Dependency cleanup for 3.11

.github/workflows/osv-scanner.yml

@@ -0,0 +1,31 @@
+# Scans npm lockfiles on release branches. Studio ClientLib reviewed
+# lockfiles use non-standard names, so they are passed explicitly;
+# recursive source scanning covers the rest. Directory.Packages.props
+# coverage is out of scope here.
+name: OSV-Scanner
+
+on:
+  push:
+    branches:
+      - 'release/*'
+  workflow_dispatch:
+
+permissions: {}
+
+jobs:
+  osv-scan:
+    uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@b1d267aea5211fa648d9d442fa64b90dbdcbdd36 # v2.7.0
+    with:
+      fail-on-vuln: false
+      scan-args: |-
+        --recursive
+        --lockfile=package-lock.json:scripts/integration-program/consolidated-build/studio-clientlib-lockfiles/designer.package-lock.json
+        --lockfile=package-lock.json:scripts/integration-program/consolidated-build/studio-clientlib-lockfiles/dom-interop.package-lock.json
+        --lockfile=package-lock.json:scripts/integration-program/consolidated-build/studio-clientlib-lockfiles/bpmn-js.package-lock.json
+        --lockfile=package-lock.json:scripts/integration-program/consolidated-build/studio-clientlib-lockfiles/bpmn-shared.package-lock.json
+        --lockfile=package-lock.json:scripts/integration-program/consolidated-build/studio-clientlib-lockfiles/bpmn-x6.package-lock.json
+        ./
+    permissions:
+      actions: read
+      contents: read
+      security-events: write

Directory.Packages.props

@@ -94,7 +94,6 @@
     </ItemGroup>
     <ItemGroup>
         <PackageVersion Include="AspNetCore.Authentication.ApiKey" Version="9.0.0"/>
-        <PackageVersion Include="AutoMapper" Version="16.0.0" PrivateAssets="All"/>
         <PackageVersion Include="Azure.Identity" Version="1.17.1"/>
         <PackageVersion Include="Azure.Messaging.ServiceBus" Version="7.20.1"/>
         <PackageVersion Include="Azure.ResourceManager" Version="1.13.2"/>
@@ -143,7 +142,6 @@
         <PackageVersion Include="Loom" Version="0.0.1-preview.10"/>
         <PackageVersion Include="Loom.Abstractions" Version="0.0.1-preview.10"/>
         <PackageVersion Include="Loom.Serialization.Json" Version="0.0.1-preview.10"/>
-        <PackageVersion Include="MailKit" Version="4.14.1"/>
         <PackageVersion Include="MassTransit" Version="8.5.7"/>
         <PackageVersion Include="MassTransit.Azure.ServiceBus.Core" Version="8.5.7"/>
         <PackageVersion Include="MassTransit.Extensions.DependencyInjection" Version="7.3.1"/>
@@ -162,7 +160,6 @@
 		<PackageVersion Include="Npgsql" Version="10.0.3"/>
         <PackageVersion Include="NSubstitute" Version="5.3.0"/>
         <PackageVersion Include="NuGet.Packaging" Version="7.6.0"/>
-        <PackageVersion Include="NuGet.Protocol" Version="7.0.1"/>
         <PackageVersion Include="Nuplane" Version="0.0.8"/>
         <PackageVersion Include="Nuplane.Abstractions" Version="0.0.8"/>
         <PackageVersion Include="Nuplane.Admin" Version="0.0.8"/>