From a9c30e151a7961d804fb68648176f6eb5b5a781e Mon Sep 17 00:00:00 2001
From: Shane32 <shane@acdmail.com>
Date: Wed, 13 Nov 2024 16:31:19 -0500
Subject: [PATCH 1/5] Fix security vulnerabilities

---
 .../Intuit.Ipp.Core.Test.csproj               |  8 +++---
 .../Intuit.Ipp.Core/Intuit.Ipp.Core.csproj    |  6 ++--
 .../Intuit.Ipp.DataService.Test.csproj        |  8 +++---
 .../Intuit.Ipp.Diagnostics.Test.csproj        |  3 +-
 .../Intuit.Ipp.EntitlementService.Test.csproj |  8 +++---
 .../Intuit.Ipp.Exception.Test.csproj          |  8 +++---
 .../Intuit.Ipp.GlobalTaxServiceTest.csproj    |  8 +++---
 .../Intuit.Ipp.Nupkg/Intuit.Ipp.Nupkg.csproj  | 28 +++++++++++--------
 ...ntuit.Ipp.OAuth2PlatformClient.Test.csproj |  2 +-
 .../Intuit.Ipp.QueryFilter.Test.csproj        |  8 +++---
 .../Intuit.Ipp.ReportService.Test.csproj      |  8 +++---
 .../Intuit.Ipp.Retry.Test.csproj              |  8 +++---
 .../Intuit.Ipp.Security.Test.csproj           |  8 +++---
 .../Intuit.Ipp.Utility.Test.csproj            |  8 +++---
 .../Intuit.Ipp.WebhooksService.Test.csproj    |  8 +++---
 15 files changed, 66 insertions(+), 61 deletions(-)

diff --git a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Core.Test/Intuit.Ipp.Core.Test.csproj b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Core.Test/Intuit.Ipp.Core.Test.csproj
index c5e88d4b..2e98ef36 100644
--- a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Core.Test/Intuit.Ipp.Core.Test.csproj
+++ b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Core.Test/Intuit.Ipp.Core.Test.csproj
@@ -9,13 +9,13 @@
     <Compile Remove="TestHelper.cs" />
   </ItemGroup>
   <ItemGroup>
-    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="2.2.0" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="2.1.1" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="15.9.0" />
     <PackageReference Include="MSTest.TestAdapter" Version="2.0.0" />
     <PackageReference Include="MSTest.TestFramework" Version="2.0.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Xml" Version="2.2.0" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Xml" Version="2.1.1" />
     <PackageReference Include="System.Configuration.ConfigurationManager" Version="4.6.0" />
   </ItemGroup>
 
diff --git a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Core/Intuit.Ipp.Core.csproj b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Core/Intuit.Ipp.Core.csproj
index 6cc92a20..c74d2631 100644
--- a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Core/Intuit.Ipp.Core.csproj
+++ b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Core/Intuit.Ipp.Core.csproj
@@ -7,9 +7,9 @@
   </ItemGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Xml" Version="2.2.0" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Xml" Version="2.1.1" />
     <PackageReference Include="System.Configuration.ConfigurationManager" Version="4.6.0" />
     <PackageReference Include="Serilog" Version="2.10.0" />
   </ItemGroup>
diff --git a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.DataService.Test/Intuit.Ipp.DataService.Test.csproj b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.DataService.Test/Intuit.Ipp.DataService.Test.csproj
index 75f839f7..a26c61fe 100644
--- a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.DataService.Test/Intuit.Ipp.DataService.Test.csproj
+++ b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.DataService.Test/Intuit.Ipp.DataService.Test.csproj
@@ -6,13 +6,13 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="2.2.0" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="2.1.1" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="15.9.0" />
     <PackageReference Include="MSTest.TestAdapter" Version="2.0.0" />
     <PackageReference Include="MSTest.TestFramework" Version="2.0.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Xml" Version="2.2.0" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Xml" Version="2.1.1" />
     <PackageReference Include="System.Configuration.ConfigurationManager" Version="4.6.0" />
   </ItemGroup>
 
diff --git a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Diagnostics.Test/Intuit.Ipp.Diagnostics.Test.csproj b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Diagnostics.Test/Intuit.Ipp.Diagnostics.Test.csproj
index 702d3502..ded5cbae 100644
--- a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Diagnostics.Test/Intuit.Ipp.Diagnostics.Test.csproj
+++ b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Diagnostics.Test/Intuit.Ipp.Diagnostics.Test.csproj
@@ -10,7 +10,8 @@
   </ItemGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="2.2.0" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="2.1.1" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="15.9.0" />
     <PackageReference Include="MSTest.TestAdapter" Version="2.0.0" />
     <PackageReference Include="MSTest.TestFramework" Version="2.0.0" />
diff --git a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.EntitlementService.Test/Intuit.Ipp.EntitlementService.Test.csproj b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.EntitlementService.Test/Intuit.Ipp.EntitlementService.Test.csproj
index 759429fb..d437ec6e 100644
--- a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.EntitlementService.Test/Intuit.Ipp.EntitlementService.Test.csproj
+++ b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.EntitlementService.Test/Intuit.Ipp.EntitlementService.Test.csproj
@@ -10,13 +10,13 @@
   </ItemGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="2.2.0" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="2.1.1" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="15.9.0" />
     <PackageReference Include="MSTest.TestAdapter" Version="2.0.0" />
     <PackageReference Include="MSTest.TestFramework" Version="2.0.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Xml" Version="2.2.0" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Xml" Version="2.1.1" />
     <PackageReference Include="System.Configuration.ConfigurationManager" Version="4.6.0" />
   </ItemGroup>
 
diff --git a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Exception.Test/Intuit.Ipp.Exception.Test.csproj b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Exception.Test/Intuit.Ipp.Exception.Test.csproj
index 0d60675f..4b437faa 100644
--- a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Exception.Test/Intuit.Ipp.Exception.Test.csproj
+++ b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Exception.Test/Intuit.Ipp.Exception.Test.csproj
@@ -6,13 +6,13 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="2.2.0" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="2.1.1" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="15.9.0" />
     <PackageReference Include="MSTest.TestAdapter" Version="2.0.0" />
     <PackageReference Include="MSTest.TestFramework" Version="2.0.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Xml" Version="2.2.0" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Xml" Version="2.1.1" />
     <PackageReference Include="System.Configuration.ConfigurationManager" Version="4.6.0" />
   </ItemGroup>
 
diff --git a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.GlobalTaxServiceTest/Intuit.Ipp.GlobalTaxServiceTest.csproj b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.GlobalTaxServiceTest/Intuit.Ipp.GlobalTaxServiceTest.csproj
index ace05480..0d38f18e 100644
--- a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.GlobalTaxServiceTest/Intuit.Ipp.GlobalTaxServiceTest.csproj
+++ b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.GlobalTaxServiceTest/Intuit.Ipp.GlobalTaxServiceTest.csproj
@@ -6,13 +6,13 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="2.2.0" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="2.1.1" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="15.9.0" />
     <PackageReference Include="MSTest.TestAdapter" Version="2.0.0" />
     <PackageReference Include="MSTest.TestFramework" Version="2.0.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Xml" Version="2.2.0" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Xml" Version="2.1.1" />
     <PackageReference Include="System.Configuration.ConfigurationManager" Version="4.6.0" />
   </ItemGroup>
 
diff --git a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Nupkg/Intuit.Ipp.Nupkg.csproj b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Nupkg/Intuit.Ipp.Nupkg.csproj
index 5dfe8622..ddb47485 100644
--- a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Nupkg/Intuit.Ipp.Nupkg.csproj
+++ b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Nupkg/Intuit.Ipp.Nupkg.csproj
@@ -27,6 +27,9 @@
     <RepositoryType>git</RepositoryType>
     <PackageRequireLicenseAcceptance>true</PackageRequireLicenseAcceptance>
     <PackageReleaseNotes>https://github.com/intuit/QuickBooks-V3-DotNET-SDK/releases</PackageReleaseNotes>
+    <!-- .NET 9 default: prevent building when dependencies contain security vulnerabilities -->
+    <NuGetAuditMode>all</NuGetAuditMode>
+    <WarningsAsErrors>$(WarningsAsErrors);NU1901;NU1902;NU1903;NU1904</WarningsAsErrors>
   </PropertyGroup>
 
   <ItemGroup Condition=" '$(TargetFramework)' == 'netstandard2.0'">
@@ -96,10 +99,10 @@
     <PackageReference Include="Serilog.Sinks.Trace" Version="2.1.0" />
     <PackageReference Include="SerilogTraceListener" Version="3.2.0" />
     <PackageReference Include="System.Configuration.ConfigurationManager" Version="4.6.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Xml" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration" Version="2.2.0" /> 
+    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Xml" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration" Version="2.1.1" /> 
 
   </ItemGroup>
   <ItemGroup Condition=" '$(TargetFramework)' == 'net461'">
@@ -117,10 +120,10 @@
     <PackageReference Include="Serilog.Sinks.Debug" Version="2.0.0" />
     <PackageReference Include="Serilog.Sinks.Trace" Version="2.1.0" />
     <PackageReference Include="SerilogTraceListener" Version="3.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Xml" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration" Version="2.2.0" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Xml" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration" Version="2.1.1" />
 
   </ItemGroup>
 
@@ -135,14 +138,15 @@
     <PackageReference Include="Serilog.Sinks.Debug" Version="2.0.0" />
     <PackageReference Include="SerilogTraceListener" Version="3.2.0" />
     <PackageReference Update="Newtonsoft.Json" Version="13.0.2" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Xml" Version="2.2.0" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Xml" Version="2.1.1" />
   </ItemGroup>
 
   <ItemGroup>
 	  <None Include="images\logo.png" Pack="true" PackagePath="\" />
-    <PackageReference Include="Microsoft.Extensions.Configuration" Version="2.2.0" />
+    <PackageReference Include="Microsoft.Extensions.Configuration" Version="2.1.1" />
+    <PackageReference Include="System.Security.Cryptography.Xml" Version="4.7.1" />
     <PackageReference Include="Serilog.Sinks.Console" Version="3.1.1" />
     <PackageReference Include="System.Configuration.ConfigurationManager" Version="4.6.0" />
   </ItemGroup>
diff --git a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.OAuth2PlatformClient.Test/Intuit.Ipp.OAuth2PlatformClient.Test.csproj b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.OAuth2PlatformClient.Test/Intuit.Ipp.OAuth2PlatformClient.Test.csproj
index 70c4922b..3ede7874 100644
--- a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.OAuth2PlatformClient.Test/Intuit.Ipp.OAuth2PlatformClient.Test.csproj
+++ b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.OAuth2PlatformClient.Test/Intuit.Ipp.OAuth2PlatformClient.Test.csproj
@@ -6,7 +6,7 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="2.2.0" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.1.1" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="15.9.0" />
     <PackageReference Include="MSTest.TestAdapter" Version="2.0.0" />
     <PackageReference Include="MSTest.TestFramework" Version="2.0.0" />
diff --git a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.QueryFilter.Test/Intuit.Ipp.QueryFilter.Test.csproj b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.QueryFilter.Test/Intuit.Ipp.QueryFilter.Test.csproj
index 195dcaa3..8d2a6db8 100644
--- a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.QueryFilter.Test/Intuit.Ipp.QueryFilter.Test.csproj
+++ b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.QueryFilter.Test/Intuit.Ipp.QueryFilter.Test.csproj
@@ -7,13 +7,13 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="2.2.0" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="2.1.1" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="15.9.0" />
     <PackageReference Include="MSTest.TestAdapter" Version="2.0.0" />
     <PackageReference Include="MSTest.TestFramework" Version="2.0.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Xml" Version="2.2.0" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Xml" Version="2.1.1" />
     <PackageReference Include="System.Configuration.ConfigurationManager" Version="4.6.0" />
   </ItemGroup>
 
diff --git a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.ReportService.Test/Intuit.Ipp.ReportService.Test.csproj b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.ReportService.Test/Intuit.Ipp.ReportService.Test.csproj
index 10d37307..87dc7981 100644
--- a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.ReportService.Test/Intuit.Ipp.ReportService.Test.csproj
+++ b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.ReportService.Test/Intuit.Ipp.ReportService.Test.csproj
@@ -7,14 +7,14 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="2.2.0" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="2.1.1" />
     <PackageReference Include="Newtonsoft.Json" Version="13.0.2" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="15.9.0" />
     <PackageReference Include="MSTest.TestAdapter" Version="2.0.0" />
     <PackageReference Include="MSTest.TestFramework" Version="2.0.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Xml" Version="2.2.0" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Xml" Version="2.1.1" />
     <PackageReference Include="System.Configuration.ConfigurationManager" Version="4.6.0" />
   </ItemGroup>
 
diff --git a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Retry.Test/Intuit.Ipp.Retry.Test.csproj b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Retry.Test/Intuit.Ipp.Retry.Test.csproj
index 57badc41..08d062c9 100644
--- a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Retry.Test/Intuit.Ipp.Retry.Test.csproj
+++ b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Retry.Test/Intuit.Ipp.Retry.Test.csproj
@@ -6,14 +6,14 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="2.2.0" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="2.1.1" />
     <PackageReference Include="Microsoft.NETCore.Targets" Version="5.0.0" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="15.9.0" />
     <PackageReference Include="MSTest.TestAdapter" Version="2.0.0" />
     <PackageReference Include="MSTest.TestFramework" Version="2.0.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Xml" Version="2.2.0" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Xml" Version="2.1.1" />
     <PackageReference Include="System.Configuration.ConfigurationManager" Version="4.6.0" />
   </ItemGroup>
 
diff --git a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Security.Test/Intuit.Ipp.Security.Test.csproj b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Security.Test/Intuit.Ipp.Security.Test.csproj
index 8a947773..0f3de375 100644
--- a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Security.Test/Intuit.Ipp.Security.Test.csproj
+++ b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Security.Test/Intuit.Ipp.Security.Test.csproj
@@ -6,14 +6,14 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="2.2.0" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="2.1.1" />
     <PackageReference Include="Microsoft.NETCore.Targets" Version="5.0.0" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="15.9.0" />
     <PackageReference Include="MSTest.TestAdapter" Version="2.0.0" />
     <PackageReference Include="MSTest.TestFramework" Version="2.0.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Xml" Version="2.2.0" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Xml" Version="2.1.1" />
     <PackageReference Include="System.Configuration.ConfigurationManager" Version="4.6.0" />
   </ItemGroup>
 
diff --git a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Utility.Test/Intuit.Ipp.Utility.Test.csproj b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Utility.Test/Intuit.Ipp.Utility.Test.csproj
index 55ee27e3..bd36e8a0 100644
--- a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Utility.Test/Intuit.Ipp.Utility.Test.csproj
+++ b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Utility.Test/Intuit.Ipp.Utility.Test.csproj
@@ -10,13 +10,13 @@
   </ItemGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="2.2.0" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="2.1.1" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="15.9.0" />
     <PackageReference Include="MSTest.TestAdapter" Version="2.0.0" />
     <PackageReference Include="MSTest.TestFramework" Version="2.0.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Xml" Version="2.2.0" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Xml" Version="2.1.1" />
     <PackageReference Include="System.Configuration.ConfigurationManager" Version="4.6.0" />
   </ItemGroup>
 
diff --git a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.WebhooksService.Test/Intuit.Ipp.WebhooksService.Test.csproj b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.WebhooksService.Test/Intuit.Ipp.WebhooksService.Test.csproj
index 7bcef19c..92a86d25 100644
--- a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.WebhooksService.Test/Intuit.Ipp.WebhooksService.Test.csproj
+++ b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.WebhooksService.Test/Intuit.Ipp.WebhooksService.Test.csproj
@@ -6,13 +6,13 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="2.2.0" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="2.1.1" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="15.9.0" />
     <PackageReference Include="MSTest.TestAdapter" Version="2.0.0" />
     <PackageReference Include="MSTest.TestFramework" Version="2.0.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="2.2.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Xml" Version="2.2.0" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Xml" Version="2.1.1" />
     <PackageReference Include="System.Configuration.ConfigurationManager" Version="4.6.0" />
   </ItemGroup>
 

From 60d90f31a5bd58db08ca1add52ec4389446883de Mon Sep 17 00:00:00 2001
From: Shane32 <shane@acdmail.com>
Date: Wed, 13 Nov 2024 16:44:25 -0500
Subject: [PATCH 2/5] update

---
 .../Intuit.Ipp.Diagnostics.Test.csproj                          | 1 -
 .../Intuit.Ipp.OAuth2PlatformClient.Test.csproj                 | 2 +-
 2 files changed, 1 insertion(+), 2 deletions(-)

diff --git a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Diagnostics.Test/Intuit.Ipp.Diagnostics.Test.csproj b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Diagnostics.Test/Intuit.Ipp.Diagnostics.Test.csproj
index ded5cbae..a9bd846e 100644
--- a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Diagnostics.Test/Intuit.Ipp.Diagnostics.Test.csproj
+++ b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Diagnostics.Test/Intuit.Ipp.Diagnostics.Test.csproj
@@ -11,7 +11,6 @@
 
   <ItemGroup>
     <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.1.1" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="2.1.1" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="15.9.0" />
     <PackageReference Include="MSTest.TestAdapter" Version="2.0.0" />
     <PackageReference Include="MSTest.TestFramework" Version="2.0.0" />
diff --git a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.OAuth2PlatformClient.Test/Intuit.Ipp.OAuth2PlatformClient.Test.csproj b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.OAuth2PlatformClient.Test/Intuit.Ipp.OAuth2PlatformClient.Test.csproj
index 3ede7874..1a452f07 100644
--- a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.OAuth2PlatformClient.Test/Intuit.Ipp.OAuth2PlatformClient.Test.csproj
+++ b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.OAuth2PlatformClient.Test/Intuit.Ipp.OAuth2PlatformClient.Test.csproj
@@ -6,7 +6,7 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="2.1.1" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="15.9.0" />
     <PackageReference Include="MSTest.TestAdapter" Version="2.0.0" />
     <PackageReference Include="MSTest.TestFramework" Version="2.0.0" />

From 11930694ea65dcc142d44f71c299489e8fbf1f20 Mon Sep 17 00:00:00 2001
From: Shane32 <shane@acdmail.com>
Date: Wed, 13 Nov 2024 16:46:25 -0500
Subject: [PATCH 3/5] update

---
 .../Code/Intuit.Ipp.Nupkg/Intuit.Ipp.Nupkg.csproj               | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Nupkg/Intuit.Ipp.Nupkg.csproj b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Nupkg/Intuit.Ipp.Nupkg.csproj
index ddb47485..28b185f7 100644
--- a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Nupkg/Intuit.Ipp.Nupkg.csproj
+++ b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Nupkg/Intuit.Ipp.Nupkg.csproj
@@ -27,7 +27,7 @@
     <RepositoryType>git</RepositoryType>
     <PackageRequireLicenseAcceptance>true</PackageRequireLicenseAcceptance>
     <PackageReleaseNotes>https://github.com/intuit/QuickBooks-V3-DotNET-SDK/releases</PackageReleaseNotes>
-    <!-- .NET 9 default: prevent building when dependencies contain security vulnerabilities -->
+    <!-- .NET 9 SDK default: prevent building when dependencies contain security vulnerabilities -->
     <NuGetAuditMode>all</NuGetAuditMode>
     <WarningsAsErrors>$(WarningsAsErrors);NU1901;NU1902;NU1903;NU1904</WarningsAsErrors>
   </PropertyGroup>

From 40ea7744c3127018262f34d3788eeb18d5b43794 Mon Sep 17 00:00:00 2001
From: Shane32 <shane@acdmail.com>
Date: Wed, 13 Nov 2024 16:46:38 -0500
Subject: [PATCH 4/5] update

---
 .../Code/Intuit.Ipp.Nupkg/Intuit.Ipp.Nupkg.csproj               | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Nupkg/Intuit.Ipp.Nupkg.csproj b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Nupkg/Intuit.Ipp.Nupkg.csproj
index 28b185f7..d2047db9 100644
--- a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Nupkg/Intuit.Ipp.Nupkg.csproj
+++ b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Nupkg/Intuit.Ipp.Nupkg.csproj
@@ -27,7 +27,7 @@
     <RepositoryType>git</RepositoryType>
     <PackageRequireLicenseAcceptance>true</PackageRequireLicenseAcceptance>
     <PackageReleaseNotes>https://github.com/intuit/QuickBooks-V3-DotNET-SDK/releases</PackageReleaseNotes>
-    <!-- .NET 9 SDK default: prevent building when dependencies contain security vulnerabilities -->
+    <!-- .NET 9 SDK default: prevent building when indirect dependencies contain security vulnerabilities -->
     <NuGetAuditMode>all</NuGetAuditMode>
     <WarningsAsErrors>$(WarningsAsErrors);NU1901;NU1902;NU1903;NU1904</WarningsAsErrors>
   </PropertyGroup>

From 4c03917ee5fd85a66754f43a26b70a95b631bb25 Mon Sep 17 00:00:00 2001
From: Shane32 <shane@acdmail.com>
Date: Wed, 13 Nov 2024 16:47:20 -0500
Subject: [PATCH 5/5] fix

---
 .../Intuit.Ipp.Diagnostics.Test.csproj                          | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Diagnostics.Test/Intuit.Ipp.Diagnostics.Test.csproj b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Diagnostics.Test/Intuit.Ipp.Diagnostics.Test.csproj
index a9bd846e..afc353c2 100644
--- a/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Diagnostics.Test/Intuit.Ipp.Diagnostics.Test.csproj
+++ b/IPPDotNetDevKitCSV3/Code/Intuit.Ipp.Diagnostics.Test/Intuit.Ipp.Diagnostics.Test.csproj
@@ -10,7 +10,7 @@
   </ItemGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="2.1.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="2.1.1" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="15.9.0" />
     <PackageReference Include="MSTest.TestAdapter" Version="2.0.0" />
     <PackageReference Include="MSTest.TestFramework" Version="2.0.0" />