chore(deps): 收回 Benchmarks/EPPlusTest/Stash 至 CPM,Newtonsoft.Json 统一为 13.0.3

阶段 2 架构定型:CPM 边界收敛到仅 EPPlus (vendored 图像库) opt-out。

收回 (3 个项目):
- Benchmarks:删 ManagePackageVersionsCentrally=false,所有 PackageReference 跟随 CPM
- EPPlusTest:删 opt-out,6 个测试包跟随 CPM
- Stash:删 opt-out + 注释掉的 common.props 导入,跟随 CPM
  顺手修复 Microsoft.SourceLink.GitHub 的三重声明(EPPlus / Stash / props)

保留 opt-out (1 个项目) + 注释:
- StashTests:用 MSTest 2.2.10 / SDK 17.3.2,与 bulk-test 基线 2.2.7 / 17.1.0 不一致
  加注释说明退出原因和未来何时可收回

Directory.Packages.props 新增 8 个 PackageVersion:
BenchmarkDotNet 0.14.0, MiniExcel 1.29.0, FakeItEasy 7.2.0,
MSTest.TestAdapter 2.2.7, MSTest.TestFramework 2.2.7,
System.Resources.Extensions 5.0.0, System.Xml.XPath.XmlDocument 4.3.0,
CS-Script 4.6.5

顺带修复 Newtonsoft.Json 版本漂移 (Benchmarks 13.0.1 → 13.0.3, Stash 13.0.1 → 13.0.3)
补丁版本升级无 API 变化。

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: hueifeng

Directory.Packages.props

@@ -28,6 +28,14 @@
     <PackageVersion Include="NPOI" Version="2.8.0" />
     <PackageVersion Include="Newtonsoft.Json" Version="13.0.3" />
     <PackageVersion Include="Microsoft.SourceLink.GitHub" Version="8.0.0" />
+    <PackageVersion Include="BenchmarkDotNet" Version="0.14.0" />
+    <PackageVersion Include="MiniExcel" Version="1.29.0" />
+    <PackageVersion Include="FakeItEasy" Version="7.2.0" />
+    <PackageVersion Include="MSTest.TestAdapter" Version="2.2.7" />
+    <PackageVersion Include="MSTest.TestFramework" Version="2.2.7" />
+    <PackageVersion Include="System.Resources.Extensions" Version="5.0.0" />
+    <PackageVersion Include="System.Xml.XPath.XmlDocument" Version="4.3.0" />
+    <PackageVersion Include="CS-Script" Version="4.6.5" />
   </ItemGroup>
 
   <ItemGroup>

src/EPPlus/EPPlusTest/EPPlusTest.csproj

@@ -3,7 +3,6 @@
 	<PropertyGroup>
 		<TargetFramework>net8.0</TargetFramework>
 		<IsPackable>false</IsPackable>
-		<ManagePackageVersionsCentrally>false</ManagePackageVersionsCentrally>
 		<RootNamespace>EPPlusTest</RootNamespace>
 		<AssemblyName>EPPlusTest</AssemblyName>
 		<SignAssembly>True</SignAssembly>
@@ -34,12 +33,12 @@
 	</ItemGroup>
 
 	<ItemGroup>
-		<PackageReference Include="FakeItEasy" Version="7.2.0" />
-		<PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.1.0" />
-		<PackageReference Include="MSTest.TestAdapter" Version="2.2.7" />
-		<PackageReference Include="MSTest.TestFramework" Version="2.2.7" />
-		<PackageReference Include="System.Resources.Extensions" Version="5.0.0" />
-		<PackageReference Include="System.Xml.XPath.XmlDocument" Version="4.3.0" />
+		<PackageReference Include="FakeItEasy" />
+		<PackageReference Include="Microsoft.NET.Test.Sdk" />
+		<PackageReference Include="MSTest.TestAdapter" />
+		<PackageReference Include="MSTest.TestFramework" />
+		<PackageReference Include="System.Resources.Extensions" />
+		<PackageReference Include="System.Xml.XPath.XmlDocument" />
 	</ItemGroup>
 
 	<ItemGroup>

src/Magicodes.IE.Benchmarks/Magicodes.Benchmarks.csproj

@@ -4,13 +4,12 @@
     <OutputType>Exe</OutputType>
     <TargetFramework>net8.0</TargetFramework>
     <IsPackable>false</IsPackable>
-    <ManagePackageVersionsCentrally>false</ManagePackageVersionsCentrally>
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="BenchmarkDotNet" Version="0.14.0" />
-    <PackageReference Include="MiniExcel" Version="1.29.0" />
-    <PackageReference Include="Newtonsoft.Json" Version="13.0.1" />
+    <PackageReference Include="BenchmarkDotNet" />
+    <PackageReference Include="MiniExcel" />
+    <PackageReference Include="Newtonsoft.Json" />
   </ItemGroup>
 
   <ItemGroup>

src/Stash/Magicodes.IE.Stash/Magicodes.IE.Stash.csproj

@@ -1,9 +1,7 @@
 <Project Sdk="Microsoft.NET.Sdk">
-	<!--<Import Project="..\..\..\common.props"></Import>-->
 	<PropertyGroup>
 		<Version>2.7.4.3</Version>
 		<IncludeSymbols>true</IncludeSymbols>
-		<ManagePackageVersionsCentrally>false</ManagePackageVersionsCentrally>
 		<SymbolPackageFormat>snupkg</SymbolPackageFormat>
 		<TargetFrameworks>netstandard2.0;netstandard2.1</TargetFrameworks>
 		<ImplicitUsings>enable</ImplicitUsings>
@@ -27,12 +25,8 @@
 		<Folder Include="Export\" />
 	</ItemGroup>
 	<ItemGroup>
-		<PackageReference Include="CS-Script" Version="4.6.5" />
-		<PackageReference Include="Newtonsoft.Json" Version="13.0.1" />
-		<PackageReference Include="Microsoft.SourceLink.GitHub" Version="8.0.0">
-			<PrivateAssets>all</PrivateAssets>
-			<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
-		</PackageReference>
+		<PackageReference Include="CS-Script" />
+		<PackageReference Include="Newtonsoft.Json" />
 	</ItemGroup>
 	<ItemGroup>
 		<ProjectReference Include="..\..\Magicodes.ExporterAndImporter.Excel\Magicodes.IE.Excel.csproj" />

src/Stash/Magicodes.IE.StashTests/Magicodes.IE.StashTests.csproj

@@ -7,6 +7,9 @@
 
     <IsPackable>false</IsPackable>
     <IsTestProject>true</IsTestProject>
+    <!-- Opt-out: StashTests uses pinned test framework versions (MSTest 2.2.10, SDK 17.3.2)
+         that don't match the bulk-test baseline (MSTest 2.2.7, SDK 17.1.0).
+         Revisit when MSTest 2.2.10 is added to Directory.Packages.props. -->
     <ManagePackageVersionsCentrally>false</ManagePackageVersionsCentrally>
   </PropertyGroup>