chore(deps): refresh dotnet package set

[yordis]

• Keeping the package set current reduces maintenance drift across telemetry, source generation, test infrastructure, and runtime dependencies.
• Batching the low-risk updates keeps review and CI focused while leaving major-version decisions for separate work.

[cursor]

PR Summary

Medium Risk
Wide dependency surface including cryptography, OpenTelemetry, and AWS SDK bumps could affect build, tests, or runtime behavior even without code edits; changes are mostly minor/patch within existing major versions.

Overview
Bumps centrally managed NuGet versions in Directory.Packages.props across test tooling, build analyzers, telemetry, gRPC/protobuf codegen, and several runtime libraries—no application code changes.

Notable groups include OpenTelemetry (1.15.x → 1.16.0), Microsoft.CodeAnalysis and related workspaces (5.3.0 → 5.6.0), .NET 10-aligned packages (10.0.7 → 10.0.9 for TestHost, Sqlite, hosting, and System.Security.Cryptography), Grpc.Tools (2.80.0 → 2.82.0), AWSSDK.Core (4.0.6.1 → 4.0.100.2), Jint, librdkafka.redist, NuGet.Protocol, and Microsoft.NET.Test.Sdk. Patch-level updates also cover coverlet, GitInfo, Google.Protobuf, Serilog.Settings.Configuration, and diagnostics/testing extensions.

^{Reviewed by Cursor Bugbot for commit 12b7896. Bugbot is set up for automated code reviews on this repo. Configure here.}

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: ebe2074a-6698-4462-9170-5cce861e476c

📥 Commits

Reviewing files that changed from the base of the PR and between 8435148 and 12b7896.

📒 Files selected for processing (1)

• src/Directory.Packages.props

---

Walkthrough

This PR updates centralized NuGet package version pins in src/Directory.Packages.props, bumping versions across coverlet, AWS SDK, Protobuf/gRPC, Roslyn analyzers, OpenTelemetry, Serilog, and System.Security/Diagnostics packages, with one package intentionally kept unchanged.

Changes

Package Version Updates

Layer / File(s)	Summary
Centralized package version pins src/Directory.Packages.props	Bumps coverlet.collector, AWS SDK, GitInfo, Protobuf/gRPC, Roslyn analyzer, Microsoft.Data.Sqlite, and OpenTelemetry package versions; retains Microsoft.CodeAnalysis.CSharp.SourceGenerators.Testing.XUnit at 1.1.1; upgrades Serilog.Extensions.Logging and System.Diagnostics.PerformanceCounter, System.Security.Cryptography.Pkcs/Xml.

Estimated code review effort: 2 (Simple) | ~10 minutes

Possibly related PRs

• TrogonStack/TrogonEventStore#22: Both PRs modify NuGet central package management in src/Directory.Packages.props, one establishing CPM and this one updating the pinned versions.

Poem

A rabbit hops through version strings,
Bumping deps like fluttering wings,
10.0.9, 1.1.1 stays put,
Carrots pinned from root to shoot,
Hop, hop, hooray — the packages fresh! 🥕📦

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly summarizes the dependency refresh across the .NET package set.
Description check	✅ Passed	The description matches the changes by explaining the low-risk package updates and their purpose.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch yordis/chore-upgrade-dotnet-dependencies

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}