dependabot-nuget 0.285.0 → 0.287.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d8dd6e625e132b28270ffbff6c1af11b0173e3a786a1f6518080c20adc028ac2
-  data.tar.gz: 7afe9afdd9b8ab5ae40372ac51fb292efce75ed4d4b5ba7fee96468e00e835bc
+  metadata.gz: 3bb2d903f08322511a7917fba47df7b66208dbbaca42e52d30a1954f9ef3eaa2
+  data.tar.gz: f19cfed3ad2939c93812727546b53ecec603c712641a6c1d0581469cce72d584
 SHA512:
-  metadata.gz: 0d9b4fdc7ba52be531cb199699324e7be1a68ae6a698619e961535f0cdb993833cc06e6e4f0df7a88f5b12e3a8bb06627a5ba2233e24bcafa4ade1badcf6a2bf
-  data.tar.gz: e9619a91fc865a8aa45a812a923f089a10e67f0be0c8588908206726e4e2b6d95ee1626cc0897d3dad5c5aca1a2e89f1c657e25a9137d4f186e05a7813b3e34c
+  metadata.gz: a3fdc15bd985678106cf45f57c6af6dd4be57858f54b50abea6f4521a8aed3ab66b7ca67cb54f9e73dabe536d8c012619bbf049662207211bc92cbb5e938c321
+  data.tar.gz: 3542f489f10b67fe78b3bd55703cc420a58279bf5fb131da4a99be0d99a20fcd7430b124c4b49100929b74f39178b3c7e108e7bb0170baef5f5a91a16dfbd63f

data/helpers/lib/NuGetUpdater/NuGetProjects/Directory.Build.props

@@ -3,7 +3,11 @@
   <PropertyGroup>
     <DefineConstants>$(DefineConstants);IS_CORECLR</DefineConstants>
     <ManagePackageVersionsCentrally>true</ManagePackageVersionsCentrally>
-    <NoWarn>$(NoWarn);NU1701</NoWarn>
+    <NoWarn>$(NoWarn);CA1305</NoWarn><!-- behavior of StringBuilder could vary based on user's locale -->
+    <NoWarn>$(NoWarn);CA2022</NoWarn><!-- avoid inexact Stream.Read() -->
+    <NoWarn>$(NoWarn);NU1701</NoWarn><!-- package target framework may not be compatible -->
+    <NoWarn>$(NoWarn);NU1903</NoWarn><!-- package has a known high severity vulnerability -->
+    <NoWarn>$(NoWarn);SYSLIB0014</NoWarn><!-- obsolete -->
     <NuGetSourceLocation>$(MSBuildThisFileDirectory)..\..\NuGet.Client</NuGetSourceLocation>
     <SharedDirectory>$(NuGetSourceLocation)\build\Shared</SharedDirectory>
     <Version>6.8.0</Version>

data/helpers/lib/NuGetUpdater/NuGetProjects/NuGet.CommandLine/NuGet.CommandLine.csproj

@@ -3,6 +3,7 @@
   <PropertyGroup>
     <TargetFramework>$(CommonTargetFramework)</TargetFramework>
     <NoWarn>$(NoWarn);CA1416</NoWarn>
+    <NoWarn>$(NoWarn);SYSLIB0018</NoWarn><!-- ReflectionOnly loading is not supported -->
   </PropertyGroup>
 
   <ItemGroup>

data/helpers/lib/NuGetUpdater/NuGetProjects/NuGet.Configuration/NuGet.Configuration.csproj

@@ -3,6 +3,7 @@
   <PropertyGroup>
     <TargetFramework>$(CommonTargetFramework)</TargetFramework>
     <NoWarn>$(NoWarn);CS1591;RS0041</NoWarn>
+    <Nullable>enable</Nullable>
   </PropertyGroup>
 
   <ItemGroup>

data/helpers/lib/NuGetUpdater/NuGetProjects/NuGet.LibraryModel/NuGet.LibraryModel.csproj

@@ -3,6 +3,7 @@
   <PropertyGroup>
     <TargetFramework>$(CommonTargetFramework)</TargetFramework>
     <NoWarn>$(NoWarn);CS1591;RS0041</NoWarn>
+    <Nullable>enable</Nullable>
   </PropertyGroup>
 
   <ItemGroup>

data/helpers/lib/NuGetUpdater/NuGetProjects/NuGet.Packaging/NuGet.Packaging.csproj

@@ -3,7 +3,7 @@
   <PropertyGroup>
     <TargetFramework>$(CommonTargetFramework)</TargetFramework>
     <AllowUnsafeBlocks>true</AllowUnsafeBlocks>
-    <NoWarn>$(NoWarn);CS0414;CS1591;CS1574;CS1573;CS1572;RS0041</NoWarn>
+    <NoWarn>$(NoWarn);CA1305;CS0414;CS1591;CS1574;CS1573;CS1572;RS0041</NoWarn>
   </PropertyGroup>
 
   <ItemGroup>

data/helpers/lib/NuGetUpdater/NuGetUpdater.Cli/Commands/RunCommand.cs

@@ -1,6 +1,8 @@
 using System.CommandLine;
 
 using NuGetUpdater.Core;
+using NuGetUpdater.Core.Analyze;
+using NuGetUpdater.Core.Discover;
 using NuGetUpdater.Core.Run;
 
 namespace NuGetUpdater.Cli.Commands;
@@ -31,7 +33,12 @@ internal static class RunCommand
         command.SetHandler(async (jobPath, repoContentsPath, apiUrl, jobId, outputPath, baseCommitSha) =>
         {
             var apiHandler = new HttpApiHandler(apiUrl.ToString(), jobId);
-            var worker = new RunWorker(apiHandler, new ConsoleLogger());
+            var logger = new ConsoleLogger();
+            var experimentsManager = await ExperimentsManager.FromJobFileAsync(jobPath.FullName, logger);
+            var discoverWorker = new DiscoveryWorker(logger);
+            var analyzeWorker = new AnalyzeWorker(logger);
+            var updateWorker = new UpdaterWorker(experimentsManager, logger);
+            var worker = new RunWorker(apiHandler, discoverWorker, analyzeWorker, updateWorker, logger);
             await worker.RunAsync(jobPath, repoContentsPath, baseCommitSha, outputPath);
         }, JobPathOption, RepoContentsPathOption, ApiUrlOption, JobIdOption, OutputPathOption, BaseCommitShaOption);
 

data/helpers/lib/NuGetUpdater/NuGetUpdater.Cli/Commands/UpdateCommand.cs

@@ -6,6 +6,7 @@ namespace NuGetUpdater.Cli.Commands;
 
 internal static class UpdateCommand
 {
+    internal static readonly Option<FileInfo> JobPathOption = new("--job-path") { IsRequired = true };
     internal static readonly Option<DirectoryInfo> RepoRootOption = new("--repo-root", () => new DirectoryInfo(Environment.CurrentDirectory)) { IsRequired = false };
     internal static readonly Option<FileInfo> SolutionOrProjectFileOption = new("--solution-or-project") { IsRequired = true };
     internal static readonly Option<string> DependencyNameOption = new("--dependency") { IsRequired = true };
@@ -18,6 +19,7 @@ internal static class UpdateCommand
     {
         Command command = new("update", "Applies the changes from an analysis report to update a dependency.")
         {
+            JobPathOption,
             RepoRootOption,
             SolutionOrProjectFileOption,
             DependencyNameOption,
@@ -29,12 +31,14 @@ internal static class UpdateCommand
 
         command.TreatUnmatchedTokensAsErrors = true;
 
-        command.SetHandler(async (repoRoot, solutionOrProjectFile, dependencyName, newVersion, previousVersion, isTransitive, resultOutputPath) =>
+        command.SetHandler(async (jobPath, repoRoot, solutionOrProjectFile, dependencyName, newVersion, previousVersion, isTransitive, resultOutputPath) =>
         {
-            var worker = new UpdaterWorker(new ConsoleLogger());
+            var logger = new ConsoleLogger();
+            var experimentsManager = await ExperimentsManager.FromJobFileAsync(jobPath.FullName, logger);
+            var worker = new UpdaterWorker(experimentsManager, logger);
             await worker.RunAsync(repoRoot.FullName, solutionOrProjectFile.FullName, dependencyName, previousVersion, newVersion, isTransitive, resultOutputPath);
             setExitCode(0);
-        }, RepoRootOption, SolutionOrProjectFileOption, DependencyNameOption, NewVersionOption, PreviousVersionOption, IsTransitiveOption, ResultOutputPathOption);
+        }, JobPathOption, RepoRootOption, SolutionOrProjectFileOption, DependencyNameOption, NewVersionOption, PreviousVersionOption, IsTransitiveOption, ResultOutputPathOption);
 
         return command;
     }

data/helpers/lib/NuGetUpdater/NuGetUpdater.Cli.Test/EntryPointTests.Update.cs

@@ -1,3 +1,4 @@
+using System.IO;
 using System.Text;
 
 using NuGetUpdater.Core;
@@ -18,6 +19,8 @@ public partial class EntryPointTests
             await Run(path =>
                 [
                     "update",
+                    "--job-path",
+                    Path.Combine(path, "job.json"),
                     "--repo-root",
                     path,
                     "--solution-or-project",
@@ -119,6 +122,8 @@ public partial class EntryPointTests
             await Run(path =>
                 [
                     "update",
+                    "--job-path",
+                    Path.Combine(path, "job.json"),
                     "--repo-root",
                     path,
                     "--solution-or-project",
@@ -197,6 +202,8 @@ public partial class EntryPointTests
             await Run(path =>
                 [
                     "update",
+                    "--job-path",
+                    Path.Combine(path, "job.json"),
                     "--repo-root",
                     path,
                     "--solution-or-project",
@@ -325,6 +332,7 @@ public partial class EntryPointTests
                 MockNuGetPackage.CreateSimplePackage("Some.Package", "13.0.1", "net8.0"),
             ];
             await MockNuGetPackagesInDirectory(testPackages, tempDir.DirectoryPath);
+            await MockJobFileInDirectory(tempDir.DirectoryPath);
 
             var globalJsonPath = Path.Join(tempDir.DirectoryPath, "global.json");
             var srcGlobalJsonPath = Path.Join(tempDir.DirectoryPath, "src", "global.json");
@@ -353,6 +361,8 @@ public partial class EntryPointTests
             IEnumerable<string> executableArgs = [
                 executableName,
                 "update",
+                "--job-path",
+                Path.Combine(tempDir.DirectoryPath, "job.json"),
                 "--repo-root",
                 tempDir.DirectoryPath,
                 "--solution-or-project",
@@ -402,6 +412,7 @@ public partial class EntryPointTests
 
                 try
                 {
+                    await MockJobFileInDirectory(path);
                     await MockNuGetPackagesInDirectory(packages, path);
 
                     var args = getArgs(path);

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core/Analyze/AnalyzeWorker.cs

@@ -12,7 +12,7 @@ namespace NuGetUpdater.Core.Analyze;
 
 using MultiDependency = (string PropertyName, ImmutableArray<string> TargetFrameworks, ImmutableHashSet<string> DependencyNames);
 
-public partial class AnalyzeWorker
+public partial class AnalyzeWorker : IAnalyzeWorker
 {
     public const string AnalysisDirectoryName = "./.dependabot/analysis";
 
@@ -50,7 +50,7 @@ public partial class AnalyzeWorker
         when (ex.StatusCode == HttpStatusCode.Unauthorized || ex.StatusCode == HttpStatusCode.Forbidden)
         {
             var localPath = PathHelper.JoinPath(repoRoot, discovery.Path);
-            var nugetContext = new NuGetContext(localPath);
+            using var nugetContext = new NuGetContext(localPath);
             analysisResult = new AnalysisResult
             {
                 ErrorType = ErrorType.AuthenticationFailure,

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core/Analyze/CompatabilityChecker.cs

@@ -24,11 +24,16 @@ internal static class CompatibilityChecker
         ILogger logger,
         CancellationToken cancellationToken)
     {
-        var (isDevDependency, packageFrameworks) = await GetPackageInfoAsync(
+        var packageInfo = await GetPackageInfoAsync(
             package,
             nugetContext,
             cancellationToken);
+        if (packageInfo is null)
+        {
+            return false;
+        }
 
+        var (isDevDependency, packageFrameworks) = packageInfo.GetValueOrDefault();
         return PerformCheck(package, projectFrameworks, isDevDependency, packageFrameworks, logger);
     }
 
@@ -70,7 +75,7 @@ internal static class CompatibilityChecker
         return true;
     }
 
-    internal static async Task<PackageInfo> GetPackageInfoAsync(
+    internal static async Task<PackageReaders?> GetPackageReadersAsync(
         PackageIdentity package,
         NuGetContext nugetContext,
         CancellationToken cancellationToken)
@@ -79,7 +84,21 @@ internal static class CompatibilityChecker
         var readers = File.Exists(tempPackagePath)
             ? ReadPackage(tempPackagePath)
             : await DownloadPackageAsync(package, nugetContext, cancellationToken);
+        return readers;
+    }
+
+    internal static async Task<PackageInfo?> GetPackageInfoAsync(
+        PackageIdentity package,
+        NuGetContext nugetContext,
+        CancellationToken cancellationToken)
+    {
+        var readersOption = await GetPackageReadersAsync(package, nugetContext, cancellationToken);
+        if (readersOption is null)
+        {
+            return null;
+        }
 
+        var readers = readersOption.GetValueOrDefault();
         var nuspecStream = await readers.CoreReader.GetNuspecAsync(cancellationToken);
         var reader = new NuspecReader(nuspecStream);
 
@@ -127,7 +146,7 @@ internal static class CompatibilityChecker
         return (archiveReader, archiveReader);
     }
 
-    internal static async Task<PackageReaders> DownloadPackageAsync(
+    internal static async Task<PackageReaders?> DownloadPackageAsync(
         PackageIdentity package,
         NuGetContext context,
         CancellationToken cancellationToken)
@@ -179,13 +198,13 @@ internal static class CompatibilityChecker
             var isDownloaded = await downloader.CopyNupkgFileToAsync(tempPackagePath, cancellationToken);
             if (!isDownloaded)
             {
-                throw new Exception($"Failed to download package [{package.Id}/{package.Version}] from [${source.SourceUri}]");
+                continue;
             }
 
             return (downloader.CoreReader, downloader.ContentReader);
         }
 
-        throw new Exception($"Package [{package.Id}/{package.Version}] does not exist in any of the configured sources.");
+        return null;
     }
 
     internal static string GetTempPackagePath(PackageIdentity package, NuGetContext context)

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core/Analyze/NuGetContext.cs

@@ -142,11 +142,22 @@ internal record NuGetContext : IDisposable
             }
 
             var metadataResource = await sourceRepository.GetResourceAsync<PackageMetadataResource>(cancellationToken);
-            var metadata = await metadataResource.GetMetadataAsync(packageIdentity, SourceCacheContext, Logger, cancellationToken);
-            var url = metadata.ProjectUrl ?? metadata.LicenseUrl;
-            if (url is not null)
+            if (metadataResource is not null)
             {
-                return url.ToString();
+                try
+                {
+                    var metadata = await metadataResource.GetMetadataAsync(packageIdentity, SourceCacheContext, Logger, cancellationToken);
+                    var url = metadata.ProjectUrl ?? metadata.LicenseUrl;
+                    if (url is not null)
+                    {
+                        return url.ToString();
+                    }
+                }
+                catch (ArgumentException)
+                {
+                    // there was an issue deserializing the package metadata; this doesn't necessarily mean the package
+                    // is unavailable, just that we can't return a URL
+                }
             }
         }
 

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core/Analyze/VersionFinder.cs

@@ -151,46 +151,17 @@ internal static class VersionFinder
         ILogger logger,
         CancellationToken cancellationToken)
     {
-        var includePrerelease = version.IsPrerelease;
-
-        var sourceMapping = PackageSourceMapping.GetPackageSourceMapping(nugetContext.Settings);
-        var packageSources = sourceMapping.GetConfiguredPackageSources(packageId).ToHashSet();
-        var sources = packageSources.Count == 0
-            ? nugetContext.PackageSources
-            : nugetContext.PackageSources
-                .Where(p => packageSources.Contains(p.Name))
-                .ToImmutableArray();
-
-        foreach (var source in sources)
+        // if it can be downloaded, it exists
+        var downloader = await CompatibilityChecker.DownloadPackageAsync(new PackageIdentity(packageId, version), nugetContext, cancellationToken);
+        var packageAndVersionExists = downloader is not null;
+        if (packageAndVersionExists)
         {
-            var sourceRepository = Repository.Factory.GetCoreV3(source);
-            var feed = await sourceRepository.GetResourceAsync<MetadataResource>();
-            if (feed is null)
-            {
-                logger.Log($"Failed to get MetadataResource for [{source.Source}]");
-                continue;
-            }
-
-            try
-            {
-                // a non-compliant v2 API returning 404 can cause this to throw
-                var existsInFeed = await feed.Exists(
-                    new PackageIdentity(packageId, version),
-                    includeUnlisted: false,
-                    nugetContext.SourceCacheContext,
-                    NullLogger.Instance,
-                    cancellationToken);
-                if (existsInFeed)
-                {
-                    return true;
-                }
-            }
-            catch (FatalProtocolException)
-            {
-                // if anything goes wrong here, the package source obviously doesn't contain the requested package
-            }
+            // release the handles
+            var readers = downloader.GetValueOrDefault();
+            (readers.CoreReader as IDisposable)?.Dispose();
+            (readers.ContentReader as IDisposable)?.Dispose();
         }
 
-        return false;
+        return packageAndVersionExists;
     }
 }

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core/Discover/DiscoveryWorker.cs

@@ -12,7 +12,7 @@ using NuGetUpdater.Core.Utilities;
 
 namespace NuGetUpdater.Core.Discover;
 
-public partial class DiscoveryWorker
+public partial class DiscoveryWorker : IDiscoveryWorker
 {
     public const string DiscoveryResultFileName = "./.dependabot/discovery.json";
 
@@ -58,7 +58,7 @@ public partial class DiscoveryWorker
         return result;
     }
 
-    internal async Task<WorkspaceDiscoveryResult> RunAsync(string repoRootPath, string workspacePath)
+    public async Task<WorkspaceDiscoveryResult> RunAsync(string repoRootPath, string workspacePath)
     {
         MSBuildHelper.RegisterMSBuild(Environment.CurrentDirectory, repoRootPath);
 
@@ -275,22 +275,24 @@ public partial class DiscoveryWorker
         foreach (var projectPath in projectPaths)
         {
             // If there is some MSBuild logic that needs to run to fully resolve the path skip the project
-            if (!File.Exists(projectPath))
+            // Ensure file existence is checked case-insensitively
+            var actualProjectPath = PathHelper.ResolveCaseInsensitivePathInsideRepoRoot(projectPath, repoRootPath);
+            if (actualProjectPath == null)
             {
                 continue;
             }
 
-            if (_processedProjectPaths.Contains(projectPath))
+            if (_processedProjectPaths.Contains(actualProjectPath))
             {
                 continue;
             }
-            _processedProjectPaths.Add(projectPath);
+            _processedProjectPaths.Add(actualProjectPath);
 
-            var relativeProjectPath = Path.GetRelativePath(workspacePath, projectPath);
+            var relativeProjectPath = Path.GetRelativePath(workspacePath, actualProjectPath);
             var packagesConfigDependencies = PackagesConfigDiscovery.Discover(workspacePath, projectPath, _logger)
                     ?.Dependencies;
 
-            var projectResults = await SdkProjectDiscovery.DiscoverAsync(repoRootPath, workspacePath, projectPath, _logger);
+            var projectResults = await SdkProjectDiscovery.DiscoverAsync(repoRootPath, workspacePath, actualProjectPath, _logger);
 
             // Determine if there were unrestored MSBuildSdks
             var msbuildSdks = projectResults.SelectMany(p => p.Dependencies.Where(d => d.Type == DependencyType.MSBuildSdk)).ToImmutableArray();
@@ -299,7 +301,7 @@ public partial class DiscoveryWorker
                 // If new SDKs were restored, then we need to rerun SdkProjectDiscovery.
                 if (await TryRestoreMSBuildSdksAsync(repoRootPath, workspacePath, msbuildSdks, _logger))
                 {
-                    projectResults = await SdkProjectDiscovery.DiscoverAsync(repoRootPath, workspacePath, projectPath, _logger);
+                    projectResults = await SdkProjectDiscovery.DiscoverAsync(repoRootPath, workspacePath, actualProjectPath, _logger);
                 }
             }
 

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core/ExperimentsManager.cs

@@ -0,0 +1,52 @@
+using System.Text.Json;
+
+using NuGetUpdater.Core.Run;
+
+namespace NuGetUpdater.Core;
+
+public record ExperimentsManager
+{
+    public bool UseLegacyDependencySolver { get; init; } = false;
+
+    public static ExperimentsManager GetExperimentsManager(Dictionary<string, object>? experiments)
+    {
+        return new ExperimentsManager()
+        {
+            UseLegacyDependencySolver = IsEnabled(experiments, "nuget_legacy_dependency_solver"),
+        };
+    }
+
+    public static async Task<ExperimentsManager> FromJobFileAsync(string jobFilePath, ILogger logger)
+    {
+        var jobFileContent = await File.ReadAllTextAsync(jobFilePath);
+        try
+        {
+            var jobWrapper = RunWorker.Deserialize(jobFileContent);
+            return GetExperimentsManager(jobWrapper.Job.Experiments);
+        }
+        catch (JsonException ex)
+        {
+            // the following message has been specifically designed to match the format of `Dependabot.logger.info(...)` from Ruby
+            logger.Log($"{DateTime.UtcNow:yyyy/MM/dd HH:mm:ss} INFO Error deserializing job file: {ex.ToString()}: {jobFileContent}");
+            return new ExperimentsManager();
+        }
+    }
+
+    private static bool IsEnabled(Dictionary<string, object>? experiments, string experimentName)
+    {
+        if (experiments is null)
+        {
+            return false;
+        }
+
+        if (experiments.TryGetValue(experimentName, out var value))
+        {
+            if ((value?.ToString() ?? "").Equals("true", StringComparison.OrdinalIgnoreCase))
+            {
+                return true;
+            }
+        }
+
+        return false;
+    }
+}

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core/Files/ProjectBuildFile.cs

@@ -43,7 +43,7 @@ internal sealed class ProjectBuildFile : XmlBuildFile
     {
         var sdkDependencies = GetSdkDependencies();
         var packageDependencies = PackageItemNodes
-            .Select(GetPackageDependency)
+            .SelectMany(e => GetPackageDependencies(e) ?? Enumerable.Empty<Dependency>())
             .OfType<Dependency>();
         return sdkDependencies.Concat(packageDependencies);
     }
@@ -89,8 +89,9 @@ internal sealed class ProjectBuildFile : XmlBuildFile
             : new Dependency(name, version, DependencyType.MSBuildSdk);
     }
 
-    private static Dependency? GetPackageDependency(IXmlElementSyntax element)
+    private static IEnumerable<Dependency>? GetPackageDependencies(IXmlElementSyntax element)
     {
+        List<Dependency> dependencies = [];
         var isUpdate = false;
 
         var name = element.GetAttributeOrSubElementValue("Include", StringComparison.OrdinalIgnoreCase)?.Trim();
@@ -113,12 +114,18 @@ internal sealed class ProjectBuildFile : XmlBuildFile
             isVersionOverride = version is not null;
         }
 
-        return new Dependency(
-            Name: name,
-            Version: version?.Length == 0 ? null : version,
-            Type: GetDependencyType(element.Name),
-            IsUpdate: isUpdate,
-            IsOverride: isVersionOverride);
+        dependencies.AddRange(
+            name.Split(';', StringSplitOptions.RemoveEmptyEntries)
+                .Select(dep => new Dependency(
+                        Name: dep.Trim(),
+                        Version: string.IsNullOrEmpty(version) ? null : version,
+                        Type: GetDependencyType(element.Name),
+                        IsUpdate: isUpdate,
+                        IsOverride: isVersionOverride))
+        );
+
+
+        return dependencies;
     }
 
     private static DependencyType GetDependencyType(string name)

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core/IAnalyzeWorker.cs

@@ -0,0 +1,9 @@
+using NuGetUpdater.Core.Analyze;
+using NuGetUpdater.Core.Discover;
+
+namespace NuGetUpdater.Core;
+
+public interface IAnalyzeWorker
+{
+    Task<AnalysisResult> RunAsync(string repoRoot, WorkspaceDiscoveryResult discovery, DependencyInfo dependencyInfo);
+}

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core/IDiscoveryWorker.cs

@@ -0,0 +1,8 @@
+using NuGetUpdater.Core.Discover;
+
+namespace NuGetUpdater.Core;
+
+public interface IDiscoveryWorker
+{
+    Task<WorkspaceDiscoveryResult> RunAsync(string repoRootPath, string workspacePath);
+}

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core/IUpdaterWorker.cs

@@ -0,0 +1,9 @@
+
+using NuGetUpdater.Core.Updater;
+
+namespace NuGetUpdater.Core;
+
+public interface IUpdaterWorker
+{
+    Task<UpdateOperationResult> RunAsync(string repoRootPath, string workspacePath, string dependencyName, string previousDependencyVersion, string newDependencyVersion, bool isTransitive);
+}