Skip to content

Update NuGet packages to catch up Dependabot - #2296

Draft
afscrome wants to merge 2 commits into
CommunityToolkit:mainfrom
afscrome:nuget-updates
Draft

afscrome wants to merge 2 commits into
CommunityToolkit:mainfrom
afscrome:nuget-updates

Conversation

@afscrome

Copy link
Copy Markdown
Contributor

Linked issue: N/A — dependency maintenance.

Update NuGet packages to help Dependabot catch up. Upgrade the packages except Microsoft.Build.*, whose upgrades cause issues in the SQL Project integration. Keep Verify capped at 32.0.1 to avoid its new license requirement.

Remove unused central versions and redundant references, consolidate SQLite dependency versions, and adapt tests to upgraded xUnit and Kubernetes client APIs.

Depends on #2295; merge that PR first. This branch is based on its head. Because that branch is in a fork, this PR targets main and temporarily includes the parent changes. The package-update layer is commit d966709. Native GitHub stacks do not support these cross-fork PRs.

PR Checklist

  • Created a feature/dev branch in your fork (vs. submitting directly from a commit on main)
  • Based off latest main branch of toolkit
  • PR doesn't include merge commits (always rebase on top of our main, if needed)
  • New integration
    • Docs are written
    • Added description of major feature to project description for NuGet package (4000 total character limit, so don't push entire description over that)
  • Tests for the changes have been added (for bug fixes / features) (if applicable)
  • Contains NO breaking changes
  • Every new API (including internal ones) has full XML docs
  • Code follows all style conventions

Other information

New integration, new APIs, and new feature tests are not applicable. Major dependency upgrades need further compatibility review before marking this ready.

Validation:

  • dotnet build .\CommunityToolkit.Aspire.slnx --nologo -v:quiet — passed at an intermediate state using .NET 10, with the existing ASPIRE004 warning. This does not validate the final committed state: the temporary root SDK pin and SQL build workarounds were subsequently reverted.
  • dotnet build .\tests\CommunityToolkit.Aspire.Chroma.Tests\CommunityToolkit.Aspire.Chroma.Tests.csproj --nologo -v:quiet — passed, zero warnings/errors.
  • dotnet build .\tests\CommunityToolkit.Aspire.Hosting.Chroma.Tests\CommunityToolkit.Aspire.Hosting.Chroma.Tests.csproj --nologo -v:quiet — passed, zero warnings/errors.
  • Full solution build not rerun after final package updates. MSBuild.Sdk.SqlProj 4.2.0 remains incompatible with selection of .NET 11 by the unchanged root global.json.
  • Tests not run for final validation, as requested.

afscrome and others added 2 commits October 24, 2026 20:22
Remove unused and redundant package references, retain the Verify 32.0.1 cap, and update xUnit and Kubernetes test compatibility.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@github-actions

Copy link
Copy Markdown
Contributor

🚀 Dogfood this PR with:

⚠️ WARNING: Do not do this without first carefully reviewing the code of this PR to satisfy yourself it is safe.

curl -fsSL https://raw.githubusercontent.com/CommunityToolkit/Aspire/main/eng/scripts/dogfood-pr.sh | bash -s -- 2296

Or

  • Run remotely in PowerShell:
iex "& { $(irm https://raw.githubusercontent.com/CommunityToolkit/Aspire/main/eng/scripts/dogfood-pr.ps1) } 2296"

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant