chore(deps): raise gRPC stack 2.71.0 -> 2.76.0 (Protobuf 3.34.1)
Forced by ZB.MOM.WW.LocalDb.Replication 0.1.0, whose nuspec floors
Grpc.AspNetCore / Grpc.Net.Client / Grpc.Core.Api / Grpc.Tools at 2.76.0 and
Google.Protobuf at 3.34.1. Restore fails NU1605 (package downgrade) below that
floor, so LocalDb adoption cannot proceed without it.
Landed as its own commit deliberately. The SQLitePCLRaw note in
Directory.Packages.props deferred precisely this bump as belonging in "their own
reviewed commit - not smuggled in under a SQLite security fix"; this honors that.
Scope kept minimal:
- Grpc.Core.Api pinned explicitly so the family stays on one version instead
of floating in transitively.
- Microsoft.Data.SqlClient and Newtonsoft.Json, also named in that note, are
NOT bumped - nothing forces them and they carry their own risk profile.
Direct consumer surface is two projects: Grpc.AspNetCore in Host,
Grpc.Net.Client in Communication.
Verified:
dotnet build ZB.MOM.WW.ScadaBridge.slnx -> 0 Error(s), 0 Warning(s)
Communication.Tests -> 312 passed, 0 failed
Transport.IntegrationTests -> 103 passed, 0 failed
Claude-Session: https://claude.ai/code/session_01BL2Vu1ESDQ9SCN4gVKkdts
This commit is contained in:
@@ -15,10 +15,28 @@
|
|||||||
<PackageVersion Include="bunit" Version="2.0.33-preview" />
|
<PackageVersion Include="bunit" Version="2.0.33-preview" />
|
||||||
<PackageVersion Include="coverlet.collector" Version="6.0.4" />
|
<PackageVersion Include="coverlet.collector" Version="6.0.4" />
|
||||||
<PackageVersion Include="FluentAssertions" Version="8.3.0" />
|
<PackageVersion Include="FluentAssertions" Version="8.3.0" />
|
||||||
<PackageVersion Include="Google.Protobuf" Version="3.29.3" />
|
<!--
|
||||||
<PackageVersion Include="Grpc.AspNetCore" Version="2.71.0" />
|
gRPC stack raised 2.71.0 -> 2.76.0 (Protobuf 3.29.3 -> 3.34.1) on 2026-07-19.
|
||||||
<PackageVersion Include="Grpc.Net.Client" Version="2.71.0" />
|
|
||||||
<PackageVersion Include="Grpc.Tools" Version="2.71.0" />
|
Forced by ZB.MOM.WW.LocalDb.Replication 0.1.0, whose nuspec floors Grpc.AspNetCore,
|
||||||
|
Grpc.Net.Client, Grpc.Core.Api and Grpc.Tools at 2.76.0 and Google.Protobuf at 3.34.1.
|
||||||
|
Below that floor restore fails NU1605 (package downgrade), so this is not optional for
|
||||||
|
LocalDb adoption.
|
||||||
|
|
||||||
|
The SQLitePCLRaw note below deferred exactly this bump as belonging in "their own
|
||||||
|
reviewed commit" rather than smuggled under a security fix - so it IS its own commit.
|
||||||
|
Direct consumer surface is narrow: Grpc.AspNetCore only in Host, Grpc.Net.Client only
|
||||||
|
in Communication. Grpc.Core.Api is pinned explicitly here to keep the whole family on
|
||||||
|
one version rather than letting it float in transitively.
|
||||||
|
|
||||||
|
Not bumped here: Microsoft.Data.SqlClient and Newtonsoft.Json, also named in that note.
|
||||||
|
Nothing forces them, and they are a data-access change with its own risk profile.
|
||||||
|
-->
|
||||||
|
<PackageVersion Include="Google.Protobuf" Version="3.34.1" />
|
||||||
|
<PackageVersion Include="Grpc.AspNetCore" Version="2.76.0" />
|
||||||
|
<PackageVersion Include="Grpc.Net.Client" Version="2.76.0" />
|
||||||
|
<PackageVersion Include="Grpc.Core.Api" Version="2.76.0" />
|
||||||
|
<PackageVersion Include="Grpc.Tools" Version="2.76.0" />
|
||||||
<PackageVersion Include="MailKit" Version="4.16.0" />
|
<PackageVersion Include="MailKit" Version="4.16.0" />
|
||||||
<PackageVersion Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="10.0.7" />
|
<PackageVersion Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="10.0.7" />
|
||||||
<PackageVersion Include="Microsoft.AspNetCore.Authorization" Version="10.0.7" />
|
<PackageVersion Include="Microsoft.AspNetCore.Authorization" Version="10.0.7" />
|
||||||
|
|||||||
Reference in New Issue
Block a user