dependabot-nuget 0.283.0 → 0.284.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6a3154a8f2ecd254dc3463bcca6f6e188e033bcf1d6aea863090f348035a9fe8
-  data.tar.gz: 480467b2e57d224ed646f81cd6614fbad2af03154ba07fc0dc4dde36d2ab3440
+  metadata.gz: 0604d43cad05ef88f7471259b903ec56c1cf7d1bcf127b253bf6c0c2af8c66f0
+  data.tar.gz: 9e4b41b0d72f5989abb57bc18f39116a1a2f5c00f935c7a0c2858e61da6bcb75
 SHA512:
-  metadata.gz: 8b56eff2a40277413354577fe830f472bf0c46e72ba22cd948f207de01e2c3e0990ba84f60af648ba5e833fe209f8a7cc46b1172aa44987da2a3a6669cab9df5
-  data.tar.gz: 3f0bec73a56ac9e6eeed3e61eee12b0dcac72875325b6e543797b893a7dcbc4e2099f318c8822c115e9db810560df61179f0df68c6008d2474d9b0569a116fb7
+  metadata.gz: 6f4b7300174349f5a5c5a5ebdc461a18ea2c08a06b0229043216e2f3b19bc5a5c2523f43735f0aeafd95f0bffea693791f307165dbb22a1d58ab81f19e89496e
+  data.tar.gz: '0761288866aa1af50029cbd2f61d2423e06f51d090ed8ca4afb3b5afb9a4aa4b5389fa57a1fdad03b0de95895d3b43eb612cbb992660b44ca854bcc8303f1733'

data/helpers/lib/NuGetUpdater/NuGetUpdater.Cli/Commands/CloneCommand.cs

@@ -0,0 +1,40 @@
+using System.CommandLine;
+
+using NuGetUpdater.Core;
+using NuGetUpdater.Core.Clone;
+using NuGetUpdater.Core.Run;
+
+namespace NuGetUpdater.Cli.Commands;
+
+internal static class CloneCommand
+{
+    internal static readonly Option<FileInfo> JobPathOption = new("--job-path") { IsRequired = true };
+    internal static readonly Option<DirectoryInfo> RepoContentsPathOption = new("--repo-contents-path") { IsRequired = true };
+    internal static readonly Option<Uri> ApiUrlOption = new("--api-url") { IsRequired = true };
+    internal static readonly Option<string> JobIdOption = new("--job-id") { IsRequired = true };
+
+    internal static Command GetCommand(Action<int> setExitCode)
+    {
+        var command = new Command("clone", "Clones a repository in preparation for a dependabot job.")
+        {
+            JobPathOption,
+            RepoContentsPathOption,
+            ApiUrlOption,
+            JobIdOption,
+        };
+
+        command.TreatUnmatchedTokensAsErrors = true;
+
+        command.SetHandler(async (jobPath, repoContentsPath, apiUrl, jobId) =>
+        {
+            var apiHandler = new HttpApiHandler(apiUrl.ToString(), jobId);
+            var logger = new ConsoleLogger();
+            var gitCommandHandler = new ShellGitCommandHandler(logger);
+            var worker = new CloneWorker(apiHandler, gitCommandHandler, logger);
+            var exitCode = await worker.RunAsync(jobPath, repoContentsPath);
+            setExitCode(exitCode);
+        }, JobPathOption, RepoContentsPathOption, ApiUrlOption, JobIdOption);
+
+        return command;
+    }
+}

data/helpers/lib/NuGetUpdater/NuGetUpdater.Cli/Program.cs

@@ -13,6 +13,7 @@ internal sealed class Program
 
         var command = new RootCommand
         {
+            CloneCommand.GetCommand(setExitCode),
             FrameworkCheckCommand.GetCommand(setExitCode),
             DiscoverCommand.GetCommand(setExitCode),
             AnalyzeCommand.GetCommand(setExitCode),

data/helpers/lib/NuGetUpdater/NuGetUpdater.Cli.Test/EntryPointTests.Run.cs

@@ -41,7 +41,6 @@ public partial class EntryPointTests
                 ],
                 job: new Job()
                 {
-                    PackageManager = "nuget",
                     AllowedUpdates = [
                         new()
                         {

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core/Clone/CloneWorker.cs

@@ -0,0 +1,144 @@
+using System.Net;
+
+using NuGetUpdater.Core.Run;
+using NuGetUpdater.Core.Run.ApiModel;
+
+using CommandArguments = (string[] Args, string? WorkingDirectory);
+
+namespace NuGetUpdater.Core.Clone;
+
+public class CloneWorker
+{
+    private readonly IApiHandler _apiHandler;
+    private readonly IGitCommandHandler _gitCommandHandler;
+    private readonly ILogger _logger;
+
+    public CloneWorker(IApiHandler apiHandler, IGitCommandHandler gitCommandHandler, ILogger logger)
+    {
+        _apiHandler = apiHandler;
+        _gitCommandHandler = gitCommandHandler;
+        _logger = logger;
+    }
+
+    // entrypoint for cli
+    public async Task<int> RunAsync(FileInfo jobFilePath, DirectoryInfo repoContentsPath)
+    {
+        var jobFileContent = await File.ReadAllTextAsync(jobFilePath.FullName);
+        var jobWrapper = RunWorker.Deserialize(jobFileContent);
+        var result = await RunAsync(jobWrapper.Job, repoContentsPath.FullName);
+        return result;
+    }
+
+    // object model entry point
+    public async Task<int> RunAsync(Job job, string repoContentsPath)
+    {
+        JobErrorBase? error = null;
+        try
+        {
+            var commandArgs = GetAllCommandArgs(job, repoContentsPath);
+            foreach (var (args, workingDirectory) in commandArgs)
+            {
+                await _gitCommandHandler.RunGitCommandAsync(args, workingDirectory);
+            }
+        }
+        catch (HttpRequestException ex)
+        when (ex.StatusCode == HttpStatusCode.Unauthorized || ex.StatusCode == HttpStatusCode.Forbidden)
+        {
+            error = new JobRepoNotFound(ex.Message);
+        }
+        catch (Exception ex)
+        {
+            error = new UnknownError(ex.ToString());
+        }
+
+        if (error is not null)
+        {
+            await _apiHandler.RecordUpdateJobError(error);
+            await _apiHandler.MarkAsProcessed(new("unknown"));
+            return 1;
+        }
+
+        return 0;
+    }
+
+    internal static CommandArguments[] GetAllCommandArgs(Job job, string repoContentsPath)
+    {
+        var commandArgs = new List<CommandArguments>()
+        {
+            GetCloneArgs(job, repoContentsPath)
+        };
+
+        if (job.Source.Commit is { } commit)
+        {
+            commandArgs.Add(GetFetchArgs(commit, repoContentsPath));
+            commandArgs.Add(GetResetArgs(commit, repoContentsPath));
+        }
+
+        return commandArgs.ToArray();
+    }
+
+    internal static CommandArguments GetCloneArgs(Job job, string repoContentsPath)
+    {
+        var url = GetRepoUrl(job);
+        var args = new List<string>()
+        {
+            "clone",
+            "--no-tags",
+            "--depth",
+            "1",
+            "--recurse-submodules",
+            "--shallow-submodules",
+        };
+
+        if (job.Source.Branch is { } branch)
+        {
+            args.Add("--branch");
+            args.Add(branch);
+            args.Add("--single-branch");
+        }
+
+        args.Add(url);
+        args.Add(repoContentsPath);
+        return (args.ToArray(), null);
+    }
+
+    internal static CommandArguments GetFetchArgs(string commit, string repoContentsPath)
+    {
+        return
+        (
+            [
+                "fetch",
+                "--depth",
+                "1",
+                "--recurse-submodules=on-demand",
+                "origin",
+                commit
+            ],
+            repoContentsPath
+        );
+    }
+
+    internal static CommandArguments GetResetArgs(string commit, string repoContentsPath)
+    {
+        return
+        (
+            [
+                "reset",
+                "--hard",
+                "--recurse-submodules",
+                commit
+            ],
+            repoContentsPath
+        );
+    }
+
+    private static string GetRepoUrl(Job job)
+    {
+        return job.Source.Provider switch
+        {
+            "azure" => $"https://dev.azure.com/{job.Source.Repo}",
+            "github" => $"https://github.com/{job.Source.Repo}",
+            _ => throw new ArgumentException($"Unknown provider: {job.Source.Provider}")
+        };
+    }
+}

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core/Clone/IGitCommandHandler.cs

@@ -0,0 +1,6 @@
+namespace NuGetUpdater.Core.Clone;
+
+public interface IGitCommandHandler
+{
+    Task RunGitCommandAsync(IReadOnlyCollection<string> args, string? workingDirectory = null);
+}

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core/Clone/ShellGitCommandHandler.cs

@@ -0,0 +1,37 @@
+using System.Net;
+
+namespace NuGetUpdater.Core.Clone;
+
+public class ShellGitCommandHandler : IGitCommandHandler
+{
+    private readonly ILogger _logger;
+
+    public ShellGitCommandHandler(ILogger logger)
+    {
+        _logger = logger;
+    }
+
+    public async Task RunGitCommandAsync(IReadOnlyCollection<string> args, string? workingDirectory = null)
+    {
+        _logger.Log($"Running command: git {string.Join(" ", args)}{(workingDirectory is null ? "" : $" in directory {workingDirectory}")}");
+        var (exitCode, stdout, stderr) = await ProcessEx.RunAsync("git", args, workingDirectory);
+        HandleErrorsFromOutput(stdout, stderr);
+    }
+
+    internal static void HandleErrorsFromOutput(string stdout, string stderr)
+    {
+        foreach (var output in new[] { stdout, stderr })
+        {
+            ThrowOnUnauthenticated(output);
+        }
+    }
+
+    private static void ThrowOnUnauthenticated(string output)
+    {
+        if (output.Contains("Authentication failed for") ||
+            output.Contains("could not read Username for"))
+        {
+            throw new HttpRequestException(output, inner: null, statusCode: HttpStatusCode.Unauthorized);
+        }
+    }
+}

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core/Run/ApiModel/DependencyFileNotFound.cs

@@ -2,5 +2,9 @@ namespace NuGetUpdater.Core.Run.ApiModel;
 
 public record DependencyFileNotFound : JobErrorBase
 {
-    public override string Type => "dependency_file_not_found";
+    public DependencyFileNotFound(string filePath)
+        : base("dependency_file_not_found")
+    {
+        Details = filePath;
+    }
 }

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core/Run/ApiModel/Job.cs

@@ -2,7 +2,7 @@ namespace NuGetUpdater.Core.Run.ApiModel;
 
 public sealed record Job
 {
-    public required string PackageManager { get; init; }
+    public string PackageManager { get; init; } = "nuget";
     public AllowedUpdate[]? AllowedUpdates { get; init; } = null;
     public bool Debug { get; init; } = false;
     public object[]? DependencyGroups { get; init; } = null;

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core/Run/ApiModel/JobErrorBase.cs

@@ -4,8 +4,15 @@ namespace NuGetUpdater.Core.Run.ApiModel;
 
 public abstract record JobErrorBase
 {
+    public JobErrorBase(string type)
+    {
+        Type = type;
+    }
+
     [JsonPropertyName("error-type")]
-    public abstract string Type { get; }
+    public string Type { get; }
+
     [JsonPropertyName("error-details")]
-    public required object Details { get; init; }
+    [JsonIgnore(Condition = JsonIgnoreCondition.WhenWritingNull)]
+    public object? Details { get; init; } = null;
 }

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core/Run/ApiModel/JobRepoNotFound.cs

@@ -0,0 +1,13 @@
+namespace NuGetUpdater.Core.Run.ApiModel;
+
+public record JobRepoNotFound : JobErrorBase
+{
+    public JobRepoNotFound(string message)
+        : base("job_repo_not_found")
+    {
+        Details = new Dictionary<string, string>()
+        {
+            ["message"] = message
+        };
+    }
+}

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core/Run/ApiModel/JobSource.cs

@@ -4,6 +4,8 @@ public sealed class JobSource
 {
     public required string Provider { get; init; }
     public required string Repo { get; init; }
+    public string? Branch { get; init; } = null;
+    public string? Commit { get; init; } = null;
     public string? Directory { get; init; } = null;
     public string[]? Directories { get; init; } = null;
     public string? Hostname { get; init; } = null;

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core/Run/ApiModel/MarkAsProcessed.cs

@@ -4,6 +4,11 @@ namespace NuGetUpdater.Core.Run.ApiModel;
 
 public sealed record MarkAsProcessed
 {
+    public MarkAsProcessed(string baseCommitSha)
+    {
+        BaseCommitSha = baseCommitSha;
+    }
+
     [JsonPropertyName("base-commit-sha")]
-    public required string BaseCommitSha { get; init; }
+    public string BaseCommitSha { get; }
 }

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core/Run/ApiModel/PrivateSourceAuthenticationFailure.cs

@@ -2,5 +2,9 @@ namespace NuGetUpdater.Core.Run.ApiModel;
 
 public record PrivateSourceAuthenticationFailure : JobErrorBase
 {
-    public override string Type => "private_source_authentication_failure";
+    public PrivateSourceAuthenticationFailure(string[] urls)
+        : base("private_source_authentication_failure")
+    {
+        Details = $"({string.Join("|", urls)})";
+    }
 }

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core/Run/ApiModel/UnknownError.cs

@@ -2,5 +2,9 @@ namespace NuGetUpdater.Core.Run.ApiModel;
 
 public record UnknownError : JobErrorBase
 {
-    public override string Type => "unknown_error";
+    public UnknownError(string details)
+        : base("unknown_error")
+    {
+        Details = details;
+    }
 }

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core/Run/ApiModel/UpdateNotPossible.cs

@@ -2,5 +2,9 @@ namespace NuGetUpdater.Core.Run.ApiModel;
 
 public record UpdateNotPossible : JobErrorBase
 {
-    public override string Type => "update_not_possible";
+    public UpdateNotPossible(string[] dependencies)
+        : base("update_not_possible")
+    {
+        Details = dependencies;
+    }
 }

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core/Run/HttpApiHandler.cs

@@ -50,13 +50,19 @@ public class HttpApiHandler : IApiHandler
         await PostAsJson("mark_as_processed", markAsProcessed);
     }
 
-    private async Task PostAsJson(string endpoint, object body)
+    internal static string Serialize(object body)
     {
         var wrappedBody = new
         {
-            Data = body,
+            Data = body
         };
         var payload = JsonSerializer.Serialize(wrappedBody, SerializerOptions);
+        return payload;
+    }
+
+    private async Task PostAsJson(string endpoint, object body)
+    {
+        var payload = Serialize(body);
         var content = new StringContent(payload, Encoding.UTF8, "application/json");
         var response = await HttpClient.PostAsync($"{_apiUrl}/update_jobs/{_jobId}/{endpoint}", content);
         var _ = response.EnsureSuccessStatusCode();

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core/Run/RunWorker.cs

@@ -76,31 +76,19 @@ public class RunWorker
         catch (HttpRequestException ex)
         when (ex.StatusCode == HttpStatusCode.Unauthorized || ex.StatusCode == HttpStatusCode.Forbidden)
         {
-            error = new PrivateSourceAuthenticationFailure()
-            {
-                Details = $"({string.Join("|", lastUsedPackageSourceUrls)})",
-            };
+            error = new PrivateSourceAuthenticationFailure(lastUsedPackageSourceUrls);
         }
         catch (MissingFileException ex)
         {
-            error = new DependencyFileNotFound()
-            {
-                Details = ex.FilePath,
-            };
+            error = new DependencyFileNotFound(ex.FilePath);
         }
         catch (UpdateNotPossibleException ex)
         {
-            error = new UpdateNotPossible()
-            {
-                Details = ex.Dependencies,
-            };
+            error = new UpdateNotPossible(ex.Dependencies);
         }
         catch (Exception ex)
         {
-            error = new UnknownError()
-            {
-                Details = ex.ToString(),
-            };
+            error = new UnknownError(ex.ToString());
         }
 
         if (error is not null)
@@ -108,7 +96,7 @@ public class RunWorker
             await _apiHandler.RecordUpdateJobError(error);
         }
 
-        await _apiHandler.MarkAsProcessed(new() { BaseCommitSha = baseCommitSha });
+        await _apiHandler.MarkAsProcessed(new(baseCommitSha));
 
         return runResult;
     }

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core/Updater/BindingRedirectManager.cs

@@ -28,7 +28,9 @@ internal static class BindingRedirectManager
     ///      https://learn.microsoft.com/en-us/nuget/resources/check-project-format
     /// </remarks>
     /// <param name="projectBuildFile">The project build file (*.xproj) to be updated</param>
-    public static async ValueTask UpdateBindingRedirectsAsync(ProjectBuildFile projectBuildFile)
+    /// <param name="updatedPackageName"/>The name of the package that was updated</param>
+    /// <param name="updatedPackageVersion">The version of the package that was updated</param>
+    public static async ValueTask UpdateBindingRedirectsAsync(ProjectBuildFile projectBuildFile, string updatedPackageName, string updatedPackageVersion)
     {
         var configFile = await TryGetRuntimeConfigurationFile(projectBuildFile);
         if (configFile is null)
@@ -47,7 +49,20 @@ internal static class BindingRedirectManager
             return;
         }
 
-        var fileContent = AddBindingRedirects(configFile, bindings);
+        // we need to detect what assembly references come from the newly updated package; the `HintPath` will look like
+        //    ..\packages\Some.Package.1.2.3\lib\net45\Some.Package.dll
+        // so we first pull out the packages sub-path, e.g., `..\packages`
+        // then we add the updated package name, version, and a trailing directory separator and ensure it's a unix-style path
+        //    e.g., ../packages/Some.Package/1.2.3/
+        // at this point any assembly in that directory is from the updated package and will need a binding redirect
+        // finally we pull out the assembly `HintPath` values for _all_ references relative to the project file in a unix-style value
+        //    e.g., ../packages/Some.Other.Package/4.5.6/lib/net45/Some.Other.Package.dll
+        // all of that is passed to `AddBindingRedirects()` so we can ensure binding redirects for the relevant assemblies
+        var packagesDirectory = PackagesConfigUpdater.GetPathToPackagesDirectory(projectBuildFile, updatedPackageName, updatedPackageVersion, packagesConfigPath: null)!;
+        var assemblyPathPrefix = Path.Combine(packagesDirectory, $"{updatedPackageName}.{updatedPackageVersion}").NormalizePathToUnix().EnsureSuffix("/");
+        var assemblyPaths = references.Select(static x => x.HintPath).Select(x => Path.GetRelativePath(Path.GetDirectoryName(projectBuildFile.Path)!, x).NormalizePathToUnix()).ToList();
+        var bindingsAndAssemblyPaths = bindings.Zip(assemblyPaths);
+        var fileContent = AddBindingRedirects(configFile, bindingsAndAssemblyPaths, assemblyPathPrefix);
         configFile = configFile with { Content = fileContent };
 
         await File.WriteAllTextAsync(configFile.Path, configFile.Content);
@@ -161,10 +176,10 @@ internal static class BindingRedirectManager
         }
     }
 
-    private static string AddBindingRedirects(ConfigurationFile configFile, IEnumerable<Runtime_AssemblyBinding> bindingRedirects)
+    private static string AddBindingRedirects(ConfigurationFile configFile, IEnumerable<(Runtime_AssemblyBinding Binding, string AssemblyPath)> bindingRedirectsAndAssemblyPaths, string assemblyPathPrefix)
     {
         // Do nothing if there are no binding redirects to add, bail out
-        if (!bindingRedirects.Any())
+        if (!bindingRedirectsAndAssemblyPaths.Any())
         {
             return configFile.Content;
         }
@@ -185,7 +200,7 @@ internal static class BindingRedirectManager
         // Get all of the current bindings in config
         var currentBindings = GetAssemblyBindings(runtime);
 
-        foreach (var bindingRedirect in bindingRedirects)
+        foreach (var (bindingRedirect, assemblyPath) in bindingRedirectsAndAssemblyPaths)
         {
             // If the binding redirect already exists in config, update it. Otherwise, add it.
             var bindingAssemblyIdentity = new AssemblyIdentity(bindingRedirect.Name, bindingRedirect.PublicKeyToken);
@@ -208,11 +223,17 @@ internal static class BindingRedirectManager
             }
             else
             {
-                // Get an assembly binding element to use
-                var assemblyBindingElement = GetAssemblyBindingElement(runtime);
+                // only add a previously missing binding redirect if it's related to the package that caused the whole update
+                // this isn't strictly necessary, but can be helpful to the end user and it's easy for them to revert if they
+                // don't like this particular change
+                if (assemblyPath.StartsWith(assemblyPathPrefix, StringComparison.OrdinalIgnoreCase))
+                {
+                    // Get an assembly binding element to use
+                    var assemblyBindingElement = GetAssemblyBindingElement(runtime);
 
-                // Add the binding to that element
-                assemblyBindingElement.AddIndented(bindingRedirect.ToXElement());
+                    // Add the binding to that element
+                    assemblyBindingElement.AddIndented(bindingRedirect.ToXElement());
+                }
             }
         }
 

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core/Updater/PackagesConfigUpdater.cs

@@ -93,7 +93,7 @@ internal static class PackagesConfigUpdater
         projectBuildFile.NormalizeDirectorySeparatorsInProject();
 
         // Update binding redirects
-        await BindingRedirectManager.UpdateBindingRedirectsAsync(projectBuildFile);
+        await BindingRedirectManager.UpdateBindingRedirectsAsync(projectBuildFile, dependencyName, newDependencyVersion);
 
         logger.Log("    Writing project file back to disk");
         await projectBuildFile.SaveAsync();
@@ -196,7 +196,7 @@ internal static class PackagesConfigUpdater
         return processes;
     }
 
-    internal static string? GetPathToPackagesDirectory(ProjectBuildFile projectBuildFile, string dependencyName, string dependencyVersion, string packagesConfigPath)
+    internal static string? GetPathToPackagesDirectory(ProjectBuildFile projectBuildFile, string dependencyName, string dependencyVersion, string? packagesConfigPath)
     {
         // the packages directory can be found from the hint path of the matching dependency, e.g., when given "Newtonsoft.Json", "7.0.1", and a project like this:
         // <Project>
@@ -242,7 +242,7 @@ internal static class PackagesConfigUpdater
             }
         }
 
-        if (partialPathMatch is null)
+        if (partialPathMatch is null && packagesConfigPath is not null)
         {
             // if we got this far, we couldn't find the packages directory for the specified dependency and there are 2 possibilities:
             // 1. the dependency doesn't actually exist in this project

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core/Utilities/PathHelper.cs

@@ -27,6 +27,8 @@ internal static class PathHelper
 
     public static string EnsurePrefix(this string s, string prefix) => s.StartsWith(prefix) ? s : prefix + s;
 
+    public static string EnsureSuffix(this string s, string suffix) => s.EndsWith(suffix) ? s : s + suffix;
+
     public static string NormalizePathToUnix(this string path) => path.Replace("\\", "/");
 
     public static string NormalizeUnixPathParts(this string path)

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core.Test/Clone/CloneWorkerTests.cs

@@ -0,0 +1,183 @@
+using NuGetUpdater.Core.Clone;
+using NuGetUpdater.Core.Run.ApiModel;
+using NuGetUpdater.Core.Test.Run;
+
+using Xunit;
+
+namespace NuGetUpdater.Core.Test.Clone;
+
+public class CloneWorkerTests
+{
+    private const string TestRepoPath = "TEST/REPO/PATH";
+
+    [Fact]
+    public void CloneCommandsAreGenerated()
+    {
+        TestCommands(
+            provider: "github",
+            repoMoniker: "test/repo",
+            expectedCommands:
+            [
+                (["clone", "--no-tags", "--depth", "1", "--recurse-submodules", "--shallow-submodules", "https://github.com/test/repo", TestRepoPath], null)
+            ]
+        );
+    }
+
+    [Fact]
+    public void CloneCommandsAreGeneratedWhenBranchIsSpecified()
+    {
+        TestCommands(
+            provider: "github",
+            repoMoniker: "test/repo",
+            branch: "some-branch",
+            expectedCommands:
+            [
+                (["clone", "--no-tags", "--depth", "1", "--recurse-submodules", "--shallow-submodules", "--branch", "some-branch", "--single-branch", "https://github.com/test/repo", TestRepoPath], null)
+            ]
+        );
+    }
+
+    [Fact]
+    public void CloneCommandsAreGeneratedWhenCommitIsSpecified()
+    {
+        TestCommands(
+            provider: "github",
+            repoMoniker: "test/repo",
+            commit: "abc123",
+            expectedCommands:
+            [
+                (["clone", "--no-tags", "--depth", "1", "--recurse-submodules", "--shallow-submodules", "https://github.com/test/repo", TestRepoPath], null),
+                (["fetch", "--depth", "1", "--recurse-submodules=on-demand", "origin", "abc123"], TestRepoPath),
+                (["reset", "--hard", "--recurse-submodules", "abc123"], TestRepoPath)
+            ]
+        );
+    }
+
+    [Fact]
+    public async Task SuccessfulCloneGeneratesNoApiMessages()
+    {
+        await TestCloneAsync(
+            provider: "github",
+            repoMoniker: "test/repo",
+            expectedApiMessages: []
+        );
+    }
+
+    [Fact]
+    public async Task UnauthorizedCloneGeneratesTheExpectedApiMessagesFromGenericOutput()
+    {
+        await TestCloneAsync(
+            provider: "github",
+            repoMoniker: "test/repo",
+            testGitCommandHandler: new TestGitCommandHandlerWithOutputs("Authentication failed for repo", ""),
+            expectedApiMessages:
+            [
+                new JobRepoNotFound("Authentication failed for repo"),
+                new MarkAsProcessed("unknown"),
+            ],
+            expectedExitCode: 1
+        );
+    }
+
+    [Fact]
+    public async Task UnauthorizedCloneGeneratesTheExpectedApiMessagesFromGitCommandOutput()
+    {
+        await TestCloneAsync(
+            provider: "github",
+            repoMoniker: "test/repo",
+            testGitCommandHandler: new TestGitCommandHandlerWithOutputs("", "fatal: could not read Username for 'https://github.com': No such device or address"),
+            expectedApiMessages:
+            [
+                new JobRepoNotFound("fatal: could not read Username for 'https://github.com': No such device or address"),
+                new MarkAsProcessed("unknown"),
+            ],
+            expectedExitCode: 1
+        );
+    }
+
+    private class TestGitCommandHandlerWithOutputs : TestGitCommandHandler
+    {
+        private readonly string _stdout;
+        private readonly string _stderr;
+
+        public TestGitCommandHandlerWithOutputs(string stdout, string stderr)
+        {
+            _stdout = stdout;
+            _stderr = stderr;
+        }
+
+        public override async Task RunGitCommandAsync(IReadOnlyCollection<string> args, string? workingDirectory = null)
+        {
+            await base.RunGitCommandAsync(args, workingDirectory);
+            ShellGitCommandHandler.HandleErrorsFromOutput(_stdout, _stderr);
+        }
+    }
+
+    private static void TestCommands(string provider, string repoMoniker, (string[] Args, string? WorkingDirectory)[] expectedCommands, string? branch = null, string? commit = null)
+    {
+        var job = new Job()
+        {
+            Source = new()
+            {
+                Provider = provider,
+                Repo = repoMoniker,
+                Branch = branch,
+                Commit = commit,
+            }
+        };
+        var actualCommands = CloneWorker.GetAllCommandArgs(job, TestRepoPath);
+        VerifyCommands(expectedCommands, actualCommands);
+    }
+
+    private static async Task TestCloneAsync(string provider, string repoMoniker, object[] expectedApiMessages, string? branch = null, string? commit = null, TestGitCommandHandler? testGitCommandHandler = null, int expectedExitCode = 0)
+    {
+        // arrange
+        var testApiHandler = new TestApiHandler();
+        testGitCommandHandler ??= new TestGitCommandHandler();
+        var testLogger = new TestLogger();
+        var worker = new CloneWorker(testApiHandler, testGitCommandHandler, testLogger);
+
+        // act
+        var job = new Job()
+        {
+            Source = new()
+            {
+                Provider = provider,
+                Repo = repoMoniker,
+                Branch = branch,
+                Commit = commit,
+            }
+        };
+        var exitCode = await worker.RunAsync(job, TestRepoPath);
+
+        // assert
+        Assert.Equal(expectedExitCode, exitCode);
+
+        var actualApiMessages = testApiHandler.ReceivedMessages.ToArray();
+        if (actualApiMessages.Length > expectedApiMessages.Length)
+        {
+            var extraApiMessages = actualApiMessages.Skip(expectedApiMessages.Length).Select(m => RunWorkerTests.SerializeObjectAndType(m.Object)).ToArray();
+            Assert.Fail($"Expected {expectedApiMessages.Length} API messages, but got {extraApiMessages.Length} extra:\n\t{string.Join("\n\t", extraApiMessages)}");
+        }
+        if (expectedApiMessages.Length > actualApiMessages.Length)
+        {
+            var missingApiMessages = expectedApiMessages.Skip(actualApiMessages.Length).Select(m => RunWorkerTests.SerializeObjectAndType(m)).ToArray();
+            Assert.Fail($"Expected {expectedApiMessages.Length} API messages, but only got {actualApiMessages.Length}; missing:\n\t{string.Join("\n\t", missingApiMessages)}");
+        }
+    }
+
+    private static void VerifyCommands((string[] Args, string? WorkingDirectory)[] expected, (string[] Args, string? WorkingDirectory)[] actual)
+    {
+        var expectedCommands = StringifyCommands(expected);
+        var actualCommands = StringifyCommands(actual);
+        Assert.True(expectedCommands.Length == actualCommands.Length, $"Expected {expectedCommands.Length} messages:\n\t{string.Join("\n\t", expectedCommands)}\ngot {actualCommands.Length}:\n\t{string.Join("\n\t", actualCommands)}");
+        foreach (var (expectedCommand, actualCommand) in expectedCommands.Zip(actualCommands))
+        {
+            Assert.Equal(expectedCommand, actualCommand);
+        }
+    }
+
+    private static string[] StringifyCommands((string[] Args, string? WorkingDirectory)[] commandArgs) => commandArgs.Select(a => StringifyCommand(a.Args, a.WorkingDirectory)).ToArray();
+    private static string StringifyCommand(string[] args, string? workingDirectory) => $"args=[{string.Join(", ", args)}], workingDirectory={ReplaceWorkingDirectory(workingDirectory)}";
+    private static string ReplaceWorkingDirectory(string? arg) => arg ?? "NULL";
+}

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core.Test/Clone/TestGitCommandHandler.cs

@@ -0,0 +1,16 @@
+using NuGetUpdater.Core.Clone;
+
+namespace NuGetUpdater.Core.Test.Clone;
+
+internal class TestGitCommandHandler : IGitCommandHandler
+{
+    private readonly List<(string[] Args, string? WorkingDirectory)> _seenCommands = new();
+
+    public IReadOnlyCollection<(string[] Args, string? WorkingDirectory)> SeenCommands => _seenCommands;
+
+    public virtual Task RunGitCommandAsync(IReadOnlyCollection<string> args, string? workingDirectory = null)
+    {
+        _seenCommands.Add((args.ToArray(), workingDirectory));
+        return Task.CompletedTask;
+    }
+}

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core.Test/Run/RunWorkerTests.cs

@@ -26,7 +26,6 @@ public class RunWorkerTests
             ],
             job: new Job()
             {
-                PackageManager = "nuget",
                 Source = new()
                 {
                     Provider = "github",
@@ -161,10 +160,7 @@ public class RunWorkerTests
                     PrTitle = "TODO: title",
                     PrBody = "TODO: body",
                 },
-                new MarkAsProcessed()
-                {
-                    BaseCommitSha = "TEST-COMMIT-SHA",
-                }
+                new MarkAsProcessed("TEST-COMMIT-SHA")
             ]
         );
     }
@@ -209,7 +205,6 @@ public class RunWorkerTests
             ],
             job: new Job()
             {
-                PackageManager = "nuget",
                 Source = new()
                 {
                     Provider = "github",
@@ -249,14 +244,8 @@ public class RunWorkerTests
             },
             expectedApiMessages:
             [
-                new PrivateSourceAuthenticationFailure()
-                {
-                    Details = $"({http.BaseUrl.TrimEnd('/')}/index.json)"
-                },
-                new MarkAsProcessed()
-                {
-                    BaseCommitSha = "TEST-COMMIT-SHA",
-                }
+                new PrivateSourceAuthenticationFailure([$"{http.BaseUrl.TrimEnd('/')}/index.json"]),
+                new MarkAsProcessed("TEST-COMMIT-SHA")
             ]
         );
     }
@@ -308,7 +297,7 @@ public class RunWorkerTests
         }
     }
 
-    private static string SerializeObjectAndType(object obj)
+    internal static string SerializeObjectAndType(object obj)
     {
         return $"{obj.GetType().Name}:{JsonSerializer.Serialize(obj)}";
     }

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core.Test/Run/SerializationTests.cs

@@ -1,4 +1,5 @@
 using NuGetUpdater.Core.Run;
+using NuGetUpdater.Core.Run.ApiModel;
 
 using Xunit;
 
@@ -57,4 +58,13 @@ public class SerializationTests
         Assert.Equal("some-org/some-repo", jobWrapper.Job.Source.Repo);
         Assert.Equal("specific-sdk", jobWrapper.Job.Source.Directory);
     }
+
+    [Fact]
+    public void SerializeError()
+    {
+        var error = new JobRepoNotFound("some message");
+        var actual = HttpApiHandler.Serialize(error);
+        var expected = """{"data":{"error-type":"job_repo_not_found","error-details":{"message":"some message"}}}""";
+        Assert.Equal(expected, actual);
+    }
 }

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core.Test/Update/BindingRedirectsTests.cs

@@ -0,0 +1,225 @@
+using Xunit;
+
+namespace NuGetUpdater.Core.Test.Update;
+
+public class BindingRedirectsTests
+{
+    [Fact]
+    public async Task SimpleBindingRedirectIsPerformed()
+    {
+        await VerifyBindingRedirectsAsync(
+            projectContents: """
+                <Project ToolsVersion="15.0" DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+                  <Import Project="$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props" Condition="Exists('$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props')" />
+                  <PropertyGroup>
+                    <TargetFrameworkVersion>v4.5</TargetFrameworkVersion>
+                  </PropertyGroup>
+                  <ItemGroup>
+                    <None Include="app.config" />
+                  </ItemGroup>
+                  <ItemGroup>
+                    <Reference Include="Some.Package, Version=2.0.0.0, Culture=neutral, PublicKeyToken=null">
+                      <HintPath>packages\Some.Package.2.0.0\lib\net45\Some.Package.dll</HintPath>
+                      <Private>True</Private>
+                    </Reference>
+                  </ItemGroup>
+                  <Import Project="$(MSBuildToolsPath)\Microsoft.CSharp.targets" />
+                </Project>
+                """,
+            configContents: """
+                <configuration>
+                  <runtime>
+                    <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
+                      <dependentAssembly>
+                        <assemblyIdentity name="Some.Package" publicKeyToken="null" culture="neutral" />
+                        <bindingRedirect oldVersion="0.0.0.0-1.0.0.0" newVersion="1.0.0.0" />
+                      </dependentAssembly>
+                    </assemblyBinding>
+                  </runtime>
+                </configuration>
+                """,
+            updatedPackageName: "Some.Package",
+            updatedPackageVersion: "2.0.0",
+            expectedConfigContents: """
+                <configuration>
+                  <runtime>
+                    <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
+                      <dependentAssembly>
+                        <assemblyIdentity name="Some.Package" publicKeyToken="null" culture="neutral" />
+                        <bindingRedirect oldVersion="0.0.0.0-2.0.0.0" newVersion="2.0.0.0" />
+                      </dependentAssembly>
+                    </assemblyBinding>
+                  </runtime>
+                </configuration>
+                """
+        );
+    }
+
+    [Fact]
+    public async Task ConfigFileIndentationIsPreserved()
+    {
+        await VerifyBindingRedirectsAsync(
+            projectContents: """
+                <Project ToolsVersion="15.0" DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+                  <Import Project="$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props" Condition="Exists('$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props')" />
+                  <PropertyGroup>
+                    <TargetFrameworkVersion>v4.5</TargetFrameworkVersion>
+                  </PropertyGroup>
+                  <ItemGroup>
+                    <None Include="app.config" />
+                  </ItemGroup>
+                  <ItemGroup>
+                    <Reference Include="Some.Package, Version=2.0.0.0, Culture=neutral, PublicKeyToken=null">
+                      <HintPath>packages\Some.Package.2.0.0\lib\net45\Some.Package.dll</HintPath>
+                      <Private>True</Private>
+                    </Reference>
+                  </ItemGroup>
+                  <Import Project="$(MSBuildToolsPath)\Microsoft.CSharp.targets" />
+                </Project>
+                """,
+            configContents: """
+                    <configuration>
+                   <runtime>
+                  <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
+                 <dependentAssembly>
+                <assemblyIdentity name="Some.Package" publicKeyToken="null" culture="neutral" />
+                <bindingRedirect oldVersion="0.0.0.0-1.0.0.0" newVersion="1.0.0.0" />
+                 </dependentAssembly>
+                  </assemblyBinding>
+                   </runtime>
+                    </configuration>
+                """,
+            updatedPackageName: "Some.Package",
+            updatedPackageVersion: "2.0.0",
+            expectedConfigContents: """
+                    <configuration>
+                   <runtime>
+                  <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
+                 <dependentAssembly>
+                <assemblyIdentity name="Some.Package" publicKeyToken="null" culture="neutral" />
+                <bindingRedirect oldVersion="0.0.0.0-2.0.0.0" newVersion="2.0.0.0" />
+                 </dependentAssembly>
+                  </assemblyBinding>
+                   </runtime>
+                    </configuration>
+                """
+        );
+    }
+
+    [Fact]
+    public async Task NoExtraBindingsAreAdded()
+    {
+        await VerifyBindingRedirectsAsync(
+            projectContents: """
+                <Project ToolsVersion="15.0" DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+                  <Import Project="$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props" Condition="Exists('$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props')" />
+                  <PropertyGroup>
+                    <TargetFrameworkVersion>v4.5</TargetFrameworkVersion>
+                  </PropertyGroup>
+                  <ItemGroup>
+                    <None Include="app.config" />
+                  </ItemGroup>
+                  <ItemGroup>
+                    <Reference Include="Some.Package, Version=2.0.0.0, Culture=neutral, PublicKeyToken=null">
+                      <HintPath>packages\Some.Package.2.0.0\lib\net45\Some.Package.dll</HintPath>
+                      <Private>True</Private>
+                    </Reference>
+                    <Reference Include="Some.Unrelated.Package, Version=3.0.0.0, Culture=neutral, PublicKeyToken=null">
+                      <HintPath>packages\Some.Unrelated.Package.3.0.0\lib\net45\Some.Package.dll</HintPath>
+                      <Private>True</Private>
+                    </Reference>
+                  </ItemGroup>
+                  <Import Project="$(MSBuildToolsPath)\Microsoft.CSharp.targets" />
+                </Project>
+                """,
+            configContents: """
+                <configuration>
+                  <runtime>
+                    <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
+                      <dependentAssembly>
+                        <assemblyIdentity name="Some.Package" publicKeyToken="null" culture="neutral" />
+                        <bindingRedirect oldVersion="0.0.0.0-1.0.0.0" newVersion="1.0.0.0" />
+                      </dependentAssembly>
+                    </assemblyBinding>
+                  </runtime>
+                </configuration>
+                """,
+            updatedPackageName: "Some.Package",
+            updatedPackageVersion: "2.0.0",
+            expectedConfigContents: """
+                <configuration>
+                  <runtime>
+                    <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
+                      <dependentAssembly>
+                        <assemblyIdentity name="Some.Package" publicKeyToken="null" culture="neutral" />
+                        <bindingRedirect oldVersion="0.0.0.0-2.0.0.0" newVersion="2.0.0.0" />
+                      </dependentAssembly>
+                    </assemblyBinding>
+                  </runtime>
+                </configuration>
+                """
+        );
+    }
+
+    [Fact]
+    public async Task NewBindingIsAdded()
+    {
+        await VerifyBindingRedirectsAsync(
+            projectContents: """
+                <Project ToolsVersion="15.0" DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+                  <Import Project="$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props" Condition="Exists('$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props')" />
+                  <PropertyGroup>
+                    <TargetFrameworkVersion>v4.5</TargetFrameworkVersion>
+                  </PropertyGroup>
+                  <ItemGroup>
+                    <None Include="app.config" />
+                  </ItemGroup>
+                  <ItemGroup>
+                    <Reference Include="Some.Package, Version=2.0.0.0, Culture=neutral, PublicKeyToken=null">
+                      <HintPath>packages\Some.Package.2.0.0\lib\net45\Some.Package.dll</HintPath>
+                      <Private>True</Private>
+                    </Reference>
+                  </ItemGroup>
+                  <Import Project="$(MSBuildToolsPath)\Microsoft.CSharp.targets" />
+                </Project>
+                """,
+            configContents: """
+                <configuration>
+                  <runtime />
+                </configuration>
+                """,
+            updatedPackageName: "Some.Package",
+            updatedPackageVersion: "2.0.0",
+            expectedConfigContents: """
+                <configuration>
+                  <runtime>
+                    <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
+                      <dependentAssembly>
+                        <assemblyIdentity name="Some.Package" publicKeyToken="null" culture="neutral" />
+                        <bindingRedirect oldVersion="0.0.0.0-2.0.0.0" newVersion="2.0.0.0" />
+                      </dependentAssembly>
+                    </assemblyBinding>
+                  </runtime>
+                </configuration>
+                """
+        );
+    }
+
+    private static async Task VerifyBindingRedirectsAsync(string projectContents, string configContents, string expectedConfigContents, string updatedPackageName, string updatedPackageVersion, string configFileName = "app.config")
+    {
+        using var tempDir = new TemporaryDirectory();
+        var projectFileName = "project.csproj";
+        var projectFilePath = Path.Combine(tempDir.DirectoryPath, projectFileName);
+        var configFilePath = Path.Combine(tempDir.DirectoryPath, configFileName);
+
+        await File.WriteAllTextAsync(projectFilePath, projectContents);
+        await File.WriteAllTextAsync(configFilePath, configContents);
+
+        var projectBuildFile = ProjectBuildFile.Open(tempDir.DirectoryPath, projectFilePath);
+        await BindingRedirectManager.UpdateBindingRedirectsAsync(projectBuildFile, updatedPackageName, updatedPackageVersion);
+
+        var actualConfigContents = (await File.ReadAllTextAsync(configFilePath)).Replace("\r", "");
+        expectedConfigContents = expectedConfigContents.Replace("\r", "");
+        Assert.Equal(expectedConfigContents, actualConfigContents);
+    }
+}

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core.Test/Update/UpdateWorkerTests.PackagesConfig.cs

@@ -594,6 +594,7 @@ public partial class UpdateWorkerTests
                 [
                     MockNuGetPackage.CreatePackageWithAssembly("Some.Package", "7.0.1", "net45", "7.0.0.0"),
                     MockNuGetPackage.CreatePackageWithAssembly("Some.Package", "13.0.1", "net45", "13.0.0.0"),
+                    MockNuGetPackage.CreatePackageWithAssembly("Unrelated.Package", "1.2.3", "net45","1.2.0.0"),
                 ],
                 projectContents: """
                     <Project ToolsVersion="15.0" DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
@@ -612,6 +613,10 @@ public partial class UpdateWorkerTests
                           <HintPath>packages\Some.Package.7.0.1\lib\net45\Some.Package.dll</HintPath>
                           <Private>True</Private>
                         </Reference>
+                        <Reference Include="Unrelated.Package, Version=1.2.0.0, Culture=neutral, PublicKeyToken=null">
+                          <HintPath>packages\Unrelated.Package.1.2.3\lib\net45\Unrelated.Package.dll</HintPath>
+                          <Private>True</Private>
+                        </Reference>
                       </ItemGroup>
                       <Import Project="$(MSBuildToolsPath)\Microsoft.CSharp.targets" />
                     </Project>
@@ -653,6 +658,107 @@ public partial class UpdateWorkerTests
                           <HintPath>packages\Some.Package.13.0.1\lib\net45\Some.Package.dll</HintPath>
                           <Private>True</Private>
                         </Reference>
+                        <Reference Include="Unrelated.Package, Version=1.2.0.0, Culture=neutral, PublicKeyToken=null">
+                          <HintPath>packages\Unrelated.Package.1.2.3\lib\net45\Unrelated.Package.dll</HintPath>
+                          <Private>True</Private>
+                        </Reference>
+                      </ItemGroup>
+                      <Import Project="$(MSBuildToolsPath)\Microsoft.CSharp.targets" />
+                    </Project>
+                    """,
+                expectedPackagesConfigContents: """
+                    <?xml version="1.0" encoding="utf-8"?>
+                    <packages>
+                      <package id="Some.Package" version="13.0.1" targetFramework="net45" />
+                    </packages>
+                    """,
+                additionalFilesExpected:
+                [
+                    ("app.config", """
+                        <configuration>
+                          <runtime>
+                            <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
+                              <dependentAssembly>
+                                <assemblyIdentity name="Some.Package" publicKeyToken="null" culture="neutral" />
+                                <bindingRedirect oldVersion="0.0.0.0-13.0.0.0" newVersion="13.0.0.0" />
+                              </dependentAssembly>
+                            </assemblyBinding>
+                          </runtime>
+                        </configuration>
+                        """)
+                ]
+            );
+        }
+
+        [Fact]
+        public async Task BindingRedirectIsAddedForUpdatedPackage()
+        {
+            await TestUpdateForProject("Some.Package", "7.0.1", "13.0.1",
+                packages:
+                [
+                    MockNuGetPackage.CreatePackageWithAssembly("Some.Package", "7.0.1", "net45", "7.0.0.0"),
+                    MockNuGetPackage.CreatePackageWithAssembly("Some.Package", "13.0.1", "net45", "13.0.0.0"),
+                    MockNuGetPackage.CreatePackageWithAssembly("Unrelated.Package", "1.2.3", "net45","1.2.0.0"),
+                ],
+                projectContents: """
+                    <Project ToolsVersion="15.0" DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+                      <Import Project="$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props" Condition="Exists('$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props')" />
+                      <PropertyGroup>
+                        <TargetFrameworkVersion>v4.5</TargetFrameworkVersion>
+                      </PropertyGroup>
+                      <ItemGroup>
+                        <None Include="packages.config" />
+                      </ItemGroup>
+                      <ItemGroup>
+                        <None Include="app.config" />
+                      </ItemGroup>
+                      <ItemGroup>
+                        <Reference Include="Some.Package, Version=7.0.0.0, Culture=neutral, PublicKeyToken=null">
+                          <HintPath>packages\Some.Package.7.0.1\lib\net45\Some.Package.dll</HintPath>
+                          <Private>True</Private>
+                        </Reference>
+                        <Reference Include="Unrelated.Package, Version=1.2.0.0, Culture=neutral, PublicKeyToken=null">
+                          <HintPath>packages\Unrelated.Package.1.2.3\lib\net45\Unrelated.Package.dll</HintPath>
+                          <Private>True</Private>
+                        </Reference>
+                      </ItemGroup>
+                      <Import Project="$(MSBuildToolsPath)\Microsoft.CSharp.targets" />
+                    </Project>
+                    """,
+                packagesConfigContents: """
+                    <packages>
+                      <package id="Some.Package" version="7.0.1" targetFramework="net45" />
+                    </packages>
+                    """,
+                additionalFiles:
+                [
+                    ("app.config", """
+                        <configuration>
+                          <runtime />
+                        </configuration>
+                        """)
+                ],
+                expectedProjectContents: """
+                    <Project ToolsVersion="15.0" DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+                      <Import Project="$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props" Condition="Exists('$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props')" />
+                      <PropertyGroup>
+                        <TargetFrameworkVersion>v4.5</TargetFrameworkVersion>
+                      </PropertyGroup>
+                      <ItemGroup>
+                        <None Include="packages.config" />
+                      </ItemGroup>
+                      <ItemGroup>
+                        <None Include="app.config" />
+                      </ItemGroup>
+                      <ItemGroup>
+                        <Reference Include="Some.Package, Version=13.0.0.0, Culture=neutral, PublicKeyToken=null">
+                          <HintPath>packages\Some.Package.13.0.1\lib\net45\Some.Package.dll</HintPath>
+                          <Private>True</Private>
+                        </Reference>
+                        <Reference Include="Unrelated.Package, Version=1.2.0.0, Culture=neutral, PublicKeyToken=null">
+                          <HintPath>packages\Unrelated.Package.1.2.3\lib\net45\Unrelated.Package.dll</HintPath>
+                          <Private>True</Private>
+                        </Reference>
                       </ItemGroup>
                       <Import Project="$(MSBuildToolsPath)\Microsoft.CSharp.targets" />
                     </Project>

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-nuget
 version: !ruby/object:Gem::Version
-  version: 0.283.0
+  version: 0.284.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-10-31 00:00:00.000000000 Z
+date: 2024-11-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.283.0
+        version: 0.284.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.283.0
+        version: 0.284.0
 - !ruby/object:Gem::Dependency
   name: rubyzip
   requirement: !ruby/object:Gem::Requirement
@@ -297,6 +297,7 @@ files:
 - helpers/lib/NuGetUpdater/NuGetUpdater.Cli.Test/EntryPointTests.Update.cs
 - helpers/lib/NuGetUpdater/NuGetUpdater.Cli.Test/NuGetUpdater.Cli.Test.csproj
 - helpers/lib/NuGetUpdater/NuGetUpdater.Cli/Commands/AnalyzeCommand.cs
+- helpers/lib/NuGetUpdater/NuGetUpdater.Cli/Commands/CloneCommand.cs
 - helpers/lib/NuGetUpdater/NuGetUpdater.Cli/Commands/DiscoverCommand.cs
 - helpers/lib/NuGetUpdater/NuGetUpdater.Cli/Commands/FrameworkCheckCommand.cs
 - helpers/lib/NuGetUpdater/NuGetUpdater.Cli/Commands/RunCommand.cs
@@ -310,6 +311,8 @@ files:
 - helpers/lib/NuGetUpdater/NuGetUpdater.Core.Test/Analyze/RequirementTests.cs
 - helpers/lib/NuGetUpdater/NuGetUpdater.Core.Test/Analyze/SecurityVulnerabilityExtensionsTests.cs
 - helpers/lib/NuGetUpdater/NuGetUpdater.Core.Test/Analyze/VersionFinderTests.cs
+- helpers/lib/NuGetUpdater/NuGetUpdater.Core.Test/Clone/CloneWorkerTests.cs
+- helpers/lib/NuGetUpdater/NuGetUpdater.Core.Test/Clone/TestGitCommandHandler.cs
 - helpers/lib/NuGetUpdater/NuGetUpdater.Core.Test/DependencySolverEnvironment.cs
 - helpers/lib/NuGetUpdater/NuGetUpdater.Core.Test/Discover/DiscoveryWorkerTestBase.cs
 - helpers/lib/NuGetUpdater/NuGetUpdater.Core.Test/Discover/DiscoveryWorkerTests.DotNetToolsJson.cs
@@ -338,6 +341,7 @@ files:
 - helpers/lib/NuGetUpdater/NuGetUpdater.Core.Test/TestExtensions.cs
 - helpers/lib/NuGetUpdater/NuGetUpdater.Core.Test/TestHttpServer.cs
 - helpers/lib/NuGetUpdater/NuGetUpdater.Core.Test/TestLogger.cs
+- helpers/lib/NuGetUpdater/NuGetUpdater.Core.Test/Update/BindingRedirectsTests.cs
 - helpers/lib/NuGetUpdater/NuGetUpdater.Core.Test/Update/ExpectedUpdateOperationResult.cs
 - helpers/lib/NuGetUpdater/NuGetUpdater.Core.Test/Update/PackagesConfigUpdaterTests.cs
 - helpers/lib/NuGetUpdater/NuGetUpdater.Core.Test/Update/UpdateWorkerTestBase.cs
@@ -366,6 +370,9 @@ files:
 - helpers/lib/NuGetUpdater/NuGetUpdater.Core/Analyze/SecurityVulnerabilityExtensions.cs
 - helpers/lib/NuGetUpdater/NuGetUpdater.Core/Analyze/VersionFinder.cs
 - helpers/lib/NuGetUpdater/NuGetUpdater.Core/Analyze/VersionResult.cs
+- helpers/lib/NuGetUpdater/NuGetUpdater.Core/Clone/CloneWorker.cs
+- helpers/lib/NuGetUpdater/NuGetUpdater.Core/Clone/IGitCommandHandler.cs
+- helpers/lib/NuGetUpdater/NuGetUpdater.Core/Clone/ShellGitCommandHandler.cs
 - helpers/lib/NuGetUpdater/NuGetUpdater.Core/Dependency.cs
 - helpers/lib/NuGetUpdater/NuGetUpdater.Core/DependencyType.cs
 - helpers/lib/NuGetUpdater/NuGetUpdater.Core/Discover/DirectoryPackagesPropsDiscovery.cs
@@ -406,6 +413,7 @@ files:
 - helpers/lib/NuGetUpdater/NuGetUpdater.Core/Run/ApiModel/Job.cs
 - helpers/lib/NuGetUpdater/NuGetUpdater.Core/Run/ApiModel/JobErrorBase.cs
 - helpers/lib/NuGetUpdater/NuGetUpdater.Core/Run/ApiModel/JobFile.cs
+- helpers/lib/NuGetUpdater/NuGetUpdater.Core/Run/ApiModel/JobRepoNotFound.cs
 - helpers/lib/NuGetUpdater/NuGetUpdater.Core/Run/ApiModel/JobSource.cs
 - helpers/lib/NuGetUpdater/NuGetUpdater.Core/Run/ApiModel/MarkAsProcessed.cs
 - helpers/lib/NuGetUpdater/NuGetUpdater.Core/Run/ApiModel/PrivateSourceAuthenticationFailure.cs
@@ -497,7 +505,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.283.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.284.0
 post_install_message: 
 rdoc_options: []
 require_paths: