Bump BouncyCastle.Cryptography to 2.7.0

Merged
JA
2mo ago
+1-1

Fixes the NU1109 restore failure on main introduced by the combination of #262 and #265:

  • #262 bumped SSH.NET to 2026.0.0, which transitively requires BouncyCastle.Cryptography >= 2.7.0
  • #265 (branched before #262) added a central pin of BouncyCastle.Cryptography 2.6.2 (NPOI upstream's version)

Each branch was green alone; merged together, Central Package Management treats the 2.6.2 pin as a package downgrade, failing restore with NU1109 on every project that pulls SSH.NET (Plugins.UI, ResearchDataManagementPlatform, Tools/rdmp, Rdmp.Dicom, test projects, ...). Both test jobs on main commit cd0fb23dd fail at the build step, and open PRs (e.g. #243) inherit the break.

Verification (local)

  • externals NPOI wrapper chain builds against 2.7.0: 0 errors, 0 warnings
  • dotnet restore: zero NU1109
  • Rdmp.Core Release build clean

After merge, #243 and other dependabot PRs just need a rebase/branch update.

Summary by cubic

Bumps BouncyCastle.Cryptography to 2.7.0 to fix NU1109 restore failures after upgrading SSH.NET to 2026.0.0. Previously the central pin was 2.6.2, which caused package downgrade errors; now the pin meets the transitive requirement and restore succeeds.

  • Change: Update Directory.Packages.props pin from 2.6.2 to 2.7.0.
  • Verified: externals NPOI wrapper chain builds against 2.7.0; dotnet restore has zero NU1109; Release build of core projects is clean.
  • Action: Rebase or update open branches to pick up the fix.