<Project>

  <PropertyGroup>
    <ManagePackageVersionsCentrally>true</ManagePackageVersionsCentrally>
    <CentralPackageTransitivePinningEnabled>true</CentralPackageTransitivePinningEnabled>
  </PropertyGroup>

  <PropertyGroup>
    <!-- Special case - this property is used by a DotNetCliToolReference -->
    <DotNetXunitVersion>2.3.0</DotNetXunitVersion>
  </PropertyGroup>

  <ItemGroup>
    <PackageVersion Include="AngleSharp" Version="1.1.2" />
    <PackageVersion Include="AWSSDK.S3" Version="3.7.405.14" />
    <PackageVersion Include="AWSSDK.Extensions.NETCore.Setup" Version="3.7.301" />
    <PackageVersion Include="Azure.Communication.Email" Version="1.0.1" />
    <PackageVersion Include="Azure.Communication.Sms" Version="1.0.1" />
    <PackageVersion Include="Azure.Extensions.AspNetCore.Configuration.Secrets" Version="1.3.2" />
    <PackageVersion Include="Azure.Extensions.AspNetCore.DataProtection.Blobs" Version="1.3.4" />
    <PackageVersion Include="Azure.Identity" Version="1.13.1" />
    <PackageVersion Include="Azure.Search.Documents" Version="11.6.0" />
    <PackageVersion Include="Azure.Storage.Blobs" Version="12.23.0" />
    <PackageVersion Include="BenchmarkDotNet" Version="0.14.0" />
    <PackageVersion Include="Castle.Core" Version="5.1.1" />
    <PackageVersion Include="DocumentFormat.OpenXml" Version="3.1.1" />
    <PackageVersion Include="Elastic.Clients.Elasticsearch" Version="8.16.1" />
    <PackageVersion Include="Fluid.Core" Version="2.12.0" />
    <PackageVersion Include="GraphQL" Version="8.2.1" />
    <PackageVersion Include="GraphQL.DataLoader" Version="8.2.1" />
    <PackageVersion Include="GraphQL.MicrosoftDI" Version="8.2.1" />
    <PackageVersion Include="GraphQL.SystemTextJson" Version="8.2.1" />
    <PackageVersion Include="Jint" Version="4.1.0" />
    <PackageVersion Include="JsonPath.Net" Version="1.1.6" />
    <PackageVersion Include="HtmlSanitizer" Version="8.2.871-beta" />
    <PackageVersion Include="Irony" Version="1.5.3" />
    <PackageVersion Include="libphonenumber-csharp" Version="8.13.49" />
    <PackageVersion Include="Lorem.Universal.NET" Version="4.0.80" />
    <PackageVersion Include="Lucene.Net" Version="4.8.0-beta00016" />
    <PackageVersion Include="Lucene.Net.Analysis.Common" Version="4.8.0-beta00016" />
    <PackageVersion Include="Lucene.Net.QueryParser" Version="4.8.0-beta00016" />
    <PackageVersion Include="Lucene.Net.Spatial" Version="4.8.0-beta00016" />
    <PackageVersion Include="MailKit" Version="4.8.0" />
    <PackageVersion Include="Markdig" Version="0.38.0" />
    <PackageVersion Include="Microsoft.Extensions.Azure" Version="1.8.0" />
    <PackageVersion Include="Microsoft.Identity.Web" Version="3.3.1" />
    <!--
      Important: the version of the Microsoft.IdentityModel.Protocols.OpenIdConnect package MUST
      match the IdentityModel version transitively referenced by OpenIddict to ensure we don't
      accidentally end up referencing inconsistent versions (which is not supported by IM).
 
      See https://github.com/OrchardCMS/OrchardCore/pull/16057 for more information.
    -->
    <PackageVersion Include="Microsoft.IdentityModel.Protocols.OpenIdConnect" Version="8.2.0" />
    <PackageVersion Include="Microsoft.IO.RecyclableMemoryStream" Version="3.0.1" />
    <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="17.11.1" />
    <PackageVersion Include="MimeKit" Version="4.8.0" />
    <PackageVersion Include="MiniProfiler.AspNetCore.Mvc" Version="4.3.8" />
    <PackageVersion Include="Moq" Version="4.20.72" />
    <PackageVersion Include="ncrontab" Version="3.3.3" />
    <PackageVersion Include="NJsonSchema" Version="11.0.2" />
    <PackageVersion Include="NLog.Web.AspNetCore" Version="5.3.14" />
    <PackageVersion Include="NodaTime" Version="3.2.0" />
    <PackageVersion Include="OpenIddict.Core" Version="5.8.0" />
    <PackageVersion Include="OpenIddict.Server.AspNetCore" Version="5.8.0" />
    <PackageVersion Include="OpenIddict.Server.DataProtection" Version="5.8.0" />
    <PackageVersion Include="OpenIddict.Validation.AspNetCore" Version="5.8.0" />
    <PackageVersion Include="OpenIddict.Validation.DataProtection" Version="5.8.0" />
    <PackageVersion Include="OpenIddict.Validation.SystemNetHttp" Version="5.8.0" />
    <PackageVersion Include="OrchardCore.Translations.All" Version="2.1.0" />
    <PackageVersion Include="PdfPig" Version="0.1.9" />
    <PackageVersion Include="Serilog.AspNetCore" Version="8.0.3" />
    <PackageVersion Include="Shortcodes" Version="1.3.4" />
    <PackageVersion Include="SixLabors.ImageSharp.Web" Version="3.1.3" />
    <PackageVersion Include="SixLabors.ImageSharp.Web.Providers.Azure" Version="3.1.3" />
    <PackageVersion Include="SixLabors.ImageSharp.Web.Providers.AWS" Version="3.1.3" />
    <PackageVersion Include="StackExchange.Redis" Version="2.8.16" />
    <PackageVersion Include="StyleCop.Analyzers" Version="1.1.118" />
    <PackageVersion Include="System.Linq.Async" Version="6.0.1" />
    <PackageVersion Include="System.IO.Hashing" Version="8.0.0" />
    <PackageVersion Include="xunit" Version="2.9.2" />
    <PackageVersion Include="xunit.analyzers" Version="1.17.0" />
    <PackageVersion Include="xunit.runner.visualstudio" Version="2.8.2" />
    <PackageVersion Include="YesSql" Version="5.1.1" />
    <PackageVersion Include="YesSql.Abstractions" Version="5.1.1" />
    <PackageVersion Include="YesSql.Core" Version="5.1.1" />
    <PackageVersion Include="YesSql.Filters.Abstractions" Version="5.1.1" />
    <PackageVersion Include="YesSql.Filters.Query" Version="5.1.1" />
    <PackageVersion Include="ZString" Version="2.6.0" />

    <!-- dotnet/extensions -->
    <PackageVersion Include="Microsoft.Extensions.Http.Resilience" Version="8.10.0" />
  </ItemGroup>

  <ItemGroup>
    <GlobalPackageReference Include="Microsoft.SourceLink.GitHub" Version="8.0.0" />
    <GlobalPackageReference Include="Microsoft.CodeAnalysis.CSharp.CodeStyle" Version="4.11.0" />
  </ItemGroup>

  <!-- These versions are used for tansitive dependency forced upgrades only. E.g. when a package references a vulnerable version. -->
  <!-- To list all vulnerable direct references run 'dotnet list package -vulnerable' (use double dash, just XML comments can't contain it) -->
  <!-- To list all vulnerable transitive references run 'dotnet list package -vulnerable -include-transitive' (use double dash, just XML comments can't contain it) -->

  <!-- The dependency graphs are generated using 'dotnet nuget why <.sln> <package id>' -->
  <ItemGroup>
    <!--
      MiniProfiler.AspNetCore.Mvc (v4.3.8)
        └─ MiniProfiler.AspNetCore (v4.3.8)
           └─ MiniProfiler.Shared (v4.3.8)
              └─ System.Data.Common (v4.3.0)
                 └─ System.Text.RegularExpressions (v4.3.0)
    -->
    <PackageVersion Include="System.Text.RegularExpressions" Version="4.3.1" />
    <!--
      Azure.Extensions.AspNetCore.DataProtection.Blobs (v1.3.4)
      └─ Microsoft.AspNetCore.DataProtection (v3.1.32)
         └─ System.Security.Cryptography.Xml (v4.7.1)
            └─ System.Security.Permissions (v4.7.0)
               └─ System.Windows.Extensions (v4.7.0)
                  └─ System.Drawing.Common (v4.7.0)
    -->
    <!-- When removing this, remove the corresponding ignore in dependabot.yml too. -->
    <PackageVersion Include="System.Drawing.Common" Version="4.7.2" />

    <!--
       OrchardCore.Media.Indexing.OpenXML (v2.1.0-preview)
        └─ DocumentFormat.OpenXml (v3.1.0)
          └─ DocumentFormat.OpenXml.Framework (v3.1.0)
              └─ System.IO.Packaging (v8.0.0)
    -->
    <PackageVersion Include="System.IO.Packaging" Version="8.0.1" />
    <!--
      YesSql (v5.1.1)
      └─ YesSql.Provider.SqlServer (v5.1.1)
          └─ Microsoft.Data.SqlClient (v5.2.1)
            └─ System.Runtime.Caching (v8.0.0)
    -->
    <PackageVersion Include="System.Runtime.Caching" Version="8.0.1" />
    <PackageVersion Include="System.Private.Uri" Version="4.3.2" />
    <!-- Several transitive dependencies on 8.0.4 and lower which has known vulnerabilities -->
    <PackageVersion Include="System.Text.Json" Version="8.0.5" />
    <!-- Several transitive dependencies on 8.0.0 which has known vulnerabilities -->
    <PackageVersion Include="Microsoft.Extensions.Caching.Memory" Version="8.0.1" />
  </ItemGroup>
  <!-- These versions are used for the NuGet packages that are dependent on the current TFM -->
  <!-- Versions are preset for the default TFM (there may be no TFM in an evaluation phase) -->
  <PropertyGroup>
    <AspNetCorePackagesVersion>8.0.11</AspNetCorePackagesVersion>
    <MicrosoftExtensionsPackagesVersion>8.0.11</MicrosoftExtensionsPackagesVersion>
  </PropertyGroup>

  <!-- When dual-targeting frameworks, add both of them to CommonTargetFrameworks above, when add PropertyGroups like
  below. -->
  <!--<PropertyGroup Condition="$(TargetFramework) == 'net7.0'">
    <AspNetCorePackagesVersion>7.0.14</AspNetCorePackagesVersion>
    <MicrosoftExtensionsPackagesVersion>7.0.14</MicrosoftExtensionsPackagesVersion>
  </PropertyGroup>-->
  <!-- 'Microsoft.AspNetCore' packages that are not included in the ASP.NET Core shared framework -->
  <ItemGroup>
    <PackageVersion Include="Microsoft.AspNetCore.Authentication.Facebook" Version="$(AspNetCorePackagesVersion)" />
    <PackageVersion Include="Microsoft.AspNetCore.Authentication.Google" Version="$(AspNetCorePackagesVersion)" />
    <PackageVersion Include="Microsoft.AspNetCore.Authentication.MicrosoftAccount" Version="$(AspNetCorePackagesVersion)" />
    <PackageVersion Include="Microsoft.AspNetCore.Authentication.OpenIdConnect" Version="$(AspNetCorePackagesVersion)" />
    <PackageVersion Include="Microsoft.AspNetCore.Authentication.Twitter" Version="$(AspNetCorePackagesVersion)" />
    <PackageVersion Include="Microsoft.AspNetCore.DataProtection.StackExchangeRedis" Version="$(AspNetCorePackagesVersion)" />
    <PackageVersion Include="Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation" Version="$(AspNetCorePackagesVersion)" />
    <PackageVersion Include="Microsoft.AspNetCore.Mvc.Testing" Version="$(AspNetCorePackagesVersion)" />
    <PackageVersion Include="Microsoft.AspNetCore.Owin" Version="$(AspNetCorePackagesVersion)" />
  </ItemGroup>
  <!-- 'Microsoft.Extensions' packages that are not included in the ASP.NET Core shared framework -->
  <ItemGroup>

    <PackageVersion Include="Microsoft.Extensions.Caching.StackExchangeRedis" Version="$(MicrosoftExtensionsPackagesVersion)" />
    <!-- Microsoft.Extensions.Http.Resilience is not here because it diverged from the common Microsoft.Extensions versioning. -->
  </ItemGroup>

</Project>