dependabot-nuget 0.308.0 → 0.310.0

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core.Test/Run/RunWorkerTests.cs

@@ -19,6 +19,7 @@ namespace NuGetUpdater.Core.Test.Run;
 using static NuGetUpdater.Core.Utilities.EOLHandling;
 
 using TestFile = (string Path, string Content);
+using RawTestFile = (string Path, byte[] Content);
 
 public class RunWorkerTests
 {
@@ -26,11 +27,8 @@ public class RunWorkerTests
     public const string TestPullRequestTitle = "test-pull-request-title";
     public const string TestPullRequestBody = "test-pull-request-body";
 
-    [Theory]
-    [InlineData(EOLType.CR)]
-    [InlineData(EOLType.LF)]
-    [InlineData(EOLType.CRLF)]
-    public async Task UpdateSinglePackageProducedExpectedAPIMessages(EOLType EOL)
+    [Fact]
+    public async Task UpdateSinglePackageProducedExpectedAPIMessages()
     {
         await RunAsync(
             packages: [],
@@ -54,7 +52,7 @@ public class RunWorkerTests
                         <PackageReference Include="Some.Package" Version="1.0.0" />
                       </ItemGroup>
                     </Project>
-                    """.SetEOL(EOL))
+                    """)
             ],
             discoveryWorker: new TestDiscoveryWorker(_input =>
             {
@@ -105,7 +103,7 @@ public class RunWorkerTests
                         <PackageReference Include="Some.Package" Version="1.0.1" />
                       </ItemGroup>
                     </Project>
-                    """.SetEOL(EOL));
+                    """);
                 return new UpdateOperationResult()
                 {
                     UpdateOperations = [
@@ -135,7 +133,8 @@ public class RunWorkerTests
                                 <PackageReference Include="Some.Package" Version="1.0.0" />
                               </ItemGroup>
                             </Project>
-                            """.SetEOL(EOL)))
+                            """)),
+                        ContentEncoding = "base64"
                     }
                 ],
                 BaseCommitSha = "TEST-COMMIT-SHA",
@@ -220,7 +219,7 @@ public class RunWorkerTests
                                     <PackageReference Include="Some.Package" Version="1.0.1" />
                                   </ItemGroup>
                                 </Project>
-                                """.SetEOL(EOL),
+                                """,
                         },
                     ],
                     BaseCommitSha = "TEST-COMMIT-SHA",
@@ -233,14 +232,11 @@ public class RunWorkerTests
         );
     }
 
-    [Theory]
-    [InlineData(EOLType.CR)]
-    [InlineData(EOLType.LF)]
-    [InlineData(EOLType.CRLF)]
-    public async Task UpdateHandlesSemicolonsInPackageReference(EOLType EOL)
+    [Fact]
+    public async Task UpdateHandlesSemicolonsInPackageReference()
     {
-        var repoMetadata = XElement.Parse("""<repository type="git" url="https://nuget.example.com/some-package" />""".SetEOL(EOL));
-        var repoMetadata2 = XElement.Parse("""<repository type="git" url="https://nuget.example.com/some-package2" />""".SetEOL(EOL));
+        var repoMetadata = XElement.Parse("""<repository type="git" url="https://nuget.example.com/some-package" />""");
+        var repoMetadata2 = XElement.Parse("""<repository type="git" url="https://nuget.example.com/some-package2" />""");
         await RunAsync(
             packages:
             [
@@ -270,7 +266,7 @@ public class RunWorkerTests
                         <PackageReference Include="Some.Package;Some.Package2" Version="1.0.0" />
                       </ItemGroup>
                     </Project>
-                    """.SetEOL(EOL))
+                    """)
             ],
             discoveryWorker: new TestDiscoveryWorker(_input =>
             {
@@ -323,7 +319,7 @@ public class RunWorkerTests
                         <PackageReference Include="Some.Package;Some.Package2" Version="1.0.1" />
                       </ItemGroup>
                     </Project>
-                    """.SetEOL(EOL));
+                    """);
                 return new UpdateOperationResult()
                 {
                     UpdateOperations = [
@@ -359,7 +355,8 @@ public class RunWorkerTests
                                 <PackageReference Include="Some.Package;Some.Package2" Version="1.0.0" />
                               </ItemGroup>
                             </Project>
-                            """.SetEOL(EOL)))
+                            """)),
+                        ContentEncoding = "base64"
                     }
                 ],
                 BaseCommitSha = "TEST-COMMIT-SHA",
@@ -487,7 +484,7 @@ public class RunWorkerTests
                                     <PackageReference Include="Some.Package;Some.Package2" Version="1.0.1" />
                                   </ItemGroup>
                                 </Project>
-                                """.SetEOL(EOL),
+                                """,
                         }
 
                     ],
@@ -501,11 +498,8 @@ public class RunWorkerTests
         );
     }
 
-    [Theory]
-    [InlineData(EOLType.CR)]
-    [InlineData(EOLType.LF)]
-    [InlineData(EOLType.CRLF)]
-    public async Task PrivateSourceAuthenticationFailureIsForwaredToApiHandler(EOLType EOL)
+    [Fact]
+    public async Task PrivateSourceAuthenticationFailureIsForwaredToApiHandler()
     {
         await RunAsync(
             packages:
@@ -529,7 +523,7 @@ public class RunWorkerTests
                         <add key="private_feed" value="http://example.com/nuget/index.json" allowInsecureConnections="true" />
                       </packageSources>
                     </configuration>
-                    """.SetEOL(EOL)),
+                    """),
                 ("project.csproj", """
                     <Project Sdk="Microsoft.NET.Sdk">
                       <PropertyGroup>
@@ -539,7 +533,7 @@ public class RunWorkerTests
                         <PackageReference Include="Some.Package" Version="1.0.0" />
                       </ItemGroup>
                     </Project>
-                    """.SetEOL(EOL))
+                    """)
             ],
             discoveryWorker: new TestDiscoveryWorker((_input) =>
             {
@@ -560,14 +554,11 @@ public class RunWorkerTests
         );
     }
 
-    [Theory]
-    [InlineData(EOLType.CR)]
-    [InlineData(EOLType.LF)]
-    [InlineData(EOLType.CRLF)]
-    public async Task UpdateHandlesPackagesConfigFiles(EOLType EOL)
+    [Fact]
+    public async Task UpdateHandlesPackagesConfigFiles()
     {
-        var repoMetadata = XElement.Parse("""<repository type="git" url="https://nuget.example.com/some-package" />""".SetEOL(EOL));
-        var repoMetadata2 = XElement.Parse("""<repository type="git" url="https://nuget.example.com/some-package2" />""".SetEOL(EOL));
+        var repoMetadata = XElement.Parse("""<repository type="git" url="https://nuget.example.com/some-package" />""");
+        var repoMetadata2 = XElement.Parse("""<repository type="git" url="https://nuget.example.com/some-package2" />""");
         await RunAsync(
             packages:
             [
@@ -597,13 +588,13 @@ public class RunWorkerTests
                         <PackageReference Include="Some.Package" Version="1.0.0" />
                       </ItemGroup>
                     </Project>
-                    """.SetEOL(EOL)),
+                    """),
                 ("some-dir/packages.config", """
                     <?xml version="1.0" encoding="utf-8"?>
                     <packages>
                       <package id="Some.Package2" version="2.0.0" targetFramework="net8.0" />
                     </packages>
-                    """.SetEOL(EOL)),
+                    """),
             ],
             discoveryWorker: new TestDiscoveryWorker(_input =>
             {
@@ -676,7 +667,7 @@ public class RunWorkerTests
                                 <PackageReference Include="Some.Package" Version="1.0.1" />
                               </ItemGroup>
                              </Project>
-                            """.SetEOL(EOL));
+                            """);
                         break;
                     case "Some.Package2":
                         await File.WriteAllTextAsync(projectPath, """
@@ -694,14 +685,14 @@ public class RunWorkerTests
                                 </Reference>
                               </ItemGroup>
                             </Project>
-                            """.SetEOL(EOL));
+                            """);
                         var packagesConfigPath = Path.Join(Path.GetDirectoryName(projectPath)!, "packages.config");
                         await File.WriteAllTextAsync(packagesConfigPath, """
                             <?xml version="1.0" encoding="utf-8"?>
                             <packages>
                               <package id="Some.Package2" version="2.0.1" targetFramework="net8.0" />
                             </packages>
-                            """.SetEOL(EOL));
+                            """);
                         break;
                     default:
                         throw new NotSupportedException();
@@ -732,7 +723,8 @@ public class RunWorkerTests
                             <packages>
                               <package id="Some.Package2" version="2.0.0" targetFramework="net8.0" />
                             </packages>
-                            """.SetEOL(EOL)))
+                            """)),
+                        ContentEncoding = "base64"
                     },
                     new DependencyFile()
                     {
@@ -747,7 +739,8 @@ public class RunWorkerTests
                                 <PackageReference Include="Some.Package" Version="1.0.0" />
                               </ItemGroup>
                             </Project>
-                            """.SetEOL(EOL)))
+                            """)),
+                        ContentEncoding = "base64"
                     },
                 ],
                 BaseCommitSha = "TEST-COMMIT-SHA",
@@ -871,7 +864,7 @@ public class RunWorkerTests
                                 <packages>
                                   <package id="Some.Package2" version="2.0.1" targetFramework="net8.0" />
                                 </packages>
-                                """.SetEOL(EOL),
+                                """,
                         },
                         new DependencyFile()
                         {
@@ -892,7 +885,7 @@ public class RunWorkerTests
                                     </Reference>
                                   </ItemGroup>
                                 </Project>
-                                """.SetEOL(EOL),
+                                """,
                         },
                     ],
                     BaseCommitSha = "TEST-COMMIT-SHA",
@@ -905,14 +898,11 @@ public class RunWorkerTests
         );
     }
 
-    [Theory]
-    [InlineData(EOLType.CR)]
-    [InlineData(EOLType.LF)]
-    [InlineData(EOLType.CRLF)]
-    public async Task UpdateHandlesPackagesConfigFromReferencedCsprojFiles(EOLType EOL)
+    [Fact]
+    public async Task UpdateHandlesPackagesConfigFromReferencedCsprojFiles()
     {
-        var repoMetadata = XElement.Parse("""<repository type="git" url="https://nuget.example.com/some-package" />""".SetEOL(EOL));
-        var repoMetadata2 = XElement.Parse("""<repository type="git" url="https://nuget.example.com/some-package2" />""".SetEOL(EOL));
+        var repoMetadata = XElement.Parse("""<repository type="git" url="https://nuget.example.com/some-package" />""");
+        var repoMetadata2 = XElement.Parse("""<repository type="git" url="https://nuget.example.com/some-package2" />""");
         await RunAsync(
             packages:
             [
@@ -945,13 +935,13 @@ public class RunWorkerTests
                         <ProjectReference Include="../ProjectB/ProjectB.csproj" />
                       </ItemGroup>
                     </Project>
-                    """.SetEOL(EOL)),
+                    """),
                 ("some-dir/ProjectA/packages.config", """
                     <?xml version="1.0" encoding="utf-8"?>
                     <packages>
                       <package id="Some.Package2" version="2.0.0" targetFramework="net8.0" />
                     </packages>
-                    """.SetEOL(EOL)),
+                    """),
                 ("some-dir/ProjectB/ProjectB.csproj", """
                     <Project Sdk="Microsoft.NET.Sdk">
                       <PropertyGroup>
@@ -961,13 +951,13 @@ public class RunWorkerTests
                         <PackageReference Include="Some.Package" Version="1.0.0" />
                       </ItemGroup>
                     </Project>
-                    """.SetEOL(EOL)),
+                    """),
                 ("some-dir/ProjectB/packages.config", """
                     <?xml version="1.0" encoding="utf-8"?>
                     <packages>
                       <package id="Some.Package2" version="2.0.0" targetFramework="net8.0" />
                     </packages>
-                    """.SetEOL(EOL)),
+                    """),
             ],
             discoveryWorker: new TestDiscoveryWorker(_input =>
             {
@@ -1058,7 +1048,7 @@ public class RunWorkerTests
                                 <ProjectReference Include="../ProjectB/ProjectB.csproj" />
                               </ItemGroup>
                             </Project>
-                            """.SetEOL(EOL));
+                            """);
                         break;
                     case ("ProjectA.csproj", "Some.Package2"):
                         await File.WriteAllTextAsync(projectPath, """
@@ -1079,13 +1069,13 @@ public class RunWorkerTests
                                 </Reference>
                               </ItemGroup>
                             </Project>
-                            """.SetEOL(EOL));
+                            """);
                         await File.WriteAllTextAsync(packagesConfigPath, """
                             <?xml version="1.0" encoding="utf-8"?>
                             <packages>
                               <package id="Some.Package2" version="2.0.1" targetFramework="net8.0" />
                             </packages>
-                            """.SetEOL(EOL));
+                            """);
                         break;
                     case ("ProjectB.csproj", "Some.Package"):
                         await File.WriteAllTextAsync(projectPath, """
@@ -1097,7 +1087,7 @@ public class RunWorkerTests
                                 <PackageReference Include="Some.Package" Version="1.0.1" />
                               </ItemGroup>
                             </Project>
-                            """.SetEOL(EOL));
+                            """);
                         break;
                     case ("ProjectB.csproj", "Some.Package2"):
                         await File.WriteAllTextAsync(projectPath, """
@@ -1115,13 +1105,13 @@ public class RunWorkerTests
                                 </Reference>
                               </ItemGroup>
                             </Project>
-                            """.SetEOL(EOL));
+                            """);
                         await File.WriteAllTextAsync(packagesConfigPath, """
                             <?xml version="1.0" encoding="utf-8"?>
                             <packages>
                               <package id="Some.Package2" version="2.0.1" targetFramework="net8.0" />
                             </packages>
-                            """.SetEOL(EOL));
+                            """);
                         break;
                     default:
                         throw new NotSupportedException();
@@ -1152,7 +1142,8 @@ public class RunWorkerTests
                             <packages>
                               <package id="Some.Package2" version="2.0.0" targetFramework="net8.0" />
                             </packages>
-                            """.SetEOL(EOL)))
+                            """)),
+                        ContentEncoding = "base64"
                     },
                     new DependencyFile()
                     {
@@ -1170,7 +1161,8 @@ public class RunWorkerTests
                                 <ProjectReference Include="../ProjectB/ProjectB.csproj" />
                               </ItemGroup>
                             </Project>
-                            """.SetEOL(EOL)))
+                            """)),
+                        ContentEncoding = "base64"
                     },
                     new DependencyFile()
                     {
@@ -1181,7 +1173,8 @@ public class RunWorkerTests
                             <packages>
                               <package id="Some.Package2" version="2.0.0" targetFramework="net8.0" />
                             </packages>
-                            """.SetEOL(EOL)))
+                            """)),
+                        ContentEncoding = "base64"
                     },
                     new DependencyFile()
                     {
@@ -1196,7 +1189,8 @@ public class RunWorkerTests
                                 <PackageReference Include="Some.Package" Version="1.0.0" />
                               </ItemGroup>
                             </Project>
-                            """.SetEOL(EOL)))
+                            """)),
+                        ContentEncoding = "base64"
                     },
                 ],
                 BaseCommitSha = "TEST-COMMIT-SHA",
@@ -1406,7 +1400,7 @@ public class RunWorkerTests
                                 <packages>
                                   <package id="Some.Package2" version="2.0.1" targetFramework="net8.0" />
                                 </packages>
-                                """.SetEOL(EOL),
+                                """,
                         },
                         new DependencyFile()
                         {
@@ -1430,7 +1424,7 @@ public class RunWorkerTests
                                     </Reference>
                                   </ItemGroup>
                                 </Project>
-                                """.SetEOL(EOL),
+                                """,
                         },
                         new DependencyFile()
                         {
@@ -1441,7 +1435,7 @@ public class RunWorkerTests
                                 <packages>
                                   <package id="Some.Package2" version="2.0.1" targetFramework="net8.0" />
                                 </packages>
-                                """.SetEOL(EOL),
+                                """,
                         },
                         new DependencyFile()
                         {
@@ -1462,7 +1456,7 @@ public class RunWorkerTests
                                     </Reference>
                                   </ItemGroup>
                                 </Project>
-                                """.SetEOL(EOL),
+                                """,
                         },
                     ],
                     BaseCommitSha = "TEST-COMMIT-SHA",
@@ -1475,11 +1469,8 @@ public class RunWorkerTests
         );
     }
 
-    [Theory]
-    [InlineData(EOLType.CR)]
-    [InlineData(EOLType.LF)]
-    [InlineData(EOLType.CRLF)]
-    public async Task UpdatedFilesAreOnlyReportedOnce(EOLType EOL)
+    [Fact]
+    public async Task UpdatedFilesAreOnlyReportedOnce()
     {
         await RunAsync(
             job: new()
@@ -1506,14 +1497,14 @@ public class RunWorkerTests
                         <ProjectFile Include="project2/project2.csproj" />
                       </ItemGroup>
                     </Project>
-                    """.SetEOL(EOL)),
+                    """),
                 ("Directory.Build.props", """
                     <Project>
                       <PropertyGroup>
                         <SomePackageVersion>1.0.0</SomePackageVersion>
                       </PropertyGroup>
                     </Project>
-                    """.SetEOL(EOL)),
+                    """),
                 ("project1/project1.csproj", """
                     <Project Sdk="Microsoft.NET.Sdk">
                       <PropertyGroup>
@@ -1523,7 +1514,7 @@ public class RunWorkerTests
                         <PackageReference Include="Some.Package" Version="$(SomePackageVersion)" />
                       </ItemGroup>
                     </Project>
-                    """.SetEOL(EOL)),
+                    """),
                 ("project2/project2.csproj", """
                     <Project Sdk="Microsoft.NET.Sdk">
                       <PropertyGroup>
@@ -1533,7 +1524,7 @@ public class RunWorkerTests
                         <PackageReference Include="Some.Package" Version="$(SomePackageVersion)" />
                       </ItemGroup>
                     </Project>
-                    """.SetEOL(EOL))
+                    """)
             ],
             discoveryWorker: new TestDiscoveryWorker(_input =>
             {
@@ -1598,7 +1589,7 @@ public class RunWorkerTests
                         <SomePackageVersion>1.1.0</SomePackageVersion>
                       </PropertyGroup>
                     </Project>
-                    """.SetEOL(EOL));
+                    """);
                 return new UpdateOperationResult()
                 {
                     UpdateOperations = [
@@ -1625,7 +1616,8 @@ public class RunWorkerTests
                                 <SomePackageVersion>1.0.0</SomePackageVersion>
                               </PropertyGroup>
                             </Project>
-                            """.SetEOL(EOL)))
+                            """)),
+                        ContentEncoding = "base64"
                     },
                     new DependencyFile()
                     {
@@ -1640,7 +1632,8 @@ public class RunWorkerTests
                                 <PackageReference Include="Some.Package" Version="$(SomePackageVersion)" />
                               </ItemGroup>
                             </Project>
-                            """.SetEOL(EOL)))
+                            """)),
+                        ContentEncoding = "base64"
                     },
                     new DependencyFile()
                     {
@@ -1655,7 +1648,8 @@ public class RunWorkerTests
                                 <PackageReference Include="Some.Package" Version="$(SomePackageVersion)" />
                               </ItemGroup>
                             </Project>
-                            """.SetEOL(EOL)))
+                            """)),
+                        ContentEncoding = "base64"
                     },
                 ],
                 BaseCommitSha = "TEST-COMMIT-SHA",
@@ -1780,7 +1774,7 @@ public class RunWorkerTests
                                     <SomePackageVersion>1.1.0</SomePackageVersion>
                                   </PropertyGroup>
                                 </Project>
-                                """.SetEOL(EOL),
+                                """,
                         }
                     ],
                     BaseCommitSha = "TEST-COMMIT-SHA",
@@ -1793,168 +1787,58 @@ public class RunWorkerTests
         );
     }
 
-    [Theory]
-    [InlineData(EOLType.CR)]
-    [InlineData(EOLType.LF)]
-    [InlineData(EOLType.CRLF)]
-    public async Task UpdatePackageWithDifferentVersionsInDifferentDirectories(EOLType EOL)
+    [Fact]
+    public async Task PackageListedInSecurityAdvisoriesSectionIsNotVulnerable()
     {
-        // this test passes `null` for discovery, analyze, and update workers to fully test the desired behavior
-
-        // the same dependency Some.Package is reported for 3 cases:
-        //   library1.csproj - top level dependency, already up to date
-        //   library2.csproj - top level dependency, needs direct update
-        //   library3.csproj - transitive dependency, needs pin
         await RunAsync(
-            experimentsManager: new ExperimentsManager() { UseDirectDiscovery = true },
-            packages: [
-                MockNuGetPackage.CreateSimplePackage("Some.Package", "1.0.0", "net8.0"),
-                MockNuGetPackage.CreateSimplePackage("Some.Package", "2.0.0", "net8.0"),
-                MockNuGetPackage.CreateSimplePackage("Package.With.Transitive.Dependency", "0.1.0", "net8.0", [(null, [("Some.Package", "1.0.0")])]),
-            ],
-            job: new Job()
+            job: new()
             {
-                AllowedUpdates = [new() { UpdateType = UpdateType.Security }],
-                SecurityAdvisories =
-                [
-                    new()
-                    {
-                        DependencyName = "Some.Package",
-                        AffectedVersions = [Requirement.Parse("= 1.0.0")]
-                    }
-                ],
                 Source = new()
                 {
                     Provider = "github",
                     Repo = "test/repo",
-                    Directory = "/"
-                }
+                },
+                SecurityUpdatesOnly = true,
+                SecurityAdvisories = [
+                    new()
+                    {
+                        DependencyName = "Package.Is.Not.Vulnerable",
+                        AffectedVersions = [Requirement.Parse("< 1.0.0")]
+                    }
+                ]
             },
             files: [
-                ("dirs.proj", """
-                    <Project>
-                      <ItemGroup>
-                        <ProjectFile Include="library1\library1.csproj" />
-                        <ProjectFile Include="library2\library2.csproj" />
-                        <ProjectFile Include="library3\library3.csproj" />
-                      </ItemGroup>
-                    </Project>
-                    """.SetEOL(EOL)),
-                ("Directory.Build.props", "<Project />"),
-                ("Directory.Build.targets", "<Project />"),
-                ("Directory.Packages.props", """
-                    <Project>
-                      <PropertyGroup>
-                        <ManagePackageVersionsCentrally>false</ManagePackageVersionsCentrally>
-                      </PropertyGroup>
-                    </Project>
-                    """.SetEOL(EOL)),
-                ("library1/library1.csproj", """
-                    <Project Sdk="Microsoft.NET.Sdk">
-                      <PropertyGroup>
-                        <TargetFramework>net8.0</TargetFramework>
-                      </PropertyGroup>
-                      <ItemGroup>
-                        <PackageReference Include="Some.Package" Version="2.0.0" />
-                      </ItemGroup>
-                    </Project>
-                    """.SetEOL(EOL)),
-                ("library2/library2.csproj", """
-                    <Project Sdk="Microsoft.NET.Sdk">
-                      <PropertyGroup>
-                        <TargetFramework>net8.0</TargetFramework>
-                      </PropertyGroup>
-                      <ItemGroup>
-                        <PackageReference Include="Some.Package" Version="1.0.0" />
-                      </ItemGroup>
-                    </Project>
-                    """.SetEOL(EOL)),
-                ("library3/library3.csproj", """
-                    <Project Sdk="Microsoft.NET.Sdk">
-                      <PropertyGroup>
-                        <TargetFramework>net8.0</TargetFramework>
-                      </PropertyGroup>
-                      <ItemGroup>
-                        <PackageReference Include="Package.With.Transitive.Dependency" Version="0.1.0" />
-                      </ItemGroup>
-                    </Project>
-                    """.SetEOL(EOL)),
+                ("project.csproj", "contents irrelevant")
             ],
-            discoveryWorker: null,
-            analyzeWorker: null,
-            updaterWorker: null,
-            expectedResult: new RunResult()
+            discoveryWorker: new TestDiscoveryWorker(_input =>
             {
-                Base64DependencyFiles =
-                [
-                    new DependencyFile()
-                    {
-                        Directory = "/",
-                        Name = "Directory.Build.props",
-                        Content = Convert.ToBase64String(Encoding.UTF8.GetBytes("<Project />"))
-                    },
-                    new DependencyFile()
-                    {
-                        Directory = "/",
-                        Name = "Directory.Build.targets",
-                        Content = Convert.ToBase64String(Encoding.UTF8.GetBytes("<Project />"))
-                    },
-                    new DependencyFile()
+                return Task.FromResult(new WorkspaceDiscoveryResult()
+                {
+                    Path = "",
+                    Projects = [
+                        new()
+                        {
+                            FilePath = "project.csproj",
+                            Dependencies = [
+                                new("Package.Is.Not.Vulnerable", "1.0.1", DependencyType.PackageReference)
+                            ],
+                            ImportedFiles = [],
+                            AdditionalFiles = [],
+                        }
+                    ]
+                });
+            }),
+            analyzeWorker: new TestAnalyzeWorker(_input => throw new NotImplementedException("test shouldn't get this far")),
+            updaterWorker: new TestUpdaterWorker(_input => throw new NotImplementedException("test shouldn't get this far")),
+            expectedResult: new()
+            {
+                Base64DependencyFiles = [
+                    new()
                     {
                         Directory = "/",
-                        Name = "Directory.Packages.props",
-                        Content = Convert.ToBase64String(Encoding.UTF8.GetBytes("""
-                            <Project>
-                              <PropertyGroup>
-                                <ManagePackageVersionsCentrally>false</ManagePackageVersionsCentrally>
-                              </PropertyGroup>
-                            </Project>
-                            """.SetEOL(EOL)))
-                    },
-                    new DependencyFile()
-                    {
-                        Directory = "/library1",
-                        Name = "library1.csproj",
-                        Content = Convert.ToBase64String(Encoding.UTF8.GetBytes("""
-                            <Project Sdk="Microsoft.NET.Sdk">
-                              <PropertyGroup>
-                                <TargetFramework>net8.0</TargetFramework>
-                              </PropertyGroup>
-                              <ItemGroup>
-                                <PackageReference Include="Some.Package" Version="2.0.0" />
-                              </ItemGroup>
-                            </Project>
-                            """.SetEOL(EOL)))
-                    },
-                    new DependencyFile()
-                    {
-                        Directory = "/library2",
-                        Name = "library2.csproj",
-                        Content = Convert.ToBase64String(Encoding.UTF8.GetBytes("""
-                            <Project Sdk="Microsoft.NET.Sdk">
-                              <PropertyGroup>
-                                <TargetFramework>net8.0</TargetFramework>
-                              </PropertyGroup>
-                              <ItemGroup>
-                                <PackageReference Include="Some.Package" Version="1.0.0" />
-                              </ItemGroup>
-                            </Project>
-                            """.SetEOL(EOL)))
-                    },
-                    new DependencyFile()
-                    {
-                        Directory = "/library3",
-                        Name = "library3.csproj",
-                        Content = Convert.ToBase64String(Encoding.UTF8.GetBytes("""
-                            <Project Sdk="Microsoft.NET.Sdk">
-                              <PropertyGroup>
-                                <TargetFramework>net8.0</TargetFramework>
-                              </PropertyGroup>
-                              <ItemGroup>
-                                <PackageReference Include="Package.With.Transitive.Dependency" Version="0.1.0" />
-                              </ItemGroup>
-                            </Project>
-                            """.SetEOL(EOL)))
+                        Name = "project.csproj",
+                        Content = Convert.ToBase64String(Encoding.UTF8.GetBytes("contents irrelevant")),
+                        ContentEncoding = "base64"
                     }
                 ],
                 BaseCommitSha = "TEST-COMMIT-SHA",
@@ -1965,338 +1849,109 @@ public class RunWorkerTests
                     Dependencies = [
                         new()
                         {
-                            Name = "Some.Package",
-                            Version = "2.0.0",
+                            Name = "Package.Is.Not.Vulnerable",
+                            Version = "1.0.1",
                             Requirements = [
                                 new()
                                 {
-                                    Requirement = "2.0.0",
-                                    File = "/library1/library1.csproj",
+                                    Requirement = "1.0.1",
+                                    File = "/project.csproj",
                                     Groups = ["dependencies"],
                                 }
                             ]
-                        },
+                        }
+                    ],
+                    DependencyFiles = ["/project.csproj"]
+                },
+                new IncrementMetric()
+                {
+                    Metric = "updater.started",
+                    Tags = new()
+                    {
+                        ["operation"] = "create_security_pr"
+                    }
+                },
+                new SecurityUpdateNotNeeded("Package.Is.Not.Vulnerable"),
+                new MarkAsProcessed("TEST-COMMIT-SHA"),
+            ]
+        );
+    }
+
+    [Fact]
+    public async Task PackageListedInSecurityAdvisoriesSectionIsNotPresent()
+    {
+        await RunAsync(
+            job: new()
+            {
+                Source = new()
+                {
+                    Provider = "github",
+                    Repo = "test/repo",
+                },
+                SecurityUpdatesOnly = true,
+                SecurityAdvisories = [
+                    new()
+                    {
+                        DependencyName = "Package.Is.Not.Vulnerable",
+                        AffectedVersions = [Requirement.Parse("< 1.0.0")]
+                    }
+                ]
+            },
+            files: [
+                ("project.csproj", "contents irrelevant")
+            ],
+            discoveryWorker: new TestDiscoveryWorker(_input =>
+            {
+                return Task.FromResult(new WorkspaceDiscoveryResult()
+                {
+                    Path = "",
+                    Projects = [
                         new()
                         {
-                            Name = "Some.Package",
-                            Version = "1.0.0",
-                            Requirements = [
-                                new()
-                                {
-                                    Requirement = "1.0.0",
-                                    File = "/library2/library2.csproj",
-                                    Groups = ["dependencies"],
-                                }
-                            ]
-                        },
+                            FilePath = "project.csproj",
+                            Dependencies = [
+                                new("Unrelated.Package", "0.1.0", DependencyType.PackageReference)
+                            ],
+                            ImportedFiles = [],
+                            AdditionalFiles = [],
+                        }
+                    ]
+                });
+            }),
+            analyzeWorker: new TestAnalyzeWorker(_input => throw new NotImplementedException("test shouldn't get this far")),
+            updaterWorker: new TestUpdaterWorker(_input => throw new NotImplementedException("test shouldn't get this far")),
+            expectedResult: new()
+            {
+                Base64DependencyFiles = [
+                    new()
+                    {
+                        Directory = "/",
+                        Name = "project.csproj",
+                        Content = Convert.ToBase64String(Encoding.UTF8.GetBytes("contents irrelevant")),
+                        ContentEncoding = "base64"
+                    }
+                ],
+                BaseCommitSha = "TEST-COMMIT-SHA",
+            },
+            expectedApiMessages: [
+                new UpdatedDependencyList()
+                {
+                    Dependencies = [
                         new()
                         {
-                            Name = "Package.With.Transitive.Dependency",
+                            Name = "Unrelated.Package",
                             Version = "0.1.0",
                             Requirements = [
                                 new()
                                 {
                                     Requirement = "0.1.0",
-                                    File = "/library3/library3.csproj",
-                                    Groups = ["dependencies"],
-                                }
-                            ]
-                        },
-                        new()
-                        {
-                            Name = "Some.Package",
-                            Version = "1.0.0",
-                            Requirements = [
-                                new()
-                                {
-                                    Requirement = "1.0.0",
-                                    File = "/library3/library3.csproj",
+                                    File = "/project.csproj",
                                     Groups = ["dependencies"],
                                 }
                             ]
-                        },
-                    ],
-                    DependencyFiles = [
-                        "/Directory.Build.props",
-                        "/Directory.Build.targets",
-                        "/Directory.Packages.props",
-                        "/library1/library1.csproj",
-                        "/library2/library2.csproj",
-                        "/library3/library3.csproj",
+                        }
                     ],
-                },
-                new IncrementMetric()
-                {
-                    Metric = "updater.started",
-                    Tags = new()
-                    {
-                        ["operation"] = "create_security_pr"
-                    }
-                },
-                new CreatePullRequest()
-                {
-                    Dependencies = [
-                        new()
-                        {
-                            Name = "Some.Package",
-                            Version = "2.0.0",
-                            Requirements = [
-                                new()
-                                {
-                                    Requirement = "2.0.0",
-                                    File = "/library2/library2.csproj",
-                                    Groups = ["dependencies"],
-                                    Source = new()
-                                    {
-                                        SourceUrl = null,
-                                        Type = "nuget_repo",
-                                    }
-                                }
-                            ],
-                            PreviousVersion = "1.0.0",
-                            PreviousRequirements = [
-                                new()
-                                {
-                                    Requirement = "1.0.0",
-                                    File = "/library2/library2.csproj",
-                                    Groups = ["dependencies"],
-                                }
-                            ],
-                        },
-                        new()
-                        {
-                            Name = "Some.Package",
-                            Version = "2.0.0",
-                            Requirements = [
-                                new()
-                                {
-                                    Requirement = "2.0.0",
-                                    File = "/library3/library3.csproj",
-                                    Groups = ["dependencies"],
-                                    Source = new()
-                                    {
-                                        SourceUrl = null,
-                                        Type = "nuget_repo",
-                                    }
-                                }
-                            ],
-                            PreviousVersion = "1.0.0",
-                            PreviousRequirements = [
-                                new()
-                                {
-                                    Requirement = "1.0.0",
-                                    File = "/library3/library3.csproj",
-                                    Groups = ["dependencies"],
-                                }
-                            ],
-                        },
-                    ],
-                    UpdatedDependencyFiles = [
-                        new()
-                        {
-                            Directory = "/library2",
-                            Name = "library2.csproj",
-                            Content = """
-                                <Project Sdk="Microsoft.NET.Sdk">
-                                  <PropertyGroup>
-                                    <TargetFramework>net8.0</TargetFramework>
-                                  </PropertyGroup>
-                                  <ItemGroup>
-                                    <PackageReference Include="Some.Package" Version="2.0.0" />
-                                  </ItemGroup>
-                                </Project>
-                                """.SetEOL(EOL)
-                        },
-                        new()
-                        {
-                            Directory = "/library3",
-                            Name = "library3.csproj",
-                            Content = """
-                                <Project Sdk="Microsoft.NET.Sdk">
-                                  <PropertyGroup>
-                                    <TargetFramework>net8.0</TargetFramework>
-                                  </PropertyGroup>
-                                  <ItemGroup>
-                                    <PackageReference Include="Package.With.Transitive.Dependency" Version="0.1.0" />
-                                    <PackageReference Include="Some.Package" Version="2.0.0" />
-                                  </ItemGroup>
-                                </Project>
-                                """.SetEOL(EOL)
-                        }
-                    ],
-                    BaseCommitSha = "TEST-COMMIT-SHA",
-                    CommitMessage = TestPullRequestCommitMessage,
-                    PrTitle = TestPullRequestTitle,
-                    PrBody = TestPullRequestBody
-                },
-                new MarkAsProcessed("TEST-COMMIT-SHA")
-            ]
-        );
-    }
-
-    [Fact]
-    public async Task PackageListedInSecurityAdvisoriesSectionIsNotVulnerable()
-    {
-        await RunAsync(
-            job: new()
-            {
-                Source = new()
-                {
-                    Provider = "github",
-                    Repo = "test/repo",
-                },
-                SecurityUpdatesOnly = true,
-                SecurityAdvisories = [
-                    new()
-                    {
-                        DependencyName = "Package.Is.Not.Vulnerable",
-                        AffectedVersions = [Requirement.Parse("< 1.0.0")]
-                    }
-                ]
-            },
-            files: [
-                ("project.csproj", "contents irrelevant")
-            ],
-            discoveryWorker: new TestDiscoveryWorker(_input =>
-            {
-                return Task.FromResult(new WorkspaceDiscoveryResult()
-                {
-                    Path = "",
-                    Projects = [
-                        new()
-                        {
-                            FilePath = "project.csproj",
-                            Dependencies = [
-                                new("Package.Is.Not.Vulnerable", "1.0.1", DependencyType.PackageReference)
-                            ],
-                            ImportedFiles = [],
-                            AdditionalFiles = [],
-                        }
-                    ]
-                });
-            }),
-            analyzeWorker: new TestAnalyzeWorker(_input => throw new NotImplementedException("test shouldn't get this far")),
-            updaterWorker: new TestUpdaterWorker(_input => throw new NotImplementedException("test shouldn't get this far")),
-            expectedResult: new()
-            {
-                Base64DependencyFiles = [
-                    new()
-                    {
-                        Directory = "/",
-                        Name = "project.csproj",
-                        Content = Convert.ToBase64String(Encoding.UTF8.GetBytes("contents irrelevant"))
-                    }
-                ],
-                BaseCommitSha = "TEST-COMMIT-SHA",
-            },
-            expectedApiMessages: [
-                new UpdatedDependencyList()
-                {
-                    Dependencies = [
-                        new()
-                        {
-                            Name = "Package.Is.Not.Vulnerable",
-                            Version = "1.0.1",
-                            Requirements = [
-                                new()
-                                {
-                                    Requirement = "1.0.1",
-                                    File = "/project.csproj",
-                                    Groups = ["dependencies"],
-                                }
-                            ]
-                        }
-                    ],
-                    DependencyFiles = ["/project.csproj"]
-                },
-                new IncrementMetric()
-                {
-                    Metric = "updater.started",
-                    Tags = new()
-                    {
-                        ["operation"] = "create_security_pr"
-                    }
-                },
-                new SecurityUpdateNotNeeded("Package.Is.Not.Vulnerable"),
-                new MarkAsProcessed("TEST-COMMIT-SHA"),
-            ]
-        );
-    }
-
-    [Fact]
-    public async Task PackageListedInSecurityAdvisoriesSectionIsNotPresent()
-    {
-        await RunAsync(
-            job: new()
-            {
-                Source = new()
-                {
-                    Provider = "github",
-                    Repo = "test/repo",
-                },
-                SecurityUpdatesOnly = true,
-                SecurityAdvisories = [
-                    new()
-                    {
-                        DependencyName = "Package.Is.Not.Vulnerable",
-                        AffectedVersions = [Requirement.Parse("< 1.0.0")]
-                    }
-                ]
-            },
-            files: [
-                ("project.csproj", "contents irrelevant")
-            ],
-            discoveryWorker: new TestDiscoveryWorker(_input =>
-            {
-                return Task.FromResult(new WorkspaceDiscoveryResult()
-                {
-                    Path = "",
-                    Projects = [
-                        new()
-                        {
-                            FilePath = "project.csproj",
-                            Dependencies = [
-                                new("Unrelated.Package", "0.1.0", DependencyType.PackageReference)
-                            ],
-                            ImportedFiles = [],
-                            AdditionalFiles = [],
-                        }
-                    ]
-                });
-            }),
-            analyzeWorker: new TestAnalyzeWorker(_input => throw new NotImplementedException("test shouldn't get this far")),
-            updaterWorker: new TestUpdaterWorker(_input => throw new NotImplementedException("test shouldn't get this far")),
-            expectedResult: new()
-            {
-                Base64DependencyFiles = [
-                    new()
-                    {
-                        Directory = "/",
-                        Name = "project.csproj",
-                        Content = Convert.ToBase64String(Encoding.UTF8.GetBytes("contents irrelevant"))
-                    }
-                ],
-                BaseCommitSha = "TEST-COMMIT-SHA",
-            },
-            expectedApiMessages: [
-                new UpdatedDependencyList()
-                {
-                    Dependencies = [
-                        new()
-                        {
-                            Name = "Unrelated.Package",
-                            Version = "0.1.0",
-                            Requirements = [
-                                new()
-                                {
-                                    Requirement = "0.1.0",
-                                    File = "/project.csproj",
-                                    Groups = ["dependencies"],
-                                }
-                            ]
-                        }
-                    ],
-                    DependencyFiles = ["/project.csproj"]
+                    DependencyFiles = ["/project.csproj"]
                 },
                 new IncrementMetric()
                 {
@@ -2391,13 +2046,15 @@ public class RunWorkerTests
                     {
                         Directory = "/.config",
                         Name = "dotnet-tools.json",
-                        Content = Convert.ToBase64String(Encoding.UTF8.GetBytes("dotnet-tools.json content old"))
+                        Content = Convert.ToBase64String(Encoding.UTF8.GetBytes("dotnet-tools.json content old")),
+                        ContentEncoding = "base64"
                     },
                     new()
                     {
                         Directory = "/",
                         Name = "global.json",
-                        Content = Convert.ToBase64String(Encoding.UTF8.GetBytes("global.json content old"))
+                        Content = Convert.ToBase64String(Encoding.UTF8.GetBytes("global.json content old")),
+                        ContentEncoding = "base64"
                     },
                 ],
                 BaseCommitSha = "TEST-COMMIT-SHA",
@@ -2598,7 +2255,8 @@ public class RunWorkerTests
                     {
                         Directory = "/",
                         Name = "project.csproj",
-                        Content = Convert.ToBase64String(Encoding.UTF8.GetBytes("contents irrelevant"))
+                        Content = Convert.ToBase64String(Encoding.UTF8.GetBytes("contents irrelevant")),
+                        ContentEncoding = "base64"
                     }
                 ],
                 BaseCommitSha = "TEST-COMMIT-SHA",
@@ -2637,18 +2295,513 @@ public class RunWorkerTests
         );
     }
 
-    private static async Task RunAsync(Job job, TestFile[] files, IDiscoveryWorker? discoveryWorker, IAnalyzeWorker? analyzeWorker, IUpdaterWorker? updaterWorker, RunResult expectedResult, object[] expectedApiMessages, MockNuGetPackage[]? packages = null, ExperimentsManager? experimentsManager = null, string? repoContentsPath = null)
+    [Fact]
+    public async Task ByteOrderMarksAreDetectedAndRestored()
+    {
+        var rawBOM = Encoding.UTF8.GetPreamble();
+
+        // file1 goes from BOM to no BOM
+        var file1ContentOriginal = rawBOM.Concat(Encoding.ASCII.GetBytes("content1")).ToArray();
+        var file1ContentUpdated = Encoding.ASCII.GetBytes("updated1");
+
+        // file2 goes from no BOM to BOM
+        var file2ContentOriginal = Encoding.ASCII.GetBytes("content2");
+        var file2ContentUpdated = rawBOM.Concat(Encoding.ASCII.GetBytes("updated2")).ToArray();
+
+        await RunAsync(
+            job: new Job()
+            {
+                Source = new()
+                {
+                    Provider = "github",
+                    Repo = "test/repo",
+                    Directory = "/",
+                }
+            },
+            rawFiles:
+            [
+                ("file1", file1ContentOriginal),
+                ("file2", file2ContentOriginal)
+            ],
+            discoveryWorker: TestDiscoveryWorker.FromResults(("/", new()
+            {
+                Path = "/",
+                Projects = [
+                    new()
+                    {
+                        FilePath = "file1",
+                        Dependencies = [new("Dependency1", "1.0.0", DependencyType.PackageReference)],
+                        ImportedFiles = [],
+                        AdditionalFiles = [],
+                    },
+                    new()
+                    {
+                        FilePath = "file2",
+                        Dependencies = [new("Dependency2", "2.0.0", DependencyType.PackageReference)],
+                        ImportedFiles = [],
+                        AdditionalFiles = [],
+                    }
+                ]
+            })),
+            analyzeWorker: new TestAnalyzeWorker(args =>
+            {
+                AnalysisResult result = args.Item3.Name switch
+                {
+                    "Dependency1" => new()
+                    {
+                        CanUpdate = true,
+                        UpdatedVersion = "1.0.1",
+                        UpdatedDependencies = [new("Dependency1", "1.0.1", DependencyType.PackageReference)],
+                    },
+                    "Dependency2" => new()
+                    {
+                        CanUpdate = true,
+                        UpdatedVersion = "2.0.1",
+                        UpdatedDependencies = [new("Dependency2", "2.0.1", DependencyType.PackageReference)],
+                    },
+                    _ => throw new NotImplementedException()
+                };
+                return Task.FromResult(result);
+            }),
+            updaterWorker: new TestUpdaterWorker(async args =>
+            {
+                var (repoRoot, filePath, dependencyName, _previousVersion, _newVersion, _isTransitive) = args;
+
+                // file1 is rewritten without BOM, file2 is rewritten with BOM
+                var (updatedFileContent, newVersion) = dependencyName switch
+                {
+                    "Dependency1" => (file1ContentUpdated, "1.0.1"),
+                    "Dependency2" => (file2ContentUpdated, "2.0.1"),
+                    _ => throw new NotImplementedException(),
+                };
+                var fullFilePath = Path.Join(repoRoot, filePath);
+                await File.WriteAllBytesAsync(fullFilePath, updatedFileContent);
+                return new UpdateOperationResult()
+                {
+                    UpdateOperations = [new DirectUpdate()
+                    {
+                        DependencyName = dependencyName,
+                        NewVersion = NuGetVersion.Parse(newVersion),
+                        UpdatedFiles = [filePath],
+                    }],
+                };
+            }),
+            expectedResult: new()
+            {
+                Base64DependencyFiles = [
+                    new()
+                    {
+                        Directory = "/",
+                        Name = "file1",
+                        Content = Convert.ToBase64String(file1ContentOriginal),
+                        ContentEncoding = "base64",
+                    },
+                    new()
+                    {
+                        Directory = "/",
+                        Name = "file2",
+                        Content = Convert.ToBase64String(file2ContentOriginal),
+                        ContentEncoding = "base64",
+                    }
+                ],
+                BaseCommitSha = "TEST-COMMIT-SHA",
+            },
+            expectedApiMessages: [
+                new UpdatedDependencyList()
+                {
+                    Dependencies = [
+                        new()
+                        {
+                            Name = "Dependency1",
+                            Version = "1.0.0",
+                            Requirements = [
+                                new()
+                                {
+                                    Requirement = "1.0.0",
+                                    File = "/file1",
+                                    Groups = ["dependencies"],
+                                }
+                            ]
+                        },
+                        new()
+                        {
+                            Name = "Dependency2",
+                            Version = "2.0.0",
+                            Requirements = [
+                                new()
+                                {
+                                    Requirement = "2.0.0",
+                                    File = "/file2",
+                                    Groups = ["dependencies"]
+                                }
+                            ]
+                        }
+                    ],
+                    DependencyFiles = ["/file1", "/file2"]
+                },
+                new IncrementMetric()
+                {
+                    Metric = "updater.started",
+                    Tags = new()
+                    {
+                        ["operation"] = "group_update_all_versions"
+                    }
+                },
+                new CreatePullRequest()
+                {
+                    Dependencies =
+                    [
+                        new ReportedDependency()
+                        {
+                            Name = "Dependency1",
+                            Version = "1.0.1",
+                            Requirements =
+                            [
+                                new ReportedRequirement()
+                                {
+                                    Requirement = "1.0.1",
+                                    File = "/file1",
+                                    Groups = ["dependencies"],
+                                    Source = new() { SourceUrl = null },
+                                }
+                            ],
+                            PreviousVersion = "1.0.0",
+                            PreviousRequirements =
+                            [
+                                new ReportedRequirement()
+                                {
+                                    Requirement = "1.0.0",
+                                    File = "/file1",
+                                    Groups = ["dependencies"],
+                                }
+                            ],
+                        },
+                        new ReportedDependency()
+                        {
+                            Name = "Dependency2",
+                            Version = "2.0.1",
+                            Requirements =
+                            [
+                                new ReportedRequirement()
+                                {
+                                    Requirement = "2.0.1",
+                                    File = "/file2",
+                                    Groups = ["dependencies"],
+                                    Source = new() { SourceUrl = null },
+                                }
+                            ],
+                            PreviousVersion = "2.0.0",
+                            PreviousRequirements =
+                            [
+                                new ReportedRequirement()
+                                {
+                                    Requirement = "2.0.0",
+                                    File = "/file2",
+                                    Groups = ["dependencies"],
+                                }
+                            ],
+                        },
+                    ],
+                    UpdatedDependencyFiles =
+                    [
+                        // original line endings have been restored
+                        new DependencyFile()
+                        {
+                            Name = "file1",
+                            Directory = "/",
+                            Content = Convert.ToBase64String(rawBOM.Concat(file1ContentUpdated).ToArray()),
+                            ContentEncoding = "base64",
+                        },
+                        new DependencyFile()
+                        {
+                            Name = "file2",
+                            Directory = "/",
+                            Content = "updated2",
+                        },
+                    ],
+                    BaseCommitSha = "TEST-COMMIT-SHA",
+                    CommitMessage = TestPullRequestCommitMessage,
+                    PrTitle = TestPullRequestTitle,
+                    PrBody = TestPullRequestBody,
+                },
+                new MarkAsProcessed("TEST-COMMIT-SHA"),
+            ]
+        );
+    }
+
+    [Fact]
+    public async Task LineEndingsAreDetectedAndRestored()
+    {
+        await RunAsync(
+            job: new Job()
+            {
+                Source = new()
+                {
+                    Provider = "github",
+                    Repo = "test/repo",
+                    Directory = "/",
+                }
+            },
+            files:
+            [
+                // initially LF
+                ("file1", string.Concat(
+                    "file1-line1\n",
+                    "file1-line2\n",
+                    "file1-line3\n"
+                    )
+                ),
+                // initially CRLF
+                ("file2", string.Concat(
+                    "file2-line1\r\n",
+                    "file2-line2\r\n",
+                    "file2-line3\r\n"
+                    )
+                )
+            ],
+            discoveryWorker: TestDiscoveryWorker.FromResults(("/", new()
+            {
+                Path = "/",
+                Projects = [
+                    new()
+                    {
+                        FilePath = "file1",
+                        Dependencies = [new("Dependency1", "1.0.0", DependencyType.PackageReference)],
+                        ImportedFiles = [],
+                        AdditionalFiles = [],
+                    },
+                    new()
+                    {
+                        FilePath = "file2",
+                        Dependencies = [new("Dependency2", "2.0.0", DependencyType.PackageReference)],
+                        ImportedFiles = [],
+                        AdditionalFiles = [],
+                    }
+                ]
+            })),
+            analyzeWorker: new TestAnalyzeWorker(args =>
+            {
+                AnalysisResult result = args.Item3.Name switch
+                {
+                    "Dependency1" => new()
+                    {
+                        CanUpdate = true,
+                        UpdatedVersion = "1.0.1",
+                        UpdatedDependencies = [new("Dependency1", "1.0.1", DependencyType.PackageReference)],
+                    },
+                    "Dependency2" => new()
+                    {
+                        CanUpdate = true,
+                        UpdatedVersion = "2.0.1",
+                        UpdatedDependencies = [new("Dependency2", "2.0.1", DependencyType.PackageReference)],
+                    },
+                    _ => throw new NotImplementedException()
+                };
+                return Task.FromResult(result);
+            }),
+            updaterWorker: new TestUpdaterWorker(async args =>
+            {
+                var (repoRoot, filePath, dependencyName, _previousVersion, _newVersion, _isTransitive) = args;
+
+                // file is explicitly updated with CR
+                var (updatedFileContent, newVersion) = dependencyName switch
+                {
+                    "Dependency1" => (string.Concat(
+                        "file1-line1-updated\r",
+                        "file1-line2-updated\r",
+                        "file1-line3-updated\r"), "1.0.1"),
+                    "Dependency2" => (string.Concat(
+                        "file2-line1-updated\r",
+                        "file2-line2-updated\r",
+                        "file2-line3-updated\r"), "2.0.1"),
+                    _ => throw new NotImplementedException(),
+                };
+                var fullFilePath = Path.Join(repoRoot, filePath);
+                await File.WriteAllTextAsync(fullFilePath, updatedFileContent);
+                return new UpdateOperationResult()
+                {
+                    UpdateOperations = [new DirectUpdate()
+                    {
+                        DependencyName = dependencyName,
+                        NewVersion = NuGetVersion.Parse(newVersion),
+                        UpdatedFiles = [filePath],
+                    }],
+                };
+            }),
+            expectedResult: new()
+            {
+                Base64DependencyFiles = [
+                    new()
+                    {
+                        Directory = "/",
+                        Name = "file1",
+                        Content = Convert.ToBase64String(Encoding.UTF8.GetBytes(string.Concat(
+                            "file1-line1\n",
+                            "file1-line2\n",
+                            "file1-line3\n"))),
+                        ContentEncoding = "base64",
+                    },
+                    new()
+                    {
+                        Directory = "/",
+                        Name = "file2",
+                        Content = Convert.ToBase64String(Encoding.UTF8.GetBytes(string.Concat(
+                            "file2-line1\r\n",
+                            "file2-line2\r\n",
+                            "file2-line3\r\n"))),
+                        ContentEncoding = "base64",
+                    }
+                ],
+                BaseCommitSha = "TEST-COMMIT-SHA",
+            },
+            expectedApiMessages: [
+                new UpdatedDependencyList()
+                {
+                    Dependencies = [
+                        new()
+                        {
+                            Name = "Dependency1",
+                            Version = "1.0.0",
+                            Requirements = [
+                                new()
+                                {
+                                    Requirement = "1.0.0",
+                                    File = "/file1",
+                                    Groups = ["dependencies"],
+                                }
+                            ]
+                        },
+                        new()
+                        {
+                            Name = "Dependency2",
+                            Version = "2.0.0",
+                            Requirements = [
+                                new()
+                                {
+                                    Requirement = "2.0.0",
+                                    File = "/file2",
+                                    Groups = ["dependencies"]
+                                }
+                            ]
+                        }
+                    ],
+                    DependencyFiles = ["/file1", "/file2"]
+                },
+                new IncrementMetric()
+                {
+                    Metric = "updater.started",
+                    Tags = new()
+                    {
+                        ["operation"] = "group_update_all_versions"
+                    }
+                },
+                new CreatePullRequest()
+                {
+                    Dependencies =
+                    [
+                        new ReportedDependency()
+                        {
+                            Name = "Dependency1",
+                            Version = "1.0.1",
+                            Requirements =
+                            [
+                                new ReportedRequirement()
+                                {
+                                    Requirement = "1.0.1",
+                                    File = "/file1",
+                                    Groups = ["dependencies"],
+                                    Source = new() { SourceUrl = null },
+                                }
+                            ],
+                            PreviousVersion = "1.0.0",
+                            PreviousRequirements =
+                            [
+                                new ReportedRequirement()
+                                {
+                                    Requirement = "1.0.0",
+                                    File = "/file1",
+                                    Groups = ["dependencies"],
+                                }
+                            ],
+                        },
+                        new ReportedDependency()
+                        {
+                            Name = "Dependency2",
+                            Version = "2.0.1",
+                            Requirements =
+                            [
+                                new ReportedRequirement()
+                                {
+                                    Requirement = "2.0.1",
+                                    File = "/file2",
+                                    Groups = ["dependencies"],
+                                    Source = new() { SourceUrl = null },
+                                }
+                            ],
+                            PreviousVersion = "2.0.0",
+                            PreviousRequirements =
+                            [
+                                new ReportedRequirement()
+                                {
+                                    Requirement = "2.0.0",
+                                    File = "/file2",
+                                    Groups = ["dependencies"],
+                                }
+                            ],
+                        },
+                    ],
+                    UpdatedDependencyFiles =
+                    [
+                        // original line endings have been restored
+                        new DependencyFile()
+                        {
+                            Name = "file1",
+                            Directory = "/",
+                            Content = string.Concat(
+                                "file1-line1-updated\n",
+                                "file1-line2-updated\n",
+                                "file1-line3-updated\n"
+                            ),
+                        },
+                        new DependencyFile()
+                        {
+                            Name = "file2",
+                            Directory = "/",
+                            Content = string.Concat(
+                                "file2-line1-updated\r\n",
+                                "file2-line2-updated\r\n",
+                                "file2-line3-updated\r\n"
+                            ),
+                        },
+                    ],
+                    BaseCommitSha = "TEST-COMMIT-SHA",
+                    CommitMessage = TestPullRequestCommitMessage,
+                    PrTitle = TestPullRequestTitle,
+                    PrBody = TestPullRequestBody,
+                },
+                new MarkAsProcessed("TEST-COMMIT-SHA"),
+            ]
+        );
+    }
+
+    internal static Task RunAsync(Job job, TestFile[] files, IDiscoveryWorker? discoveryWorker, IAnalyzeWorker? analyzeWorker, IUpdaterWorker? updaterWorker, RunResult expectedResult, object[] expectedApiMessages, MockNuGetPackage[]? packages = null, ExperimentsManager? experimentsManager = null, string? repoContentsPath = null)
+    {
+        var rawTestFiles = files.Select(f => (f.Path, Encoding.UTF8.GetBytes(f.Content))).ToArray();
+        return RunAsync(job, rawTestFiles, discoveryWorker, analyzeWorker, updaterWorker, expectedResult, expectedApiMessages, packages, experimentsManager, repoContentsPath);
+    }
+
+    private static async Task RunAsync(Job job, RawTestFile[] rawFiles, IDiscoveryWorker? discoveryWorker, IAnalyzeWorker? analyzeWorker, IUpdaterWorker? updaterWorker, RunResult expectedResult, object[] expectedApiMessages, MockNuGetPackage[]? packages = null, ExperimentsManager? experimentsManager = null, string? repoContentsPath = null)
     {
         // arrange
         using var tempDirectory = new TemporaryDirectory();
         repoContentsPath ??= tempDirectory.DirectoryPath;
         await UpdateWorkerTestBase.MockNuGetPackagesInDirectory(packages, repoContentsPath);
-        foreach (var (path, content) in files)
+        foreach (var (path, content) in rawFiles)
         {
             var fullPath = Path.Combine(repoContentsPath, path);
             var directory = Path.GetDirectoryName(fullPath)!;
             Directory.CreateDirectory(directory);
-            await File.WriteAllTextAsync(fullPath, content);
+            await File.WriteAllBytesAsync(fullPath, content);
         }
 
         // act