Upgrade project from .NET 5.0 to .NET 9.0 and resolve security vulnerabilities #16
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR upgrades the AgQueue project from .NET 5.0 to .NET 9.0, resolving multiple security vulnerabilities and modernizing the codebase with the latest .NET runtime and package versions.
What Changed
Framework Upgrade
net5.0tonet9.0target frameworkdotnet-sdk-9.0)Security Vulnerabilities Resolved
This upgrade addresses several high and moderate severity security vulnerabilities:
4.1.5→9.0.3(resolved GHSA-x9vc-6hfv-hg8c)2.2.60→3.1.4(resolved GHSA-4qm4-8hg2-g2xm)12.0.3→13.0.4(resolved GHSA-5crp-9r3c-p9vr)Package Updates
Major package updates to latest compatible versions:
Grpc.AspNetCore2.32.0 → 2.71.0Microsoft.Extensions.*packages from 3.1.8 → 9.0.9Microsoft.Data.Sqlite3.1.8 → 9.0.9,Dapper2.0.35 → 2.1.66Cross-Platform Compatibility
C:\dev\AgQueue\...) to use portable MSBuild variables ($(OutputPath)$(AssemblyName).xml).gitignoreto exclude generated XML documentation filesWhy This Change
Testing
dotnet list package --vulnerable)Breaking Changes
None expected. This upgrade maintains API compatibility while modernizing the underlying runtime and dependencies.
Future Benefits
Original prompt
💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.