Bump Microsoft.Data.Sqlite dependency when new version becomes available

Open Beginner friendly

#19 opened on Jul 2, 2026 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty: 2/5
Estimated time: 1-3 hours
Newbie friendliness: 72/100

Issue type: Refactor
Clarity: Clearly specified
Activity status: Quiet
Tech stack: csharp, sqlite
Domain: databases

Research direction

Start by checking the Microsoft.Data.Sqlite release and its referenced SQLitePCLRaw version. Review MEVD/src/SqliteVec/SqliteVec.csproj and Directory.Packages.props at the linked entries. Done means bumping Microsoft.Data.Sqlite and removing the temporary direct SQLitePCLRaw dependency entries once the newer transitive versions resolve the vulnerabilities.

Written by the indexing model from the issue text.

Description

In https://github.com/CommunityToolkit/AI/pull/17, we have added a direct dependency to SQLitePCLRaw.bundle_e_sqlite3 package in order to avoid getting NU1902/NU1903 errors due to known vulnerabilities:

SQLitePCLRaw.bundle_e_sqlite3 3.0.3 (fixes GHSA-2m69-gcr7-jv3q)

Once a new version of Microsoft.Data.Sqlite gets released and it references newer versions, we need to remove:

https://github.com/CommunityToolkit/AI/blob/e966e4f56b1ec2ded2a5bbeb0c723ab05f4b28d9/MEVD/src/SqliteVec/SqliteVec.csproj#L20

https://github.com/CommunityToolkit/AI/blob/1697580470910074cdf0890d27fa7e06111688df/Directory.Packages.props#L24

And bump Microsoft.Data.Sqlite here:

https://github.com/CommunityToolkit/AI/blob/1697580470910074cdf0890d27fa7e06111688df/Directory.Packages.props#L15

Dominant language: C#
Stars: 7
Forks: 4
Avg merge: 5h 54m
Merged PRs (30d): 8

Contributor guide

Open the contributing guide

First steps

Read the whole issue, then the project's contributing guide.
Comment on the issue to say you are picking it up — it saves two people doing the same work.
Fork the repository and make your change on a branch.
Open a pull request that references the issue number.

Similar issues

[quality-improver] Repository Quality: AzureFoundry Extension Missing from Self-Registration Acceptance Test Open

type/automation type/tech-debt

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

microsoft/testfx#11431 · Opened Sep 21, 2026
[Bug]: Composite `ui screenshot` success output ignores `--quiet` Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 88/100

microsoft/winappCli#914 · Opened Sep 21, 2026
GeometryHelper.FlattenArc / FlattenCubicBezier / FlattenQuadraticBezier emit a NaN point when the segment count truncates to 0 (0/0) — a Path with a sub-pixel arc fail-fasts Windows with D2DERR_BAD_NUMBER (root cause of #8512, #13757) Open

t/bug

Difficulty 2/5 1-3 hours Newbie friendliness 82/100

dotnet/maui#38751 · 1 reaction · Opened Sep 21, 2026
[CI Failure] Flaky: MauiBuildQueueTests.CancelQueuedResource_CompletesGracefullyAndDoesNotAcquireSemaphore asserts exact exception type but sometimes gets TaskCanceledException instead of OperationCanceledException Open

ci-failure-cause test-failure

Difficulty 2/5 1-3 hours Newbie friendliness 82/100

microsoft/aspire#20284 · Opened Sep 21, 2026
The login flow's text-link submit is 42 px tall on a narrow screen; its docblock says 44 Open

area:auth FE mvp P3

Difficulty 2/5 1-3 hours Newbie friendliness 88/100

klasolsson81/jobbliggaren#1788 · Opened Sep 21, 2026

More C# issues