chore(deps): update .NET dependencies

[deniswsrosa]

Summary

Updates direct NuGet dependencies for the ASP.NET quickstart while preserving the existing .NET 8 target and NuGet workflow.

Updated dependencies

Ecosystem	Dependency	Previous	Updated	Type	Notes
NuGet	BCrypt.Net-Next	4.1.0	4.2.0	Direct runtime	Latest stable
NuGet	Couchbase.Extensions.DependencyInjection	3.9.1	3.9.3	Direct runtime	Latest stable
NuGet	CouchbaseNetClient	3.9.1	3.9.3	Direct runtime	Latest stable
NuGet	Swashbuckle.AspNetCore	6.5.0	10.2.3	Direct runtime	Latest stable; required OpenAPI namespace update
NuGet	Swashbuckle.AspNetCore.Annotations	8.1.1	10.2.3	Direct runtime	Latest stable
NuGet	coverlet.collector	6.0.4	10.0.1	Direct test	Latest stable
NuGet	coverlet.msbuild	6.0.4	10.0.1	Direct test	Latest stable
NuGet	Microsoft.AspNetCore.Mvc.Testing	8.0.15	8.0.22	Direct test	Latest compatible with net8.0; 10.0.9 requires net10.0
NuGet	Microsoft.NET.Test.Sdk	17.11.1	18.7.0	Direct test	Latest stable
NuGet	xunit.runner.visualstudio	2.8.2	3.1.5	Direct test	Latest stable
GitHub Actions	ravsamhq/notify-slack-action	v1	2.5.0	Direct CI action	Fixes CI Report Status runtime failure observed after PR opened

Validation

• Restore passed
• Build passed
• Integration tests passed against local Couchbase with travel-sample loaded
• Swagger/OpenAPI JSON rendered
• Swagger UI rendered in browser

Commands run:

dotnet restore Org.Quickstart.sln
dotnet build Org.Quickstart.sln --configuration Debug --no-restore
DB_CONN_STR=<local Couchbase> DB_USERNAME=<local admin> DB_PASSWORD=<local password> \
  dotnet test src/Org.Quickstart.IntegrationTests/Org.Quickstart.IntegrationTests.csproj \
  --configuration Debug --no-build --verbosity normal
curl http://127.0.0.1:8080/swagger/v1/swagger.json

Validation result: 35 integration tests passed locally.

Evidence

Check	Result
dotnet list package --outdated before update	Direct updates identified
Restore/build/test	Passed locally with .NET 8 SDK
Swagger JSON	/swagger/v1/swagger.json returned OpenAPI 3.0.4 with 7 paths
Swagger UI	Browser rendered the API groups and schemas

Risk notes

• Swashbuckle.AspNetCore 10.x uses Microsoft.OpenApi instead of Microsoft.OpenApi.Models; Program.cs was updated accordingly.
• CI initially failed in ravsamhq/notify-slack-action@v1 after the build/test step had status success; the workflow action was updated to the maintained Node20-based 2.5.0 release.
• Microsoft.AspNetCore.Mvc.Testing was held to 8.0.22 because the latest 10.0.9 package targets net10.0 and is incompatible with this repository's net8.0 target.
• There are existing Dependabot PRs for subsets of these updates; this PR consolidates the validated direct dependency update set.

Rollback

Revert this PR to restore the previous NuGet package versions and OpenAPI namespace import.

[gemini-code-assist]

Code Review

This pull request updates several NuGet package dependencies across the API and Integration Tests projects, and adjusts a namespace import in Program.cs. Feedback recommends removing the redundant Couchbase.Transactions package reference, as transactions are already integrated into the updated CouchbaseNetClient, and removing coverlet.msbuild to prevent potential conflicts with coverlet.collector.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

[gemini-code-assist]

Since CouchbaseNetClient is updated to version 3.9.3, the separate Couchbase.Transactions package (currently referenced on line 13) is deprecated and completely redundant. Transactions have been fully integrated into the core CouchbaseNetClient package since version 3.4.0. You can safely remove the Couchbase.Transactions package reference from this project.

[ejscribner]

Is this the latest version available?