dependabot-nuget 0.240.0 → 0.241.0

data/helpers/lib/NuGetUpdater/NuGetProjects/NuGet.CommandLine/AssemblyMetadataExtractor.cs

@@ -0,0 +1,203 @@
+// Copyright (c) .NET Foundation. All rights reserved.
+// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.
+
+using System;
+using System.Collections.Generic;
+using System.Diagnostics.CodeAnalysis;
+using System.Globalization;
+using System.IO;
+using System.Linq;
+using System.Reflection;
+using NuGet.Common;
+using NuGet.Packaging;
+using NuGet.Packaging.Core;
+using NuGet.Versioning;
+
+namespace NuGet.CommandLine
+{
+    internal sealed class AssemblyMetadataExtractor
+    {
+        private readonly ILogger _logger;
+
+        public AssemblyMetadataExtractor(ILogger logger) => _logger = logger ?? NullLogger.Instance;
+
+        private static T CreateInstance<T>(AppDomain domain)
+        {
+            string assemblyLocation = Assembly.GetExecutingAssembly().Location;
+
+            try
+            {
+                return (T)domain.CreateInstanceFromAndUnwrap(assemblyLocation, typeof(T).FullName);
+            }
+            catch (FileLoadException flex) when (UriUtility.GetLocalPath(flex.FileName).Equals(assemblyLocation, StringComparison.Ordinal))
+            {
+                // Reflection loading error for sandboxed assembly
+                var exceptionMessage = string.Format(
+                    CultureInfo.InvariantCulture,
+                    LocalizedResourceManager.GetString("Error_NuGetExeNeedsToBeUnblockedAfterDownloading"),
+                    UriUtility.GetLocalPath(flex.FileName));
+                throw new PackagingException(NuGetLogCode.NU5133, exceptionMessage, flex);
+            }
+        }
+
+        public AssemblyMetadata GetMetadata(string assemblyPath)
+        {
+            return new AssemblyMetadata();
+        }
+
+        public void ExtractMetadata(PackageBuilder builder, string assemblyPath)
+        {
+            AssemblyMetadata assemblyMetadata = GetMetadata(assemblyPath);
+            builder.Title = assemblyMetadata.Title;
+            builder.Description = assemblyMetadata.Description;
+            builder.Copyright = assemblyMetadata.Copyright;
+
+            // using InformationalVersion if possible, fallback to Version otherwise
+            if (NuGetVersion.TryParse(assemblyMetadata.InformationalVersion, out var informationalVersion))
+            {
+                builder.Version = informationalVersion;
+            }
+            else
+            {
+                _logger.LogInformation(string.Format(
+                    CultureInfo.CurrentCulture, NuGetResources.InvalidAssemblyInformationalVersion,
+                    assemblyMetadata.InformationalVersion, assemblyPath, assemblyMetadata.Version));
+
+                builder.Version = NuGetVersion.Parse(assemblyMetadata.Version);
+            }
+
+            if (!builder.Authors.Any())
+            {
+                if (assemblyMetadata.Properties.ContainsKey("authors"))
+                {
+                    builder.Authors.AddRange(assemblyMetadata.Properties["authors"].Split(new[] { ',' }, StringSplitOptions.RemoveEmptyEntries));
+                }
+                else if (!string.IsNullOrEmpty(assemblyMetadata.Company))
+                {
+                    builder.Authors.Add(assemblyMetadata.Company);
+                }
+            }
+
+            if (assemblyMetadata.Properties.ContainsKey("owners"))
+            {
+                builder.Owners.AddRange(assemblyMetadata.Properties["owners"].Split(new[] { ',' }, StringSplitOptions.RemoveEmptyEntries));
+            }
+
+            builder.Properties.AddRange(assemblyMetadata.Properties);
+            // Let the id be overriden by AssemblyMetadataAttribute
+            // This preserves the existing behavior if no id metadata 
+            // is provided by the assembly.
+            if (builder.Properties.ContainsKey("id"))
+            {
+                builder.Id = builder.Properties["id"];
+            }
+            else
+            {
+                builder.Id = assemblyMetadata.Name;
+            }
+        }
+
+        private sealed class MetadataExtractor : MarshalByRefObject
+        {
+            private class AssemblyResolver
+            {
+                private readonly string _lookupPath;
+
+                public AssemblyResolver(string assemblyPath)
+                {
+                    _lookupPath = Path.GetDirectoryName(assemblyPath);
+                }
+
+                public Assembly ReflectionOnlyAssemblyResolve(object sender, ResolveEventArgs args)
+                {
+                    var name = new AssemblyName(AppDomain.CurrentDomain.ApplyPolicy(args.Name));
+                    var assemblyPath = Path.Combine(_lookupPath, name.Name + ".dll");
+                    return File.Exists(assemblyPath) ?
+                        Assembly.ReflectionOnlyLoadFrom(assemblyPath) : // load from same folder as parent assembly
+                        Assembly.ReflectionOnlyLoad(name.FullName);     // load from GAC
+                }
+            }
+
+            [SuppressMessage("Microsoft.Performance", "CA1822:MarkMembersAsStatic", Justification = "It's a marshal by ref object used to collection information in another app domain")]
+            public AssemblyMetadata GetAssemblyMetadata(string path)
+            {
+                var resolver = new AssemblyResolver(path);
+                AppDomain.CurrentDomain.ReflectionOnlyAssemblyResolve += resolver.ReflectionOnlyAssemblyResolve;
+
+                try
+                {
+                    Assembly assembly = Assembly.ReflectionOnlyLoadFrom(path);
+                    AssemblyName assemblyName = assembly.GetName();
+
+                    var attributes = CustomAttributeData.GetCustomAttributes(assembly);
+
+                    // We should not try to parse the version and eventually throw here: this leads to incorrect errors when, later on, ProjectFactory is trying to retrieve Authors and Description
+                    // Best to parse the version into a NuGetVersion later.
+                    // We should also not decide here whether to use informationalVersion or assembly version. Let's let consumers decide.
+                    var version = assemblyName.Version.ToString();
+                    var informationalVersion = GetAttributeValueOrDefault<AssemblyInformationalVersionAttribute>(attributes);
+                    informationalVersion = string.IsNullOrEmpty(informationalVersion) ? version : informationalVersion;
+
+                    return new AssemblyMetadata(GetProperties(attributes))
+                    {
+                        Name = assemblyName.Name,
+                        Version = version,
+                        InformationalVersion = informationalVersion,
+                        Title = GetAttributeValueOrDefault<AssemblyTitleAttribute>(attributes),
+                        Company = GetAttributeValueOrDefault<AssemblyCompanyAttribute>(attributes),
+                        Description = GetAttributeValueOrDefault<AssemblyDescriptionAttribute>(attributes),
+                        Copyright = GetAttributeValueOrDefault<AssemblyCopyrightAttribute>(attributes)
+                    };
+                }
+                finally
+                {
+                    AppDomain.CurrentDomain.ReflectionOnlyAssemblyResolve -= resolver.ReflectionOnlyAssemblyResolve;
+                }
+            }
+
+            private static Dictionary<string, string> GetProperties(IList<CustomAttributeData> attributes)
+            {
+                var properties = new Dictionary<string, string>(StringComparer.OrdinalIgnoreCase);
+                // NOTE: we make this check only by attribute type fullname, and we try to duck
+                // type it, therefore enabling the same metadata extesibility behavior for other platforms
+                // that don't define the attribute already as part of the framework. 
+                // A package author could simply declare this attribute in his own project, using 
+                // the same namespace and members, and we'd pick it up automatically. This is consistent 
+                // with what MS did in the past with the System.Runtime.CompilerServices.ExtensionAttribute 
+                // which allowed Linq to be re-implemented for .NET 2.0 :).
+                var attributeName = typeof(AssemblyMetadataAttribute).FullName;
+                foreach (var attribute in attributes.Where(x =>
+                    x.Constructor.DeclaringType.FullName == attributeName &&
+                    x.ConstructorArguments.Count == 2))
+                {
+                    string key = attribute.ConstructorArguments[0].Value.ToString();
+                    string value = attribute.ConstructorArguments[1].Value.ToString();
+                    // Return the value only if it isn't null or empty so that we can use ?? to fall back
+                    if (!string.IsNullOrEmpty(key) && !string.IsNullOrEmpty(value))
+                    {
+                        properties[key] = value;
+                    }
+                }
+
+                return properties;
+            }
+
+            private static string GetAttributeValueOrDefault<T>(IList<CustomAttributeData> attributes) where T : Attribute
+            {
+                foreach (var attribute in attributes)
+                {
+                    if (attribute.Constructor.DeclaringType == typeof(T))
+                    {
+                        string value = attribute.ConstructorArguments[0].Value.ToString();
+                        // Return the value only if it isn't null or empty so that we can use ?? to fall back
+                        if (!string.IsNullOrEmpty(value))
+                        {
+                            return value;
+                        }
+                    }
+                }
+                return null;
+            }
+        }
+    }
+}

data/helpers/lib/NuGetUpdater/NuGetProjects/NuGet.CommandLine/NuGet.CommandLine.csproj

@@ -0,0 +1,33 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <TargetFramework>$(CommonTargetFramework)</TargetFramework>
+    <NoWarn>$(NoWarn);CA1416</NoWarn>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <ProjectReference Include="..\NuGet.Build.Tasks\NuGet.Build.Tasks.csproj" />
+    <ProjectReference Include="..\NuGet.PackageManagement\NuGet.PackageManagement.csproj" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <PackageReference Include="Microsoft.VisualStudio.Setup.Configuration.Interop" ExcludeAssets="runtime" />
+    <PackageReference Include="NuGet.Core" Aliases="CoreV2" PrivateAssets="All" />
+    <PackageReference Include="System.ComponentModel.Composition" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <Compile Include="$(NuGetSourceLocation)\src\NuGet.Clients\NuGet.CommandLine\**\*.cs" />
+    <!--
+    The `AssemblyMetadataExtractor.GetMetadata()` method is dependent upon app domains which are not supported, so this
+    directory contains a copy of that file with that method replaced by a stub.
+    -->
+    <Compile Remove="$(NuGetSourceLocation)\src\NuGet.Clients\NuGet.CommandLine\Commands\Pack\AssemblyMetadataExtractor.cs" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <EmbeddedResource Include="$(NuGetSourceLocation)\src\NuGet.Clients\NuGet.CommandLine\**\*.resx" />
+    <EmbeddedResource Include="$(OutputPath)\**\$(AssemblyName).resources.dll" />
+  </ItemGroup>
+
+</Project>

data/helpers/lib/NuGetUpdater/NuGetProjects/NuGet.Commands/NuGet.Commands.csproj

@@ -0,0 +1,26 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <TargetFramework>$(CommonTargetFramework)</TargetFramework>
+    <NoWarn>$(NoWarn);CS1591;CS1574;CS1573;CS1584;CS1658;CS1998;RS0041</NoWarn>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <ProjectReference Include="..\NuGet.Credentials\NuGet.Credentials.csproj" />
+    <ProjectReference Include="..\NuGet.ProjectModel\NuGet.ProjectModel.csproj" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <PackageReference Include="Microsoft.Extensions.FileSystemGlobbing" />
+    <PackageReference Include="Microsoft.Extensions.FileProviders.Abstractions" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <Compile Include="$(NuGetSourceLocation)\src\NuGet.Core\NuGet.Commands\**\*.cs" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <EmbeddedResource Include="$(NuGetSourceLocation)\src\NuGet.Core\NuGet.Commands\**\*.resx" />
+  </ItemGroup>
+
+</Project>

data/helpers/lib/NuGetUpdater/NuGetProjects/NuGet.Common/NuGet.Common.csproj

@@ -0,0 +1,21 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <TargetFramework>$(CommonTargetFramework)</TargetFramework>
+    <NoWarn>$(NoWarn);CS1591;CS1574;RS0041</NoWarn>
+    <Nullable>enable</Nullable>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <ProjectReference Include="..\NuGet.Frameworks\NuGet.Frameworks.csproj" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <Compile Include="$(NuGetSourceLocation)\src\NuGet.Core\NuGet.Common\**\*.cs" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <EmbeddedResource Include="$(NuGetSourceLocation)\src\NuGet.Core\NuGet.Common\**\*.resx" />
+  </ItemGroup>
+
+</Project>

data/helpers/lib/NuGetUpdater/NuGetProjects/NuGet.Config

@@ -0,0 +1,6 @@
+<configuration>
+  <packageSources>
+    <clear />
+    <add key="nuget.org" value="https://api.nuget.org/v3/index.json" />
+  </packageSources>
+</configuration>

data/helpers/lib/NuGetUpdater/NuGetProjects/NuGet.Configuration/NuGet.Configuration.csproj

@@ -0,0 +1,24 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <TargetFramework>$(CommonTargetFramework)</TargetFramework>
+    <NoWarn>$(NoWarn);CS1591;RS0041</NoWarn>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <ProjectReference Include="..\NuGet.Common\NuGet.Common.csproj" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <PackageReference Include="System.Security.Cryptography.ProtectedData" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <Compile Include="$(NuGetSourceLocation)\src\NuGet.Core\NuGet.Configuration\**\*.cs" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <EmbeddedResource Include="$(NuGetSourceLocation)\src\NuGet.Core\NuGet.Configuration\**\*.resx" />
+  </ItemGroup>
+
+</Project>

data/helpers/lib/NuGetUpdater/NuGetProjects/NuGet.Credentials/NuGet.Credentials.csproj

@@ -0,0 +1,20 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <TargetFramework>$(CommonTargetFramework)</TargetFramework>
+    <NoWarn>$(NoWarn);RS0041</NoWarn>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <ProjectReference Include="..\NuGet.Protocol\NuGet.Protocol.csproj" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <Compile Include="$(NuGetSourceLocation)\src\NuGet.Core\NuGet.Credentials\**\*.cs" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <EmbeddedResource Include="$(NuGetSourceLocation)\src\NuGet.Core\NuGet.Credentials\**\*.resx" />
+  </ItemGroup>
+
+</Project>

data/helpers/lib/NuGetUpdater/NuGetProjects/NuGet.DependencyResolver.Core/NuGet.DependencyResolver.Core.csproj

@@ -0,0 +1,22 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <TargetFramework>$(CommonTargetFramework)</TargetFramework>
+    <NoWarn>$(NoWarn);CS1591;CS1574;RS0041</NoWarn>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <ProjectReference Include="..\NuGet.Configuration\NuGet.Configuration.csproj" />
+    <ProjectReference Include="..\NuGet.LibraryModel\NuGet.LibraryModel.csproj" />
+    <ProjectReference Include="..\NuGet.Protocol\NuGet.Protocol.csproj" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <Compile Include="$(NuGetSourceLocation)\src\NuGet.Core\NuGet.DependencyResolver.Core\**\*.cs" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <EmbeddedResource Include="$(NuGetSourceLocation)\src\NuGet.Core\NuGet.DependencyResolver.Core\**\*.resx" />
+  </ItemGroup>
+
+</Project>

data/helpers/lib/NuGetUpdater/NuGetProjects/NuGet.Frameworks/NuGet.Frameworks.csproj

@@ -0,0 +1,17 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <TargetFramework>$(CommonTargetFramework)</TargetFramework>
+    <NoWarn>$(NoWarn);CS1591;CS1574;CS1573;RS0041</NoWarn>
+    <Nullable>enable</Nullable>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <Compile Include="$(NuGetSourceLocation)\src\NuGet.Core\NuGet.Frameworks\**\*.cs" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <EmbeddedResource Include="$(NuGetSourceLocation)\src\NuGet.Core\NuGet.Frameworks\**\*.resx" />
+  </ItemGroup>
+
+</Project>

data/helpers/lib/NuGetUpdater/NuGetProjects/NuGet.LibraryModel/NuGet.LibraryModel.csproj

@@ -0,0 +1,17 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <TargetFramework>$(CommonTargetFramework)</TargetFramework>
+    <NoWarn>$(NoWarn);CS1591;RS0041</NoWarn>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <ProjectReference Include="..\NuGet.Common\NuGet.Common.csproj" />
+    <ProjectReference Include="..\NuGet.Versioning\NuGet.Versioning.csproj" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <Compile Include="$(NuGetSourceLocation)\src\NuGet.Core\NuGet.LibraryModel\**\*.cs" />
+  </ItemGroup>
+
+</Project>

data/helpers/lib/NuGetUpdater/NuGetProjects/NuGet.PackageManagement/NuGet.PackageManagement.csproj

@@ -0,0 +1,27 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <TargetFramework>$(CommonTargetFramework)</TargetFramework>
+    <NoWarn>$(NoWarn);CS1591;CS1580;CS1574;CS1573;RS0041</NoWarn>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <ProjectReference Include="..\NuGet.Commands\NuGet.Commands.csproj" />
+    <ProjectReference Include="..\NuGet.Resolver\NuGet.Resolver.csproj" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <PackageReference Include="Microsoft.Web.Xdt" />
+    <PackageReference Include="Microsoft.CSharp" />
+    <PackageReference Include="System.ComponentModel.Composition" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <Compile Include="$(NuGetSourceLocation)\src\NuGet.Core\NuGet.PackageManagement\**\*.cs" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <EmbeddedResource Include="$(NuGetSourceLocation)\src\NuGet.Core\NuGet.PackageManagement\**\*.resx" />
+  </ItemGroup>
+
+</Project>

data/helpers/lib/NuGetUpdater/NuGetProjects/NuGet.Packaging/NuGet.Packaging.csproj

@@ -0,0 +1,28 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <TargetFramework>$(CommonTargetFramework)</TargetFramework>
+    <AllowUnsafeBlocks>true</AllowUnsafeBlocks>
+    <NoWarn>$(NoWarn);CS0414;CS1591;CS1574;CS1573;CS1572;RS0041</NoWarn>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <ProjectReference Include="..\NuGet.Configuration\NuGet.Configuration.csproj" />
+    <ProjectReference Include="..\NuGet.Versioning\NuGet.Versioning.csproj" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <PackageReference Include="Newtonsoft.Json" />
+    <PackageReference Include="System.Security.Cryptography.Pkcs" />
+    <PackageReference Include="System.Security.Cryptography.Cng" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <Compile Include="$(NuGetSourceLocation)\src\NuGet.Core\NuGet.Packaging\**\*.cs" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <EmbeddedResource Include="$(NuGetSourceLocation)\src\NuGet.Core\NuGet.Packaging\**\*.resx" />
+  </ItemGroup>
+
+</Project>

data/helpers/lib/NuGetUpdater/NuGetProjects/NuGet.ProjectModel/NuGet.ProjectModel.csproj

@@ -0,0 +1,20 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <TargetFramework>$(CommonTargetFramework)</TargetFramework>
+    <NoWarn>$(NoWarn);CS1591;CS1573;RS0041</NoWarn>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <ProjectReference Include="..\NuGet.DependencyResolver.Core\NuGet.DependencyResolver.Core.csproj" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <Compile Include="$(NuGetSourceLocation)\src\NuGet.Core\NuGet.ProjectModel\**\*.cs" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <EmbeddedResource Include="$(NuGetSourceLocation)\src\NuGet.Core\NuGet.ProjectModel\**\*.resx" />
+  </ItemGroup>
+
+</Project>

data/helpers/lib/NuGetUpdater/NuGetProjects/NuGet.Protocol/NuGet.Protocol.csproj

@@ -0,0 +1,21 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <TargetFramework>$(CommonTargetFramework)</TargetFramework>
+    <DefineConstants>$(DefineConstants);IS_DESKTOP</DefineConstants>
+    <NoWarn>$(NoWarn);CS1591;CS1573;CS0012;RS0041</NoWarn>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <ProjectReference Include="..\NuGet.Packaging\NuGet.Packaging.csproj" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <Compile Include="$(NuGetSourceLocation)\src\NuGet.Core\NuGet.Protocol\**\*.cs" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <EmbeddedResource Include="$(NuGetSourceLocation)\src\NuGet.Core\NuGet.Protocol\**\*.resx" />
+  </ItemGroup>
+
+</Project>

data/helpers/lib/NuGetUpdater/NuGetProjects/NuGet.Resolver/NuGet.Resolver.csproj

@@ -0,0 +1,20 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <TargetFramework>$(CommonTargetFramework)</TargetFramework>
+    <NoWarn>$(NoWarn);CS1591;CS1573;RS0041</NoWarn>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <ProjectReference Include="..\NuGet.Protocol\NuGet.Protocol.csproj" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <Compile Include="$(NuGetSourceLocation)\src\NuGet.Core\NuGet.Resolver\**\*.cs" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <EmbeddedResource Include="$(NuGetSourceLocation)\src\NuGet.Core\NuGet.Resolver\**\*.resx" />
+  </ItemGroup>
+
+</Project>

data/helpers/lib/NuGetUpdater/NuGetProjects/NuGet.Versioning/NuGet.Versioning.csproj

@@ -0,0 +1,17 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <TargetFramework>$(CommonTargetFramework)</TargetFramework>
+    <NoWarn>$(NoWarn);RS0041</NoWarn>
+    <Nullable>enable</Nullable>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <Compile Include="$(NuGetSourceLocation)\src\NuGet.Core\NuGet.Versioning\**\*.cs" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <EmbeddedResource Include="$(NuGetSourceLocation)\src\NuGet.Core\NuGet.Versioning\**\*.resx" />
+  </ItemGroup>
+
+</Project>

data/helpers/lib/NuGetUpdater/NuGetProjects/README.md

@@ -0,0 +1 @@
+TODO:

data/helpers/lib/NuGetUpdater/NuGetUpdater.Cli/Commands/FrameworkCheckCommand.cs

@@ -0,0 +1,35 @@
+using System;
+using System.CommandLine;
+
+using NuGetUpdater.Core;
+using NuGetUpdater.Core.FrameworkChecker;
+
+namespace NuGetUpdater.Cli.Commands;
+
+internal static class FrameworkCheckCommand
+{
+    internal static readonly Option<string[]> ProjectTfmsOption = new("--project-tfms") { IsRequired = true, AllowMultipleArgumentsPerToken = true };
+    internal static readonly Option<string[]> PackageTfmsOption = new("--package-tfms") { IsRequired = true, AllowMultipleArgumentsPerToken = true };
+    internal static readonly Option<bool> VerboseOption = new("--verbose", getDefaultValue: () => false);
+
+    internal static Command GetCommand(Action<int> setExitCode)
+    {
+        Command command = new("framework-check", "Checks that a project's target frameworks are satisfied by the target frameworks supported by a package.")
+        {
+            ProjectTfmsOption,
+            PackageTfmsOption,
+            VerboseOption
+        };
+
+        command.TreatUnmatchedTokensAsErrors = true;
+
+        command.SetHandler((projectTfms, packageTfms, verbose) =>
+        {
+            setExitCode(CompatibilityChecker.IsCompatible(projectTfms, packageTfms, new Logger(verbose))
+                ? 0
+                : 1);
+        }, ProjectTfmsOption, PackageTfmsOption, VerboseOption);
+
+        return command;
+    }
+}

data/helpers/lib/NuGetUpdater/NuGetUpdater.Cli/Commands/UpdateCommand.cs

@@ -0,0 +1,43 @@
+using System;
+using System.CommandLine;
+using System.IO;
+
+using NuGetUpdater.Core;
+
+namespace NuGetUpdater.Cli.Commands;
+
+internal static class UpdateCommand
+{
+    internal static readonly Option<DirectoryInfo> RepoRootOption = new("--repo-root", () => new DirectoryInfo(Environment.CurrentDirectory)) { IsRequired = false };
+    internal static readonly Option<FileInfo> SolutionOrProjectFileOption = new("--solution-or-project") { IsRequired = true };
+    internal static readonly Option<string> DependencyNameOption = new("--dependency") { IsRequired = true };
+    internal static readonly Option<string> NewVersionOption = new("--new-version") { IsRequired = true };
+    internal static readonly Option<string> PreviousVersionOption = new("--previous-version") { IsRequired = true };
+    internal static readonly Option<bool> IsTransitiveOption = new("--transitive", getDefaultValue: () => false);
+    internal static readonly Option<bool> VerboseOption = new("--verbose", getDefaultValue: () => false);
+
+    internal static Command GetCommand(Action<int> setExitCode)
+    {
+        Command command = new("update", "Applies the changes from an analysis report to update a dependency.")
+        {
+            RepoRootOption,
+            SolutionOrProjectFileOption,
+            DependencyNameOption,
+            NewVersionOption,
+            PreviousVersionOption,
+            IsTransitiveOption,
+            VerboseOption
+        };
+
+        command.TreatUnmatchedTokensAsErrors = true;
+
+        command.SetHandler(async (repoRoot, solutionOrProjectFile, dependencyName, newVersion, previousVersion, isTransitive, verbose) =>
+        {
+            var worker = new UpdaterWorker(new Logger(verbose));
+            await worker.RunAsync(repoRoot.FullName, solutionOrProjectFile.FullName, dependencyName, previousVersion, newVersion, isTransitive);
+            setExitCode(0);
+        }, RepoRootOption, SolutionOrProjectFileOption, DependencyNameOption, NewVersionOption, PreviousVersionOption, IsTransitiveOption, VerboseOption);
+
+        return command;
+    }
+}

data/helpers/lib/NuGetUpdater/NuGetUpdater.Cli/NuGetUpdater.Cli.csproj

@@ -0,0 +1,20 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <TargetFramework>$(CommonTargetFramework)</TargetFramework>
+    <OutputType>Exe</OutputType>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <ProjectReference Include="..\NuGetUpdater.Core\NuGetUpdater.Core.csproj" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <PackageReference Include="System.CommandLine" Version="2.0.0-beta4.22272.1" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <InternalsVisibleTo Include="NuGetUpdater.Cli.Test"/>
+  </ItemGroup>
+
+</Project>