Version 11 preview

[jamie-taylor-rjj]

Note

Anyone who wants to preview version 11 of the nuget package can find the latest complete action run and download a nupkg from there. If it turns out to be non-trivial to find, I'll include a link.

Rationale for this PR

This PR bumps us to version 11 by closing the following PRs:

• Question: Which features should we ship in .NET 11? #223 (INCOMPLETE)
• Feature Request: Upgrade xUnit to v3 #226 (PARTIALLY COMPLETE)
  • This is partially complete as we haven't migrated to MTP yet
  • Although MTP is the preferred runtime for xUnit3, it still works with VSTest
  • Migrating to MTP might cause compatibility issues for contributors using old IDEs
  • Supported IDEs: Rider 2024.3+, VS 2022 17.3+
• Feature Request: migrate away from Moq #225 (COMPLETED IN THIS PR)
• Bug report: Possible Null Ref #220 (COMPLETED IN THIS PR)
• Feature Request: Expect-CT has been deprecated by OWASP #198 (COMPLETED IN THIS PR)
• Middleware should use OptionsBuilder #59 (INCOMPLETE)

Other changes included:

• NuGet dependencies upgraded (or removed)
• Swapped Swagger for Scalar in the Example project (as upgrading and re-implementing Swagger was less trivial once on .NET 10)

Warning

Until all items in the above are complete, this PR should NOT be completed because this PR was initially created to test out a number of new things wiht the CI pipeline and to give early adopters the ability to download the NuGet and try it locally.

As such, the PR checklist will remain unchecked until this PR is ready.

PR Checklist

Feel free to either check the following items (by place an x inside of the square brackets) or by replacing the square brackets with a relevant emoji from the following list:

• ✅ to indicate that you have checked something off
• ❎ to indicate that you haven't checked something off
• ❓ to indicate that something might not be relevant (writing tests for documentation changes, for instance)

Essential

These items are essential and must be completed for each commit. If they are not completed, the PR may not be accepted.

• I have added tests to the OwaspHeaders.Core.Tests project
• I have run the dotnet-format command and fixed any .editorconfig issues
• I have ensured that the code coverage has not dropped below 65%
• I have increased the version number in OwaspHeaders.Core.csproj (only relevant for code changes)
• I have updated the changelog in the root of the repository
• I have avoided using primary constructors in the example project (see README for details)

Note

The changelog in the docs/ directory will be updated automatically when PRs are merged into main.

Optional

• I have documented the new feature in the docs directory
• I have provided a code sample, showing how someone could use the new code

Any Other Information

This section is optional, but it might be useful to list any other information you think is relevant.

[github-actions]

Package	Line Rate	Branch Rate	Complexity	Health
OwaspHeaders.Core	90%	74%	495	✔
OwaspHeaders.Core	90%	74%	495	✔
Summary	90% (1950 / 2166)	74% (542 / 736)	990	✔