocalSharpCoreDbSources)' == '' and Exists('..\..\..\src\SharpCoreDB.EventSourcing\SharpCoreDB.EventSourcing.csproj')">true</UseLocalSharpCoreDbSources>
-    <UseLocalSharpCoreDbSources Condition="'$(UseLocalSharpCoreDbSources)' == ''">false</UseLocalSharpCoreDbSources>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.6.0" />
-    <PackageReference Include="xunit.v3" Version="3.2.2" />
-    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.5">
-      <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
-      <PrivateAssets>all</PrivateAssets>
-    </PackageReference>
-  </ItemGroup>
-
-  <ItemGroup Condition="'$(UseLocalSharpCoreDbSources)' == 'true'">
-    <ProjectReference Include="..\..\..\src\SharpCoreDB.EventSourcing\SharpCoreDB.EventSourcing.csproj" />
-  </ItemGroup>
-
-  <ItemGroup Condition="'$(UseLocalSharpCoreDbSources)' != 'true'">
-    <PackageReference Include="SharpCoreDB.EventSourcing" Version="1.9.0" />
-  </ItemGroup>
-
-  <!-- Include OrderManagement source files as links -->
-  <ItemGroup>
-    <Compile Include="..\OrderManagement\OrderEvents.cs" Link="OrderEvents.cs" />
-    <Compile Include="..\OrderManagement\OrderAggregate.cs" Link="OrderAggregate.cs" />
-  </ItemGroup>
-  <ItemGroup>
-    <PackageReference Update="Microsoft.SourceLink.GitHub" Version="10.0.300" />
-  </ItemGroup>
-
-</Project>
-
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <TargetFramework>net10.0</TargetFramework>
+    <LangVersion>14.0</LangVersion>
+    <ImplicitUsings>enable</ImplicitUsings>
+    <Nullable>enable</Nullable>
+    <IsPackable>false</IsPackable>
+    <IsTestProject>true</IsTestProject>
+    <UseLocalSharpCoreDbSources Condition="'$(UseLocalSharpCoreDbSources)' == '' and Exists('..\..\..\src\SharpCoreDB.EventSourcing\SharpCoreDB.EventSourcing.csproj')">true</UseLocalSharpCoreDbSources>
+    <UseLocalSharpCoreDbSources Condition="'$(UseLocalSharpCoreDbSources)' == ''">false</UseLocalSharpCoreDbSources>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.7.0" />
+    <PackageReference Include="xunit.v3" Version="3.2.2" />
+    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.5">
+      <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
+      <PrivateAssets>all</PrivateAssets>
+    </PackageReference>
+  </ItemGroup>
+
+  <ItemGroup Condition="'$(UseLocalSharpCoreDbSources)' == 'true'">
+    <ProjectReference Include="..\..\..\src\SharpCoreDB.EventSourcing\SharpCoreDB.EventSourcing.csproj" />
+  </ItemGroup>
+
+  <ItemGroup Condition="'$(UseLocalSharpCoreDbSources)' != 'true'">
+    <PackageReference Include="SharpCoreDB.EventSourcing" Version="1.9.0" />
+  </ItemGroup>
+
+  <!-- Include OrderManagement source files as links -->
+  <ItemGroup>
+    <Compile Include="..\OrderManagement\OrderEvents.cs" Link="OrderEvents.cs" />
+    <Compile Include="..\OrderManagement\OrderAggregate.cs" Link="OrderAggregate.cs" />
+  </ItemGroup>
+  <ItemGroup>
+    <PackageReference Update="Microsoft.SourceLink.GitHub" Version="10.0.300" />
+  </ItemGroup>
+
+</Project>
+
diff --git a/Examples/FluentMigrator/SharpCoreDB.FluentMigratorDemo/SharpCoreDB.FluentMigratorDemo.csproj b/Examples/FluentMigrator/SharpCoreDB.FluentMigratorDemo/SharpCoreDB.FluentMigratorDemo.csproj
@@ -1,49 +1,49 @@
-<Project Sdk="Microsoft.NET.Sdk">
-
-  <PropertyGroup>
-    <OutputType>Exe</OutputType>
-    <TargetFramework>net10.0</TargetFramework>
-    <LangVersion>14.0</LangVersion>
-    <ImplicitUsings>enable</ImplicitUsings>
-    <Nullable>enable</Nullable>
-    <Version>1.9.0</Version>
-    <IsPackable>false</IsPackable>
-    <!-- Set to true to use local source projects instead of NuGet packages -->
-    <UseLocalSharpCoreDbSources Condition="'$(UseLocalSharpCoreDbSources)' == '' and Exists('..\..\..\src\SharpCoreDB\SharpCoreDB.csproj')">true</UseLocalSharpCoreDbSources>
-    <UseLocalSharpCoreDbSources Condition="'$(UseLocalSharpCoreDbSources)' == ''">false</UseLocalSharpCoreDbSources>
-  </PropertyGroup>
-
-  <!-- Local development: reference source projects directly -->
-  <ItemGroup Condition="'$(UseLocalSharpCoreDbSources)' == 'true'">
-    <ProjectReference Include="..\..\..\src\SharpCoreDB\SharpCoreDB.csproj" />
-    <ProjectReference Include="..\..\..\src\SharpCoreDB.Extensions\SharpCoreDB.Extensions.csproj" />
-  </ItemGroup>
-
-  <!-- NuGet: use published packages -->
-  <ItemGroup Condition="'$(UseLocalSharpCoreDbSources)' != 'true'">
-    <PackageReference Include="SharpCoreDB" Version="1.9.0" />
-    <PackageReference Include="SharpCoreDB.Extensions" Version="1.9.0" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <PackageReference Include="FluentMigrator" Version="8.0.1" />
-    <PackageReference Include="FluentMigrator.Runner" Version="8.0.1" />
-    <PackageReference Include="FluentMigrator.Runner.SQLite" Version="8.0.1" />
-    <PackageReference Include="Microsoft.Extensions.DependencyInjection" Version="10.0.9" />
-    <PackageReference Include="Microsoft.Extensions.Logging.Console" Version="10.0.9" />
-
-    <!-- Force latest safe versions of identity packages that FluentMigrator transitively pulls (deprecated/legacy in older versions).
-         This minimizes attack surface even if no active vulnerability is reported today.
-         Versions aligned to satisfy Azure.Identity 1.21.0 requirements (no downgrades). -->
-    <PackageReference Include="Azure.Identity" Version="1.21.0" />
-    <PackageReference Include="Microsoft.Identity.Client" Version="4.85.0" />
-    <PackageReference Include="Microsoft.Identity.Client.Extensions.Msal" Version="4.85.0" />
-    <PackageReference Include="Microsoft.IdentityModel.Protocols" Version="8.19.1" />
-    <PackageReference Include="Microsoft.IdentityModel.Protocols.OpenIdConnect" Version="8.19.1" />
-
-    <PackageReference Update="Microsoft.SourceLink.GitHub" Version="10.0.300" />
-  </ItemGroup>
-
-</Project>
-
-
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <OutputType>Exe</OutputType>
+    <TargetFramework>net10.0</TargetFramework>
+    <LangVersion>14.0</LangVersion>
+    <ImplicitUsings>enable</ImplicitUsings>
+    <Nullable>enable</Nullable>
+    <Version>1.9.0</Version>
+    <IsPackable>false</IsPackable>
+    <!-- Set to true to use local source projects instead of NuGet packages -->
+    <UseLocalSharpCoreDbSources Condition="'$(UseLocalSharpCoreDbSources)' == '' and Exists('..\..\..\src\SharpCoreDB\SharpCoreDB.csproj')">true</UseLocalSharpCoreDbSources>
+    <UseLocalSharpCoreDbSources Condition="'$(UseLocalSharpCoreDbSources)' == ''">false</UseLocalSharpCoreDbSources>
+  </PropertyGroup>
+
+  <!-- Local development: reference source projects directly -->
+  <ItemGroup Condition="'$(UseLocalSharpCoreDbSources)' == 'true'">
+    <ProjectReference Include="..\..\..\src\SharpCoreDB\SharpCoreDB.csproj" />
+    <ProjectReference Include="..\..\..\src\SharpCoreDB.Extensions\SharpCoreDB.Extensions.csproj" />
+  </ItemGroup>
+
+  <!-- NuGet: use published packages -->
+  <ItemGroup Condition="'$(UseLocalSharpCoreDbSources)' != 'true'">
+    <PackageReference Include="SharpCoreDB" Version="1.9.0" />
+    <PackageReference Include="SharpCoreDB.Extensions" Version="1.9.0" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <PackageReference Include="FluentMigrator" Version="8.0.1" />
+    <PackageReference Include="FluentMigrator.Runner" Version="8.0.1" />
+    <PackageReference Include="FluentMigrator.Runner.SQLite" Version="8.0.1" />
+    <PackageReference Include="Microsoft.Extensions.DependencyInjection" Version="10.0.9" />
+    <PackageReference Include="Microsoft.Extensions.Logging.Console" Version="10.0.9" />
+
+    <!-- Force latest safe versions of identity packages that FluentMigrator transitively pulls (deprecated/legacy in older versions).
+         This minimizes attack surface even if no active vulnerability is reported today.
+         Versions aligned to satisfy Azure.Identity 1.21.0 requirements (no downgrades). -->
+    <PackageReference Include="Azure.Identity" Version="1.21.0" />
+    <PackageReference Include="Microsoft.Identity.Client" Version="4.85.2" />
+    <PackageReference Include="Microsoft.Identity.Client.Extensions.Msal" Version="4.85.2" />
+    <PackageReference Include="Microsoft.IdentityModel.Protocols" Version="8.19.1" />
+    <PackageReference Include="Microsoft.IdentityModel.Protocols.OpenIdConnect" Version="8.19.1" />
+
+    <PackageReference Update="Microsoft.SourceLink.GitHub" Version="10.0.300" />
+  </ItemGroup>
+
+</Project>
+
+
diff --git a/Examples/Web/Orchardcore/SharpCoreDb.Orchardcore/SharpCoreDb.Orchardcore.csproj b/Examples/Web/Orchardcore/SharpCoreDb.Orchardcore/SharpCoreDb.Orchardcore.csproj
@@ -1,66 +1,66 @@
-<Project Sdk="Microsoft.NET.Sdk.Web">
-
-  <PropertyGroup>
-    <TargetFramework>net10.0</TargetFramework>
-    <Nullable>enable</Nullable>
-    <ImplicitUsings>enable</ImplicitUsings>
-    <!-- Exclude from CI builds - requires OrchardCore 3.0 preview packages -->
-    <IsPackable>false</IsPackable>
-    <IsPublishable>false</IsPublishable>
-    <ExcludeFromSourceBuild>true</ExcludeFromSourceBuild>
-    <!-- Skip build entirely in CI to avoid package restore failures -->
-    <ExcludeFromBuild Condition="'$(CI)' == 'true' OR '$(GITHUB_ACTIONS)' == 'true'">true</ExcludeFromBuild>
-    <UseLocalSharpCoreDbSources Condition="'$(UseLocalSharpCoreDbSources)' == '' and Exists('..\..\..\..\src\SharpCoreDB\SharpCoreDB.csproj')">true</UseLocalSharpCoreDbSources>
-    <UseLocalSharpCoreDbSources Condition="'$(UseLocalSharpCoreDbSources)' == ''">false</UseLocalSharpCoreDbSources>
-  </PropertyGroup>
-
-  <!-- OrchardCore packages only restored when NOT in CI -->
-  <ItemGroup Condition="'$(CI)' != 'true' AND '$(GITHUB_ACTIONS)' != 'true'">
-    <!-- Stable OrchardCore package -->
-    <PackageReference Include="OrchardCore.Application.Cms.Targets" Version="2.2.1" />
-  </ItemGroup>
-  <ItemGroup>
-    <PackageReference Include="HtmlSanitizer" Version="9.0.892" />
-    <PackageReference Include="MailKit" Version="4.17.0" />
-    <PackageReference Include="MimeKit" Version="4.17.0" />
-    <PackageReference Include="Microsoft.Extensions.Http.Resilience" Version="10.7.0" />
-    <PackageReference Include="Microsoft.AspNetCore.Authentication.OpenIdConnect" Version="10.0.9" />
-    <PackageReference Include="AWSSDK.Core" Version="4.0.8.1" />
-
-    <!-- Force safer / newer identity and data clients where OrchardCore pulls older ones -->
-    <PackageReference Include="Azure.Identity" Version="1.21.0" />
-    <PackageReference Include="Microsoft.Identity.Client" Version="4.85.0" />
-    <PackageReference Include="Microsoft.Identity.Client.Extensions.Msal" Version="4.85.0" />
-
-    <!-- Replace deprecated NEST / Elasticsearch.Net (Legacy) pulled by OrchardCore.Search.Elasticsearch.
-         Modern replacement: Elastic.Clients.Elasticsearch.
-         Note: OrchardCore 2.2.1's ES module may still load the old client at runtime for its integration.
-         If search is not required for this demo, the Elasticsearch feature can be disabled in OrchardCore setup. -->
-    <PackageReference Include="Elastic.Clients.Elasticsearch" Version="9.4.2" />
-  </ItemGroup>
-
-  <ItemGroup Condition="'$(UseLocalSharpCoreDbSources)' == 'true'">
-    <ProjectReference Include="..\..\..\..\src\SharpCoreDB.Data.Provider\SharpCoreDB.Data.Provider.csproj" />
-    <ProjectReference Include="..\..\..\..\src\SharpCoreDB.Provider.YesSql\SharpCoreDB.Provider.YesSql.csproj" />
-    <ProjectReference Include="..\..\..\..\src\SharpCoreDB\SharpCoreDB.csproj" />
-  </ItemGroup>
-
-  <ItemGroup Condition="'$(UseLocalSharpCoreDbSources)' != 'true'">
-    <PackageReference Include="SharpCoreDB.Data.Provider" Version="1.9.0" />
-    <PackageReference Include="SharpCoreDB.Provider.YesSql" Version="1.9.0" />
-    <PackageReference Include="SharpCoreDB" Version="1.9.0" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <!-- Explicit override for vulnerable SQLitePCLRaw 2.1.11 (pulled via YesSql or transitive in OrchardCore/SkiaSharp paths) -->
-    <PackageReference Include="SQLitePCLRaw.bundle_e_sqlite3" Version="3.0.3" />
-
-    <!-- Force modern Microsoft.Data.SqlClient to avoid CriticalBugs in older 6.x versions pulled by OrchardCore / other deps -->
-    <PackageReference Include="Microsoft.Data.SqlClient" Version="7.0.1" />
-
-    <PackageReference Update="Microsoft.SourceLink.GitHub" Version="10.0.300" />
-  </ItemGroup>
-
-</Project>
-
-
+<Project Sdk="Microsoft.NET.Sdk.Web">
+
+  <PropertyGroup>
+    <TargetFramework>net10.0</TargetFramework>
+    <Nullable>enable</Nullable>
+    <ImplicitUsings>enable</ImplicitUsings>
+    <!-- Exclude from CI builds - requires OrchardCore 3.0 preview packages -->
+    <IsPackable>false</IsPackable>
+    <IsPublishable>false</IsPublishable>
+    <ExcludeFromSourceBuild>true</ExcludeFromSourceBuild>
+    <!-- Skip build entirely in CI to avoid package restore failures -->
+    <ExcludeFromBuild Condition="'$(CI)' == 'true' OR '$(GITHUB_ACTIONS)' == 'true'">true</ExcludeFromBuild>
+    <UseLocalSharpCoreDbSources Condition="'$(UseLocalSharpCoreDbSources)' == '' and Exists('..\..\..\..\src\SharpCoreDB\SharpCoreDB.csproj')">true</UseLocalSharpCoreDbSources>
+    <UseLocalSharpCoreDbSources Condition="'$(UseLocalSharpCoreDbSources)' == ''">false</UseLocalSharpCoreDbSources>
+  </PropertyGroup>
+
+  <!-- OrchardCore packages only restored when NOT in CI -->
+  <ItemGroup Condition="'$(CI)' != 'true' AND '$(GITHUB_ACTIONS)' != 'true'">
+    <!-- Stable OrchardCore package -->
+    <PackageReference Include="OrchardCore.Application.Cms.Targets" Version="2.2.1" />
+  </ItemGroup>
+  <ItemGroup>
+    <PackageReference Include="HtmlSanitizer" Version="9.0.892" />
+    <PackageReference Include="MailKit" Version="4.17.0" />
+    <PackageReference Include="MimeKit" Version="4.17.0" />
+    <PackageReference Include="Microsoft.Extensions.Http.Resilience" Version="10.7.0" />
+    <PackageReference Include="Microsoft.AspNetCore.Authentication.OpenIdConnect" Version="10.0.9" />
+    <PackageReference Include="AWSSDK.Core" Version="4.0.8.1" />
+
+    <!-- Force safer / newer identity and data clients where OrchardCore pulls older ones -->
+    <PackageReference Include="Azure.Identity" Version="1.21.0" />
+    <PackageReference Include="Microsoft.Identity.Client" Version="4.85.2" />
+    <PackageReference Include="Microsoft.Identity.Client.Extensions.Msal" Version="4.85.2" />
+
+    <!-- Replace deprecated NEST / Elasticsearch.Net (Legacy) pulled by OrchardCore.Search.Elasticsearch.
+         Modern replacement: Elastic.Clients.Elasticsearch.
+         Note: OrchardCore 2.2.1's ES module may still load the old client at runtime for its integration.
+         If search is not required for this demo, the Elasticsearch feature can be disabled in OrchardCore setup. -->
+    <PackageReference Include="Elastic.Clients.Elasticsearch" Version="9.4.2" />
+  </ItemGroup>
+
+  <ItemGroup Condition="'$(UseLocalSharpCoreDbSources)' == 'true'">
+    <ProjectReference Include="..\..\..\..\src\SharpCoreDB.Data.Provider\SharpCoreDB.Data.Provider.csproj" />
+    <ProjectReference Include="..\..\..\..\src\SharpCoreDB.Provider.YesSql\SharpCoreDB.Provider.YesSql.csproj" />
+    <ProjectReference Include="..\..\..\..\src\SharpCoreDB\SharpCoreDB.csproj" />
+  </ItemGroup>
+
+  <ItemGroup Condition="'$(UseLocalSharpCoreDbSources)' != 'true'">
+    <PackageReference Include="SharpCoreDB.Data.Provider" Version="1.9.0" />
+    <PackageReference Include="SharpCoreDB.Provider.YesSql" Version="1.9.0" />
+    <PackageReference Include="SharpCoreDB" Version="1.9.0" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <!-- Explicit override for vulnerable SQLitePCLRaw 2.1.11 (pulled via YesSql or transitive in OrchardCore/SkiaSharp paths) -->
+    <PackageReference Include="SQLitePCLRaw.bundle_e_sqlite3" Version="3.0.3" />
+
+    <!-- Force modern Microsoft.Data.SqlClient to avoid CriticalBugs in older 6.x versions pulled by OrchardCore / other deps -->
+    <PackageReference Include="Microsoft.Data.SqlClient" Version="7.0.2" />
+
+    <PackageReference Update="Microsoft.SourceLink.GitHub" Version="10.0.300" />
+  </ItemGroup>
+
+</Project>
+
+
diff --git a/src/SharpCoreDB.AppHost/SharpCoreDB.AppHost.csproj b/src/SharpCoreDB.AppHost/SharpCoreDB.AppHost.csproj
@@ -1,33 +1,33 @@
-<Project>
-  <Sdk Name="Aspire.AppHost.Sdk" Version="13.2.0" />
-
-  <PropertyGroup>
-    <OutputType>Exe</OutputType>
-    <TargetFramework>net10.0</TargetFramework>
-    <LangVersion>14.0</LangVersion>
-    <Nullable>enable</Nullable>
-    <ImplicitUsings>enable</ImplicitUsings>
-    <IsPackable>false</IsPackable>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <ProjectCapability Include="Aspire" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <PackageReference Include="Aspire.Hosting.AppHost" Version="13.4.5" />
-    <PackageReference Include="KubernetesClient" Version="19.0.2" />
-    <!-- Explicit override for vulnerable transitive MessagePack brought by KubernetesClient + Aspire/StreamJsonRpc (>=2.5.302 required) -->
-    <PackageReference Include="MessagePack" Version="2.5.302" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <!-- Reference to server project -->
-    <ProjectReference Include="..\SharpCoreDB.Server\SharpCoreDB.Server.csproj" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <PackageReference Update="Microsoft.SourceLink.GitHub" Version="10.0.300" />
-  </ItemGroup>
-
-</Project>
+<Project>
+  <Sdk Name="Aspire.AppHost.Sdk" Version="13.2.0" />
+
+  <PropertyGroup>
+    <OutputType>Exe</OutputType>
+    <TargetFramework>net10.0</TargetFramework>
+    <LangVersion>14.0</LangVersion>
+    <Nullable>enable</Nullable>
+    <ImplicitUsings>enable</ImplicitUsings>
+    <IsPackable>false</IsPackable>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <ProjectCapability Include="Aspire" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <PackageReference Include="Aspire.Hosting.AppHost" Version="13.4.6" />
+    <PackageReference Include="KubernetesClient" Version="19.0.2" />
+    <!-- Explicit override for vulnerable transitive MessagePack brought by KubernetesClient + Aspire/StreamJsonRpc (>=2.5.302 required) -->
+    <PackageReference Include="MessagePack" Version="2.5.302" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <!-- Reference to server project -->
+    <ProjectReference Include="..\SharpCoreDB.Server\SharpCoreDB.Server.csproj" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <PackageReference Update="Microsoft.SourceLink.GitHub" Version="10.0.300" />
+  </ItemGroup>
+
+</Project>