From 4715f2f921f0b9dde2fc0a88c3d76e1455baf3e9 Mon Sep 17 00:00:00 2001 From: Joseph Doherty Date: Sun, 19 Jul 2026 02:39:11 -0400 Subject: [PATCH] chore(deps): raise gRPC stack 2.71.0 -> 2.76.0 (Protobuf 3.34.1) Forced by ZB.MOM.WW.LocalDb.Replication 0.1.0, whose nuspec floors Grpc.AspNetCore / Grpc.Net.Client / Grpc.Core.Api / Grpc.Tools at 2.76.0 and Google.Protobuf at 3.34.1. Restore fails NU1605 (package downgrade) below that floor, so LocalDb adoption cannot proceed without it. Landed as its own commit deliberately. The SQLitePCLRaw note in Directory.Packages.props deferred precisely this bump as belonging in "their own reviewed commit - not smuggled in under a SQLite security fix"; this honors that. Scope kept minimal: - Grpc.Core.Api pinned explicitly so the family stays on one version instead of floating in transitively. - Microsoft.Data.SqlClient and Newtonsoft.Json, also named in that note, are NOT bumped - nothing forces them and they carry their own risk profile. Direct consumer surface is two projects: Grpc.AspNetCore in Host, Grpc.Net.Client in Communication. Verified: dotnet build ZB.MOM.WW.ScadaBridge.slnx -> 0 Error(s), 0 Warning(s) Communication.Tests -> 312 passed, 0 failed Transport.IntegrationTests -> 103 passed, 0 failed Claude-Session: https://claude.ai/code/session_01BL2Vu1ESDQ9SCN4gVKkdts --- Directory.Packages.props | 26 ++++++++++++++++++++++---- 1 file changed, 22 insertions(+), 4 deletions(-) diff --git a/Directory.Packages.props b/Directory.Packages.props index 7da10e4f..62d64872 100644 --- a/Directory.Packages.props +++ b/Directory.Packages.props @@ -15,10 +15,28 @@ - - - - + + + + + +