Skip to content

chore(samples): update sample package versions - #613

Merged
adrianhall merged 2 commits into
CommunityToolkit:mainfrom
adrianhall:issues/588
Nov 6, 2026
Merged

adrianhall merged 2 commits into
CommunityToolkit:mainfrom
adrianhall:issues/588

Conversation

@adrianhall

Copy link
Copy Markdown
Collaborator

Closes #588

Summary

Patch and minor dependency sweep for everything under samples/ (part 2 of the outdated-package sweep).

  • CommunityToolkit.Datasync.* 10.1.0 -> 10.1.2
  • Microsoft.EntityFrameworkCore*, Microsoft.AspNetCore.*, Microsoft.Extensions.*, System.IO.Packaging 10.0.9 -> 10.0.14
  • CommunityToolkit.Mvvm 8.4.0 -> 8.4.2
  • SQLitePCLRaw.bundle_e_sqlite3 3.0.3 -> 3.0.5 (still on 3.x; NU1903 comments kept)
  • Avalonia 12.1.0 -> 12.1.5 (via AvaloniaVersion only)
  • CommunityToolkit.WinUI.Behaviors/Converters 8.2.250402 -> 8.2.251219
  • Microsoft.Windows.SDK.BuildTools -> 10.0.28000.2957
  • Microsoft.Web.LibraryManager.Build 3.0.71 -> 3.0.114
  • Microsoft.OData.Core/Edm 8.4.3 -> 8.4.4 (patch only)
  • Microsoft.Maui.Controls 10.0.40 -> 10.0.120
  • Uno SDK 6.5.36 -> 6.7.45 (global.json)

Additional change

Sample.Datasync.Server and TodoApp.Service now pin Microsoft.Data.SqlClient 6.1.8. Microsoft.EntityFrameworkCore.SqlServer floats SqlClient 6.1.7, which pulls in System.Security.Cryptography.Pkcs 9.0.11 (NU1902/NU1903, GHSA-846f-f764-76mx / GHSA-2fmv-rv2c-59x7). This is the same fix as #609 and is needed to meet the "no NU190x warnings" criterion.

Not changed

  • Xamarin.AndroidX.Core.SplashScreen stays at 1.0.1.15. Bumping to 1.2.0.3 broke todoapp-avalonia / android with an R8 duplicate-class error (androidx.core.animation.AnimatorKt$addListener$1 defined multiple times). Reverted per the issue; follow-up issue to be opened.
  • Microsoft.WindowsAppSDK (separate issue).
  • Microsoft.OData.* 9.0.0 (separate blocked issue).
  • Refit 8.0.0 in TodoApp.Uno/Directory.Packages.props: no PackageReference exists (Uno SDK implicit version); left unchanged.

Validation

  • Local builds succeed with 0 warnings: todoapp-blazor-wasm, todoapp-mvc/part5.sln, todoapp-tutorial (with EnableWindowsTargeting), datasync-server, WPF, cosmosdb single-container.
  • Build Samples workflow dispatched on the fork for this branch: all jobs green, including MAUI, Uno, Avalonia (desktop/android/ios) and all-samples-built.
    https://github.com/adrianhall/CommunityToolkit-Datasync/actions/runs/42221271312

Update Datasync packages to 10.1.2, Microsoft packages to 10.0.14,
Avalonia to 12.1.5, MAUI to 10.0.120, Uno SDK to 6.7.45, and other
patch-level dependencies. Pin Microsoft.Data.SqlClient 6.1.8 in the
SQL Server samples to resolve NU1902/NU1903 warnings.

Closes CommunityToolkit#588
1.2.0.3 causes a duplicate-class R8 failure (androidx.core.animation.AnimatorKt)
in the Avalonia Android sample build. Keep 1.0.1.15 pending follow-up.
@adrianhall
adrianhall merged commit 50c16fe into CommunityToolkit:main Nov 6, 2026
19 checks passed
@adrianhall
adrianhall deleted the issues/588 branch November 6, 2026 13:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

chore(samples): update sample package versions (patch and minor)

1 participant