BusinessMgr-2019/docs/topics.md

Topic Tracker

<style> table th, table td { vertical-align: top; } </style>

Last updated: 2026-09-10

Prioritised Topics to Be Actioned

Priority	Topic	Date noted	Next step	Notes
P1	Remove vulnerable transitive System.Security.Cryptography.Xml 8.0.2 dependency	2026-09-10	Upgrade or replace the legacy ASP.NET Core Identity 2.3.1 dependency and NPOI 2.6.2 path, then confirm that restore no longer resolves the vulnerable package.	.NET 10 restore reports multiple NU1903 high-severity advisories. The package enters through Microsoft.AspNetCore.Identity 2.3.1 and through NPOI 2.6.2 in Common's SacsStandardProc. Coordinate the Common NPOI path with that repository.
P2	Review framework-specific package versions after .NET 10 retargeting	2026-09-10	Review ASP.NET Core Identity and Razor runtime compilation, ODBC, and System.Drawing packages for supported .NET 10 versions and behavior before release validation.	Existing package versions compile and all tests pass, but several remain on 2.x or 6.x generations and should not be assumed to be fully supported merely because compilation succeeds.

.NET 10 Dependencies and Sequence

Work item	Depends on	Unblocks
Commit documentation and tracking changes	None	A clean pre-migration baseline and focused migration history
Capture BusinessMgr baseline	Documentation change separation; current Common-compatible targets; configured integration-test dependencies	Evidence for identifying migration regressions
Retarget BusinessMgr libraries	Common exposing validated .NET 10-compatible targets	Retargeting the web applications and tests
Retarget applications and tests	Migrated BusinessMgr libraries; compatible framework-specific packages	Full solution validation and removal of temporary Common .NET 8 targets
Complete BusinessMgr validation	Successful restore and build; available database and machine configuration	Approval to remove temporary compatibility targets from Common

In-Progress Topics

Priority	Topic	Date noted	Date started	Next step	Notes

Completed Topics

Topic	Date noted	Date started	Date completed	Outcome
Capture the pre-migration BusinessMgr build and test baseline	2026-09-10	2026-09-10	2026-09-10	Using SDK 10.0.401, restore succeeded. Visual Studio 18 MSBuild built the complete Debug solution successfully, including the SSDT-dependent Portal test project. The .NET CLI built all production projects and the Control tests but reports MSB4278 for the Portal test project's Visual Studio SSDT import, so Visual Studio MSBuild remains required for that project. Common's MailKit 4.13.0 dependency reports NU1902; the CLI build otherwise recorded 20 compiler warnings. Control tests passed 8 of 8 and Portal tests passed 13 of 13.
Pin the BusinessMgr .NET 10 SDK	2026-09-10	2026-09-10	2026-09-10	Added global.json for SDK 10.0.401 with latestPatch roll-forward and prerelease SDKs disabled. Visual Studio MSBuild remains required for the SSDT-dependent Portal test project.
Migrate BusinessMgr to .NET 10 against compatible Common targets	2026-09-10	2026-09-10	2026-09-10	All eight BusinessMgr projects now target net10.0. Visual Studio 18 MSBuild restored and built the complete solution successfully with no compilation errors. Control tests passed 8 of 8 and Portal tests passed 13 of 13 on .NET 10. Package vulnerability and framework-specific package reviews are tracked separately.