updating vulnerable packages + An obselete package to be in sync wit… (#245)

wyaadarsh · web-flow · commit 757467610dee · 2025-06-02T21:36:34.000Z
* updating vulnerable packages + An obselete package to be in sync with GitOps Base library so that it doesn't conflict

* Updating target version

* .Net 8.0

* Update build_net_core.yml

* Fixes

* Test

* Test

* Secure password
diff --git a/.github/workflows/build_net.yml b/.github/workflows/build_net.yml
@@ -16,13 +16,13 @@ jobs:
     runs-on: windows-latest
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v4
       with:
           fetch-depth: 0
     - name: Setup .NET Core
-      uses: actions/setup-dotnet@v1
+      uses: actions/setup-dotnet@v4
       with:
-        dotnet-version: 7.0.x
+        dotnet-version: 8.0.x
 
     # Add  MSBuild to the PATH: https://github.com/microsoft/setup-msbuild
     - name: Setup MSBuild.exe
diff --git a/.github/workflows/build_net_core.yml b/.github/workflows/build_net_core.yml
@@ -16,13 +16,13 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v4
       with:
           fetch-depth: 0
     - name: Setup .NET Core
-      uses: actions/setup-dotnet@v1
+      uses: actions/setup-dotnet@v4
       with:
-        dotnet-version: 7.0.x
+        dotnet-version: 8.0.x
 
     - name: Install dependencies
       run: dotnet restore PullRequestQuantifier.sln
@@ -54,7 +54,7 @@ jobs:
     
     - name: Upload release artifacts
       if: github.ref == 'refs/heads/main'
-      uses: actions/upload-artifact@v2
+      uses: actions/upload-artifact@v4
       with:
         name: release
         path: release/*
diff --git a/.github/workflows/feedback_service.yml b/.github/workflows/feedback_service.yml
@@ -11,13 +11,13 @@ jobs:
     runs-on: windows-latest
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v4
       with:
           fetch-depth: 0
     - name: Setup .NET Core
-      uses: actions/setup-dotnet@v1
+      uses: actions/setup-dotnet@v4
       with:
-        dotnet-version: 7.0.x
+        dotnet-version: 8.0.x
     - name: Install dependencies
       run: dotnet restore src/PullRequestQuantifier.Feedback.Service/PullRequestQuantifier.Feedback.Service.csproj
       env:
diff --git a/.github/workflows/github_client.yml b/.github/workflows/github_client.yml
@@ -11,13 +11,13 @@ jobs:
     runs-on: windows-latest
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v4
       with:
           fetch-depth: 0
     - name: Setup .NET Core
-      uses: actions/setup-dotnet@v1
+      uses: actions/setup-dotnet@v4
       with:
-        dotnet-version: 7.0.x
+        dotnet-version: 8.0.x
     - name: Install dependencies
       run: dotnet restore src/Clients/PullRequestQuantifier.GitHub.Client/PullRequestQuantifier.GitHub.Client.csproj
       env:
diff --git a/.github/workflows/repository_service.yml b/.github/workflows/repository_service.yml
@@ -11,13 +11,13 @@ jobs:
     runs-on: windows-latest
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v4
       with:
           fetch-depth: 0
     - name: Setup .NET Core
-      uses: actions/setup-dotnet@v1
+      uses: actions/setup-dotnet@v4
       with:
-        dotnet-version: 7.0.x
+        dotnet-version: 8.0.x
     - name: Install dependencies
       run: dotnet restore src/PullRequestQuantifier.Repository.Service/PullRequestQuantifier.Repository.Service.csproj
       env:
diff --git a/.github/workflows/vscode_client.yml b/.github/workflows/vscode_client.yml
@@ -12,13 +12,13 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v4
       with:
           fetch-depth: 0
     - name: Setup .NET Core
-      uses: actions/setup-dotnet@v1
+      uses: actions/setup-dotnet@v4
       with:
-        dotnet-version: 7.0.x
+        dotnet-version: 8.0.x
     - name: Install dependencies
       run: dotnet restore src/Clients/PullRequestQuantifier.VsCode.Client/PullRequestQuantifier.VsCode.Client.csproj
       env:
@@ -36,7 +36,7 @@ jobs:
       run: dotnet publish src/Clients/PullRequestQuantifier.VsCode.Client/PullRequestQuantifier.VsCode.Client.csproj --configuration Release --self-contained false -p:PackageVsix=true
     - name: Upload release artifacts
       if: github.ref == 'refs/heads/main'
-      uses: actions/upload-artifact@v2
+      uses: actions/upload-artifact@v4
       with:
         name: vsix
         path: src/Clients/PullRequestQuantifier.VsCode.Client/**/*.vsix
diff --git a/src/Clients/PullRequestQuantifier.Client.Tests/PullRequestQuantifier.Client.Tests.csproj b/src/Clients/PullRequestQuantifier.Client.Tests/PullRequestQuantifier.Client.Tests.csproj
@@ -1,7 +1,7 @@
 <Project Sdk="Microsoft.NET.Sdk">
 
     <PropertyGroup>
-        <TargetFramework>net7.0</TargetFramework>
+        <TargetFramework>net8.0</TargetFramework>
 
         <IsPackable>false</IsPackable>
 
diff --git a/src/Clients/PullRequestQuantifier.Client/PullRequestQuantifier.Client.csproj b/src/Clients/PullRequestQuantifier.Client/PullRequestQuantifier.Client.csproj
@@ -11,10 +11,10 @@
   <ItemGroup>
     <PackageReference Include="Microsoft.CSharp" Version="4.7.0" />
     <PackageReference Include="Newtonsoft.Json" Version="13.0.3" />
-    <PackageReference Include="System.Text.Json" Version="7.0.3" />
-    <PackageReference Include="System.IO.Abstractions" Version="19.2.69" />
+   <PackageReference Include="System.Text.Json" Version="9.0.5" />
+    <PackageReference Include="System.IO.Abstractions" Version="21.2.1" />
     <PackageReference Include="Ignore" Version="0.1.50" />
-    <PackageReference Include="LibGit2Sharp" Version="0.27.2" />
+    <PackageReference Include="LibGit2Sharp" Version="0.31.0" />
     <PackageReference Include="YamlDotNet" Version="13.7.1" />
     <PackageReference Include="Stubble.Core" Version="1.10.8" />
   </ItemGroup>
diff --git a/src/Clients/PullRequestQuantifier.GitHub.Client.Tests/PullRequestQuantifier.GitHub.Client.Tests.csproj b/src/Clients/PullRequestQuantifier.GitHub.Client.Tests/PullRequestQuantifier.GitHub.Client.Tests.csproj
@@ -1,7 +1,7 @@
 <Project Sdk="Microsoft.NET.Sdk">
 
     <PropertyGroup>
-        <TargetFramework>net7.0</TargetFramework>
+        <TargetFramework>net8.0</TargetFramework>
 
         <IsPackable>false</IsPackable>
 
diff --git a/src/Clients/PullRequestQuantifier.GitHub.Client/PullRequestQuantifier.GitHub.Client.csproj b/src/Clients/PullRequestQuantifier.GitHub.Client/PullRequestQuantifier.GitHub.Client.csproj
@@ -1,7 +1,7 @@
 <Project Sdk="Microsoft.NET.Sdk.Web">
 
     <PropertyGroup>
-        <TargetFramework>net7.0</TargetFramework>
+        <TargetFramework>net8.0</TargetFramework>
         <EnforceCodeStyleInBuild>true</EnforceCodeStyleInBuild>
     </PropertyGroup>
 
@@ -12,7 +12,7 @@
         <PackageReference Include="Swashbuckle.AspNetCore" Version="6.5.0" />
         <PackageReference Include="GitHubJwt" Version="0.0.6" />
         <PackageReference Include="Octokit" Version="8.1.1" />
-        <PackageReference Include="Microsoft.ApplicationInsights.AspNetCore" Version="2.21.0" />
+        <PackageReference Include="Microsoft.ApplicationInsights.AspNetCore" Version="2.23.0" />
     </ItemGroup>
 
     <ItemGroup>
diff --git a/src/Clients/PullRequestQuantifier.GitHub.Common.Tests/PullRequestQuantifier.GitHub.Common.Tests.csproj b/src/Clients/PullRequestQuantifier.GitHub.Common.Tests/PullRequestQuantifier.GitHub.Common.Tests.csproj
@@ -1,7 +1,7 @@
 ﻿<Project Sdk="Microsoft.NET.Sdk">
 
   <PropertyGroup>
-    <TargetFramework>net7.0</TargetFramework>
+    <TargetFramework>net8.0</TargetFramework>
 
     <IsPackable>false</IsPackable>
   </PropertyGroup>
diff --git a/src/Clients/PullRequestQuantifier.Local.Client/PullRequestQuantifier.Local.Client.csproj b/src/Clients/PullRequestQuantifier.Local.Client/PullRequestQuantifier.Local.Client.csproj
@@ -2,12 +2,12 @@
 
   <PropertyGroup>
     <OutputType>Exe</OutputType>
-    <TargetFramework>net7.0</TargetFramework>
+    <TargetFramework>net8.0</TargetFramework>
     <EnforceCodeStyleInBuild>true</EnforceCodeStyleInBuild>
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="LibGit2Sharp" Version="0.27.2" />
+    <PackageReference Include="LibGit2Sharp" Version="0.31.0" />
     <PackageReference Include="Microsoft.Extensions.Configuration.CommandLine" Version="7.0.0" />
     <PackageReference Include="Microsoft.Extensions.DependencyInjection" Version="7.0.0" />
   </ItemGroup>
diff --git a/src/Clients/PullRequestQuantifier.Local.Context/PullRequestQuantifier.Local.Context.csproj b/src/Clients/PullRequestQuantifier.Local.Context/PullRequestQuantifier.Local.Context.csproj
@@ -2,7 +2,7 @@
 
   <PropertyGroup>
     <OutputType>Exe</OutputType>
-    <TargetFramework>net7.0</TargetFramework>
+    <TargetFramework>net8.0</TargetFramework>
     <EnforceCodeStyleInBuild>true</EnforceCodeStyleInBuild>
   </PropertyGroup>
 
diff --git a/src/Clients/PullRequestQuantifier.VsCode.Client/PullRequestQuantifier.VsCode.Client.csproj b/src/Clients/PullRequestQuantifier.VsCode.Client/PullRequestQuantifier.VsCode.Client.csproj
@@ -2,7 +2,7 @@
 
     <PropertyGroup>
         <OutputType>Exe</OutputType>
-        <TargetFramework>net7.0</TargetFramework>
+        <TargetFramework>net8.0</TargetFramework>
         <NodeJsRoot>pull-request-quantifier\</NodeJsRoot>
         <EnforceCodeStyleInBuild>true</EnforceCodeStyleInBuild>
     </PropertyGroup>
diff --git a/src/PullRequestQuantifier.Abstractions.Tests/PullRequestQuantifier.Abstractions.Tests.csproj b/src/PullRequestQuantifier.Abstractions.Tests/PullRequestQuantifier.Abstractions.Tests.csproj
@@ -1,7 +1,7 @@
 ﻿<Project Sdk="Microsoft.NET.Sdk">
 
   <PropertyGroup>
-    <TargetFramework>net7.0</TargetFramework>
+    <TargetFramework>net8.0</TargetFramework>
 
     <IsPackable>false</IsPackable>
 
diff --git a/src/PullRequestQuantifier.Abstractions/PullRequestQuantifier.Abstractions.csproj b/src/PullRequestQuantifier.Abstractions/PullRequestQuantifier.Abstractions.csproj
@@ -10,9 +10,9 @@
 
     <ItemGroup>
         <PackageReference Include="Ignore" Version="0.1.50" />
-        <PackageReference Include="LibGit2Sharp" Version="0.27.2" />
+        <PackageReference Include="LibGit2Sharp" Version="0.31.0" />
         <PackageReference Include="YamlDotNet" Version="13.7.1" />
-        <PackageReference Include="System.Text.Json" Version="7.0.3" />
+        <PackageReference Include="System.Text.Json" Version="9.0.5" />
     </ItemGroup>
 
     <ItemGroup>
diff --git a/src/PullRequestQuantifier.Common.Tests/PullRequestQuantifier.Common.Tests.csproj b/src/PullRequestQuantifier.Common.Tests/PullRequestQuantifier.Common.Tests.csproj
@@ -1,13 +1,13 @@
 <Project Sdk="Microsoft.NET.Sdk">
 
     <PropertyGroup>
-        <TargetFramework>net7.0</TargetFramework>
+        <TargetFramework>net8.0</TargetFramework>
         <EnforceCodeStyleInBuild>true</EnforceCodeStyleInBuild>
     </PropertyGroup>
 
     <ItemGroup>
-        <PackageReference Include="LibGit2Sharp" Version="0.27.2" />
-        <PackageReference Include="System.IO.Abstractions" Version="19.2.69" />
+        <PackageReference Include="LibGit2Sharp" Version="0.31.0" />
+        <PackageReference Include="System.IO.Abstractions" Version="21.2.1" />
         <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.7.2" />
         <PackageReference Include="xunit" Version="2.5.3" />
         <PackageReference Include="xunit.runner.visualstudio" Version="2.5.3">
diff --git a/src/PullRequestQuantifier.Common/Extensions/FileSystemExtensions.cs b/src/PullRequestQuantifier.Common/Extensions/FileSystemExtensions.cs
@@ -9,7 +9,7 @@ public static class FileSystemExtensions
         public static void DeleteDirectory(this IFileSystem fileSystem, string path)
         {
 #pragma warning disable CS0618 // Do not catch general exception types
-            var dirInfo = fileSystem.DirectoryInfo.FromDirectoryName(path);
+            var dirInfo = fileSystem.DirectoryInfo.New(path);
 #pragma warning restore CS0618 // Do not catch general exception types
 
             if (dirInfo.Exists)
diff --git a/src/PullRequestQuantifier.Common/PullRequestQuantifier.Common.csproj b/src/PullRequestQuantifier.Common/PullRequestQuantifier.Common.csproj
@@ -14,10 +14,10 @@
     <PackageReference Include="Microsoft.Extensions.Logging" Version="7.0.0" />
     <PackageReference Include="Microsoft.Extensions.Logging.Configuration" Version="7.0.0" />
     <PackageReference Include="Microsoft.Extensions.Logging.Console" Version="7.0.0" />
-    <PackageReference Include="System.IO.Abstractions" Version="19.2.69" />
+    <PackageReference Include="System.IO.Abstractions" Version="21.2.1" />
     <PackageReference Include="WindowsAzure.Storage" Version="9.3.3" />
     <PackageReference Include="Azure.Messaging.ServiceBus" Version="7.16.2" />
-    <PackageReference Include="Microsoft.ApplicationInsights.AspNetCore" Version="2.21.0" />
+    <PackageReference Include="Microsoft.ApplicationInsights.AspNetCore" Version="2.23.0" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/src/PullRequestQuantifier.Feedback.Service/PullRequestQuantifier.Feedback.Service.csproj b/src/PullRequestQuantifier.Feedback.Service/PullRequestQuantifier.Feedback.Service.csproj
@@ -1,7 +1,7 @@
 ﻿<Project Sdk="Microsoft.NET.Sdk.Web">
 
     <PropertyGroup>
-        <TargetFramework>net7.0</TargetFramework>
+        <TargetFramework>net8.0</TargetFramework>
         <EnforceCodeStyleInBuild>true</EnforceCodeStyleInBuild>
     </PropertyGroup>
    
@@ -16,7 +16,7 @@
         <PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="7.0.13" />
         <PackageReference Include="Microsoft.AspNetCore.Authentication.OpenIdConnect" Version="7.0.13" />
         <PackageReference Include="Swashbuckle.AspNetCore" Version="6.5.0" />
-        <PackageReference Include="Microsoft.ApplicationInsights.AspNetCore" Version="2.21.0" />
+        <PackageReference Include="Microsoft.ApplicationInsights.AspNetCore" Version="2.23.0" />
         <PackageReference Include="Microsoft.Extensions.Configuration.AzureAppConfiguration" Version="6.1.1" />
     </ItemGroup>
 
diff --git a/src/PullRequestQuantifier.GitEngine.Tests/PullRequestQuantifier.GitEngine.Tests.csproj b/src/PullRequestQuantifier.GitEngine.Tests/PullRequestQuantifier.GitEngine.Tests.csproj
@@ -1,7 +1,7 @@
 <Project Sdk="Microsoft.NET.Sdk">
 
     <PropertyGroup>
-        <TargetFramework>net7.0</TargetFramework>
+        <TargetFramework>net8.0</TargetFramework>
 
         <IsPackable>false</IsPackable>
 
diff --git a/src/PullRequestQuantifier.GitEngine/Helpers/Diff/GitCreateDiff.cs b/src/PullRequestQuantifier.GitEngine/Helpers/Diff/GitCreateDiff.cs
@@ -76,7 +76,7 @@ private void Commit()
         private void DeleteRepoDirectory()
         {
 #pragma warning disable CS0618 // Type or member is obsolete
-            var dirInfo = fileSystem.DirectoryInfo.FromDirectoryName(repoPath);
+            var dirInfo = fileSystem.DirectoryInfo.New(repoPath);
 #pragma warning restore CS0618 // Type or member is obsolete
             if (dirInfo.Exists)
             {
diff --git a/src/PullRequestQuantifier.GitEngine/PullRequestQuantifier.GitEngine.csproj b/src/PullRequestQuantifier.GitEngine/PullRequestQuantifier.GitEngine.csproj
@@ -8,7 +8,7 @@
     </PropertyGroup>
 
     <ItemGroup>
-      <PackageReference Include="System.IO.Abstractions" Version="19.2.69" />
+      <PackageReference Include="System.IO.Abstractions" Version="21.2.1" />
     </ItemGroup>
 
     <ItemGroup>
diff --git a/src/PullRequestQuantifier.Repository.Service/PullRequestQuantifier.Repository.Service.csproj b/src/PullRequestQuantifier.Repository.Service/PullRequestQuantifier.Repository.Service.csproj
@@ -1,7 +1,7 @@
 ﻿<Project Sdk="Microsoft.NET.Sdk.Web">
 
   <PropertyGroup>
-    <TargetFramework>net7.0</TargetFramework>
+    <TargetFramework>net8.0</TargetFramework>
     <EnforceCodeStyleInBuild>true</EnforceCodeStyleInBuild>
   </PropertyGroup>
 
@@ -11,14 +11,14 @@
     </Content>
   </ItemGroup>
   <ItemGroup>
-    <PackageReference Include="Azure.Identity" Version="1.11.0" />
+    <PackageReference Include="Azure.Identity" Version="1.14.0" />
     <PackageReference Include="CsvHelper" Version="30.0.1" />
-    <PackageReference Include="LibGit2Sharp" Version="0.27.2" />
-    <PackageReference Include="System.IO.Abstractions" Version="19.2.69" />
+    <PackageReference Include="LibGit2Sharp" Version="0.31.0" />
+    <PackageReference Include="System.IO.Abstractions" Version="21.2.1" />
     <PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="7.0.13" />
     <PackageReference Include="Microsoft.AspNetCore.Authentication.OpenIdConnect" Version="7.0.13" />
     <PackageReference Include="Swashbuckle.AspNetCore" Version="6.5.0" />
-    <PackageReference Include="Microsoft.ApplicationInsights.AspNetCore" Version="2.21.0" />
+    <PackageReference Include="Microsoft.ApplicationInsights.AspNetCore" Version="2.23.0" />
     <PackageReference Include="Microsoft.Extensions.Configuration.AzureAppConfiguration" Version="6.1.1" />
   </ItemGroup>
   <ItemGroup>
diff --git a/src/PullRequestQuantifier.Tests/PullRequestQuantifier.Tests.csproj b/src/PullRequestQuantifier.Tests/PullRequestQuantifier.Tests.csproj
@@ -1,7 +1,7 @@
 <Project Sdk="Microsoft.NET.Sdk">
 
     <PropertyGroup>
-        <TargetFramework>net7.0</TargetFramework>
+        <TargetFramework>net8.0</TargetFramework>
         <LangVersion>Latest</LangVersion>
         <EnforceCodeStyleInBuild>true</EnforceCodeStyleInBuild>
         <RootNamespace>PullRequestQuantifier.Tests</RootNamespace>
@@ -20,7 +20,7 @@
             <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
         </PackageReference>
         <PackageReference Include="YamlDotNet" Version="13.7.1" />
-        <PackageReference Include="LibGit2Sharp" Version="0.27.2" />
+        <PackageReference Include="LibGit2Sharp" Version="0.31.0" />
     </ItemGroup>
 
     <ItemGroup>
diff --git a/src/Tools/PullRequestQuantifier.Tools.CloneAdoRepo/Program.cs b/src/Tools/PullRequestQuantifier.Tools.CloneAdoRepo/Program.cs
@@ -34,14 +34,11 @@ private static async Task Clone(
             string pat)
         {
             var credentials = new NetworkCredential(userName, pat);
-            var cloneOptions = new CloneOptions
+            var cloneOptions = new CloneOptions();
+            cloneOptions.FetchOptions.CredentialsProvider = (url, user, cred) => new SecureUsernamePasswordCredentials
             {
-                Checkout = true,
-                CredentialsProvider = (url, user, cred) => new SecureUsernamePasswordCredentials
-                {
-                    Username = credentials.UserName,
-                    Password = credentials.SecurePassword
-                }
+                Username = credentials.UserName,
+                Password = credentials.SecurePassword
             };
 
             foreach (var organization in organizations)
diff --git a/src/Tools/PullRequestQuantifier.Tools.CloneAdoRepo/PullRequestQuantifier.Tools.CloneAdoRepo.csproj b/src/Tools/PullRequestQuantifier.Tools.CloneAdoRepo/PullRequestQuantifier.Tools.CloneAdoRepo.csproj
@@ -2,14 +2,14 @@
 
   <PropertyGroup>
     <OutputType>Exe</OutputType>
-    <TargetFramework>net7.0</TargetFramework>
+    <TargetFramework>net8.0</TargetFramework>
     <AssemblyName>PullRequestQuantifier.Tools.CloneAdoRepo</AssemblyName>
     <RootNamespace>PullRequestQuantifier.Tools.CloneAdoRepo</RootNamespace>
     <EnforceCodeStyleInBuild>true</EnforceCodeStyleInBuild>
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="LibGit2Sharp" Version="0.27.2" />
+    <PackageReference Include="LibGit2Sharp" Version="0.31.0" />
     <PackageReference Include="YamlDotNet" Version="13.7.1" />
   </ItemGroup>
 
diff --git a/src/Tools/PullRequestQuantifier.Tools.QuantifyRepositories/PullRequestQuantifier.Tools.QuantifyRepositories.csproj b/src/Tools/PullRequestQuantifier.Tools.QuantifyRepositories/PullRequestQuantifier.Tools.QuantifyRepositories.csproj
