Skip to content

Conversation

@jasonsummers
Copy link
Contributor

@jasonsummers jasonsummers commented Dec 29, 2025

Credits

Summary

  • Replaces netcoreapp3.1 with net10.0 as the target framework for the solution.
  • Bumps all dependencies in the solution with the following exceptions:
    • EPPlus remains at 4.5.2.1 due to the project becoming licensed after that version
    • JSPool remains at 2.0.1 because upgrading breaks a Unit Test in Statiq.Web which I have been unable to successfully debug.
  • Removes Nuget Package Vulnerability Suppressions.
  • Adds suppressions for new warnings which would be time consuming to resolve or grow the size of the PR.
  • Pins some transitive dependencies to remediate security issues.
  • Converts Unit Test Assertions to Constraint Type.

Potential Breaks

  • InitializeLifetimeService() has been removed from the Stream class with no migration path. This function has also been removed from src/core/Statiq.Common/Util/ItemStreams/ItemStream{TItem}.cs
  • ServicePointManager no longer affects HttpClient. Code removed from src/core/Statiq.Core/Modules/IO/MirrorResources.cs. Working assumption is that valid SSL configurations are either present or easy enough to configure to warrant this removal. Further refactoring to manage an HttpClientFactory across the pipeline would be needed if this functionality is still required.
  • MetaData passed through command line arguments no longer needs to be escaped. See amendment to test in tests/core/Statiq.App.Tests/Bootstrapper/BootstrapperFixture.cs.

…scaped.

Probably due to changes in how the dotnet CLI or Spectre interprets arguments, computed metadata no longer needs to be contained within a set of escaped quotes.
Replaced string concatonation with string interlepolation in two tests and inverted left/right comparison in a further two tests.

Amended logic appears to be Unit Test specific with no impact on Statiq code.
…sues.

Pin dependencies Newtonsoft.Json and System.Drawing.Common to resolve security issues.
@jasonsummers jasonsummers marked this pull request as ready for review December 29, 2025 14:19
@daveaglick
Copy link
Member

Thanks again for all the work on this! Merging it now and then going to work on bringing this code into the Statiq.Web repo (and archiving this one).

@daveaglick daveaglick merged commit 51a3136 into statiqdev:main Dec 29, 2025
1 check passed
@jasonsummers
Copy link
Contributor Author

Thanks again for all the work on this! Merging it now and then going to work on bringing this code into the Statiq.Web repo (and archiving this one).

If there's anything I can do to help please do reach out, happy to help where I can 🙂

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants