diff --git a/Directory.Packages.props b/Directory.Packages.props index 8e01efb..0c7711f 100644 --- a/Directory.Packages.props +++ b/Directory.Packages.props @@ -9,10 +9,10 @@ - - + + - + diff --git a/eng/ArcForges.Repository/packages.lock.json b/eng/ArcForges.Repository/packages.lock.json index bdffa43..57109bf 100644 --- a/eng/ArcForges.Repository/packages.lock.json +++ b/eng/ArcForges.Repository/packages.lock.json @@ -15,36 +15,36 @@ }, "Grpc.Core.Api": { "type": "Transitive", - "resolved": "2.83.0", - "contentHash": "xU8BT2bCw4Ct+/qIFJhhjkDEilKUbBOfp4US7l3Xa3hnlkN9l2LgISCbOw4PFYpW5jJFcK7FUAyWOFIQ94Hiqg==" + "resolved": "2.84.0", + "contentHash": "p2SOMl6q/GZ4/5MLkgboC/z55g4zKUEruRn/g46QgppjQBVnsLZVBU/9VO7n60ll38G3Eo8Zu9b7x+W01GKFVg==" }, "Grpc.Net.Common": { "type": "Transitive", - "resolved": "2.83.0", - "contentHash": "9w52xxORdIGu4Mm8lff3psMIlarenu+7TC4uIfiiW9AyaHZ6iPE/18gIkG1DD9byGDuhjuhnN9hiviBUAmCuZw==", + "resolved": "2.84.0", + "contentHash": "DPxm/H8G/lDRrz997wM0M2zN/PGqVeZKDakhBbtABEbv6WIW4HI9g3BvntBQT6ZUROuGacMzfyyF9e5kiTVFfQ==", "dependencies": { - "Grpc.Core.Api": "2.83.0" + "Grpc.Core.Api": "2.84.0" } }, "Microsoft.Extensions.DependencyInjection.Abstractions": { "type": "Transitive", - "resolved": "8.0.0", - "contentHash": "cjWrLkJXK0rs4zofsK4bSdg+jhDLTaxrkXu4gS6Y7MAlCvRyNNgwY/lJi5RDlQOnSZweHqoyvgvbdvQsRIW+hg==" + "resolved": "8.0.1", + "contentHash": "fGLiCRLMYd00JYpClraLjJTNKLmMJPnqxMaiRzEBIIvevlzxz33mXy39Lkd48hu1G+N21S7QpaO5ZzKsI6FRuA==" }, "Microsoft.Extensions.Logging.Abstractions": { "type": "Transitive", - "resolved": "8.0.0", - "contentHash": "arDBqTgFCyS0EvRV7O3MZturChstm50OJ0y9bDJvAcmEPJm0FFpFyjU/JLYyStNGGey081DvnQYlncNX5SJJGA==", + "resolved": "8.0.1", + "contentHash": "RIFgaqoaINxkM2KTOw72dmilDmTrYA0ns2KW4lDz4gZ2+o6IQ894CzmdL3StM2oh7QQq44nCWiqKqc4qUI9Jmg==", "dependencies": { - "Microsoft.Extensions.DependencyInjection.Abstractions": "8.0.0" + "Microsoft.Extensions.DependencyInjection.Abstractions": "8.0.1" } }, "arcforges.arcscope.core": { "type": "Project", "dependencies": { "ArcForges.Contracts.PublicApi": "[1.0.0-ci.36.1, )", - "Grpc.Net.Client": "[2.83.0, )", - "Grpc.Net.Client.Web": "[2.83.0, )" + "Grpc.Net.Client": "[2.84.0, )", + "Grpc.Net.Client.Web": "[2.84.0, )" } }, "ArcForges.Contracts.PublicApi": { @@ -59,19 +59,19 @@ }, "Grpc.Net.Client": { "type": "CentralTransitive", - "requested": "[2.83.0, )", - "resolved": "2.83.0", - "contentHash": "dHYtx7hW4muttsCrWNG4/Ysb1iAIhNPEq28eo7vF166CdXn/RXOr3SGvSreIGIjvmdrADrBNJ2cUeJBto/T0XA==", + "requested": "[2.84.0, )", + "resolved": "2.84.0", + "contentHash": "My6Fms2YCyAbihTBZZ3kLS39iTY2pkMAzGDBTC6XhPOujg70eB07AEJ7tPiW3tZ70bhFzHcc3+d4j3DaIPF3aA==", "dependencies": { - "Grpc.Net.Common": "2.83.0", - "Microsoft.Extensions.Logging.Abstractions": "8.0.0" + "Grpc.Net.Common": "2.84.0", + "Microsoft.Extensions.Logging.Abstractions": "8.0.1" } }, "Grpc.Net.Client.Web": { "type": "CentralTransitive", - "requested": "[2.83.0, )", - "resolved": "2.83.0", - "contentHash": "+VsLfmWH7Lv/8sH5k9QjrccR+FQapMvFkBkoTHLdk6EFqBMmBFsddy6A9vvilHZf1AL1GVPaSMBJyGiPcxp7+w==" + "requested": "[2.84.0, )", + "resolved": "2.84.0", + "contentHash": "6KB6IFGx+KfGMaN06nATBVgvgsOEVf12/nJHvdAPsY2mULmWCSn4moFUT8UnCnQ19C3tpGbc2CnB1/e0hVUmaA==" } } } diff --git a/eng/policy/dependency-policy.json b/eng/policy/dependency-policy.json index ebad5c3..c16213c 100644 --- a/eng/policy/dependency-policy.json +++ b/eng/policy/dependency-policy.json @@ -256,54 +256,54 @@ }, { "id": "Grpc.AspNetCore.Web", - "version": "2.83.0", - "contentHash": "0fQlnmUorVo7SCghly5MQ5IhOn+w+Z9PYQOibdnYVUPJOhzW3iVwr5HYMVC5PnsTUfwpyZWIOfrAnwPa51k5Qw==", + "version": "2.84.0", + "contentHash": "xhpKA/nWQbgFLT0Z9sANWU2n9qMcb7l5Sfo7Z7f+7JZxGxGMEKe9kbGn9K8TxJmsDJ9wlxJKp+b40HsQfuMFEQ==", "licence": "Apache-2.0", "licenceEvidence": "Published package nuspec declares SPDX expression Apache-2.0; existing packaged upstream notices remain authoritative for bundled material.", "sourceRepository": "https://github.com/grpc/grpc-dotnet.git", - "sourceCommit": "4301104498e53898a452e8fb2fea6c0b1492b755", - "nuspecSha256": "8de00c84bf910a92356c9384c2fca141770828596771d38cfef8253a3923be33", + "sourceCommit": "4c6997a214601422dd66c5c74c1969db749479e9", + "nuspecSha256": "9aa433115fb36b18c12cd74b4c1f7f9f0e656500f9a144b115d01c00b020f2d6", "dependencyClass": "transport", - "maintenanceAssessment": "Retain the already admitted pinned release and upstream source identity; no new dependency or current upstream support/freshness claim. Existing dependency-review/security gates review changes; the product owner must assess replacement or vulnerabilities before an upgrade.", + "maintenanceAssessment": "Reviewed Dependabot grpc group update from 2.83.0: same package identity and publisher, exact immutable upstream source commit and published nuspec recorded; dependency-review, CodeQL and security gates remain required. No current upstream support or vulnerability-absence claim.", "previewAdmission": "none" }, { "id": "Grpc.Core.Api", - "version": "2.83.0", - "contentHash": "xU8BT2bCw4Ct+/qIFJhhjkDEilKUbBOfp4US7l3Xa3hnlkN9l2LgISCbOw4PFYpW5jJFcK7FUAyWOFIQ94Hiqg==", + "version": "2.84.0", + "contentHash": "p2SOMl6q/GZ4/5MLkgboC/z55g4zKUEruRn/g46QgppjQBVnsLZVBU/9VO7n60ll38G3Eo8Zu9b7x+W01GKFVg==", "licence": "Apache-2.0", "licenceEvidence": "Published package nuspec declares SPDX expression Apache-2.0; existing packaged upstream notices remain authoritative for bundled material.", "sourceRepository": "https://github.com/grpc/grpc-dotnet.git", - "sourceCommit": "4301104498e53898a452e8fb2fea6c0b1492b755", - "nuspecSha256": "1276f66b4414aa409f4548480ef6eeb245449ed2f747541c64d526f7ba73d3e0", + "sourceCommit": "4c6997a214601422dd66c5c74c1969db749479e9", + "nuspecSha256": "bba00f5d5be8423dd351662e313648b0abd13100ef67d55f6fc29de44c544a96", "dependencyClass": "transport", - "maintenanceAssessment": "Retain the already admitted pinned release and upstream source identity; no new dependency or current upstream support/freshness claim. Existing dependency-review/security gates review changes; the product owner must assess replacement or vulnerabilities before an upgrade.", + "maintenanceAssessment": "Reviewed Dependabot grpc group update from 2.83.0: same package identity and publisher, exact immutable upstream source commit and published nuspec recorded; dependency-review, CodeQL and security gates remain required. No current upstream support or vulnerability-absence claim.", "previewAdmission": "none" }, { "id": "Grpc.Net.Client", - "version": "2.83.0", - "contentHash": "dHYtx7hW4muttsCrWNG4/Ysb1iAIhNPEq28eo7vF166CdXn/RXOr3SGvSreIGIjvmdrADrBNJ2cUeJBto/T0XA==", + "version": "2.84.0", + "contentHash": "My6Fms2YCyAbihTBZZ3kLS39iTY2pkMAzGDBTC6XhPOujg70eB07AEJ7tPiW3tZ70bhFzHcc3+d4j3DaIPF3aA==", "licence": "Apache-2.0", "licenceEvidence": "Published package nuspec declares SPDX expression Apache-2.0; existing packaged upstream notices remain authoritative for bundled material.", "sourceRepository": "https://github.com/grpc/grpc-dotnet.git", - "sourceCommit": "4301104498e53898a452e8fb2fea6c0b1492b755", - "nuspecSha256": "bc4f11891023c0511a08b5fcc47497b14ad145f2e3bf19b329fedce20c003367", + "sourceCommit": "4c6997a214601422dd66c5c74c1969db749479e9", + "nuspecSha256": "32a43f3448ab90bb71c946533db4d5135cef4728a3ee29bf88d9a0cbf1e67413", "dependencyClass": "transport", - "maintenanceAssessment": "Retain the already admitted pinned release and upstream source identity; no new dependency or current upstream support/freshness claim. Existing dependency-review/security gates review changes; the product owner must assess replacement or vulnerabilities before an upgrade.", + "maintenanceAssessment": "Reviewed Dependabot grpc group update from 2.83.0: same package identity and publisher, exact immutable upstream source commit and published nuspec recorded; dependency-review, CodeQL and security gates remain required. No current upstream support or vulnerability-absence claim.", "previewAdmission": "none" }, { "id": "Grpc.Net.Client.Web", - "version": "2.83.0", - "contentHash": "+VsLfmWH7Lv/8sH5k9QjrccR+FQapMvFkBkoTHLdk6EFqBMmBFsddy6A9vvilHZf1AL1GVPaSMBJyGiPcxp7+w==", + "version": "2.84.0", + "contentHash": "6KB6IFGx+KfGMaN06nATBVgvgsOEVf12/nJHvdAPsY2mULmWCSn4moFUT8UnCnQ19C3tpGbc2CnB1/e0hVUmaA==", "licence": "Apache-2.0", "licenceEvidence": "Published package nuspec declares SPDX expression Apache-2.0; existing packaged upstream notices remain authoritative for bundled material.", "sourceRepository": "https://github.com/grpc/grpc-dotnet.git", - "sourceCommit": "4301104498e53898a452e8fb2fea6c0b1492b755", - "nuspecSha256": "42b9b89c4f0c690c802a0ef6f3b18c1d3f011c00894425350fdc31cf95ce41b2", + "sourceCommit": "4c6997a214601422dd66c5c74c1969db749479e9", + "nuspecSha256": "da47ce027ddbbbf7c0b1f242b1efe64a5aeaa2959da54716a100fcc6e4520efb", "dependencyClass": "transport", - "maintenanceAssessment": "Retain the already admitted pinned release and upstream source identity; no new dependency or current upstream support/freshness claim. Existing dependency-review/security gates review changes; the product owner must assess replacement or vulnerabilities before an upgrade.", + "maintenanceAssessment": "Reviewed Dependabot grpc group update from 2.83.0: same package identity and publisher, exact immutable upstream source commit and published nuspec recorded; dependency-review, CodeQL and security gates remain required. No current upstream support or vulnerability-absence claim.", "previewAdmission": "none" }, { @@ -321,15 +321,15 @@ }, { "id": "Grpc.Net.Common", - "version": "2.83.0", - "contentHash": "9w52xxORdIGu4Mm8lff3psMIlarenu+7TC4uIfiiW9AyaHZ6iPE/18gIkG1DD9byGDuhjuhnN9hiviBUAmCuZw==", + "version": "2.84.0", + "contentHash": "DPxm/H8G/lDRrz997wM0M2zN/PGqVeZKDakhBbtABEbv6WIW4HI9g3BvntBQT6ZUROuGacMzfyyF9e5kiTVFfQ==", "licence": "Apache-2.0", "licenceEvidence": "Published package nuspec declares SPDX expression Apache-2.0; existing packaged upstream notices remain authoritative for bundled material.", "sourceRepository": "https://github.com/grpc/grpc-dotnet.git", - "sourceCommit": "4301104498e53898a452e8fb2fea6c0b1492b755", - "nuspecSha256": "08d24d135348f484daad19ec1a456e387ce7d6fddf13615a6ced1c7bbaef7de6", + "sourceCommit": "4c6997a214601422dd66c5c74c1969db749479e9", + "nuspecSha256": "f621aa566e63340b572a4f0bd2b996b934407c77b8cdf121f38578e93ee796cb", "dependencyClass": "transport", - "maintenanceAssessment": "Retain the already admitted pinned release and upstream source identity; no new dependency or current upstream support/freshness claim. Existing dependency-review/security gates review changes; the product owner must assess replacement or vulnerabilities before an upgrade.", + "maintenanceAssessment": "Reviewed Dependabot grpc group update from 2.83.0: same package identity and publisher, exact immutable upstream source commit and published nuspec recorded; dependency-review, CodeQL and security gates remain required. No current upstream support or vulnerability-absence claim.", "previewAdmission": "none" }, { @@ -594,15 +594,15 @@ }, { "id": "Microsoft.Extensions.DependencyInjection.Abstractions", - "version": "8.0.0", - "contentHash": "cjWrLkJXK0rs4zofsK4bSdg+jhDLTaxrkXu4gS6Y7MAlCvRyNNgwY/lJi5RDlQOnSZweHqoyvgvbdvQsRIW+hg==", + "version": "8.0.1", + "contentHash": "fGLiCRLMYd00JYpClraLjJTNKLmMJPnqxMaiRzEBIIvevlzxz33mXy39Lkd48hu1G+N21S7QpaO5ZzKsI6FRuA==", "licence": "MIT", "licenceEvidence": "Published package nuspec declares SPDX expression MIT; existing packaged upstream notices remain authoritative for bundled material.", "sourceRepository": "https://github.com/dotnet/runtime", - "sourceCommit": "5535e31a712343a63f5d7d796cd874e563e5ac14", - "nuspecSha256": "5e666a909af764ae8ab3faeeccc2773187d4ca4155d5d756356cad6766443f51", + "sourceCommit": "9f4b1f5d664afdfc80e1508ab7ed099dff210fbd", + "nuspecSha256": "1ed9fd0c77d67cc75208b3268df565762916a992f3e246973430dbd77ede2413", "dependencyClass": "framework", - "maintenanceAssessment": "Retain the already admitted pinned release and upstream source identity; no new dependency or current upstream support/freshness claim. Existing dependency-review/security gates review changes; the product owner must assess replacement or vulnerabilities before an upgrade.", + "maintenanceAssessment": "Reviewed Dependabot grpc group update from 10.0.12: same package identity and publisher, exact immutable upstream source commit and published nuspec recorded; dependency-review, CodeQL and security gates remain required. No current upstream support or vulnerability-absence claim.", "previewAdmission": "none" }, { @@ -724,15 +724,15 @@ }, { "id": "Microsoft.Extensions.Logging.Abstractions", - "version": "8.0.0", - "contentHash": "arDBqTgFCyS0EvRV7O3MZturChstm50OJ0y9bDJvAcmEPJm0FFpFyjU/JLYyStNGGey081DvnQYlncNX5SJJGA==", + "version": "8.0.1", + "contentHash": "RIFgaqoaINxkM2KTOw72dmilDmTrYA0ns2KW4lDz4gZ2+o6IQ894CzmdL3StM2oh7QQq44nCWiqKqc4qUI9Jmg==", "licence": "MIT", "licenceEvidence": "Published package nuspec declares SPDX expression MIT; existing packaged upstream notices remain authoritative for bundled material.", "sourceRepository": "https://github.com/dotnet/runtime", - "sourceCommit": "5535e31a712343a63f5d7d796cd874e563e5ac14", - "nuspecSha256": "e49e6e9827ea70fb0f7c8162aa4356a1d2d211157851ba3faeb2cbacbba913f5", + "sourceCommit": "9f4b1f5d664afdfc80e1508ab7ed099dff210fbd", + "nuspecSha256": "7593932df3e935a8e6670efad230c82967bc45ea4065186d9b886670408b95cc", "dependencyClass": "framework", - "maintenanceAssessment": "Retain the already admitted pinned release and upstream source identity; no new dependency or current upstream support/freshness claim. Existing dependency-review/security gates review changes; the product owner must assess replacement or vulnerabilities before an upgrade.", + "maintenanceAssessment": "Reviewed Dependabot grpc group update from 10.0.12: same package identity and publisher, exact immutable upstream source commit and published nuspec recorded; dependency-review, CodeQL and security gates remain required. No current upstream support or vulnerability-absence claim.", "previewAdmission": "none" }, { diff --git a/eng/policy/dependency-review.json b/eng/policy/dependency-review.json index 7d74712..5997cf8 100644 --- a/eng/policy/dependency-review.json +++ b/eng/policy/dependency-review.json @@ -11,34 +11,34 @@ "frameworkMajorUpgrade": false, "runtimePostureAssessment": "No framework version changes: existing desktop Native AOT and trim posture retained.", "checks": { - "compilation": "Avalonia.Desktop and Avalonia.Themes.Fluent 12.1.2 -> 12.1.3 (Dependabot avalonia group) with the matching Avalonia 12.1.3 transitive set; required Windows/Linux compilation runs in CI.", - "aot": "Windows x64/ARM64 and Linux x64 Native AOT publication stays required in CI for this patch release within Avalonia 12.1.", - "compatibility": "Patch release within Avalonia 12.1; no framework-major change. SkiaSharp, HarfBuzzSharp and ANGLE native packages keep their admitted versions, so the existing native admission is unchanged.", - "licence": "Every new Avalonia 12.1.3 package declares SPDX MIT in its published nuspec; exact nuspec SHA-256 and upstream source commit are recorded; notices unchanged.", + "compilation": "Grpc.Net.Client, Grpc.Net.Client.Web and Grpc.AspNetCore.Web 2.83.0 -> 2.84.0 (Dependabot grpc group) with Grpc.Core.Api/Grpc.Net.Common 2.84.0 and Microsoft.Extensions.Logging/DependencyInjection.Abstractions 8.0.1; every lock regenerated consistently; Windows/Linux compilation runs in CI.", + "aot": "Windows x64/ARM64 and Linux x64 Native AOT publication stays required in CI; grpc-dotnet patch-level update within the 2.x line.", + "compatibility": "Same grpc-dotnet major line; the test-only Grpc.AspNetCore metapackage stays 2.83.0 as Dependabot proposed and resolves against Grpc.AspNetCore.Server 2.84.0. No application API or generated contract changed.", + "licence": "grpc-dotnet packages declare Apache-2.0 and the Microsoft.Extensions abstractions MIT in their published nuspecs; exact nuspec SHA-256 and upstream source commits recorded.", "security": "Dependency-review, CodeQL and secret-scan gates stay required on the pull request head; no vulnerability-absence claim.", - "sbom": "The portable dependencies.json SBOM is generated in CI from actual restore assets; only the Avalonia versions change.", - "localRuntime": "Not run: desktop GUI/runtime checks are local opt-in and outside this dependency update; CI covers compilation and AOT publication only.", - "performance": "Not measured: Avalonia patch release; no performance-sensitive code or configuration changed in this repository.", + "sbom": "The portable dependencies.json SBOM is generated in CI from actual restore assets; only the grpc and abstractions versions change.", + "localRuntime": "Not run: no live RPC or GUI runtime is exercised locally for this update; CI covers compilation, AOT publication and offline unit tests.", + "performance": "Not measured: grpc-dotnet patch release; no performance-sensitive code or configuration changed in this repository.", "migration": "Not applicable: no persistence format or storage dependency changed." }, "inputs": { ".github/workflows/ci.yml": "48e4cb95953bd927f80522c61885b8d3f890eded4d33b0b08da3b0cc121c5b6f", "Directory.Build.props": "9d567c843c8af63df502a0a1752767d183a1db2a7e52ebd2690c7edbbae008eb", "Directory.Build.targets": "ff01198f816a04667ade99836d5b57e0fb78067972d2c852f2e8c1e8eea3f138", - "Directory.Packages.props": "a3be569aa978aa50a56fff07fc4da3d762886ecdc2bff96fae05bec688e67366", + "Directory.Packages.props": "f2d5cbb3bf51a023a763b39bda71989ccd2e4202497289221f33e4e93a12d0f9", "NuGet.Config": "4b8c02e4d50d3cc41197afc609f592e5a1889c049fe39147564e2811c5d8e261", "eng/ArcForges.Repository/ArcForges.Repository.csproj": "b8b811d878528c9fcff4e37fa4acd46ea5ce08221ff782183d201daffd010e33", - "eng/ArcForges.Repository/packages.lock.json": "3c1917c46723808336fbacfb5fd40d3c6ae7854ddd3b05ba03100cd759a569af", - "eng/policy/dependency-policy.json": "1a56fa426618d39be5b4eb9538286d5b46eb35bf894cedc1363c2f492066910b", + "eng/ArcForges.Repository/packages.lock.json": "4965f635e4893c4eadf41e762cc50cf3ea24853a4b2ea609f27a8b2d4699b6e1", + "eng/policy/dependency-policy.json": "fc6d3017ac4eff3511dd7e3327d4854fdf55bafa16259e1bb54f4df2c1cba113", "eng/policy/licence-boundary.json": "a742df60c4dfcad5f72da6b8312795d69b8d42894b0ef871eafb58732c4629be", "eng/policy/reuse-policy.json": "efd435e1a5b41a6b1ff29e5b6472553616eb5bf88f710616e83549c86d24a788", "global.json": "d533441ee720f55065ffdda4273cd815f53f534612cd5899bd4b9b41d0e3a630", "src/ArcForges.ArcScope.Core/ArcForges.ArcScope.Core.csproj": "2338d20f00790d79a717e3ed74cfd79de26204d428eda618247558d84f776f3d", - "src/ArcForges.ArcScope.Core/packages.lock.json": "2d4085d38648181c42333b905a7d57bff5b5faee5a35e777c05f16cf2b3c6142", + "src/ArcForges.ArcScope.Core/packages.lock.json": "78bb25ce23a0713df94863fbddb1bd6373f5d9b85cb543d007d25408ad6fc0fe", "src/ArcForges.ArcScope/ArcForges.ArcScope.csproj": "5969080e16a982fbdf6d8eb887ec5fd8fc378824c0e9bf10e55503e851a5f188", - "src/ArcForges.ArcScope/packages.lock.json": "20dfcf44c15d55669e3f6f45bd95aa2049ab004c1b28afacb3c476a520c57499", + "src/ArcForges.ArcScope/packages.lock.json": "e7bc1642fc534fe9d5b2da5b4fc59fb1961daab64af2fee67f79eab9302055ae", "tests/ArcForges.ArcScope.Tests/ArcForges.ArcScope.Tests.csproj": "9d411d5f46d36903fa34592abe0d5977b81b10b215519cc5c5cecc53320fea48", - "tests/ArcForges.ArcScope.Tests/packages.lock.json": "efd69fa9e197997dd8c0009599826055ca655c9922da4abd4865de7f02d15907", + "tests/ArcForges.ArcScope.Tests/packages.lock.json": "01ea4cee4c7780bf8db8ed89196c6f460e69f11d3540bd3a4447e04c1c5db3f0", "third-party/sources.json": "106696f712f9574d0e5521337c954bdb936ee3e30901a7aab1f2d569bed548f6" } } diff --git a/eng/provenance/NOTICE.txt b/eng/provenance/NOTICE.txt index 27b0dfd..44a868d 100644 --- a/eng/provenance/NOTICE.txt +++ b/eng/provenance/NOTICE.txt @@ -2,7 +2,7 @@ ArcForges source provenance notices Generated from reviewed active records. Original licence files and dependency notices remain authoritative. -arcnotes-provenance-tools-r6 +arcnotes-provenance-tools-r7 Source: https://github.com/ArcForges/ArcNotes @ b7358bd7b1dca0671cd51cf6d798d5c09911b198 Material licence: AGPL-3.0-only Notice scope: source diff --git a/eng/provenance/files.json b/eng/provenance/files.json index b5233fa..055504f 100644 --- a/eng/provenance/files.json +++ b/eng/provenance/files.json @@ -40,6 +40,7 @@ "eng/provenance/records/arcnotes-provenance-tools-r4.json", "eng/provenance/records/arcnotes-provenance-tools-r5.json", "eng/provenance/records/arcnotes-provenance-tools-r6.json", + "eng/provenance/records/arcnotes-provenance-tools-r7.json", "eng/provenance/records/canonical-agpl-legal-r1.json", "eng/provenance/records/contracts-apache-legal-r1.json", "eng/provenance/records/upstream-avalonia-legal-r1.json", @@ -66,10 +67,10 @@ "third-party/sources.json" ], "reused": { - "eng/ArcForges.Repository/ProvenancePolicy.cs": "arcnotes-provenance-tools-r6", - "eng/ArcForges.Repository/Program.cs": "arcnotes-provenance-tools-r6", - "tests/ArcForges.ArcScope.Tests/ProvenancePolicyTests.cs": "arcnotes-provenance-tools-r6", - "tests/ArcForges.ArcScope.Tests/CandidateTests.cs": "arcnotes-provenance-tools-r6", + "eng/ArcForges.Repository/ProvenancePolicy.cs": "arcnotes-provenance-tools-r7", + "eng/ArcForges.Repository/Program.cs": "arcnotes-provenance-tools-r7", + "tests/ArcForges.ArcScope.Tests/ProvenancePolicyTests.cs": "arcnotes-provenance-tools-r7", + "tests/ArcForges.ArcScope.Tests/CandidateTests.cs": "arcnotes-provenance-tools-r7", "LICENSE": "canonical-agpl-legal-r1", "eng/third-party/LICENSE.Contracts.txt": "contracts-apache-legal-r1", "third-party/Avalonia.LICENSE.txt": "upstream-avalonia-legal-r1", @@ -78,23 +79,23 @@ "third-party/MicroCom.LICENSE.txt": "upstream-microcom-legal-r1", "third-party/Protobuf.LICENSE.txt": "upstream-protobuf-legal-r1", "third-party/Tmds.DBus.LICENSE.txt": "upstream-tmds-dbus-legal-r1", - "eng/ArcForges.Repository/IdentityEvidence.cs": "arcnotes-provenance-tools-r6", - "src/ArcForges.ArcScope.Core/BuildIdentity.cs": "arcnotes-provenance-tools-r6", - "tests/ArcForges.ArcScope.Tests/BuildIdentityTests.cs": "arcnotes-provenance-tools-r6", - "Directory.Build.targets": "arcnotes-provenance-tools-r6", - "Directory.Build.props": "arcnotes-provenance-tools-r6", - "Directory.Packages.props": "arcnotes-provenance-tools-r6", - "eng/ArcForges.Repository/ArcForges.Repository.csproj": "arcnotes-provenance-tools-r6", - "src/ArcForges.ArcScope/ArcForges.ArcScope.csproj": "arcnotes-provenance-tools-r6", - "src/ArcForges.ArcScope/Program.cs": "arcnotes-provenance-tools-r6", - "src/ArcForges.ArcScope/LiveSmoke.cs": "arcnotes-provenance-tools-r6", - ".github/workflows/ci.yml": "arcnotes-provenance-tools-r6", - "eng/version-sources.json": "arcnotes-provenance-tools-r6", - "eng/ArcForges.Repository/DependencyPolicy.cs": "arcnotes-provenance-tools-r6", - "docs/dependency-policy.md": "arcnotes-provenance-tools-r6", - "eng/policy/dependency-policy.json": "arcnotes-provenance-tools-r6", - "tests/ArcForges.ArcScope.Tests/DependencyPolicyTests.cs": "arcnotes-provenance-tools-r6", - "eng/policy/dependency-review.json": "arcnotes-provenance-tools-r6" + "eng/ArcForges.Repository/IdentityEvidence.cs": "arcnotes-provenance-tools-r7", + "src/ArcForges.ArcScope.Core/BuildIdentity.cs": "arcnotes-provenance-tools-r7", + "tests/ArcForges.ArcScope.Tests/BuildIdentityTests.cs": "arcnotes-provenance-tools-r7", + "Directory.Build.targets": "arcnotes-provenance-tools-r7", + "Directory.Build.props": "arcnotes-provenance-tools-r7", + "Directory.Packages.props": "arcnotes-provenance-tools-r7", + "eng/ArcForges.Repository/ArcForges.Repository.csproj": "arcnotes-provenance-tools-r7", + "src/ArcForges.ArcScope/ArcForges.ArcScope.csproj": "arcnotes-provenance-tools-r7", + "src/ArcForges.ArcScope/Program.cs": "arcnotes-provenance-tools-r7", + "src/ArcForges.ArcScope/LiveSmoke.cs": "arcnotes-provenance-tools-r7", + ".github/workflows/ci.yml": "arcnotes-provenance-tools-r7", + "eng/version-sources.json": "arcnotes-provenance-tools-r7", + "eng/ArcForges.Repository/DependencyPolicy.cs": "arcnotes-provenance-tools-r7", + "docs/dependency-policy.md": "arcnotes-provenance-tools-r7", + "eng/policy/dependency-policy.json": "arcnotes-provenance-tools-r7", + "tests/ArcForges.ArcScope.Tests/DependencyPolicyTests.cs": "arcnotes-provenance-tools-r7", + "eng/policy/dependency-review.json": "arcnotes-provenance-tools-r7" }, "artifacts": [] } diff --git a/eng/provenance/records/arcnotes-provenance-tools-r7.json b/eng/provenance/records/arcnotes-provenance-tools-r7.json new file mode 100644 index 0000000..0890f0b --- /dev/null +++ b/eng/provenance/records/arcnotes-provenance-tools-r7.json @@ -0,0 +1,299 @@ +{ + "schemaVersion": 1, + "id": "arcnotes-provenance-tools-r7", + "kind": "source", + "sourceRepository": "https://github.com/ArcForges/ArcNotes", + "sourceCommit": "b7358bd7b1dca0671cd51cf6d798d5c09911b198", + "sourcePaths": [ + "eng/ArcForges.Repository/ProvenancePolicy.cs", + "eng/ArcForges.Repository/Program.cs", + "tests/ArcForges.ArcNotes.Tests/ProvenancePolicyTests.cs", + "tests/ArcForges.ArcNotes.Tests/CandidateTests.cs", + "eng/ArcForges.Repository/IdentityEvidence.cs", + "src/ArcForges.ArcNotes.Core/BuildIdentity.cs", + "tests/ArcForges.ArcNotes.Tests/BuildIdentityTests.cs", + "Directory.Build.targets", + "Directory.Build.props", + "Directory.Packages.props", + "eng/ArcForges.Repository/ArcForges.Repository.csproj", + "src/ArcForges.ArcNotes/ArcForges.ArcNotes.csproj", + "src/ArcForges.ArcNotes/Program.cs", + "src/ArcForges.ArcNotes/LiveSmoke.cs", + ".github/workflows/ci.yml", + "eng/version-sources.json", + "eng/ArcForges.Repository/DependencyPolicy.cs", + "docs/dependency-policy.md", + "eng/policy/dependency-policy.json", + "tests/ArcForges.ArcNotes.Tests/DependencyPolicyTests.cs", + "eng/policy/dependency-review.json" + ], + "licence": { + "spdx": "AGPL-3.0-only", + "category": "agpl-compatible", + "evidence": [ + { + "path": "LICENSE", + "sha256": "8486a10c4393cee1c25392769ddd3b2d6c242d6ec7928e1414efff7dfb2f07ef", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "eng/ArcForges.Repository/ProvenancePolicy.cs", + "sha256": "0da29d6f3cd9656640276d27eab25ee38fec68809d4dcc68ef3c1ad96ec1f3b9", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "eng/ArcForges.Repository/Program.cs", + "sha256": "dba5e6b75593631d55418998f7791190933b88b62f646e4c0e3f2a9d38b461ac", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "tests/ArcForges.ArcNotes.Tests/ProvenancePolicyTests.cs", + "sha256": "286437bd06ea7dd22e58f2007e2b75ab7aa4264595ff1d548b9953adeb6bca69", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "tests/ArcForges.ArcNotes.Tests/CandidateTests.cs", + "sha256": "f0cc9fce799ff27519689d60b27667f679e21720a2531688566b97d99dc029f2", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "eng/ArcForges.Repository/IdentityEvidence.cs", + "sha256": "73510ff86c7b6e5b86baeebd95a7df2c7cb355531a265e2a20b67bdcf39e3215", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "src/ArcForges.ArcNotes.Core/BuildIdentity.cs", + "sha256": "2a1c184214d4b5c49e4f1affa96cc5741d1c1b34b3892477e0c97d31eccb5bc5", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "tests/ArcForges.ArcNotes.Tests/BuildIdentityTests.cs", + "sha256": "ae11ceb972227aa8e0cc810852e42ffdeebc71493cd07546a59d752ceeb0c444", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "Directory.Build.targets", + "sha256": "21da49619dc407ca9de526c9aa75cb9a0e67ca6314bddd4770dd165975405bd4", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "Directory.Build.props", + "sha256": "90a5954ec7685904894ef8d19fea650f9bcebabbde98b0b94058f8b7c68fb5a4", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "Directory.Packages.props", + "sha256": "ef826d5a6865882ae44e02c03a21e2d94e3146a2027a22bdbc6a558aac260321", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "eng/ArcForges.Repository/ArcForges.Repository.csproj", + "sha256": "b80fff54a4c877998e66b035a159e790bce4c771244d1d239fa8d58c8dd589a6", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "src/ArcForges.ArcNotes/ArcForges.ArcNotes.csproj", + "sha256": "4a4bb4fb53401da31b2f2aafd96f5c733a78f08c60632f717eeb8b8e1eaabdba", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "src/ArcForges.ArcNotes/Program.cs", + "sha256": "f763a3e5e5db240cb18478dc733db84fbaae03c1276396ebb8302ed1349078a7", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "src/ArcForges.ArcNotes/LiveSmoke.cs", + "sha256": "0250c74301c91e79dde029788c06cfd9b1307cee519848458650aeb4ec2cb399", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": ".github/workflows/ci.yml", + "sha256": "ec5963a454ab794847a07fd4360fd1708b3aef44385b4eeafd3d0137366ec1ab", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "eng/version-sources.json", + "sha256": "381adf427140f65717901bb81dff340511831e7414a31eec897e4eb6ef9535f5", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "eng/ArcForges.Repository/DependencyPolicy.cs", + "sha256": "7bd25806398f343764b190e60c3c13fea45210b2aee31fb7f53422b4fb1fc197", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "docs/dependency-policy.md", + "sha256": "c2c87a4a8b6402abb1aa82060431b33efc66bbfba09635b58c03fbb6e120a7ad", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "eng/policy/dependency-policy.json", + "sha256": "ebde30ed1fd96baa1aaa2063ac03dad3336504e64508381008f191f79a380c55", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "tests/ArcForges.ArcNotes.Tests/DependencyPolicyTests.cs", + "sha256": "459274fcc0cd43412c3cd3a5fdca35d7bec5532819860c80356548abb21d1c4f", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + }, + { + "path": "eng/policy/dependency-review.json", + "sha256": "34f1b711815d9fbf5cc5ab11aa5c61264a0d312f603ee6566e5fdeefb6a9c1c1", + "finding": "AGPL-3.0-only source/header or owner build/policy metadata from the same immutable ArcNotes revision; original Apache provenance-checker attribution remains retained." + } + ], + "scope": "Extend the retained ArcNotes adaptation with offline dependency admission, exact package metadata, immutable coordinate history and upgrade review. Product owner literals and input hashes are adapted to ArcScope. No source checkout dependency or runtime behavior change.", + "copyingPermission": null + }, + "attribution": [ + "Copyright ArcForges contributors. ArcNotes support identity and tooling: AGPL-3.0-only.", + "Original provenance checker from Contracts: Apache-2.0; complete source terms and attribution retained.", + "ArcScope adapts product identity and future format/storage owner declarations.", + "ArcScope owner modifications: reduce hosted CI to Windows/Linux compilation and offline checks; remove mandatory runtime evidence and redundant validation.", + "ArcScope owner modifications: add reviewed dependency policy, upgrade records and offline negative fixtures adapted from ArcNotes b7358bd7b1dca0671cd51cf6d798d5c09911b198.", + "ArcScope owner modifications: reviewed dependency updates are recorded in the owner dependency admission and review inputs." + ], + "targets": [ + { + "path": ".github/workflows/ci.yml", + "sha256": "48e4cb95953bd927f80522c61885b8d3f890eded4d33b0b08da3b0cc121c5b6f", + "normalization": "lf" + }, + { + "path": "Directory.Build.props", + "sha256": "9d567c843c8af63df502a0a1752767d183a1db2a7e52ebd2690c7edbbae008eb", + "normalization": "lf" + }, + { + "path": "Directory.Build.targets", + "sha256": "ff01198f816a04667ade99836d5b57e0fb78067972d2c852f2e8c1e8eea3f138", + "normalization": "lf" + }, + { + "path": "Directory.Packages.props", + "sha256": "f2d5cbb3bf51a023a763b39bda71989ccd2e4202497289221f33e4e93a12d0f9", + "normalization": "lf" + }, + { + "path": "eng/ArcForges.Repository/ArcForges.Repository.csproj", + "sha256": "b8b811d878528c9fcff4e37fa4acd46ea5ce08221ff782183d201daffd010e33", + "normalization": "lf" + }, + { + "path": "eng/ArcForges.Repository/IdentityEvidence.cs", + "sha256": "4a84f23b6b4bbce4f553994a04fd50ca806ffef497297fd6f890b563fc676b39", + "normalization": "lf" + }, + { + "path": "eng/ArcForges.Repository/Program.cs", + "sha256": "1b89ecb457afbd25e82e43483c8d7cbc25d32d5851a9945f4ff2cd4c484baff4", + "normalization": "lf" + }, + { + "path": "eng/ArcForges.Repository/ProvenancePolicy.cs", + "sha256": "cb53d777f75ab803d3681f1b102cd0d9ae1a558202900f28ee79101eb34e5aea", + "normalization": "lf" + }, + { + "path": "eng/version-sources.json", + "sha256": "dc07597ceb6f91db5ad5a84e9958740352a67a6a14dd095c8f3327f42922b3ea", + "normalization": "lf" + }, + { + "path": "src/ArcForges.ArcScope.Core/BuildIdentity.cs", + "sha256": "1d401bde513f7c767494ab4f87aeadb76bb2135e6362c811a5aeaaa726cdcc78", + "normalization": "lf" + }, + { + "path": "src/ArcForges.ArcScope/ArcForges.ArcScope.csproj", + "sha256": "5969080e16a982fbdf6d8eb887ec5fd8fc378824c0e9bf10e55503e851a5f188", + "normalization": "lf" + }, + { + "path": "src/ArcForges.ArcScope/LiveSmoke.cs", + "sha256": "f3a5f1ff85b6d35bd65a173b0c0c55df425f9117a7a4deb7a6510731b7b9b35d", + "normalization": "lf" + }, + { + "path": "src/ArcForges.ArcScope/Program.cs", + "sha256": "f6ee48c55fd9c5010d87e4aaba5ebfa786f527207f74134269a25b1508d7ad4a", + "normalization": "lf" + }, + { + "path": "tests/ArcForges.ArcScope.Tests/BuildIdentityTests.cs", + "sha256": "20d05eb1ace061352d7e25d6dbd9dfcf34901f65641613c31f461927f8c193b5", + "normalization": "lf" + }, + { + "path": "tests/ArcForges.ArcScope.Tests/CandidateTests.cs", + "sha256": "0ce2de28dcde626413e414365ee8d5df52332016b228f4a94c865b3a235a4258", + "normalization": "lf" + }, + { + "path": "tests/ArcForges.ArcScope.Tests/ProvenancePolicyTests.cs", + "sha256": "1772f9bcb9d0e681a979ae29437701478cdf706adaed66a2508bde5ac626f74a", + "normalization": "lf" + }, + { + "path": "eng/ArcForges.Repository/DependencyPolicy.cs", + "sha256": "abedd3d9e40f71dd324c671d133b73c2f0ae1075a2c670340a3ed36106360964", + "normalization": "lf" + }, + { + "path": "docs/dependency-policy.md", + "sha256": "c2c87a4a8b6402abb1aa82060431b33efc66bbfba09635b58c03fbb6e120a7ad", + "normalization": "lf" + }, + { + "path": "eng/policy/dependency-policy.json", + "sha256": "fc6d3017ac4eff3511dd7e3327d4854fdf55bafa16259e1bb54f4df2c1cba113", + "normalization": "lf" + }, + { + "path": "tests/ArcForges.ArcScope.Tests/DependencyPolicyTests.cs", + "sha256": "1337e6a3fed468cd1cc197e1a05243dc63e8c47211af37b5756b87273d0946c7", + "normalization": "lf" + }, + { + "path": "eng/policy/dependency-review.json", + "sha256": "8b473168ffb1407e2fe7e075cdcb1a113c30c84a8cad18a1a520c096d3763470", + "normalization": "lf" + } + ], + "artifactTargets": [], + "disposition": "Rewrite", + "verification": { + "kind": "transformation", + "command": "dotnet run --project eng/ArcForges.Repository -c Release --no-build -- check; run targeted offline DependencyPolicyTests using existing tools and caches.", + "expected": "Complete unchanged locked closure, forbidden/floating/mutable/wrong-publisher negatives, immutable source provenance and matching owner policy input hashes. No runtime/public-download claim.", + "artifacts": [] + }, + "notice": { + "required": true, + "text": "Copyright ArcForges contributors. ArcScope adapts ArcNotes dependency admission and retained support tooling under AGPL-3.0-only; original Apache checker attribution remains retained.", + "files": [ + "LICENSE", + "README.md", + "eng/third-party/LICENSE.Contracts.txt", + "eng/provenance/NOTICE.txt" + ], + "distribution": "source", + "reason": "The full corresponding source retains these origin records and original terms. Compiled support code remains AGPL; portable packages already include the complete root licence and README origin/source pointer. Checker/tool-only Apache code is not linked into the application." + }, + "lifetime": { + "status": "permanent", + "owner": "ArcScope Licensing and Provenance Owner", + "removalTrigger": null + }, + "generation": null, + "review": { + "owner": "Licensing and Provenance Owner", + "reviewer": "Claude Code (Claude Opus 5.5), acting under the repository maintainer's implementation and review authorization", + "reviewedOn": "2026-09-26", + "decision": "approved", + "rationale": "Reviewed owner-specific dependency admission changes for Dependabot PR #13 (grpc-dotnet 2.83.0 -> 2.84.0) against the unchanged ArcNotes origin b7358bd7b1dca0671cd51cf6d798d5c09911b198; only the recorded bytes of the updated owner inputs change. Retain every earlier record, licence and package identity; supersedes arcnotes-provenance-tools-r6.", + "baselineCommit": "ec9a5c311a4503f7f618b11e1fbd31cf4aa389c7", + "reconciliation": false + }, + "supersedes": "arcnotes-provenance-tools-r6" +} diff --git a/src/ArcForges.ArcScope.Core/packages.lock.json b/src/ArcForges.ArcScope.Core/packages.lock.json index d510d1b..4284023 100644 --- a/src/ArcForges.ArcScope.Core/packages.lock.json +++ b/src/ArcForges.ArcScope.Core/packages.lock.json @@ -20,19 +20,19 @@ }, "Grpc.Net.Client": { "type": "Direct", - "requested": "[2.83.0, )", - "resolved": "2.83.0", - "contentHash": "dHYtx7hW4muttsCrWNG4/Ysb1iAIhNPEq28eo7vF166CdXn/RXOr3SGvSreIGIjvmdrADrBNJ2cUeJBto/T0XA==", + "requested": "[2.84.0, )", + "resolved": "2.84.0", + "contentHash": "My6Fms2YCyAbihTBZZ3kLS39iTY2pkMAzGDBTC6XhPOujg70eB07AEJ7tPiW3tZ70bhFzHcc3+d4j3DaIPF3aA==", "dependencies": { - "Grpc.Net.Common": "2.83.0", - "Microsoft.Extensions.Logging.Abstractions": "8.0.0" + "Grpc.Net.Common": "2.84.0", + "Microsoft.Extensions.Logging.Abstractions": "8.0.1" } }, "Grpc.Net.Client.Web": { "type": "Direct", - "requested": "[2.83.0, )", - "resolved": "2.83.0", - "contentHash": "+VsLfmWH7Lv/8sH5k9QjrccR+FQapMvFkBkoTHLdk6EFqBMmBFsddy6A9vvilHZf1AL1GVPaSMBJyGiPcxp7+w==" + "requested": "[2.84.0, )", + "resolved": "2.84.0", + "contentHash": "6KB6IFGx+KfGMaN06nATBVgvgsOEVf12/nJHvdAPsY2mULmWCSn4moFUT8UnCnQ19C3tpGbc2CnB1/e0hVUmaA==" }, "Microsoft.NET.ILLink.Tasks": { "type": "Direct", @@ -47,28 +47,28 @@ }, "Grpc.Core.Api": { "type": "Transitive", - "resolved": "2.83.0", - "contentHash": "xU8BT2bCw4Ct+/qIFJhhjkDEilKUbBOfp4US7l3Xa3hnlkN9l2LgISCbOw4PFYpW5jJFcK7FUAyWOFIQ94Hiqg==" + "resolved": "2.84.0", + "contentHash": "p2SOMl6q/GZ4/5MLkgboC/z55g4zKUEruRn/g46QgppjQBVnsLZVBU/9VO7n60ll38G3Eo8Zu9b7x+W01GKFVg==" }, "Grpc.Net.Common": { "type": "Transitive", - "resolved": "2.83.0", - "contentHash": "9w52xxORdIGu4Mm8lff3psMIlarenu+7TC4uIfiiW9AyaHZ6iPE/18gIkG1DD9byGDuhjuhnN9hiviBUAmCuZw==", + "resolved": "2.84.0", + "contentHash": "DPxm/H8G/lDRrz997wM0M2zN/PGqVeZKDakhBbtABEbv6WIW4HI9g3BvntBQT6ZUROuGacMzfyyF9e5kiTVFfQ==", "dependencies": { - "Grpc.Core.Api": "2.83.0" + "Grpc.Core.Api": "2.84.0" } }, "Microsoft.Extensions.DependencyInjection.Abstractions": { "type": "Transitive", - "resolved": "8.0.0", - "contentHash": "cjWrLkJXK0rs4zofsK4bSdg+jhDLTaxrkXu4gS6Y7MAlCvRyNNgwY/lJi5RDlQOnSZweHqoyvgvbdvQsRIW+hg==" + "resolved": "8.0.1", + "contentHash": "fGLiCRLMYd00JYpClraLjJTNKLmMJPnqxMaiRzEBIIvevlzxz33mXy39Lkd48hu1G+N21S7QpaO5ZzKsI6FRuA==" }, "Microsoft.Extensions.Logging.Abstractions": { "type": "Transitive", - "resolved": "8.0.0", - "contentHash": "arDBqTgFCyS0EvRV7O3MZturChstm50OJ0y9bDJvAcmEPJm0FFpFyjU/JLYyStNGGey081DvnQYlncNX5SJJGA==", + "resolved": "8.0.1", + "contentHash": "RIFgaqoaINxkM2KTOw72dmilDmTrYA0ns2KW4lDz4gZ2+o6IQ894CzmdL3StM2oh7QQq44nCWiqKqc4qUI9Jmg==", "dependencies": { - "Microsoft.Extensions.DependencyInjection.Abstractions": "8.0.0" + "Microsoft.Extensions.DependencyInjection.Abstractions": "8.0.1" } } } diff --git a/src/ArcForges.ArcScope/packages.lock.json b/src/ArcForges.ArcScope/packages.lock.json index 36c5e3c..7875a58 100644 --- a/src/ArcForges.ArcScope/packages.lock.json +++ b/src/ArcForges.ArcScope/packages.lock.json @@ -185,15 +185,15 @@ }, "Grpc.Core.Api": { "type": "Transitive", - "resolved": "2.83.0", - "contentHash": "xU8BT2bCw4Ct+/qIFJhhjkDEilKUbBOfp4US7l3Xa3hnlkN9l2LgISCbOw4PFYpW5jJFcK7FUAyWOFIQ94Hiqg==" + "resolved": "2.84.0", + "contentHash": "p2SOMl6q/GZ4/5MLkgboC/z55g4zKUEruRn/g46QgppjQBVnsLZVBU/9VO7n60ll38G3Eo8Zu9b7x+W01GKFVg==" }, "Grpc.Net.Common": { "type": "Transitive", - "resolved": "2.83.0", - "contentHash": "9w52xxORdIGu4Mm8lff3psMIlarenu+7TC4uIfiiW9AyaHZ6iPE/18gIkG1DD9byGDuhjuhnN9hiviBUAmCuZw==", + "resolved": "2.84.0", + "contentHash": "DPxm/H8G/lDRrz997wM0M2zN/PGqVeZKDakhBbtABEbv6WIW4HI9g3BvntBQT6ZUROuGacMzfyyF9e5kiTVFfQ==", "dependencies": { - "Grpc.Core.Api": "2.83.0" + "Grpc.Core.Api": "2.84.0" } }, "HarfBuzzSharp": { @@ -523,25 +523,25 @@ "type": "Project", "dependencies": { "ArcForges.Contracts.PublicApi": "[1.0.0-ci.36.1, )", - "Grpc.Net.Client": "[2.83.0, )", - "Grpc.Net.Client.Web": "[2.83.0, )" + "Grpc.Net.Client": "[2.84.0, )", + "Grpc.Net.Client.Web": "[2.84.0, )" } }, "Grpc.Net.Client": { "type": "CentralTransitive", - "requested": "[2.83.0, )", - "resolved": "2.83.0", - "contentHash": "dHYtx7hW4muttsCrWNG4/Ysb1iAIhNPEq28eo7vF166CdXn/RXOr3SGvSreIGIjvmdrADrBNJ2cUeJBto/T0XA==", + "requested": "[2.84.0, )", + "resolved": "2.84.0", + "contentHash": "My6Fms2YCyAbihTBZZ3kLS39iTY2pkMAzGDBTC6XhPOujg70eB07AEJ7tPiW3tZ70bhFzHcc3+d4j3DaIPF3aA==", "dependencies": { - "Grpc.Net.Common": "2.83.0", - "Microsoft.Extensions.Logging.Abstractions": "8.0.0" + "Grpc.Net.Common": "2.84.0", + "Microsoft.Extensions.Logging.Abstractions": "8.0.1" } }, "Grpc.Net.Client.Web": { "type": "CentralTransitive", - "requested": "[2.83.0, )", - "resolved": "2.83.0", - "contentHash": "+VsLfmWH7Lv/8sH5k9QjrccR+FQapMvFkBkoTHLdk6EFqBMmBFsddy6A9vvilHZf1AL1GVPaSMBJyGiPcxp7+w==" + "requested": "[2.84.0, )", + "resolved": "2.84.0", + "contentHash": "6KB6IFGx+KfGMaN06nATBVgvgsOEVf12/nJHvdAPsY2mULmWCSn4moFUT8UnCnQ19C3tpGbc2CnB1/e0hVUmaA==" } }, "net10.0/linux-x64": { diff --git a/tests/ArcForges.ArcScope.Tests/packages.lock.json b/tests/ArcForges.ArcScope.Tests/packages.lock.json index 32990c8..9e03247 100644 --- a/tests/ArcForges.ArcScope.Tests/packages.lock.json +++ b/tests/ArcForges.ArcScope.Tests/packages.lock.json @@ -21,9 +21,9 @@ }, "Grpc.AspNetCore.Web": { "type": "Direct", - "requested": "[2.83.0, )", - "resolved": "2.83.0", - "contentHash": "0fQlnmUorVo7SCghly5MQ5IhOn+w+Z9PYQOibdnYVUPJOhzW3iVwr5HYMVC5PnsTUfwpyZWIOfrAnwPa51k5Qw==" + "requested": "[2.84.0, )", + "resolved": "2.84.0", + "contentHash": "xhpKA/nWQbgFLT0Z9sANWU2n9qMcb7l5Sfo7Z7f+7JZxGxGMEKe9kbGn9K8TxJmsDJ9wlxJKp+b40HsQfuMFEQ==" }, "xunit.v3.mtp-v2": { "type": "Direct", @@ -60,8 +60,8 @@ }, "Grpc.Core.Api": { "type": "Transitive", - "resolved": "2.83.0", - "contentHash": "xU8BT2bCw4Ct+/qIFJhhjkDEilKUbBOfp4US7l3Xa3hnlkN9l2LgISCbOw4PFYpW5jJFcK7FUAyWOFIQ94Hiqg==" + "resolved": "2.84.0", + "contentHash": "p2SOMl6q/GZ4/5MLkgboC/z55g4zKUEruRn/g46QgppjQBVnsLZVBU/9VO7n60ll38G3Eo8Zu9b7x+W01GKFVg==" }, "Grpc.Net.ClientFactory": { "type": "Transitive", @@ -73,10 +73,10 @@ }, "Grpc.Net.Common": { "type": "Transitive", - "resolved": "2.83.0", - "contentHash": "9w52xxORdIGu4Mm8lff3psMIlarenu+7TC4uIfiiW9AyaHZ6iPE/18gIkG1DD9byGDuhjuhnN9hiviBUAmCuZw==", + "resolved": "2.84.0", + "contentHash": "DPxm/H8G/lDRrz997wM0M2zN/PGqVeZKDakhBbtABEbv6WIW4HI9g3BvntBQT6ZUROuGacMzfyyF9e5kiTVFfQ==", "dependencies": { - "Grpc.Core.Api": "2.83.0" + "Grpc.Core.Api": "2.84.0" } }, "Grpc.Tools": { @@ -196,8 +196,8 @@ "type": "Project", "dependencies": { "ArcForges.Contracts.PublicApi": "[1.0.0-ci.36.1, )", - "Grpc.Net.Client": "[2.83.0, )", - "Grpc.Net.Client.Web": "[2.83.0, )" + "Grpc.Net.Client": "[2.84.0, )", + "Grpc.Net.Client.Web": "[2.84.0, )" } }, "arcforges.repository": { @@ -218,18 +218,18 @@ }, "Grpc.Net.Client": { "type": "CentralTransitive", - "requested": "[2.83.0, )", - "resolved": "2.83.0", - "contentHash": "dHYtx7hW4muttsCrWNG4/Ysb1iAIhNPEq28eo7vF166CdXn/RXOr3SGvSreIGIjvmdrADrBNJ2cUeJBto/T0XA==", + "requested": "[2.84.0, )", + "resolved": "2.84.0", + "contentHash": "My6Fms2YCyAbihTBZZ3kLS39iTY2pkMAzGDBTC6XhPOujg70eB07AEJ7tPiW3tZ70bhFzHcc3+d4j3DaIPF3aA==", "dependencies": { - "Grpc.Net.Common": "2.83.0" + "Grpc.Net.Common": "2.84.0" } }, "Grpc.Net.Client.Web": { "type": "CentralTransitive", - "requested": "[2.83.0, )", - "resolved": "2.83.0", - "contentHash": "+VsLfmWH7Lv/8sH5k9QjrccR+FQapMvFkBkoTHLdk6EFqBMmBFsddy6A9vvilHZf1AL1GVPaSMBJyGiPcxp7+w==" + "requested": "[2.84.0, )", + "resolved": "2.84.0", + "contentHash": "6KB6IFGx+KfGMaN06nATBVgvgsOEVf12/nJHvdAPsY2mULmWCSn4moFUT8UnCnQ19C3tpGbc2CnB1/e0hVUmaA==" } } }