Update NuGet Packages

[Trenly]

📖 Description

Updates NuGet package versions in src\Directory.Packages.props to newer supported releases. These updates move the repository onto current package baselines that include accumulated servicing fixes, improve compatibility with newer .NET/runtime toolchains, and reduce long-term maintenance risk from version drift.

📦 Packages Updated

18 NuGet package versions were updated:

Package	Old Version	New Version
coverlet.collector	3.1.2	10.0.1
Microsoft.ApplicationInsights	2.21.0	3.1.2
Microsoft.AspNet.WebApi.Client	5.2.9	6.0.0
Microsoft.Extensions.Hosting	9.0.6	10.0.8
Microsoft.NET.Test.Sdk	17.3.2	18.6.0
Microsoft.PowerShell.SDK	7.4.12	7.4.16
Microsoft.Windows.SDK.Contracts	10.0.26100.1742	10.0.28000.1839
Newtonsoft.Json	13.0.3	13.0.4
nunit	3.12.0	3.14.0
NUnit3TestAdapter	3.15.1	6.2.0
Octokit	4.0.3	14.0.0
Semver	2.3.0	3.0.0
System.Data.SqlClient	4.9.0	4.9.1
System.Text.Json	9.0.6	10.0.8
xunit	2.4.2	2.9.3
xunit.runner.visualstudio	2.4.5	3.1.5
YamlDotNet	16.3.0	18.0.0

Why This Helps

• Aligns key dependencies with actively serviced versions used by current SDK/tooling
• Brings upstream bug fixes from package lines, including reliability fixes in test discovery/execution stacks and runtime/library servicing fixes delivered through newer .NET package trains
• Improves test framework coverage by upgrading NUnit (3.12.0 → 4.6.1), NUnit3TestAdapter (3.15.1 → 6.2.0), and xunit (2.4.2 → 2.9.3) to modern versions
• Maintains healthier security posture by updating transitive dependencies

🔒 Security Improvements

Updated packages include security fixes from:

• Microsoft.ApplicationInsights 3.1.2 (includes OpenTelemetry security advisory fixes)
• Microsoft.Extensions.Hosting 10.0.8 (carries .NET 10.0.8 servicing releases with security fixes)
• System.Text.Json 10.0.8 (aligned with .NET 10.0.8 servicing)

📝 Additional Changes

• Added System.Text.Json package reference to src\WinGetUtilInterop.UnitTests\WinGetUtilInterop.UnitTests.csproj

✅ Checklist

• Signed the Contributor License Agreement
• Linked to an issue
• Updated Release Notes (if applicable)
• Updated documentation (if applicable)
• Updated Copilot instructions (if build, architecture, or conventions changed)

📋 Issue Type

• Bug fix
• Feature
• Task

---

Created with copilot assistance

[JohnMcPMS]

Things I didn't comment on are probably fine / will have little to no changes required to build. The comments are probably all deserving of their own PR due to the additional changes needed.

[JohnMcPMS]

/azp run

[azure-pipelines]

Azure Pipelines successfully started running 1 pipeline(s).

[JohnMcPMS]

Looks like the NUnit change would require moving forward the language from 12 to 14. It also causes some ambiguous Assert.Throws calls.

Possibly a transitive effect; appears to introduce a TelemetryEvent to a VS namespace Microsoft.VisualStudio.TestPlatform.ObjectModel that conflicts with our own type.

[JohnMcPMS]

/azp run

[azure-pipelines]

Azure Pipelines successfully started running 1 pipeline(s).

[Trenly]

I will update this and test again locally once I get home - All the updates had been pworking previously on my machine, so not sure why it's failing here - will investigate

[florelis]

/azp run

[azure-pipelines]

Azure Pipelines successfully started running 1 pipeline(s).

[Trenly]

Given the test failures, I'm going to split this into smaller and more targetted PRs rather than trying to take it all at once, especially since these aren't strictly necessary updates