[woksin]

Fixed

• Keep the conference workshop runnable in Release by explicitly including its MongoDB integration, and remove unused test configuration. (Reconcile workshop test setup with Specifications 5 and xUnit v3 #18)

Security

• Update the conference workshop's composition host to patched MessagePack and cryptography dependencies.

[woksin]

Core and Composition Debug/Release builds passed with zero warnings or errors and dependency auditing enabled. Core build results were reused after confirming its dependency graph stayed unchanged by the Composition-only patch references.

Baseline source inspection and runtime discovery/execution found zero tests. This removes obsolete inline test plumbing, not existing specifications; no empty Specifications 5 project was introduced. App startup, net10.0 targets, and generated proxies are unchanged. No frontend files changed; frontend checks were not rerun.

Whole-change cross-provider deep security review passed at 6fe202d against db7a0ca, with no blocking or unverified findings. CodeScene safeguard passed for eligible changed code.

The original Composition audit failure was in unchanged dependencies: Aspire.Hosting → StreamJsonRpc → MessagePack, and Aspire.Hosting.SqlServer → Pkcs (also through SqlClient). Direct Composition references select the nearest advisory-fixed patches, MessagePack 2.5.303 and System.Security.Cryptography.Pkcs 10.0.13, without audit suppression or an Aspire major upgrade.