Skip to content

Update NuGet Packages#6258

Draft
Trenly wants to merge 4 commits into
microsoft:masterfrom
Trenly:NuGet
Draft

Update NuGet Packages#6258
Trenly wants to merge 4 commits into
microsoft:masterfrom
Trenly:NuGet

Conversation

@Trenly
Copy link
Copy Markdown
Contributor

@Trenly Trenly commented May 29, 2026

📖 Description

Updates NuGet package versions in src\Directory.Packages.props to newer supported releases. These updates move the repository onto current package baselines that include accumulated servicing fixes, improve compatibility with newer .NET/runtime toolchains, and reduce long-term maintenance risk from version drift.

📦 Packages Updated

18 NuGet package versions were updated:

Package Old Version New Version
coverlet.collector 3.1.2 10.0.1
Microsoft.ApplicationInsights 2.21.0 3.1.2
Microsoft.AspNet.WebApi.Client 5.2.9 6.0.0
Microsoft.Extensions.Hosting 9.0.6 10.0.8
Microsoft.NET.Test.Sdk 17.3.2 18.6.0
Microsoft.PowerShell.SDK 7.4.12 7.4.16
Microsoft.Windows.SDK.Contracts 10.0.26100.1742 10.0.28000.1839
Newtonsoft.Json 13.0.3 13.0.4
nunit 3.12.0 4.6.1
NUnit3TestAdapter 3.15.1 6.2.0
Octokit 4.0.3 14.0.0
Semver 2.3.0 3.0.0
System.Data.SqlClient 4.9.0 4.9.1
System.Text.Json 9.0.6 10.0.8
xunit 2.4.2 2.9.3
xunit.runner.visualstudio 2.4.5 3.1.5
YamlDotNet 16.3.0 18.0.0

Why This Helps

  • Aligns key dependencies with actively serviced versions used by current SDK/tooling
  • Brings upstream bug fixes from package lines, including reliability fixes in test discovery/execution stacks and runtime/library servicing fixes delivered through newer .NET package trains
  • Improves test framework coverage by upgrading NUnit (3.12.0 → 4.6.1), NUnit3TestAdapter (3.15.1 → 6.2.0), and xunit (2.4.2 → 2.9.3) to modern versions
  • Maintains healthier security posture by updating transitive dependencies

🔒 Security Improvements

Updated packages include security fixes from:

  • Microsoft.ApplicationInsights 3.1.2 (includes OpenTelemetry security advisory fixes)
  • Microsoft.Extensions.Hosting 10.0.8 (carries .NET 10.0.8 servicing releases with security fixes)
  • System.Text.Json 10.0.8 (aligned with .NET 10.0.8 servicing)

📝 Additional Changes

  • Added System.Text.Json package reference to src\WinGetUtilInterop.UnitTests\WinGetUtilInterop.UnitTests.csproj

✅ Checklist

📋 Issue Type

  • Bug fix
  • Feature
  • Task

Created with copilot assistance

@JohnMcPMS JohnMcPMS added the Next-Release This PR is waiting for the current release to branch before merging. label May 29, 2026
Copy link
Copy Markdown
Member

@JohnMcPMS JohnMcPMS left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Things I didn't comment on are probably fine / will have little to no changes required to build. The comments are probably all deserving of their own PR due to the additional changes needed.

Comment thread src/Directory.Packages.props Outdated
Comment thread src/Directory.Packages.props Outdated
Comment thread src/Directory.Packages.props Outdated
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Next-Release This PR is waiting for the current release to branch before merging.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants