fix: Patch security vulnerabilities - Remove AutoMapper (GHSA-rvv3-g6hj-g44x), fix System.Text.RegularExpressions CVE, remove ASP.NET Core 2.2 EOL packages

[Krishna-Chaitanya4]

Summary

Patches multiple security vulnerabilities flagged by scanners.

Vulnerabilities Fixed

Vulnerability	Package	Severity	Fix
GHSA-rvv3-g6hj-g44x	AutoMapper 12.0.1	High	Removed - replaced with hand-written V1ConfigurationMapper
GHSA-cmhx-cq75-c4mj	System.Text.RegularExpressions 4.3.0	High	Pinned to 4.3.1 in 12 projects
EOL packages	Microsoft.AspNetCore.Mvc 2.2.0, Microsoft.AspNetCore.Mvc.Formatters.Json 2.2.0	Scanner flag	Replaced with FrameworkReference to Microsoft.AspNetCore.App

Changes

AutoMapper Removal (GHSA-rvv3-g6hj-g44x)

• Removed AutoMapper 12.0.1 and AutoMapper.Extensions.Microsoft.DependencyInjection from Scraper, Core.Scraping, and Tests.Unit
• Created V1ConfigurationMapper - hand-written mapper with dictionary-based resource type dispatch, replacing V1MappingProfile
• Deleted V1MappingProfile.cs and AutoMapperTests.cs
• Updated Startup.cs, ConfigurationSerializer.cs, and all test files to use V1ConfigurationMapper

System.Text.RegularExpressions CVE (GHSA-cmhx-cq75-c4mj)

• Pinned System.Text.RegularExpressions to 4.3.1 in 12 affected .csproj files

ASP.NET Core 2.2 EOL Packages

• Removed Microsoft.AspNetCore.Mvc 2.2.0 and Microsoft.AspNetCore.Mvc.Formatters.Json 2.2.0
• Added FrameworkReference to Microsoft.AspNetCore.App (standard .NET 8 pattern for class libraries)

Other

• Removed deprecated DotNetCliToolReference for CodeGeneration.Tools 2.0.4
• Removed UTF-8 BOM from Dockerfile.linux files
• Updated RuntimeFrameworkVersion 8.0.24 to 8.0.25, Docker base images to 8.0.25

Verification

• Build: 0 errors, 0 warnings
• Vulnerability scan: No vulnerable packages found (dotnet list package --vulnerable --include-transitive)
• Docker build: Both Scraper and ResourceDiscovery images build successfully
• Unit tests: 1542 passed, 0 failed

[github-actions]

Thank you for your contribution! 🙏 We will review it as soon as possible.

[tomkerkhove]

/azp run "Promitor CI - Scraper Agent"

[azure-pipelines]

No pipelines are associated with this pull request.

[tomkerkhove]

/azp run

[azure-pipelines]

Azure Pipelines successfully started running 2 pipeline(s).

[tomkerkhove]

@Krishna-Chaitanya4 Please monitor main CI, was not intended to merge already