From 95d6ca7ec801066ed59141e2716d8e2bc377fa81 Mon Sep 17 00:00:00 2001
From: "Daniel J. Summers" <daniel@bitbadger.solutions>
Date: Mon, 20 Jul 2026 23:09:40 -0400
Subject: [PATCH] Pin SQLite dep to non-vuln version

- Update deps
- Migrate to slnx / central pkg mgt
---
 src/BitBadger.Documents.sln                   | 46 -------------------
 src/BitBadger.Documents.slnx                  |  7 +++
 src/Common/BitBadger.Documents.Common.fsproj  |  8 ++--
 src/Directory.Build.props                     |  8 ++--
 src/Directory.Packages.props                  | 18 ++++++++
 .../BitBadger.Documents.Postgres.fsproj       |  6 +--
 src/Sqlite/BitBadger.Documents.Sqlite.fsproj  |  4 +-
 .../BitBadger.Documents.Tests.CSharp.csproj   |  4 +-
 src/Tests/BitBadger.Documents.Tests.fsproj    |  4 +-
 src/test_all.sh                               |  6 +--
 10 files changed, 45 insertions(+), 66 deletions(-)
 delete mode 100644 src/BitBadger.Documents.sln
 create mode 100644 src/BitBadger.Documents.slnx
 create mode 100644 src/Directory.Packages.props

diff --git a/src/BitBadger.Documents.sln b/src/BitBadger.Documents.sln
deleted file mode 100644
index c6f850d..0000000
--- a/src/BitBadger.Documents.sln
+++ /dev/null
@@ -1,46 +0,0 @@
-
-Microsoft Visual Studio Solution File, Format Version 12.00
-# Visual Studio Version 17
-VisualStudioVersion = 17.0.31903.59
-MinimumVisualStudioVersion = 10.0.40219.1
-Project("{F2A71F9B-5D33-465A-A702-920D77279786}") = "BitBadger.Documents.Common", "Common\BitBadger.Documents.Common.fsproj", "{E52D624A-2A1F-4D38-82B6-115907D9CB1A}"
-EndProject
-Project("{F2A71F9B-5D33-465A-A702-920D77279786}") = "BitBadger.Documents.Tests", "Tests\BitBadger.Documents.Tests.fsproj", "{45D5D503-9FD0-4ADB-ABC6-C8FDAD82B848}"
-EndProject
-Project("{F2A71F9B-5D33-465A-A702-920D77279786}") = "BitBadger.Documents.Sqlite", "Sqlite\BitBadger.Documents.Sqlite.fsproj", "{B8A82483-1E72-46D2-B29A-1C371AC5DD20}"
-EndProject
-Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "BitBadger.Documents.Tests.CSharp", "Tests.CSharp\BitBadger.Documents.Tests.CSharp.csproj", "{AB58418C-7F90-467E-8F67-F4E0AD9D8875}"
-EndProject
-Project("{F2A71F9B-5D33-465A-A702-920D77279786}") = "BitBadger.Documents.Postgres", "Postgres\BitBadger.Documents.Postgres.fsproj", "{30E73486-9D00-440B-B4AC-5B7AC029AE72}"
-EndProject
-Global
-	GlobalSection(SolutionConfigurationPlatforms) = preSolution
-		Debug|Any CPU = Debug|Any CPU
-		Release|Any CPU = Release|Any CPU
-	EndGlobalSection
-	GlobalSection(SolutionProperties) = preSolution
-		HideSolutionNode = FALSE
-	EndGlobalSection
-	GlobalSection(ProjectConfigurationPlatforms) = postSolution
-		{E52D624A-2A1F-4D38-82B6-115907D9CB1A}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{E52D624A-2A1F-4D38-82B6-115907D9CB1A}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{E52D624A-2A1F-4D38-82B6-115907D9CB1A}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{E52D624A-2A1F-4D38-82B6-115907D9CB1A}.Release|Any CPU.Build.0 = Release|Any CPU
-		{45D5D503-9FD0-4ADB-ABC6-C8FDAD82B848}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{45D5D503-9FD0-4ADB-ABC6-C8FDAD82B848}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{45D5D503-9FD0-4ADB-ABC6-C8FDAD82B848}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{45D5D503-9FD0-4ADB-ABC6-C8FDAD82B848}.Release|Any CPU.Build.0 = Release|Any CPU
-		{B8A82483-1E72-46D2-B29A-1C371AC5DD20}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{B8A82483-1E72-46D2-B29A-1C371AC5DD20}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{B8A82483-1E72-46D2-B29A-1C371AC5DD20}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{B8A82483-1E72-46D2-B29A-1C371AC5DD20}.Release|Any CPU.Build.0 = Release|Any CPU
-		{AB58418C-7F90-467E-8F67-F4E0AD9D8875}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{AB58418C-7F90-467E-8F67-F4E0AD9D8875}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{AB58418C-7F90-467E-8F67-F4E0AD9D8875}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{AB58418C-7F90-467E-8F67-F4E0AD9D8875}.Release|Any CPU.Build.0 = Release|Any CPU
-		{30E73486-9D00-440B-B4AC-5B7AC029AE72}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{30E73486-9D00-440B-B4AC-5B7AC029AE72}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{30E73486-9D00-440B-B4AC-5B7AC029AE72}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{30E73486-9D00-440B-B4AC-5B7AC029AE72}.Release|Any CPU.Build.0 = Release|Any CPU
-	EndGlobalSection
-EndGlobal
diff --git a/src/BitBadger.Documents.slnx b/src/BitBadger.Documents.slnx
new file mode 100644
index 0000000..365b06c
--- /dev/null
+++ b/src/BitBadger.Documents.slnx
@@ -0,0 +1,7 @@
+<Solution>
+  <Project Path="Common/BitBadger.Documents.Common.fsproj" />
+  <Project Path="Postgres/BitBadger.Documents.Postgres.fsproj" />
+  <Project Path="Sqlite/BitBadger.Documents.Sqlite.fsproj" />
+  <Project Path="Tests.CSharp/BitBadger.Documents.Tests.CSharp.csproj" />
+  <Project Path="Tests/BitBadger.Documents.Tests.fsproj" />
+</Solution>
diff --git a/src/Common/BitBadger.Documents.Common.fsproj b/src/Common/BitBadger.Documents.Common.fsproj
index 61d7455..f75f70b 100644
--- a/src/Common/BitBadger.Documents.Common.fsproj
+++ b/src/Common/BitBadger.Documents.Common.fsproj
@@ -13,10 +13,10 @@
   </ItemGroup>
 
   <ItemGroup>
-    <PackageReference Include="FSharp.SystemTextJson" Version="1.4.36" />
-    <PackageReference Update="FSharp.Core" Version="10.0.101" />
-    <PackageReference Include="System.Text.Encodings.Web" Version="10.0.1" />
-    <PackageReference Include="System.Text.Json" Version="10.0.1" />
+    <PackageReference Include="FSharp.SystemTextJson" />
+    <PackageReference Update="FSharp.Core" />
+    <PackageReference Include="System.Text.Encodings.Web" />
+    <PackageReference Include="System.Text.Json" />
   </ItemGroup>
 
 </Project>
diff --git a/src/Directory.Build.props b/src/Directory.Build.props
index 811ed72..f437765 100644
--- a/src/Directory.Build.props
+++ b/src/Directory.Build.props
@@ -3,10 +3,10 @@
     <TargetFrameworks>net8.0;net9.0;net10.0</TargetFrameworks>
     <DebugType>embedded</DebugType>
     <GenerateDocumentationFile>true</GenerateDocumentationFile>
-    <AssemblyVersion>4.2.0.0</AssemblyVersion>
-    <FileVersion>4.2.0.0</FileVersion>
-    <VersionPrefix>4.2.0</VersionPrefix>
-    <PackageReleaseNotes>Add .NET 10 support; update dependencies, supported PostgreSQL versions</PackageReleaseNotes>
+    <AssemblyVersion>4.3.0.0</AssemblyVersion>
+    <FileVersion>4.3.0.0</FileVersion>
+    <VersionPrefix>4.3.0</VersionPrefix>
+    <PackageReleaseNotes>Update deps; require non-vulnerable SQLite library</PackageReleaseNotes>
     <Authors>danieljsummers</Authors>
     <Company>Bit Badger Solutions</Company>
     <PackageReadmeFile>README.md</PackageReadmeFile>
diff --git a/src/Directory.Packages.props b/src/Directory.Packages.props
new file mode 100644
index 0000000..4ac24e4
--- /dev/null
+++ b/src/Directory.Packages.props
@@ -0,0 +1,18 @@
+<Project>
+  <PropertyGroup>
+    <ManagePackageVersionsCentrally>true</ManagePackageVersionsCentrally>
+    <CentralPackageTransitivePinningEnabled>true</CentralPackageTransitivePinningEnabled>
+  </PropertyGroup>
+  <ItemGroup>
+    <PackageVersion Include="Expecto" Version="11.1.0" />
+    <PackageVersion Include="FSharp.Core" Version="10.0.101" />
+    <PackageVersion Include="FSharp.SystemTextJson" Version="1.4.36" />
+    <PackageVersion Include="Microsoft.Data.Sqlite" Version="10.0.10" />
+    <PackageVersion Include="Npgsql" Version="10.0.3" />
+    <PackageVersion Include="Npgsql.FSharp" Version="8.0.0" />
+    <PackageVersion Include="SQLitePCLRaw.lib.e_sqlite3" Version="3.50.3" />
+    <PackageVersion Include="System.Text.Encodings.Web" Version="10.0.10" />
+    <PackageVersion Include="System.Text.Json" Version="10.0.10" />
+    <PackageVersion Include="ThrowawayDb.Postgres" Version="1.4.0" />
+  </ItemGroup>
+</Project>
\ No newline at end of file
diff --git a/src/Postgres/BitBadger.Documents.Postgres.fsproj b/src/Postgres/BitBadger.Documents.Postgres.fsproj
index 1346203..38c7e73 100644
--- a/src/Postgres/BitBadger.Documents.Postgres.fsproj
+++ b/src/Postgres/BitBadger.Documents.Postgres.fsproj
@@ -17,9 +17,9 @@
   </ItemGroup>
 
   <ItemGroup>
-    <PackageReference Include="Npgsql" Version="10.0.1" />
-    <PackageReference Include="Npgsql.FSharp" Version="8.0.0" />
-    <PackageReference Update="FSharp.Core" Version="10.0.101" />
+    <PackageReference Include="Npgsql" />
+    <PackageReference Include="Npgsql.FSharp" />
+    <PackageReference Update="FSharp.Core" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/src/Sqlite/BitBadger.Documents.Sqlite.fsproj b/src/Sqlite/BitBadger.Documents.Sqlite.fsproj
index a0c7a86..ea07bde 100644
--- a/src/Sqlite/BitBadger.Documents.Sqlite.fsproj
+++ b/src/Sqlite/BitBadger.Documents.Sqlite.fsproj
@@ -17,8 +17,8 @@
   </ItemGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Data.Sqlite" Version="10.0.1" />
-    <PackageReference Update="FSharp.Core" Version="10.0.101" />
+    <PackageReference Include="Microsoft.Data.Sqlite" />
+    <PackageReference Update="FSharp.Core" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/src/Tests.CSharp/BitBadger.Documents.Tests.CSharp.csproj b/src/Tests.CSharp/BitBadger.Documents.Tests.CSharp.csproj
index 84b99f9..c710770 100644
--- a/src/Tests.CSharp/BitBadger.Documents.Tests.CSharp.csproj
+++ b/src/Tests.CSharp/BitBadger.Documents.Tests.CSharp.csproj
@@ -14,8 +14,8 @@
   </ItemGroup>
 
   <ItemGroup>
-    <PackageReference Include="Expecto" Version="10.2.3" />
-    <PackageReference Include="ThrowawayDb.Postgres" Version="1.4.0" />
+    <PackageReference Include="Expecto" />
+    <PackageReference Include="ThrowawayDb.Postgres" />
   </ItemGroup>
 
 </Project>
diff --git a/src/Tests/BitBadger.Documents.Tests.fsproj b/src/Tests/BitBadger.Documents.Tests.fsproj
index bdcbb9e..c72824b 100644
--- a/src/Tests/BitBadger.Documents.Tests.fsproj
+++ b/src/Tests/BitBadger.Documents.Tests.fsproj
@@ -16,8 +16,8 @@
   </ItemGroup>
 
   <ItemGroup>
-    <PackageReference Include="Expecto" Version="10.2.3" />
-    <PackageReference Update="FSharp.Core" Version="10.0.101" />
+    <PackageReference Include="Expecto" />
+    <PackageReference Update="FSharp.Core" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/src/test_all.sh b/src/test_all.sh
index 580c956..1cc64ce 100755
--- a/src/test_all.sh
+++ b/src/test_all.sh
@@ -1,8 +1,8 @@
 #!/bin/bash
 
-dotnet clean BitBadger.Documents.sln
-dotnet restore BitBadger.Documents.sln
-dotnet build BitBadger.Documents.sln --no-restore
+dotnet clean BitBadger.Documents.slnx
+dotnet restore BitBadger.Documents.slnx
+dotnet build BitBadger.Documents.slnx --no-restore
 
 cd ./Tests || exit