Skip to content

chore: update NuGet dependencies (security, stability, and build fixes)#1200

Open
Symlink420 wants to merge 3 commits intoopenbullet:masterfrom
Symlink420:fix/nuget-updates
Open

chore: update NuGet dependencies (security, stability, and build fixes)#1200
Symlink420 wants to merge 3 commits intoopenbullet:masterfrom
Symlink420:fix/nuget-updates

Conversation

@Symlink420
Copy link

Summary

Updates 24 NuGet dependencies across the solution to improve security, performance, and stability. This PR also resolves specific build conflicts and patches known vulnerabilities.

Changes

  • NuGet Updates: Bumps major dependencies including:
    • AngleSharp (1.4.0)
    • Selenium.WebDriver (4.41.0)
    • Microsoft.EntityFrameworkCore (8.0.8)
    • MailKit (4.15.0)
    • Serilog.AspNetCore (10.0.0)
    • FluentValidation (11.11.0)
  • Security Patches:
    • Updated SixLabors.ImageSharp to 3.1.6 (fixes High/Moderate vulnerabilities)
    • Updated HtmlSanitizer to 9.0.835 (fixes Moderate vulnerability)
  • Build & Conflict Resolution:
    • Unified Microsoft.CodeAnalysis version to 4.12.0 across all projects to resolve version mismatches between RuriLib and EFCore.Design.
    • Added explicit AngleSharp reference to OpenBullet2.Native to resolve dependency conflicts.
  • Selenium 4.x Fix:
    • Updated RuriLib Firefox options to use the new BinaryLocation property (replacing the renamed BrowserExecutableLocation).

Verification

  • Verified build succeeds using .NET 10 SDK targeting .NET 8.
  • Ran dotnet test: 202/203 RuriLib tests passed.

Updates multiple packages across the solution to improve stability, security, and performance:
- AngleSharp 1.1.2 -> 1.4.0
- EF Core 8.0.6 -> 8.0.8
- FluentValidation 11.9.2 -> 11.11.0
- HtmlAgilityPack 1.11.61 -> 1.12.4
- MailKit 4.6.0 -> 4.15.0
- Selenium 4.21.0 -> 4.41.0
- Serilog.AspNetCore 8.0.1 -> 10.0.0
- And other minor version bumps for MS Extensions.
- Force Microsoft.CodeAnalysis.Common/CSharp to 4.12.0 to resolve conflict with EFCore.Design
- Update SixLabors.ImageSharp to 3.1.6 (fixes high/moderate security vulnerabilities)
- Update HtmlSanitizer to 9.0.835 (fixes moderate security vulnerability)
- Update FirefoxOptions.BrowserExecutableLocation to BinaryLocation (Selenium 4.x rename)
- Explicitly add AngleSharp 1.4.0 to OpenBullet2.Native to resolve HtmlSanitizer conflict
- Final build verification successful on .NET 10 SDK (targeting .NET 8)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant