305-bug-fix-nuget-package-reference-check-false-positive-issue-notifications

[omranatstarion]

Prerequisites

• I have written a descriptive pull-request title
• I have verified that there are no overlapping pull-requests open
• I have verified that I am following the SysML2.NET code style guidelines
• I have provided test coverage for my change (where applicable)

Description

This pull request improves the existing NuGet package reference check workflow.

The outdated package check now keeps transitive outdated packages visible in the GitHub Actions logs, but only uses direct/top-level outdated packages for GitHub issue creation. This avoids polluting the repository issues with transitive package updates that are usually not directly actionable.

Deprecated and vulnerable package checks still include transitive packages, since those can still affect the project even when they are not referenced directly.

The workflow also keeps the safer issue synchronization behavior:

• it creates or updates the NuGet package issue when real package problems are found
• it skips GitHub issue creation during pull request runs
• it automatically closes the existing issue when the package check becomes clean again
• it filters out .Tests project sections from the generated issue output

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud