refactor: central package management, shared build props, security fix
- Add Directory.Packages.props (CPM): all package versions centralized, remove Version attributes from every PackageReference - Add Directory.Build.props: shared TargetFramework/Nullable/ImplicitUsings - Drop redundant per-project RootNamespace/AssemblyName (default = project name) and stale NuGet metadata (PackageId/Version/Authors/RepositoryUrl) - Bump Microsoft.OpenApi to 2.9.0 (CVE-2026-49451, was transitive 2.0.0); add explicit reference in Musify.Api which uses it directly - Add repo-scoped nuget.config pinning nuget.org for reproducible restore Build: 0 warnings, 0 errors.
This commit is contained in:
@@ -1,17 +1,13 @@
|
||||
<Project Sdk="Microsoft.NET.Sdk.Web">
|
||||
|
||||
<PropertyGroup>
|
||||
<TargetFramework>net10.0</TargetFramework>
|
||||
<Nullable>enable</Nullable>
|
||||
<ImplicitUsings>enable</ImplicitUsings>
|
||||
<RootNamespace>Musify.StreamingGateway</RootNamespace>
|
||||
<UserSecretsId>media-gateway-2f1c9b6a-7d3e-4c0a-9a21-0b8e5d4c3f10</UserSecretsId>
|
||||
</PropertyGroup>
|
||||
|
||||
<ItemGroup>
|
||||
<PackageReference Include="Ardalis.Result" Version="10.1.0" />
|
||||
<PackageReference Include="Microsoft.IdentityModel.JsonWebTokens" Version="8.14.0" />
|
||||
<PackageReference Include="Yarp.ReverseProxy" Version="2.3.0" />
|
||||
<PackageReference Include="Ardalis.Result" />
|
||||
<PackageReference Include="Microsoft.IdentityModel.JsonWebTokens" />
|
||||
<PackageReference Include="Yarp.ReverseProxy" />
|
||||
</ItemGroup>
|
||||
|
||||
</Project>
|
||||
|
||||
Reference in New Issue
Block a user