.okf/dependencies.md
Src/Directory.Build.props)FrameworkReference Microsoft.AspNetCore.App where neededDirectory.Packages.props (ManagePackageVersionsCentrally)PackageVersion in leaf projects; use PackageReference Include onlydirect| Library | Role |
|---|---|
| FluentValidation | Request validators |
| Microsoft.AspNetCore.Authentication.JwtBearer | Security package (version per TFM) |
| Microsoft.AspNetCore.OpenApi / Scalar.AspNetCore | OpenAPI docs (modern path) |
| NSwag.* | Legacy Swagger/ClientGen (deprecate note in Directory.Packages.props) |
| Grpc.AspNetCore.Server / Grpc.Net.Client* | Remote messaging |
| MessagePack | Default RPC marshalling |
| protobuf-net / Grpc.Reflection | Protobuf wire format + gRPC reflection (Messaging.Remote.Reflection only) |
| Microsoft.AspNetCore.OData | OData package |
| ModelContextProtocol.AspNetCore | Agents MCP; v2.x targets the 2026-07-28 MCP spec (stateless-by-default transport, backward compatible with the addon's v1-style handler wiring) |
| Microsoft.CodeAnalysis.CSharp [4.11.0] | Generators; pinned for net8 compatibility (comment in props) |
| Microsoft.OpenApi.Kiota.Builder [1.29.1] | Pinned; Kiota OpenAPI 3.x vs AspNetCore.OpenApi 2.x mismatch |
| xunit.v3, Shouldly, FakeItEasy, Bogus | Test stack |
| BenchmarkDotNet, NBomber | Benchmarks / load |
Microsoft.CodeAnalysis.CSharp or Kiota builder needs explicit compatibility validation (comments in Directory.Packages.props).Src/Directory.Build.props; Agents override Version per csproj.Directory.Packages.propsSrc/Directory.Build.propsSrc/Library/FastEndpoints.csprojSrc/Generator/FastEndpoints.Generator.csproj