chore(deps): upgrade marten 8->9 and wolverine 5->6 (critter stack)

[leehopper]

Summary

Coordinated major upgrade of the full Critter Stack — Marten 8 → 9 and Wolverine 5 → 6 (JasperFx 2.0). This consolidates the four dependabot PRs that each failed CI in isolation because the five packages are interdependent and must move together:

• supersedes chore(deps): Bump Marten and Marten.EntityFrameworkCore #119 (Marten), chore(deps): Bump WolverineFx from 5.39.3 to 6.1.0 #120 (WolverineFx), chore(deps): Bump WolverineFx.EntityFrameworkCore from 5.39.3 to 6.2.2 #121 (WolverineFx.EntityFrameworkCore), chore(deps): Bump Marten and WolverineFx.Marten #122 (WolverineFx.Marten)

Package changes (backend/Directory.Packages.props)

Package	From	To
Marten	8.37.1	9.2.1
Marten.EntityFrameworkCore	8.37.1	9.2.1
WolverineFx	5.39.3	6.1.0
WolverineFx.EntityFrameworkCore	5.39.3	6.1.0
WolverineFx.Marten	5.39.3	6.1.0
WolverineFx.RuntimeCompilation	—	6.1.0 (new)

NuGet resolves JasperFx 2.2.0 / JasperFx.Events / Weasel 9.0 transitively; all five packages target net10.0. EF Core floors already satisfied (≥ 10.0.2).

Breaking-change fixes (Marten 9 / Wolverine 6 / JasperFx 2.0)

Verified against the restored 9.2.1 / 6.1.0 assemblies (reflection) and the migration guide:

1. [Identity] attribute relocated Marten.Schema → JasperFx — IdempotencyMarker.cs (Marten no longer defines its own; it honors the shared JasperFx attribute).
2. Enum/exception namespace moves (JasperFx 2.0 consolidation):
   • TenancyStyle → JasperFx.MultiTenancy, TrackLevel → JasperFx.OpenTelemetry (MartenConfiguration.cs usings).
   • DocumentAlreadyExistsException → JasperFx (out of Marten.Exceptions; the two stream-collision exceptions stayed) — Program.cs OnException registration + WolverineErrorRoutingTests.cs.
3. Projection programming-model change — convention-method SingleStreamProjection subclasses (OnboardingProjection, PlanProjection) must now be partial so the compile-time JasperFx.Events source generator (shipped in the Marten analyzer asset) emits the aggregate dispatcher; the runtime reflection fallback was removed. UserProfileFromOnboardingProjection uses an explicit ApplyEvent override, so it is unaffected.
4. Wolverine 6 extracted runtime Roslyn codegen into WolverineFx.RuntimeCompilation. Required for the Development / integration-test host, which boots with CodeGeneration.TypeLoadMode.Auto; without it the host throws No IAssemblyGenerator is registered. Production uses TypeLoadMode.Static and never invokes it.

The reflection-based per-event schema-version helper (MapEventTypeWithSchemaVersion / EventStoreOptionsExtensions) is unchanged — verified the assembly-root type and method signature are byte-identical in 9.2.1.

Verification

• dotnet build RunCoach.slnx — clean, 0 warnings (SonarAnalyzer 10.27 + StyleCop pass under TreatWarningsAsErrors).
• Full suite 1124 / 1124 passing (dotnet test --solution RunCoach.slnx) on Testcontainers Postgres, including: Solo async daemon + ApplyAllDatabaseChangesOnStartup clean boot, the legacy-event upcaster synthetic-row regression test, and the idempotency Wolverine error-routing tests.
• No behavioral regressions observed in the documented risk areas (daemon advisory locks, transaction bracketing, projection dispatch, serialization round-trip).

🤖 Generated with Claude Code

[coderabbitai]

Warning

Review limit reached

@leehopper, we couldn't start this review because you've reached your PR review rate limit.

More reviews will be available in 40 minutes and 37 seconds. Learn how PR review limits work.

Your organization has run out of usage credits. Purchase more in the billing tab.

⌛ How to resolve this issue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans include higher PR review limits than trial, open-source, and free plans. In all cases, reviews become available again over time. During sustained high-volume PR review activity, CodeRabbit may temporarily slow when the next review becomes available.

Please see our Fair Usage Limits Policy for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: cae6bb34-82b8-49f9-8173-fb9a41d64671

📥 Commits

Reviewing files that changed from the base of the PR and between 5b1e549 and 82e5560.

📒 Files selected for processing (8)

• backend/Directory.Packages.props
• backend/src/RunCoach.Api/Infrastructure/Idempotency/IdempotencyMarker.cs
• backend/src/RunCoach.Api/Infrastructure/MartenConfiguration.cs
• backend/src/RunCoach.Api/Modules/Coaching/Onboarding/OnboardingProjection.cs
• backend/src/RunCoach.Api/Modules/Training/Plan/PlanProjection.cs
• backend/src/RunCoach.Api/Program.cs
• backend/src/RunCoach.Api/RunCoach.Api.csproj
• backend/tests/RunCoach.Api.Tests/Infrastructure/Idempotency/WolverineErrorRoutingTests.cs

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 15 package(s) with unknown licenses.

See the Details below.

License Issues

backend/src/RunCoach.Api/RunCoach.Api.csproj

Package	Version	License	Issue Type
JasperFx	2.2.0	Null	Unknown License
JasperFx.Events	2.2.0	Null	Unknown License
JasperFx.RuntimeCompiler	5.0.0	Null	Unknown License
JasperFx.SourceGenerator	2.2.0	Null	Unknown License
Marten	9.2.1	Null	Unknown License
Marten.EntityFrameworkCore	9.2.1	Null	Unknown License
Weasel.Core	9.0.1	Null	Unknown License
Weasel.EntityFrameworkCore	9.0.1	Null	Unknown License
Weasel.Postgresql	9.0.1	Null	Unknown License
WolverineFx	6.1.0	Null	Unknown License
WolverineFx.EntityFrameworkCore	6.1.0	Null	Unknown License
WolverineFx.Marten	6.1.0	Null	Unknown License
WolverineFx.Postgresql	6.1.0	Null	Unknown License
WolverineFx.RDBMS	6.1.0	Null	Unknown License
WolverineFx.RuntimeCompilation	6.1.0	Null	Unknown License

Allowed Licenses:

MIT, Apache-2.0, BSD-2-Clause, BSD-3-Clause, ISC, 0BSD, Unlicense, CC0-1.0, CC-BY-4.0, Zlib, BSL-1.0, Python-2.0, PSF-2.0, Artistic-2.0, MPL-2.0, WTFPL, PostgreSQL

Excluded from license check:

pkg:githubactions/SonarSource/sonarqube-scan-action, pkg:npm/runcoach-frontend

OpenSSF Scorecard

Scorecard details

Package	Version	Score	Details
nuget/FastExpressionCompiler	5.4.1	🟢 3.7	Details Check Score Reason Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Maintained 🟢 10 30 commit(s) and 24 issue activity found in the last 90 days -- score normalized to 10 Code-Review ⚠️ 0 Found 0/2 approved changesets -- score normalized to 0 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Binary-Artifacts 🟢 9 binaries present in source code Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Security-Policy ⚠️ 0 security policy file not detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Packaging 🟢 10 packaging workflow detected Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
nuget/JasperFx	2.2.0	Unknown	Unknown
nuget/JasperFx.Events	2.2.0	Unknown	Unknown
nuget/JasperFx.RuntimeCompiler	5.0.0	Unknown	Unknown
nuget/JasperFx.SourceGenerator	2.2.0	Unknown	Unknown
nuget/Marten	9.2.1	Unknown	Unknown
nuget/Marten.EntityFrameworkCore	9.2.1	Unknown	Unknown
nuget/Weasel.Core	9.0.1	Unknown	Unknown
nuget/Weasel.EntityFrameworkCore	9.0.1	Unknown	Unknown
nuget/Weasel.Postgresql	9.0.1	Unknown	Unknown
nuget/WolverineFx	6.1.0	Unknown	Unknown
nuget/WolverineFx.EntityFrameworkCore	6.1.0	Unknown	Unknown
nuget/WolverineFx.Marten	6.1.0	Unknown	Unknown
nuget/WolverineFx.Postgresql	6.1.0	Unknown	Unknown
nuget/WolverineFx.RDBMS	6.1.0	Unknown	Unknown
nuget/WolverineFx.RuntimeCompilation	6.1.0	Unknown	Unknown

Scanned Files

• backend/src/RunCoach.Api/RunCoach.Api.csproj