diff --git a/Directory.Packages.props b/Directory.Packages.props index 4a77128..8e01efb 100644 --- a/Directory.Packages.props +++ b/Directory.Packages.props @@ -7,8 +7,8 @@ - - + + diff --git a/eng/policy/dependency-policy.json b/eng/policy/dependency-policy.json index c1c4544..ebad5c3 100644 --- a/eng/policy/dependency-policy.json +++ b/eng/policy/dependency-policy.json @@ -35,15 +35,15 @@ }, { "id": "Avalonia", - "version": "12.1.2", - "contentHash": "GHSe4qxjbqqxB570xuB4KtoD+Qhk3uKXJUXbelGYhGz/ti8xEoL7e5DGun8hcsXHondszPPBEdcC68szw7vUKg==", + "version": "12.1.3", + "contentHash": "l0VGyGn1OwqFrhmIhIHivvrQP0DtBD4Vn2F1vLYgGA2X2qHg0DMVRAln/6xOTLBUYoTopiVAujN0jtH8MpVSeA==", "licence": "MIT", "licenceEvidence": "Published package nuspec declares SPDX expression MIT; existing packaged upstream notices remain authoritative for bundled material.", "sourceRepository": "https://github.com/AvaloniaUI/Avalonia/", - "sourceCommit": "d3c867a9e2de379249b03dbeb3495bd7f076a81a", - "nuspecSha256": "6812a63a8b193752c1338e300f7f258a96e2f981d4a56dc8d032b907cd3954d0", + "sourceCommit": "8eeda4f6f546165b3f72e63c9f42247abb306905", + "nuspecSha256": "8fd64a84c229548a71e61390f4a310219f50529af0ee53162ffd39e7874ff4dc", "dependencyClass": "framework", - "maintenanceAssessment": "Retain the already admitted pinned release and upstream source identity; no new dependency or current upstream support/freshness claim. Existing dependency-review/security gates review changes; the product owner must assess replacement or vulnerabilities before an upgrade.", + "maintenanceAssessment": "Reviewed Dependabot avalonia group update from 12.1.2: same package identity and publisher, exact immutable upstream source commit and published nuspec recorded; dependency-review, CodeQL and security gates remain required. No current upstream support or vulnerability-absence claim.", "previewAdmission": "none" }, { @@ -74,132 +74,132 @@ }, { "id": "Avalonia.Desktop", - "version": "12.1.2", - "contentHash": "ghG7UVnLVhCyWm/74xh24gAkXgEZ41oJTUr7c0VI9BiVSqhpukvU5vm8l8ZY35BZX8VPx1YtXUI1+VbhDTOLMw==", + "version": "12.1.3", + "contentHash": "kjCpRlBIK5OZDnQ01Hd43CF0Mq4eQ9ndABiDCJAGtLD7lbzX6KxJ08vIK4N1VAiY4/enAUz8oT8q4O6bSybrBQ==", "licence": "MIT", "licenceEvidence": "Published package nuspec declares SPDX expression MIT; existing packaged upstream notices remain authoritative for bundled material.", "sourceRepository": "https://github.com/AvaloniaUI/Avalonia/", - "sourceCommit": "d3c867a9e2de379249b03dbeb3495bd7f076a81a", - "nuspecSha256": "aaf4a3b219f24950eb844a6f1af8c6defd1d5359775eca4ae8071ddfc30917e9", + "sourceCommit": "8eeda4f6f546165b3f72e63c9f42247abb306905", + "nuspecSha256": "cb0d6a62291e467cb9e3cbc01180c1d061f62a4d9dfff460d5a359faded8d848", "dependencyClass": "framework", - "maintenanceAssessment": "Retain the already admitted pinned release and upstream source identity; no new dependency or current upstream support/freshness claim. Existing dependency-review/security gates review changes; the product owner must assess replacement or vulnerabilities before an upgrade.", + "maintenanceAssessment": "Reviewed Dependabot avalonia group update from 12.1.2: same package identity and publisher, exact immutable upstream source commit and published nuspec recorded; dependency-review, CodeQL and security gates remain required. No current upstream support or vulnerability-absence claim.", "previewAdmission": "none" }, { "id": "Avalonia.FreeDesktop", - "version": "12.1.2", - "contentHash": "RJqKF7djK/lyDBdj24+HKELGe+7I/86NIA57aeiod5k340svbcb9hs1RYkIF8Nga4Xa2Jd/Pzxpkmvdjb1ASiw==", + "version": "12.1.3", + "contentHash": "yEvk7qm0QPzgQwFZZTAIUXt31sQOSSeOSVTDrcm/Pk+5klNN+8C08kIJs9ZD8RY9esHVk2g6VHPab6DceJYRCw==", "licence": "MIT", "licenceEvidence": "Published package nuspec declares SPDX expression MIT; existing packaged upstream notices remain authoritative for bundled material.", "sourceRepository": "https://github.com/AvaloniaUI/Avalonia/", - "sourceCommit": "d3c867a9e2de379249b03dbeb3495bd7f076a81a", - "nuspecSha256": "eb6b999f0aab66ce9420d1ac0a1bcfe254e74c7612563be34d2b1284e28923c3", + "sourceCommit": "8eeda4f6f546165b3f72e63c9f42247abb306905", + "nuspecSha256": "6e04dff25c4ce83814f9e84cb606c7f44ad49bc24bee2d3a5e520128fb15a809", "dependencyClass": "framework", - "maintenanceAssessment": "Retain the already admitted pinned release and upstream source identity; no new dependency or current upstream support/freshness claim. Existing dependency-review/security gates review changes; the product owner must assess replacement or vulnerabilities before an upgrade.", + "maintenanceAssessment": "Reviewed Dependabot avalonia group update from 12.1.2: same package identity and publisher, exact immutable upstream source commit and published nuspec recorded; dependency-review, CodeQL and security gates remain required. No current upstream support or vulnerability-absence claim.", "previewAdmission": "none" }, { "id": "Avalonia.FreeDesktop.AtSpi", - "version": "12.1.2", - "contentHash": "632PfHnqe7OkzStmDOW2ghXfCcTapGhT46HZGMMOIZFr+I0biyxUk7felBQwNzEk5LJ54y4VfIoiWKTgZK8FnA==", + "version": "12.1.3", + "contentHash": "t9dP6VQAKGlXtftNuj7QzFtE54AI1qH1dwFmDEJlvI5gweCLNR8ebgRCLlO/bSLWzzV8dZtb6mB/glZ8soisDw==", "licence": "MIT", "licenceEvidence": "Published package nuspec declares SPDX expression MIT; existing packaged upstream notices remain authoritative for bundled material.", "sourceRepository": "https://github.com/AvaloniaUI/Avalonia/", - "sourceCommit": "d3c867a9e2de379249b03dbeb3495bd7f076a81a", - "nuspecSha256": "eb0db053476369b31bdd40d1af8c8ad5cffbd700ba7193a04221a1bab313b76e", + "sourceCommit": "8eeda4f6f546165b3f72e63c9f42247abb306905", + "nuspecSha256": "5ec9ea9bed3e1280c988b2e06938b7f81ddc92fb52b0711536d8a4053ac7b066", "dependencyClass": "framework", - "maintenanceAssessment": "Retain the already admitted pinned release and upstream source identity; no new dependency or current upstream support/freshness claim. Existing dependency-review/security gates review changes; the product owner must assess replacement or vulnerabilities before an upgrade.", + "maintenanceAssessment": "Reviewed Dependabot avalonia group update from 12.1.2: same package identity and publisher, exact immutable upstream source commit and published nuspec recorded; dependency-review, CodeQL and security gates remain required. No current upstream support or vulnerability-absence claim.", "previewAdmission": "none" }, { "id": "Avalonia.HarfBuzz", - "version": "12.1.2", - "contentHash": "CqYTMnOLuAXjGldTEMdEf5/ozMY1z5ZshpE4YF0i2s2o4ycsYq855BD/eQS0iBt5PbjtlJgk8njILrBwW0HteQ==", + "version": "12.1.3", + "contentHash": "XcO9BBsmZHMIK+e+yy1TGsytlhqa7o4ih2Y7B0Q7OKh91GEEerbEc6v/X2kRmluKxyYNSmkwH5Uzj53FtjJngA==", "licence": "MIT", "licenceEvidence": "Published package nuspec declares SPDX expression MIT; existing packaged upstream notices remain authoritative for bundled material.", "sourceRepository": "https://github.com/AvaloniaUI/Avalonia/", - "sourceCommit": "d3c867a9e2de379249b03dbeb3495bd7f076a81a", - "nuspecSha256": "6c8ce1c41f280d4c6ce7c1c8b286c3c7b2f830015a46b67ece380b6d32d58745", + "sourceCommit": "8eeda4f6f546165b3f72e63c9f42247abb306905", + "nuspecSha256": "15ff9247f7c41fe827fa825ad680560a0983bb6fedee0a3a0a4e9030a0bca549", "dependencyClass": "framework", - "maintenanceAssessment": "Retain the already admitted pinned release and upstream source identity; no new dependency or current upstream support/freshness claim. Existing dependency-review/security gates review changes; the product owner must assess replacement or vulnerabilities before an upgrade.", + "maintenanceAssessment": "Reviewed Dependabot avalonia group update from 12.1.2: same package identity and publisher, exact immutable upstream source commit and published nuspec recorded; dependency-review, CodeQL and security gates remain required. No current upstream support or vulnerability-absence claim.", "previewAdmission": "none" }, { "id": "Avalonia.Native", - "version": "12.1.2", - "contentHash": "Co60A3FhDiCR022en90e/nUJqn2GtYal353cSUB0lWAd0qb/AuVRdScz9i0QCyglYw+PBfUXSP+9OfI2XvnfCg==", + "version": "12.1.3", + "contentHash": "TP6G8mF8vPufxycwe/dfLTsNhqQOGBt2Os5MtJshUGfVQ8zlYUG8K8JckPE+dweuDraAKq305aHXseReD7UgXQ==", "licence": "MIT", "licenceEvidence": "Published package nuspec declares SPDX expression MIT; existing packaged upstream notices remain authoritative for bundled material.", "sourceRepository": "https://github.com/AvaloniaUI/Avalonia/", - "sourceCommit": "d3c867a9e2de379249b03dbeb3495bd7f076a81a", - "nuspecSha256": "c737958465ffa29a92104ae13d883055a8c9924826b84a5afae30a39e3dfe062", + "sourceCommit": "8eeda4f6f546165b3f72e63c9f42247abb306905", + "nuspecSha256": "99183e0571ecb1a42532e415002723e9a3236b8f96b02e528a526ce16f6d83a1", "dependencyClass": "framework", - "maintenanceAssessment": "Retain the already admitted pinned release and upstream source identity; no new dependency or current upstream support/freshness claim. Existing dependency-review/security gates review changes; the product owner must assess replacement or vulnerabilities before an upgrade.", + "maintenanceAssessment": "Reviewed Dependabot avalonia group update from 12.1.2: same package identity and publisher, exact immutable upstream source commit and published nuspec recorded; dependency-review, CodeQL and security gates remain required. No current upstream support or vulnerability-absence claim.", "previewAdmission": "none" }, { "id": "Avalonia.Remote.Protocol", - "version": "12.1.2", - "contentHash": "DdLTe9xKXxxfRcXmUw1trXZpBpz1YiZYWXx0DfMVPFAnkCszKsHLi67kaZfGJqtfQq2EySKd2qgRYX2QYkSxcg==", + "version": "12.1.3", + "contentHash": "HcF69DKyihgg5coLOSp7GTqxQvWAy58LMKauwcHA28uSBJVwu0h5+gTNdJA8Sn/nqJVTRDU98zYsk6i1QSwDVQ==", "licence": "MIT", "licenceEvidence": "Published package nuspec declares SPDX expression MIT; existing packaged upstream notices remain authoritative for bundled material.", "sourceRepository": "https://github.com/AvaloniaUI/Avalonia/", - "sourceCommit": "d3c867a9e2de379249b03dbeb3495bd7f076a81a", - "nuspecSha256": "85c04ad13fb6d2993780af8df2b23ad4eb29fa628eaf05899d825f5c6f0a2ece", + "sourceCommit": "8eeda4f6f546165b3f72e63c9f42247abb306905", + "nuspecSha256": "4c0cd5ec137d2a376bab20e62bb2cbbdc9b71ffcb044acf41adeaf25cf5025b1", "dependencyClass": "framework", - "maintenanceAssessment": "Retain the already admitted pinned release and upstream source identity; no new dependency or current upstream support/freshness claim. Existing dependency-review/security gates review changes; the product owner must assess replacement or vulnerabilities before an upgrade.", + "maintenanceAssessment": "Reviewed Dependabot avalonia group update from 12.1.2: same package identity and publisher, exact immutable upstream source commit and published nuspec recorded; dependency-review, CodeQL and security gates remain required. No current upstream support or vulnerability-absence claim.", "previewAdmission": "none" }, { "id": "Avalonia.Skia", - "version": "12.1.2", - "contentHash": "x0TDDdZgNepbxRd6gSQyv3A/hHoVJk3kYqjRa1baI43XPGPuO87lArf4DRKAERgWUxUp1ad28aTvVsE3x0JM0g==", + "version": "12.1.3", + "contentHash": "fYfSecJ6vQT3zB9vWl2DOoBK6JM4Mzxpz7KbUPxJePjY/yUl2OyhjKCyUcGZF2DV5mpAYfCOT4rdKEk8hP/lCA==", "licence": "MIT", "licenceEvidence": "Published package nuspec declares SPDX expression MIT; existing packaged upstream notices remain authoritative for bundled material.", "sourceRepository": "https://github.com/AvaloniaUI/Avalonia/", - "sourceCommit": "d3c867a9e2de379249b03dbeb3495bd7f076a81a", - "nuspecSha256": "4bc8127688e28c01d82bca0edaa6fc9ecddbc92d7041548a11a375e3964821a7", + "sourceCommit": "8eeda4f6f546165b3f72e63c9f42247abb306905", + "nuspecSha256": "460e60e81c3f8e8655f27dff29d1b485d1398f275244cbd9a0172371e4ce0d61", "dependencyClass": "framework", - "maintenanceAssessment": "Retain the already admitted pinned release and upstream source identity; no new dependency or current upstream support/freshness claim. Existing dependency-review/security gates review changes; the product owner must assess replacement or vulnerabilities before an upgrade.", + "maintenanceAssessment": "Reviewed Dependabot avalonia group update from 12.1.2: same package identity and publisher, exact immutable upstream source commit and published nuspec recorded; dependency-review, CodeQL and security gates remain required. No current upstream support or vulnerability-absence claim.", "previewAdmission": "none" }, { "id": "Avalonia.Themes.Fluent", - "version": "12.1.2", - "contentHash": "EKw1PzlIfqB8n0+yGuHThR9cUEiqZYj0EHYp89jrTwSuudu8pji6I4SGe1UmdwJWdgWf+kuss8T7KT+0wsUyow==", + "version": "12.1.3", + "contentHash": "ens/GHfXXk0W1ZScHZ2XG6DFiVyUVKR+0O8QK6zkviMNAPQCNwkftXlRVSFSQGtBYxXoJHZMsKYvCLEtVyzkug==", "licence": "MIT", "licenceEvidence": "Published package nuspec declares SPDX expression MIT; existing packaged upstream notices remain authoritative for bundled material.", "sourceRepository": "https://github.com/AvaloniaUI/Avalonia/", - "sourceCommit": "d3c867a9e2de379249b03dbeb3495bd7f076a81a", - "nuspecSha256": "190589f97e9cffb968fba3b78d1a81aae4911601c2da0034aacbc69073c5e79d", + "sourceCommit": "8eeda4f6f546165b3f72e63c9f42247abb306905", + "nuspecSha256": "05815e6cca72f3aee5e5570e62665925886ade322c625b7c4ce3c88beb3893bb", "dependencyClass": "framework", - "maintenanceAssessment": "Retain the already admitted pinned release and upstream source identity; no new dependency or current upstream support/freshness claim. Existing dependency-review/security gates review changes; the product owner must assess replacement or vulnerabilities before an upgrade.", + "maintenanceAssessment": "Reviewed Dependabot avalonia group update from 12.1.2: same package identity and publisher, exact immutable upstream source commit and published nuspec recorded; dependency-review, CodeQL and security gates remain required. No current upstream support or vulnerability-absence claim.", "previewAdmission": "none" }, { "id": "Avalonia.Win32", - "version": "12.1.2", - "contentHash": "MjHc5aKNs7Hp/fiX13wTQ3pg+kG9lh+NfqSQGx6/SkfvdO1Hbmribk7Bt0pwFTxcJ6HGlzwGKp1Ur3Ib/tv0ew==", + "version": "12.1.3", + "contentHash": "RXSOmQGV5uKS9orIeE8a5oGz9QukzBnQTP3dtT9uJUhIIuZracy3ItoW8gtlZGBs3lzhEFTZlOk1Fn/Zxj/iAg==", "licence": "MIT", "licenceEvidence": "Published package nuspec declares SPDX expression MIT; existing packaged upstream notices remain authoritative for bundled material.", "sourceRepository": "https://github.com/AvaloniaUI/Avalonia/", - "sourceCommit": "d3c867a9e2de379249b03dbeb3495bd7f076a81a", - "nuspecSha256": "2b639f3aabe320e0c0de49fc274157910a670cf0a8eab5690099d91c360ce48b", + "sourceCommit": "8eeda4f6f546165b3f72e63c9f42247abb306905", + "nuspecSha256": "3506aa7312736322a7cc74204cccdcd884fd5b2ded2a6b51b5dbe1091897ed34", "dependencyClass": "framework", - "maintenanceAssessment": "Retain the already admitted pinned release and upstream source identity; no new dependency or current upstream support/freshness claim. Existing dependency-review/security gates review changes; the product owner must assess replacement or vulnerabilities before an upgrade.", + "maintenanceAssessment": "Reviewed Dependabot avalonia group update from 12.1.2: same package identity and publisher, exact immutable upstream source commit and published nuspec recorded; dependency-review, CodeQL and security gates remain required. No current upstream support or vulnerability-absence claim.", "previewAdmission": "none" }, { "id": "Avalonia.X11", - "version": "12.1.2", - "contentHash": "wtCAY9k90yrvhzKmesDGGFxYHsgejmLaR7HY36A4VYJ+E1R8AguNZc3hFaVKywnQLpf/eLhAwQWUxoNVFu9h/w==", + "version": "12.1.3", + "contentHash": "NWkfAGgERPlYRKpiB18t5auSFA/Ffd++uZsUEtHPc/maitjydNJVDmtY21pUqR2QvAeTCl1nRAagi+j9bKVyKw==", "licence": "MIT", "licenceEvidence": "Published package nuspec declares SPDX expression MIT; existing packaged upstream notices remain authoritative for bundled material.", "sourceRepository": "https://github.com/AvaloniaUI/Avalonia/", - "sourceCommit": "d3c867a9e2de379249b03dbeb3495bd7f076a81a", - "nuspecSha256": "94be6f461cde50fa16914d0eec02aa76e4ac405ad135bc72e778a513245d5166", + "sourceCommit": "8eeda4f6f546165b3f72e63c9f42247abb306905", + "nuspecSha256": "acb9d9ba146314e262fc9e0208574fff5b13be9bf63ec9150846566f31879463", "dependencyClass": "framework", - "maintenanceAssessment": "Retain the already admitted pinned release and upstream source identity; no new dependency or current upstream support/freshness claim. Existing dependency-review/security gates review changes; the product owner must assess replacement or vulnerabilities before an upgrade.", + "maintenanceAssessment": "Reviewed Dependabot avalonia group update from 12.1.2: same package identity and publisher, exact immutable upstream source commit and published nuspec recorded; dependency-review, CodeQL and security gates remain required. No current upstream support or vulnerability-absence claim.", "previewAdmission": "none" }, { diff --git a/eng/policy/dependency-review.json b/eng/policy/dependency-review.json index f070758..7d74712 100644 --- a/eng/policy/dependency-review.json +++ b/eng/policy/dependency-review.json @@ -11,32 +11,32 @@ "frameworkMajorUpgrade": false, "runtimePostureAssessment": "No framework version changes: existing desktop Native AOT and trim posture retained.", "checks": { - "compilation": "Workflow-only update: github/codeql-action init/analyze 4.38.0 -> 4.38.1 (Dependabot actions group). Required Windows/Linux compilation runs unchanged in CI.", - "aot": "No project, package or publish input changed; existing Windows x64/ARM64 and Linux x64 AOT publication jobs are unchanged.", - "compatibility": "Patch release within CodeQL action v4 with the same inputs and outputs; no package versions, APIs or generated contracts changed.", - "licence": "GitHub-owned action pinned to the immutable commit 1c5b675653bb5c22dbe9b12b556ec555138e09fd of annotated tag v4.38.1; no distributed closure or notice changed.", - "security": "Immutable SHA pin retained; CodeQL and dependency-review gates stay required; no vulnerability-absence claim.", - "sbom": "No restore closure change; the portable dependencies.json SBOM is unaffected.", - "localRuntime": "Not run: CI-only workflow action update; no application runtime behavior changed.", - "performance": "Not applicable: no runtime dependency, executable behavior or performance-sensitive algorithm changed.", + "compilation": "Avalonia.Desktop and Avalonia.Themes.Fluent 12.1.2 -> 12.1.3 (Dependabot avalonia group) with the matching Avalonia 12.1.3 transitive set; required Windows/Linux compilation runs in CI.", + "aot": "Windows x64/ARM64 and Linux x64 Native AOT publication stays required in CI for this patch release within Avalonia 12.1.", + "compatibility": "Patch release within Avalonia 12.1; no framework-major change. SkiaSharp, HarfBuzzSharp and ANGLE native packages keep their admitted versions, so the existing native admission is unchanged.", + "licence": "Every new Avalonia 12.1.3 package declares SPDX MIT in its published nuspec; exact nuspec SHA-256 and upstream source commit are recorded; notices unchanged.", + "security": "Dependency-review, CodeQL and secret-scan gates stay required on the pull request head; no vulnerability-absence claim.", + "sbom": "The portable dependencies.json SBOM is generated in CI from actual restore assets; only the Avalonia versions change.", + "localRuntime": "Not run: desktop GUI/runtime checks are local opt-in and outside this dependency update; CI covers compilation and AOT publication only.", + "performance": "Not measured: Avalonia patch release; no performance-sensitive code or configuration changed in this repository.", "migration": "Not applicable: no persistence format or storage dependency changed." }, "inputs": { ".github/workflows/ci.yml": "48e4cb95953bd927f80522c61885b8d3f890eded4d33b0b08da3b0cc121c5b6f", "Directory.Build.props": "9d567c843c8af63df502a0a1752767d183a1db2a7e52ebd2690c7edbbae008eb", "Directory.Build.targets": "ff01198f816a04667ade99836d5b57e0fb78067972d2c852f2e8c1e8eea3f138", - "Directory.Packages.props": "ef826d5a6865882ae44e02c03a21e2d94e3146a2027a22bdbc6a558aac260321", + "Directory.Packages.props": "a3be569aa978aa50a56fff07fc4da3d762886ecdc2bff96fae05bec688e67366", "NuGet.Config": "4b8c02e4d50d3cc41197afc609f592e5a1889c049fe39147564e2811c5d8e261", "eng/ArcForges.Repository/ArcForges.Repository.csproj": "b8b811d878528c9fcff4e37fa4acd46ea5ce08221ff782183d201daffd010e33", "eng/ArcForges.Repository/packages.lock.json": "3c1917c46723808336fbacfb5fd40d3c6ae7854ddd3b05ba03100cd759a569af", - "eng/policy/dependency-policy.json": "f35ff83423ddc7be767ef5ada65295e065c2b8c2b80665bdb029087c3615194f", + "eng/policy/dependency-policy.json": "1a56fa426618d39be5b4eb9538286d5b46eb35bf894cedc1363c2f492066910b", "eng/policy/licence-boundary.json": "a742df60c4dfcad5f72da6b8312795d69b8d42894b0ef871eafb58732c4629be", "eng/policy/reuse-policy.json": "efd435e1a5b41a6b1ff29e5b6472553616eb5bf88f710616e83549c86d24a788", "global.json": "d533441ee720f55065ffdda4273cd815f53f534612cd5899bd4b9b41d0e3a630", "src/ArcForges.ArcScope.Core/ArcForges.ArcScope.Core.csproj": "2338d20f00790d79a717e3ed74cfd79de26204d428eda618247558d84f776f3d", "src/ArcForges.ArcScope.Core/packages.lock.json": "2d4085d38648181c42333b905a7d57bff5b5faee5a35e777c05f16cf2b3c6142", "src/ArcForges.ArcScope/ArcForges.ArcScope.csproj": "5969080e16a982fbdf6d8eb887ec5fd8fc378824c0e9bf10e55503e851a5f188", - "src/ArcForges.ArcScope/packages.lock.json": "dc79f1c07fb844855eb1adb5be6ff3d3e988310fd3173f7f2235283b584b6a2b", + "src/ArcForges.ArcScope/packages.lock.json": "20dfcf44c15d55669e3f6f45bd95aa2049ab004c1b28afacb3c476a520c57499", "tests/ArcForges.ArcScope.Tests/ArcForges.ArcScope.Tests.csproj": "9d411d5f46d36903fa34592abe0d5977b81b10b215519cc5c5cecc53320fea48", "tests/ArcForges.ArcScope.Tests/packages.lock.json": "efd69fa9e197997dd8c0009599826055ca655c9922da4abd4865de7f02d15907", "third-party/sources.json": "106696f712f9574d0e5521337c954bdb936ee3e30901a7aab1f2d569bed548f6" diff --git a/eng/provenance/NOTICE.txt b/eng/provenance/NOTICE.txt index 0063d2b..27b0dfd 100644 --- a/eng/provenance/NOTICE.txt +++ b/eng/provenance/NOTICE.txt @@ -2,7 +2,7 @@ ArcForges source provenance notices Generated from reviewed active records. Original licence files and dependency notices remain authoritative. -arcnotes-provenance-tools-r5 +arcnotes-provenance-tools-r6 Source: https://github.com/ArcForges/ArcNotes @ b7358bd7b1dca0671cd51cf6d798d5c09911b198 Material licence: AGPL-3.0-only Notice scope: source diff --git a/eng/provenance/files.json b/eng/provenance/files.json index 1ddd139..b5233fa 100644 --- a/eng/provenance/files.json +++ b/eng/provenance/files.json @@ -39,6 +39,7 @@ "eng/provenance/records/arcnotes-provenance-tools-r3.json", "eng/provenance/records/arcnotes-provenance-tools-r4.json", "eng/provenance/records/arcnotes-provenance-tools-r5.json", + "eng/provenance/records/arcnotes-provenance-tools-r6.json", "eng/provenance/records/canonical-agpl-legal-r1.json", "eng/provenance/records/contracts-apache-legal-r1.json", "eng/provenance/records/upstream-avalonia-legal-r1.json", @@ -65,10 +66,10 @@ "third-party/sources.json" ], "reused": { - "eng/ArcForges.Repository/ProvenancePolicy.cs": "arcnotes-provenance-tools-r5", - "eng/ArcForges.Repository/Program.cs": "arcnotes-provenance-tools-r5", - "tests/ArcForges.ArcScope.Tests/ProvenancePolicyTests.cs": "arcnotes-provenance-tools-r5", - "tests/ArcForges.ArcScope.Tests/CandidateTests.cs": "arcnotes-provenance-tools-r5", + "eng/ArcForges.Repository/ProvenancePolicy.cs": "arcnotes-provenance-tools-r6", + "eng/ArcForges.Repository/Program.cs": "arcnotes-provenance-tools-r6", + "tests/ArcForges.ArcScope.Tests/ProvenancePolicyTests.cs": "arcnotes-provenance-tools-r6", + "tests/ArcForges.ArcScope.Tests/CandidateTests.cs": "arcnotes-provenance-tools-r6", "LICENSE": "canonical-agpl-legal-r1", "eng/third-party/LICENSE.Contracts.txt": "contracts-apache-legal-r1", "third-party/Avalonia.LICENSE.txt": "upstream-avalonia-legal-r1", @@ -77,23 +78,23 @@ "third-party/MicroCom.LICENSE.txt": "upstream-microcom-legal-r1", "third-party/Protobuf.LICENSE.txt": "upstream-protobuf-legal-r1", "third-party/Tmds.DBus.LICENSE.txt": "upstream-tmds-dbus-legal-r1", - "eng/ArcForges.Repository/IdentityEvidence.cs": "arcnotes-provenance-tools-r5", - "src/ArcForges.ArcScope.Core/BuildIdentity.cs": "arcnotes-provenance-tools-r5", - "tests/ArcForges.ArcScope.Tests/BuildIdentityTests.cs": "arcnotes-provenance-tools-r5", - "Directory.Build.targets": "arcnotes-provenance-tools-r5", - "Directory.Build.props": "arcnotes-provenance-tools-r5", - "Directory.Packages.props": "arcnotes-provenance-tools-r5", - "eng/ArcForges.Repository/ArcForges.Repository.csproj": "arcnotes-provenance-tools-r5", - "src/ArcForges.ArcScope/ArcForges.ArcScope.csproj": "arcnotes-provenance-tools-r5", - "src/ArcForges.ArcScope/Program.cs": "arcnotes-provenance-tools-r5", - "src/ArcForges.ArcScope/LiveSmoke.cs": "arcnotes-provenance-tools-r5", - ".github/workflows/ci.yml": "arcnotes-provenance-tools-r5", - "eng/version-sources.json": "arcnotes-provenance-tools-r5", - "eng/ArcForges.Repository/DependencyPolicy.cs": "arcnotes-provenance-tools-r5", - "docs/dependency-policy.md": "arcnotes-provenance-tools-r5", - "eng/policy/dependency-policy.json": "arcnotes-provenance-tools-r5", - "tests/ArcForges.ArcScope.Tests/DependencyPolicyTests.cs": "arcnotes-provenance-tools-r5", - "eng/policy/dependency-review.json": "arcnotes-provenance-tools-r5" + "eng/ArcForges.Repository/IdentityEvidence.cs": "arcnotes-provenance-tools-r6", + "src/ArcForges.ArcScope.Core/BuildIdentity.cs": "arcnotes-provenance-tools-r6", + "tests/ArcForges.ArcScope.Tests/BuildIdentityTests.cs": "arcnotes-provenance-tools-r6", + "Directory.Build.targets": "arcnotes-provenance-tools-r6", + "Directory.Build.props": "arcnotes-provenance-tools-r6", + "Directory.Packages.props": "arcnotes-provenance-tools-r6", + "eng/ArcForges.Repository/ArcForges.Repository.csproj": "arcnotes-provenance-tools-r6", + "src/ArcForges.ArcScope/ArcForges.ArcScope.csproj": "arcnotes-provenance-tools-r6", + "src/ArcForges.ArcScope/Program.cs": "arcnotes-provenance-tools-r6", + "src/ArcForges.ArcScope/LiveSmoke.cs": "arcnotes-provenance-tools-r6", + ".github/workflows/ci.yml": "arcnotes-provenance-tools-r6", + "eng/version-sources.json": "arcnotes-provenance-tools-r6", + "eng/ArcForges.Repository/DependencyPolicy.cs": "arcnotes-provenance-tools-r6", + "docs/dependency-policy.md": "arcnotes-provenance-tools-r6", + "eng/policy/dependency-policy.json": "arcnotes-provenance-tools-r6", + "tests/ArcForges.ArcScope.Tests/DependencyPolicyTests.cs": "arcnotes-provenance-tools-r6", + "eng/policy/dependency-review.json": "arcnotes-provenance-tools-r6" }, "artifacts": [] } diff --git a/eng/provenance/records/arcnotes-provenance-tools-r6.json b/eng/provenance/records/arcnotes-provenance-tools-r6.json new file mode 100644 index 0000000..9a6bede --- /dev/null +++ b/eng/provenance/records/arcnotes-provenance-tools-r6.json @@ -0,0 +1,299 @@ +{ + "schemaVersion": 1, + "id": "arcnotes-provenance-tools-r6", + "kind": "source", + "sourceRepository": "https://github.com/ArcForges/ArcNotes", + "sourceCommit": "b7358bd7b1dca0671cd51cf6d798d5c09911b198", + "sourcePaths": [ + "eng/ArcForges.Repository/ProvenancePolicy.cs", + "eng/ArcForges.Repository/Program.cs", + "tests/ArcForges.ArcNotes.Tests/ProvenancePolicyTests.cs", + "tests/ArcForges.ArcNotes.Tests/CandidateTests.cs", + "eng/ArcForges.Repository/IdentityEvidence.cs", + "src/ArcForges.ArcNotes.Core/BuildIdentity.cs", + "tests/ArcForges.ArcNotes.Tests/BuildIdentityTests.cs", + "Directory.Build.targets", + "Directory.Build.props", + "Directory.Packages.props", + "eng/ArcForges.Repository/ArcForges.Repository.csproj", + "src/ArcForges.ArcNotes/ArcForges.ArcNotes.csproj", + "src/ArcForges.ArcNotes/Program.cs", + "src/ArcForges.ArcNotes/LiveSmoke.cs", + ".github/workflows/ci.yml", + "eng/version-sources.json", + "eng/ArcForges.Repository/DependencyPolicy.cs", + "docs/dependency-policy.md", + "eng/policy/dependency-policy.json", + "tests/ArcForges.ArcNotes.Tests/DependencyPolicyTests.cs", + "eng/policy/dependency-review.json" + ], + "licence": { + "spdx": "AGPL-3.0-only", + "category": "agpl-compatible", + "evidence": [ + { + "path": "LICENSE", + "sha256": "8486a10c4393cee1c25392769ddd3b2d6c242d6ec7928e1414efff7dfb2f07ef", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "eng/ArcForges.Repository/ProvenancePolicy.cs", + "sha256": "0da29d6f3cd9656640276d27eab25ee38fec68809d4dcc68ef3c1ad96ec1f3b9", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "eng/ArcForges.Repository/Program.cs", + "sha256": "dba5e6b75593631d55418998f7791190933b88b62f646e4c0e3f2a9d38b461ac", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "tests/ArcForges.ArcNotes.Tests/ProvenancePolicyTests.cs", + "sha256": "286437bd06ea7dd22e58f2007e2b75ab7aa4264595ff1d548b9953adeb6bca69", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "tests/ArcForges.ArcNotes.Tests/CandidateTests.cs", + "sha256": "f0cc9fce799ff27519689d60b27667f679e21720a2531688566b97d99dc029f2", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "eng/ArcForges.Repository/IdentityEvidence.cs", + "sha256": "73510ff86c7b6e5b86baeebd95a7df2c7cb355531a265e2a20b67bdcf39e3215", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "src/ArcForges.ArcNotes.Core/BuildIdentity.cs", + "sha256": "2a1c184214d4b5c49e4f1affa96cc5741d1c1b34b3892477e0c97d31eccb5bc5", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "tests/ArcForges.ArcNotes.Tests/BuildIdentityTests.cs", + "sha256": "ae11ceb972227aa8e0cc810852e42ffdeebc71493cd07546a59d752ceeb0c444", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "Directory.Build.targets", + "sha256": "21da49619dc407ca9de526c9aa75cb9a0e67ca6314bddd4770dd165975405bd4", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "Directory.Build.props", + "sha256": "90a5954ec7685904894ef8d19fea650f9bcebabbde98b0b94058f8b7c68fb5a4", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "Directory.Packages.props", + "sha256": "ef826d5a6865882ae44e02c03a21e2d94e3146a2027a22bdbc6a558aac260321", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "eng/ArcForges.Repository/ArcForges.Repository.csproj", + "sha256": "b80fff54a4c877998e66b035a159e790bce4c771244d1d239fa8d58c8dd589a6", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "src/ArcForges.ArcNotes/ArcForges.ArcNotes.csproj", + "sha256": "4a4bb4fb53401da31b2f2aafd96f5c733a78f08c60632f717eeb8b8e1eaabdba", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "src/ArcForges.ArcNotes/Program.cs", + "sha256": "f763a3e5e5db240cb18478dc733db84fbaae03c1276396ebb8302ed1349078a7", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "src/ArcForges.ArcNotes/LiveSmoke.cs", + "sha256": "0250c74301c91e79dde029788c06cfd9b1307cee519848458650aeb4ec2cb399", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": ".github/workflows/ci.yml", + "sha256": "ec5963a454ab794847a07fd4360fd1708b3aef44385b4eeafd3d0137366ec1ab", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "eng/version-sources.json", + "sha256": "381adf427140f65717901bb81dff340511831e7414a31eec897e4eb6ef9535f5", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "eng/ArcForges.Repository/DependencyPolicy.cs", + "sha256": "7bd25806398f343764b190e60c3c13fea45210b2aee31fb7f53422b4fb1fc197", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "docs/dependency-policy.md", + "sha256": "c2c87a4a8b6402abb1aa82060431b33efc66bbfba09635b58c03fbb6e120a7ad", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "eng/policy/dependency-policy.json", + "sha256": "ebde30ed1fd96baa1aaa2063ac03dad3336504e64508381008f191f79a380c55", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "tests/ArcForges.ArcNotes.Tests/DependencyPolicyTests.cs", + "sha256": "459274fcc0cd43412c3cd3a5fdca35d7bec5532819860c80356548abb21d1c4f", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "eng/policy/dependency-review.json", + "sha256": "34f1b711815d9fbf5cc5ab11aa5c61264a0d312f603ee6566e5fdeefb6a9c1c1", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + } + ], + "scope": "Extend the retained ArcNotes adaptation with offline dependency admission, exact package metadata, immutable coordinate history and upgrade review. Product owner literals and input hashes are adapted to ArcScope. No source checkout dependency or runtime behavior change.", + "copyingPermission": null + }, + "attribution": [ + "Copyright ArcForges contributors. ArcNotes support identity and tooling: AGPL-3.0-only.", + "Original provenance checker from Contracts: Apache-2.0; complete source terms and attribution retained.", + "ArcScope adapts product identity and future format/storage owner declarations.", + "ArcScope owner modifications: reduce hosted CI to Windows/Linux compilation and offline checks; remove mandatory runtime evidence and redundant validation.", + "ArcScope owner modifications: add reviewed dependency policy, upgrade records and offline negative fixtures adapted from ArcNotes b7358bd7b1dca0671cd51cf6d798d5c09911b198.", + "ArcScope owner modifications: reviewed dependency updates are recorded in the owner dependency admission and review inputs." + ], + "targets": [ + { + "path": ".github/workflows/ci.yml", + "sha256": "48e4cb95953bd927f80522c61885b8d3f890eded4d33b0b08da3b0cc121c5b6f", + "normalization": "lf" + }, + { + "path": "Directory.Build.props", + "sha256": "9d567c843c8af63df502a0a1752767d183a1db2a7e52ebd2690c7edbbae008eb", + "normalization": "lf" + }, + { + "path": "Directory.Build.targets", + "sha256": "ff01198f816a04667ade99836d5b57e0fb78067972d2c852f2e8c1e8eea3f138", + "normalization": "lf" + }, + { + "path": "Directory.Packages.props", + "sha256": "a3be569aa978aa50a56fff07fc4da3d762886ecdc2bff96fae05bec688e67366", + "normalization": "lf" + }, + { + "path": "eng/ArcForges.Repository/ArcForges.Repository.csproj", + "sha256": "b8b811d878528c9fcff4e37fa4acd46ea5ce08221ff782183d201daffd010e33", + "normalization": "lf" + }, + { + "path": "eng/ArcForges.Repository/IdentityEvidence.cs", + "sha256": "4a84f23b6b4bbce4f553994a04fd50ca806ffef497297fd6f890b563fc676b39", + "normalization": "lf" + }, + { + "path": "eng/ArcForges.Repository/Program.cs", + "sha256": "1b89ecb457afbd25e82e43483c8d7cbc25d32d5851a9945f4ff2cd4c484baff4", + "normalization": "lf" + }, + { + "path": "eng/ArcForges.Repository/ProvenancePolicy.cs", + "sha256": "cb53d777f75ab803d3681f1b102cd0d9ae1a558202900f28ee79101eb34e5aea", + "normalization": "lf" + }, + { + "path": "eng/version-sources.json", + "sha256": "dc07597ceb6f91db5ad5a84e9958740352a67a6a14dd095c8f3327f42922b3ea", + "normalization": "lf" + }, + { + "path": "src/ArcForges.ArcScope.Core/BuildIdentity.cs", + "sha256": "1d401bde513f7c767494ab4f87aeadb76bb2135e6362c811a5aeaaa726cdcc78", + "normalization": "lf" + }, + { + "path": "src/ArcForges.ArcScope/ArcForges.ArcScope.csproj", + "sha256": "5969080e16a982fbdf6d8eb887ec5fd8fc378824c0e9bf10e55503e851a5f188", + "normalization": "lf" + }, + { + "path": "src/ArcForges.ArcScope/LiveSmoke.cs", + "sha256": "f3a5f1ff85b6d35bd65a173b0c0c55df425f9117a7a4deb7a6510731b7b9b35d", + "normalization": "lf" + }, + { + "path": "src/ArcForges.ArcScope/Program.cs", + "sha256": "f6ee48c55fd9c5010d87e4aaba5ebfa786f527207f74134269a25b1508d7ad4a", + "normalization": "lf" + }, + { + "path": "tests/ArcForges.ArcScope.Tests/BuildIdentityTests.cs", + "sha256": "20d05eb1ace061352d7e25d6dbd9dfcf34901f65641613c31f461927f8c193b5", + "normalization": "lf" + }, + { + "path": "tests/ArcForges.ArcScope.Tests/CandidateTests.cs", + "sha256": "0ce2de28dcde626413e414365ee8d5df52332016b228f4a94c865b3a235a4258", + "normalization": "lf" + }, + { + "path": "tests/ArcForges.ArcScope.Tests/ProvenancePolicyTests.cs", + "sha256": "1772f9bcb9d0e681a979ae29437701478cdf706adaed66a2508bde5ac626f74a", + "normalization": "lf" + }, + { + "path": "eng/ArcForges.Repository/DependencyPolicy.cs", + "sha256": "abedd3d9e40f71dd324c671d133b73c2f0ae1075a2c670340a3ed36106360964", + "normalization": "lf" + }, + { + "path": "docs/dependency-policy.md", + "sha256": "c2c87a4a8b6402abb1aa82060431b33efc66bbfba09635b58c03fbb6e120a7ad", + "normalization": "lf" + }, + { + "path": "eng/policy/dependency-policy.json", + "sha256": "1a56fa426618d39be5b4eb9538286d5b46eb35bf894cedc1363c2f492066910b", + "normalization": "lf" + }, + { + "path": "tests/ArcForges.ArcScope.Tests/DependencyPolicyTests.cs", + "sha256": "1337e6a3fed468cd1cc197e1a05243dc63e8c47211af37b5756b87273d0946c7", + "normalization": "lf" + }, + { + "path": "eng/policy/dependency-review.json", + "sha256": "e72d4a3cb6bd97592097725b71d0acb7d3f37aba6bf1976abd81297fa54d3143", + "normalization": "lf" + } + ], + "artifactTargets": [], + "disposition": "Rewrite", + "verification": { + "kind": "transformation", + "command": "dotnet run --project eng/ArcForges.Repository -c Release --no-build -- check; run targeted offline DependencyPolicyTests using existing tools and caches.", + "expected": "Complete unchanged locked closure, forbidden/floating/mutable/wrong-publisher negatives, immutable source provenance and matching owner policy input hashes. No runtime/public-download claim.", + "artifacts": [] + }, + "notice": { + "required": true, + "text": "Copyright ArcForges contributors. ArcScope adapts ArcNotes dependency admission and retained support tooling under AGPL-3.0-only; original Apache checker attribution remains retained.", + "files": [ + "LICENSE", + "README.md", + "eng/third-party/LICENSE.Contracts.txt", + "eng/provenance/NOTICE.txt" + ], + "distribution": "source", + "reason": "The full corresponding source retains these origin records and original terms. Compiled support code remains AGPL; portable packages already include the complete root licence and README origin/source pointer. Checker/tool-only Apache code is not linked into the application." + }, + "lifetime": { + "status": "permanent", + "owner": "ArcScope Licensing and Provenance Owner", + "removalTrigger": null + }, + "generation": null, + "review": { + "owner": "Licensing and Provenance Owner", + "reviewer": "Claude Code (Claude Opus 5.5), acting under the repository maintainer's implementation and review authorization", + "reviewedOn": "2026-09-26", + "decision": "approved", + "rationale": "Reviewed owner-specific dependency admission changes for Dependabot PR #11 (Avalonia 12.1.2 -> 12.1.3) against the unchanged ArcNotes origin b7358bd7b1dca0671cd51cf6d798d5c09911b198; only the recorded bytes of the updated owner inputs change. Retain every earlier record, licence and package identity; supersedes arcnotes-provenance-tools-r5.", + "baselineCommit": "b4d73b4684da2f9c8e0fbae632dea714f8e986fd", + "reconciliation": false + }, + "supersedes": "arcnotes-provenance-tools-r5" +} diff --git a/src/ArcForges.ArcScope/packages.lock.json b/src/ArcForges.ArcScope/packages.lock.json index 537345e..36c5e3c 100644 --- a/src/ArcForges.ArcScope/packages.lock.json +++ b/src/ArcForges.ArcScope/packages.lock.json @@ -20,25 +20,25 @@ }, "Avalonia.Desktop": { "type": "Direct", - "requested": "[12.1.2, )", - "resolved": "12.1.2", - "contentHash": "ghG7UVnLVhCyWm/74xh24gAkXgEZ41oJTUr7c0VI9BiVSqhpukvU5vm8l8ZY35BZX8VPx1YtXUI1+VbhDTOLMw==", + "requested": "[12.1.3, )", + "resolved": "12.1.3", + "contentHash": "kjCpRlBIK5OZDnQ01Hd43CF0Mq4eQ9ndABiDCJAGtLD7lbzX6KxJ08vIK4N1VAiY4/enAUz8oT8q4O6bSybrBQ==", "dependencies": { - "Avalonia": "12.1.2", - "Avalonia.HarfBuzz": "12.1.2", - "Avalonia.Native": "12.1.2", - "Avalonia.Skia": "12.1.2", - "Avalonia.Win32": "12.1.2", - "Avalonia.X11": "12.1.2" + "Avalonia": "12.1.3", + "Avalonia.HarfBuzz": "12.1.3", + "Avalonia.Native": "12.1.3", + "Avalonia.Skia": "12.1.3", + "Avalonia.Win32": "12.1.3", + "Avalonia.X11": "12.1.3" } }, "Avalonia.Themes.Fluent": { "type": "Direct", - "requested": "[12.1.2, )", - "resolved": "12.1.2", - "contentHash": "EKw1PzlIfqB8n0+yGuHThR9cUEiqZYj0EHYp89jrTwSuudu8pji6I4SGe1UmdwJWdgWf+kuss8T7KT+0wsUyow==", + "requested": "[12.1.3, )", + "resolved": "12.1.3", + "contentHash": "ens/GHfXXk0W1ZScHZ2XG6DFiVyUVKR+0O8QK6zkviMNAPQCNwkftXlRVSFSQGtBYxXoJHZMsKYvCLEtVyzkug==", "dependencies": { - "Avalonia": "12.1.2" + "Avalonia": "12.1.3" } }, "Microsoft.DotNet.ILCompiler": { @@ -85,11 +85,11 @@ }, "Avalonia": { "type": "Transitive", - "resolved": "12.1.2", - "contentHash": "GHSe4qxjbqqxB570xuB4KtoD+Qhk3uKXJUXbelGYhGz/ti8xEoL7e5DGun8hcsXHondszPPBEdcC68szw7vUKg==", + "resolved": "12.1.3", + "contentHash": "l0VGyGn1OwqFrhmIhIHivvrQP0DtBD4Vn2F1vLYgGA2X2qHg0DMVRAln/6xOTLBUYoTopiVAujN0jtH8MpVSeA==", "dependencies": { "Avalonia.BuildServices": "11.3.2", - "Avalonia.Remote.Protocol": "12.1.2", + "Avalonia.Remote.Protocol": "12.1.3", "MicroCom.Runtime": "0.11.6" } }, @@ -105,27 +105,27 @@ }, "Avalonia.FreeDesktop": { "type": "Transitive", - "resolved": "12.1.2", - "contentHash": "RJqKF7djK/lyDBdj24+HKELGe+7I/86NIA57aeiod5k340svbcb9hs1RYkIF8Nga4Xa2Jd/Pzxpkmvdjb1ASiw==", + "resolved": "12.1.3", + "contentHash": "yEvk7qm0QPzgQwFZZTAIUXt31sQOSSeOSVTDrcm/Pk+5klNN+8C08kIJs9ZD8RY9esHVk2g6VHPab6DceJYRCw==", "dependencies": { - "Avalonia": "12.1.2", + "Avalonia": "12.1.3", "Tmds.DBus.Protocol": "0.94.1" } }, "Avalonia.FreeDesktop.AtSpi": { "type": "Transitive", - "resolved": "12.1.2", - "contentHash": "632PfHnqe7OkzStmDOW2ghXfCcTapGhT46HZGMMOIZFr+I0biyxUk7felBQwNzEk5LJ54y4VfIoiWKTgZK8FnA==", + "resolved": "12.1.3", + "contentHash": "t9dP6VQAKGlXtftNuj7QzFtE54AI1qH1dwFmDEJlvI5gweCLNR8ebgRCLlO/bSLWzzV8dZtb6mB/glZ8soisDw==", "dependencies": { - "Avalonia": "12.1.2" + "Avalonia": "12.1.3" } }, "Avalonia.HarfBuzz": { "type": "Transitive", - "resolved": "12.1.2", - "contentHash": "CqYTMnOLuAXjGldTEMdEf5/ozMY1z5ZshpE4YF0i2s2o4ycsYq855BD/eQS0iBt5PbjtlJgk8njILrBwW0HteQ==", + "resolved": "12.1.3", + "contentHash": "XcO9BBsmZHMIK+e+yy1TGsytlhqa7o4ih2Y7B0Q7OKh91GEEerbEc6v/X2kRmluKxyYNSmkwH5Uzj53FtjJngA==", "dependencies": { - "Avalonia": "12.1.2", + "Avalonia": "12.1.3", "HarfBuzzSharp": "8.3.1.3", "HarfBuzzSharp.NativeAssets.Linux": "8.3.1.3", "HarfBuzzSharp.NativeAssets.WebAssembly": "8.3.1.3" @@ -133,23 +133,23 @@ }, "Avalonia.Native": { "type": "Transitive", - "resolved": "12.1.2", - "contentHash": "Co60A3FhDiCR022en90e/nUJqn2GtYal353cSUB0lWAd0qb/AuVRdScz9i0QCyglYw+PBfUXSP+9OfI2XvnfCg==", + "resolved": "12.1.3", + "contentHash": "TP6G8mF8vPufxycwe/dfLTsNhqQOGBt2Os5MtJshUGfVQ8zlYUG8K8JckPE+dweuDraAKq305aHXseReD7UgXQ==", "dependencies": { - "Avalonia": "12.1.2" + "Avalonia": "12.1.3" } }, "Avalonia.Remote.Protocol": { "type": "Transitive", - "resolved": "12.1.2", - "contentHash": "DdLTe9xKXxxfRcXmUw1trXZpBpz1YiZYWXx0DfMVPFAnkCszKsHLi67kaZfGJqtfQq2EySKd2qgRYX2QYkSxcg==" + "resolved": "12.1.3", + "contentHash": "HcF69DKyihgg5coLOSp7GTqxQvWAy58LMKauwcHA28uSBJVwu0h5+gTNdJA8Sn/nqJVTRDU98zYsk6i1QSwDVQ==" }, "Avalonia.Skia": { "type": "Transitive", - "resolved": "12.1.2", - "contentHash": "x0TDDdZgNepbxRd6gSQyv3A/hHoVJk3kYqjRa1baI43XPGPuO87lArf4DRKAERgWUxUp1ad28aTvVsE3x0JM0g==", + "resolved": "12.1.3", + "contentHash": "fYfSecJ6vQT3zB9vWl2DOoBK6JM4Mzxpz7KbUPxJePjY/yUl2OyhjKCyUcGZF2DV5mpAYfCOT4rdKEk8hP/lCA==", "dependencies": { - "Avalonia": "12.1.2", + "Avalonia": "12.1.3", "HarfBuzzSharp": "8.3.1.3", "HarfBuzzSharp.NativeAssets.Linux": "8.3.1.3", "HarfBuzzSharp.NativeAssets.WebAssembly": "8.3.1.3", @@ -160,22 +160,22 @@ }, "Avalonia.Win32": { "type": "Transitive", - "resolved": "12.1.2", - "contentHash": "MjHc5aKNs7Hp/fiX13wTQ3pg+kG9lh+NfqSQGx6/SkfvdO1Hbmribk7Bt0pwFTxcJ6HGlzwGKp1Ur3Ib/tv0ew==", + "resolved": "12.1.3", + "contentHash": "RXSOmQGV5uKS9orIeE8a5oGz9QukzBnQTP3dtT9uJUhIIuZracy3ItoW8gtlZGBs3lzhEFTZlOk1Fn/Zxj/iAg==", "dependencies": { - "Avalonia": "12.1.2", + "Avalonia": "12.1.3", "Avalonia.Angle.Windows.Natives": "2.1.27548.20260419" } }, "Avalonia.X11": { "type": "Transitive", - "resolved": "12.1.2", - "contentHash": "wtCAY9k90yrvhzKmesDGGFxYHsgejmLaR7HY36A4VYJ+E1R8AguNZc3hFaVKywnQLpf/eLhAwQWUxoNVFu9h/w==", + "resolved": "12.1.3", + "contentHash": "NWkfAGgERPlYRKpiB18t5auSFA/Ffd++uZsUEtHPc/maitjydNJVDmtY21pUqR2QvAeTCl1nRAagi+j9bKVyKw==", "dependencies": { - "Avalonia": "12.1.2", - "Avalonia.FreeDesktop": "12.1.2", - "Avalonia.FreeDesktop.AtSpi": "12.1.2", - "Avalonia.Skia": "12.1.2" + "Avalonia": "12.1.3", + "Avalonia.FreeDesktop": "12.1.3", + "Avalonia.FreeDesktop.AtSpi": "12.1.3", + "Avalonia.Skia": "12.1.3" } }, "Google.Protobuf": { @@ -561,10 +561,10 @@ }, "Avalonia.Native": { "type": "Transitive", - "resolved": "12.1.2", - "contentHash": "Co60A3FhDiCR022en90e/nUJqn2GtYal353cSUB0lWAd0qb/AuVRdScz9i0QCyglYw+PBfUXSP+9OfI2XvnfCg==", + "resolved": "12.1.3", + "contentHash": "TP6G8mF8vPufxycwe/dfLTsNhqQOGBt2Os5MtJshUGfVQ8zlYUG8K8JckPE+dweuDraAKq305aHXseReD7UgXQ==", "dependencies": { - "Avalonia": "12.1.2" + "Avalonia": "12.1.3" } }, "HarfBuzzSharp.NativeAssets.Linux": { @@ -625,10 +625,10 @@ }, "Avalonia.Native": { "type": "Transitive", - "resolved": "12.1.2", - "contentHash": "Co60A3FhDiCR022en90e/nUJqn2GtYal353cSUB0lWAd0qb/AuVRdScz9i0QCyglYw+PBfUXSP+9OfI2XvnfCg==", + "resolved": "12.1.3", + "contentHash": "TP6G8mF8vPufxycwe/dfLTsNhqQOGBt2Os5MtJshUGfVQ8zlYUG8K8JckPE+dweuDraAKq305aHXseReD7UgXQ==", "dependencies": { - "Avalonia": "12.1.2" + "Avalonia": "12.1.3" } }, "HarfBuzzSharp.NativeAssets.Linux": { @@ -689,10 +689,10 @@ }, "Avalonia.Native": { "type": "Transitive", - "resolved": "12.1.2", - "contentHash": "Co60A3FhDiCR022en90e/nUJqn2GtYal353cSUB0lWAd0qb/AuVRdScz9i0QCyglYw+PBfUXSP+9OfI2XvnfCg==", + "resolved": "12.1.3", + "contentHash": "TP6G8mF8vPufxycwe/dfLTsNhqQOGBt2Os5MtJshUGfVQ8zlYUG8K8JckPE+dweuDraAKq305aHXseReD7UgXQ==", "dependencies": { - "Avalonia": "12.1.2" + "Avalonia": "12.1.3" } }, "HarfBuzzSharp.NativeAssets.Linux": { @@ -753,10 +753,10 @@ }, "Avalonia.Native": { "type": "Transitive", - "resolved": "12.1.2", - "contentHash": "Co60A3FhDiCR022en90e/nUJqn2GtYal353cSUB0lWAd0qb/AuVRdScz9i0QCyglYw+PBfUXSP+9OfI2XvnfCg==", + "resolved": "12.1.3", + "contentHash": "TP6G8mF8vPufxycwe/dfLTsNhqQOGBt2Os5MtJshUGfVQ8zlYUG8K8JckPE+dweuDraAKq305aHXseReD7UgXQ==", "dependencies": { - "Avalonia": "12.1.2" + "Avalonia": "12.1.3" } }, "HarfBuzzSharp.NativeAssets.Linux": { @@ -817,10 +817,10 @@ }, "Avalonia.Native": { "type": "Transitive", - "resolved": "12.1.2", - "contentHash": "Co60A3FhDiCR022en90e/nUJqn2GtYal353cSUB0lWAd0qb/AuVRdScz9i0QCyglYw+PBfUXSP+9OfI2XvnfCg==", + "resolved": "12.1.3", + "contentHash": "TP6G8mF8vPufxycwe/dfLTsNhqQOGBt2Os5MtJshUGfVQ8zlYUG8K8JckPE+dweuDraAKq305aHXseReD7UgXQ==", "dependencies": { - "Avalonia": "12.1.2" + "Avalonia": "12.1.3" } }, "HarfBuzzSharp.NativeAssets.Linux": {