36 lines
2.2 KiB
XML
36 lines
2.2 KiB
XML
<Project>
|
|
<PropertyGroup>
|
|
<ManagePackageVersionsCentrally>true</ManagePackageVersionsCentrally>
|
|
</PropertyGroup>
|
|
<ItemGroup>
|
|
<PackageVersion Include="Microsoft.AspNetCore.Mvc.Testing" Version="10.0.10" />
|
|
<PackageVersion Include="Microsoft.NET.Test.Sdk" Version="18.8.1" />
|
|
<PackageVersion Include="xunit" Version="2.9.3" />
|
|
<PackageVersion Include="xunit.runner.visualstudio" Version="3.1.5" />
|
|
<PackageVersion Include="coverlet.collector" Version="10.0.1" />
|
|
<PackageVersion Include="Microsoft.EntityFrameworkCore" Version="10.0.10" />
|
|
<PackageVersion Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.10" />
|
|
<PackageVersion Include="Microsoft.EntityFrameworkCore.Relational" Version="10.0.10" />
|
|
<PackageVersion Include="Microsoft.AspNetCore.Identity.EntityFrameworkCore" Version="10.0.10" />
|
|
<PackageVersion Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="10.0.3" />
|
|
<PackageVersion Include="EFCore.NamingConventions" Version="10.0.1" />
|
|
<PackageVersion Include="Testcontainers.PostgreSql" Version="4.13.0" />
|
|
<!-- Testcontainers.PostgreSql 4.13.0 transitively pulls SSH.NET 2025.1.0,
|
|
which Trivy flags as high severity (CVE-2026-48798). Test-scope only
|
|
(SSH.NET is used by Testcontainers' optional remote-Docker-context
|
|
support, not exercised by this project's own Docker-socket usage),
|
|
but pinned explicitly to the patched release regardless. -->
|
|
<PackageVersion Include="SSH.NET" Version="2026.0.0" />
|
|
<PackageVersion Include="Markdig" Version="1.3.2" />
|
|
<PackageVersion Include="HtmlSanitizer" Version="9.1.974" />
|
|
<PackageVersion Include="Microsoft.Data.Sqlite" Version="10.0.10" />
|
|
<!-- Microsoft.Data.Sqlite 10.0.10 pulls SQLitePCLRaw.lib.e_sqlite3 2.1.11 by
|
|
default, which NuGet's vulnerability audit flags as high severity
|
|
(GHSA-2m69-gcr7-jv3q, CVE-2025-6965 — a SQLite memory-corruption issue fixed
|
|
upstream in SQLite 3.50.2). Pinned up to a patched SQLitePCLRaw release that
|
|
bundles a fixed SQLite build. -->
|
|
<PackageVersion Include="SQLitePCLRaw.core" Version="3.0.5" />
|
|
<PackageVersion Include="SQLitePCLRaw.lib.e_sqlite3" Version="3.53.3" />
|
|
</ItemGroup>
|
|
</Project>
|