chore: bump dependencies from dependabot alerts (#172)

* chore: bump dependencies from dependabot alerts

NuGet:
- Microsoft.AspNetCore.Authentication.JwtBearer 8.0.25 → 8.0.26
- Microsoft.AspNetCore.Mvc.Testing 8.0.25 → 8.0.26
- FluentAssertions 6.12.0 → 8.9.0 (unit + integration tests)
- coverlet.collector 8.0.1 → 10.0.0 (unit + integration tests)

GitHub Actions:
- actions/setup-dotnet v4 → v5
- actions/upload-pages-artifact v3 → v5
- actions/deploy-pages v4 → v5
- marocchino/sticky-pull-request-comment v2.9.4 → v3

All 372 unit tests pass after upgrade.

* fix: pin marocchino/sticky-pull-request-comment to SHA (sonar hotspot)

Author: rnataoliveira

.github/workflows/coverage.yml

@@ -23,7 +23,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup .NET 8
-        uses: actions/setup-dotnet@v4
+        uses: actions/setup-dotnet@v5
         with:
           dotnet-version: '8.0.x'
 
@@ -214,14 +214,14 @@ jobs:
 
       - name: Upload Pages artifact
         if: always()
-        uses: actions/upload-pages-artifact@v3
+        uses: actions/upload-pages-artifact@v5
         with:
           path: ./coverage-html
 
       - name: Deploy to GitHub Pages
         if: always()
         id: deploy-pages
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v5
 
       - name: Post coverage summary on PR
         if: github.event_name == 'pull_request'
@@ -251,7 +251,7 @@ jobs:
 
       - name: Add PR comment with coverage summary
         if: github.event_name == 'pull_request'
-        uses: marocchino/sticky-pull-request-comment@773744901bac0e8cbb5a0dc842800d45e9b2b405 # v2 (v2.9.4)
+        uses: marocchino/sticky-pull-request-comment@0ea0beb66eb9baf113663a64ec522f60e49231c0 # v3.0.4
         with:
           recreate: true
           path: coverage-comment.md

src/MechanicsSoftware.Infrastructure/MechanicsSoftware.Infrastructure.csproj

@@ -7,7 +7,7 @@
 
   <ItemGroup>
     <PackageReference Include="BCrypt.Net-Next" Version="4.0.3" />
-    <PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="8.0.25" />
+    <PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="8.0.26" />
     <PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="9.0.14">
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
       <PrivateAssets>all</PrivateAssets>

tests/MechanicsSoftware.IntegrationTests/MechanicsSoftware.IntegrationTests.csproj

@@ -10,9 +10,9 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="coverlet.collector" Version="8.0.1" />
-    <PackageReference Include="FluentAssertions" Version="6.12.0" />
-    <PackageReference Include="Microsoft.AspNetCore.Mvc.Testing" Version="8.0.25" />
+    <PackageReference Include="coverlet.collector" Version="10.0.0" />
+    <PackageReference Include="FluentAssertions" Version="8.9.0" />
+    <PackageReference Include="Microsoft.AspNetCore.Mvc.Testing" Version="8.0.26" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.4.0" />
     <PackageReference Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="9.0.4" />
     <PackageReference Include="System.Net.Http.Json" Version="8.0.0" />

tests/MechanicsSoftware.UnitTests/MechanicsSoftware.UnitTests.csproj

@@ -10,8 +10,8 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="coverlet.collector" Version="8.0.1" />
-    <PackageReference Include="FluentAssertions" Version="6.12.0" />
+    <PackageReference Include="coverlet.collector" Version="10.0.0" />
+    <PackageReference Include="FluentAssertions" Version="8.9.0" />
     <PackageReference Include="Microsoft.EntityFrameworkCore.InMemory" Version="9.0.14" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.8.0" />
     <PackageReference Include="Moq" Version="4.20.70" />