Skip to content

Update NuGet packages to latest compatible versions and fix security vulnerability#34

Merged
jasonshave merged 6 commits intomasterfrom
copilot/fix-33
Jul 21, 2025
Merged

Update NuGet packages to latest compatible versions and fix security vulnerability#34
jasonshave merged 6 commits intomasterfrom
copilot/fix-33

Conversation

Copy link
Contributor

Copilot AI commented Jul 21, 2025

Updated all NuGet packages to their latest compatible versions and resolved a critical security vulnerability in OpenTelemetry.Api.

Changes Made

Security Fix

Main Project Updates

  • Azure.Identity: 1.13.1 → 1.14.2
  • Azure.Storage.Queues: 12.20.1 → 12.23.0
  • Microsoft.Extensions.Configuration.Binder: 8.0.2 → 9.0.7
  • Microsoft.Extensions.DependencyInjection.Abstractions: 8.0.2 → 9.0.7
  • Microsoft.Extensions.Logging.Abstractions: 8.0.2 → 9.0.7
  • Microsoft.Extensions.Options: 8.0.2 → 9.0.7

Test Project Updates

  • FluentAssertions: 6.12.1 → 8.5.0 (major version update - thoroughly tested)
  • Microsoft.NET.Test.Sdk: 17.8.0/17.11.1 → 17.14.1
  • xunit: 2.5.3/2.9.2 → 2.9.3
  • xunit.runner.visualstudio: 2.5.3/2.8.2 → 3.1.3
  • coverlet.collector: 6.0.0/6.0.2 → 6.0.4
  • Microsoft.Extensions.Hosting: 8.0.1 → 9.0.7
  • Microsoft.AspNetCore.Mvc.Testing: 8.0.10 → 8.0.11

Validation

All unit tests pass (21/21 successful)
Build succeeds with only expected warnings
Security vulnerability eliminated
No breaking changes introduced

The FluentAssertions major version update (6.x → 8.x) was tested thoroughly and works without any code changes required. Microsoft.Extensions packages were updated to 9.x versions for improved security and features while maintaining .NET 8.0 compatibility.

Microsoft.AspNetCore.Mvc.Testing remains at 8.0.11 as it's the latest version compatible with .NET 8.0 (9.0.7 requires .NET 9.0).

Fixes #33.


💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

Copilot AI and others added 3 commits July 21, 2025 14:46
Co-authored-by: jasonshave <28457536+jasonshave@users.noreply.github.com>
Co-authored-by: jasonshave <28457536+jasonshave@users.noreply.github.com>
Co-authored-by: jasonshave <28457536+jasonshave@users.noreply.github.com>
Copilot AI changed the title [WIP] Update NuGet packages Update NuGet packages to latest compatible versions and fix security vulnerability Jul 21, 2025
Copilot AI requested a review from jasonshave July 21, 2025 14:54
Copy link
Owner

@jasonshave jasonshave left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fix remaining warnings about async/await

Co-authored-by: jasonshave <28457536+jasonshave@users.noreply.github.com>
Copy link
Contributor Author

Copilot AI commented Jul 21, 2025

Fix remaining warnings about async/await

Fixed the async/await warnings by removing the async keyword from local functions that don't use await and returning ValueTask.CompletedTask instead. Build now completes with zero warnings. (17a919b)

Copilot AI requested a review from jasonshave July 21, 2025 15:11
Copy link
Owner

@jasonshave jasonshave left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fix remaining warnings on all test code to solve for non-nullable properties and other test-related functionality.

…rences

Co-authored-by: jasonshave <28457536+jasonshave@users.noreply.github.com>
Copy link
Contributor Author

Copilot AI commented Jul 21, 2025

Fix remaining warnings on all test code to solve for non-nullable properties and other test-related functionality.

Fixed all remaining test warnings for nullable properties and null references. Changes include:

  • Mock constructor calls now use null-forgiving operators for ConnectionString and QueueName
  • Person.FirstName property initialized with string.Empty
  • TestWebApplicationFactory.TestOutputHelper property initialized with null!

Build now completes with zero warnings. (c6adfec)

Copilot AI requested a review from jasonshave July 21, 2025 15:24
@jasonshave jasonshave marked this pull request as ready for review July 21, 2025 15:26
@jasonshave jasonshave merged commit b4154a9 into master Jul 21, 2025
1 check passed
@jasonshave jasonshave deleted the copilot/fix-33 branch July 21, 2025 15:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Update NuGet packages

2 participants