feat: tweaks and refinements

.github/workflows/codeql-analysis.yml

@@ -1,3 +1,4 @@
+# https://github.com/github/codeql-action
 name: "CodeQL"
 
 on:

.github/workflows/devskim-analysis.yml

@@ -1,3 +1,4 @@
+# https://github.com/microsoft/DevSkim-Action
 name: DevSkim
 
 on:

.github/workflows/dotnet.yml

@@ -1,3 +1,4 @@
+# https://github.com/actions/setup-dotnet
 name: Build
 
 on:
@@ -33,9 +34,10 @@ jobs:
         uses: actions/setup-dotnet@v4
         with:
           dotnet-version: ${{ env.DOTNET_VERSION }}
+          cache: true
 
       - name: Restore dependencies
-        run: dotnet restore Shop.sln
+        run: dotnet restore Shop.sln --locked-mode
 
       - name: Build
         run: dotnet build Shop.sln --nologo --no-restore --configuration Release

.github/workflows/sonar-cloud.yml

@@ -1,3 +1,4 @@
+# https://github.com/SonarSource/sonarcloud-github-action
 name: SonarCloud
 
 on:

Directory.Packages.props

@@ -51,11 +51,11 @@
     <PackageVersion Include="Microsoft.VisualStudio.Azure.Containers.Tools.Targets" Version="1.21.0" />
     <PackageVersion Include="MiniProfiler.AspNetCore.Mvc" Version="4.5.4" />
     <PackageVersion Include="MiniProfiler.EntityFrameworkCore" Version="4.5.4" />
-    <PackageVersion Include="MongoDB.Bson" Version="3.0.0" />
-    <PackageVersion Include="MongoDB.Driver" Version="3.0.0" />
+    <PackageVersion Include="MongoDB.Bson" Version="3.1.0" />
+    <PackageVersion Include="MongoDB.Driver" Version="3.1.0" />
     <PackageVersion Include="NSubstitute" Version="5.3.0" />
     <PackageVersion Include="NSubstitute.Analyzers.CSharp" Version="1.0.17" />
-    <PackageVersion Include="OwaspHeaders.Core" Version="9.1.1" />
+    <PackageVersion Include="OwaspHeaders.Core" Version="9.4.2" />
     <PackageVersion Include="Polly" Version="8.5.0" />
     <PackageVersion Include="Roslynator.Analyzers" Version="4.12.9" />
     <PackageVersion Include="Roslynator.CodeAnalysis.Analyzers" Version="4.12.9" />