## Change
Implements two independent but related changes:
1. Makes adding/updating an overlapping ARP range a hard error
2. Adds `AddOrUpdate` functionality to the index so that callers don't
need to know if the manifest is already present

## Validation
Added/updated unit tests for ARP overlap.
Added unit and interop test for AddOrUpdate.

In coded lines, the clock ticks on,
From dawn to dusk, until it’s gone.
Versions rise with whispered lore,
From simple roots, to something more.

Bugs are squashed, new feats take flight,
Updates cascade in endless light.
Yet in each change, a piece remains,
A bit of history in the gains.

Time’s passage

[A series of tokens deemed reasonably likely by an artificial neural
network when provided with some other tokens generated by a biological
neural network.]

Update dependency System.IO.Packaging due to CVE-2024-43484,
CVE-2024-43483
###### Microsoft Reviewers: [Open in
CodeFlow](https://microsoft.github.io/open-pr/?codeflow=https://github.com/microsoft/winget-cli/pull/4881)

###### Microsoft Reviewers: [Open in
CodeFlow](https://microsoft.github.io/open-pr/?codeflow=https://github.com/microsoft/winget-cli/pull/4726)

## Change
When extracting a sequence, consume all (up to 1KB really) input even if
it doesn't start with an escape character.

This was spurred by an issue where the `peek` call was not returning
(waiting for input). Pressing Enter broke it out of that wait, but other
input was now at the front and blocked future attempts to extract the
sequence.

The best solution to this would be to move all input handling to its own
dedicated thread, but that is a much larger change.

## Issue
The requestor of this new (1.10) API needs to know whether the operation
was an add or an update. At the same time, the "was the index modified"
return value from Update has always been true for any changes since the
manifest hash was added.

## Change
Return `true` when adding and `false` when updating.

…ce Type (#4891)

Fix for Source Argument Validation in SourceWorkflow for Default Source
Type

[Issues:] The current validation in the source flow correctly detects
duplicate source names. However, when the source argument is validated
along with the source type, it allows different source names with the
same arguments for the empty source type. This happens because, during
source type comparison, if the source type is not provided, it defaults
to an empty string, which is compared against the default type
(Microsoft.PreIndexed). This allows multiple different source names with
the same argument to be considered valid sources. For an empty source
type, the default source type is assigned during the source add
operation, not beforehand. Consequently, after the source add operation
is finished, the source will have some source arguments, but only the
name will differ.

[Fix:]

For an empty source type, we should compare against the default source
to prevent different source names with the same arguments for the
default types. During validation, we obtain the default type to replace
the empty source type and use it for comparison to validate argument
duplication.

- Extended source tests to validate the duplicate source argument
scenario for the default source type.
- Fixed additional failing source origin tests with appropriate fixes.

[How Validated:]
- Compiled the latest modifications and deployed the
AppInstallerCLIPackage.
- Executed CLI SourceTests to ensure all tests pass without issues.

**[Manual validation:]**

**Before fix:**

![image](https://github.com/user-attachments/assets/591b3ec2-ae6c-42ac-8258-169596657c4a)

**After fix:**


![image](https://github.com/user-attachments/assets/2078b72a-d746-440c-a44e-2ec05c812e26)


<!-- To check a checkbox place an "x" between the brackets. e.g: [x] -->

- [x] I have signed the [Contributor License
Agreement](https://cla.opensource.microsoft.com/microsoft/winget-pkgs).
- [ ] This pull request is related to an issue.

-----

###### Microsoft Reviewers: [Open in
CodeFlow](https://microsoft.github.io/open-pr/?codeflow=https://github.com/microsoft/winget-cli/pull/4891)

Bringing back the nuspec used for creating the
Microsoft.WindowsPackageManager.Utils nuget package.
Fix CreateLocalNuget.ps1
###### Microsoft Reviewers: [Open in
CodeFlow](https://microsoft.github.io/open-pr/?codeflow=https://github.com/microsoft/winget-cli/pull/4884)

…interop (#4906)

WinGet Source COM API Support

### This update includes the following changes:

1. Implementation of WinGet COM Package Catalog Management APIs:
- PackageManager.AddPackageCatalogAsync: Allows adding a new Package
Catalog repository to the Windows Package Manager access list.
Administrative rights are required to execute this API..
- PackageManager.RemovePackageCatalogAsync: Enables the removal of an
existing Package Catalog from the Windows Package Manager access list.
Administrative rights are required to execute this API.
- By default, the 'PreserveData' field is set to false, removing both
the PackageCatalog registration data and system artifacts.
- When 'PreserveData' is set to true, only the PackageCatalog
registration data is removed, while system artifacts remain.
- PackageCatalogReference.RefreshPackageCatalogAsync: Allows updating an
existing Package Catalog repository.
2. Necessary C# WinRT Projection to invoke the above API calls from the
test classes.
3. PackageCatalogInterop E2E Inproc and OutOfproc Test Cases to
validate:
    - AddPackageCatalogAsync
    - RemovePackageCatalogAsync
    - RefreshPackageCatalogAsync
4. Added a CallbackDispatcherSink struct that handles and dispatches
progress callbacks for the scenario described above, ensuring progress
is reported to the caller.
5. Updated Package.appxmanifest and
Microsoft.Management.Deployment.InProc.dll.manifest to include the
necessary COM RuntimeClass CLSIDs related to the aforementioned APIs

### How Validated:

1. Compiled AppInstaller.sln
2. Deployed AppInstallerCLIPackage
3. Copied Microsoft.Management.Deployment.winmd next to dot.exe process
that runs test cases
4. Executed InProc tests locally and verified all tests pass.


![image](https://github.com/user-attachments/assets/1c677b85-6610-4b52-bf34-d784ba86d9db)

related: #4170

- [x] I have signed the [Contributor License
Agreement](https://cla.opensource.microsoft.com/microsoft/winget-pkgs).
- [x] This pull request is related to an issue.

-----

###### Microsoft Reviewers: [Open in
CodeFlow](https://microsoft.github.io/open-pr/?codeflow=https://github.com/microsoft/winget-cli/pull/4813)

<!-- To check a checkbox place an "x" between the brackets. e.g: [x] -->

- [x] I have signed the [Contributor License
Agreement](https://cla.opensource.microsoft.com/microsoft/winget-pkgs).
- [x] This pull request is related to an issue.
    - Closes #4924

The previous URL seems to be returning 503.

cc @denelon

-----

###### Microsoft Reviewers: [Open in
CodeFlow](https://microsoft.github.io/open-pr/?codeflow=https://github.com/microsoft/winget-cli/pull/4925)

…m GitHub assets (#4923)

## Change
Removes the attribute `ValidateNotNullOrWhiteSpace` as it is only
available starting in 7.4. The attributes also only validate when the
value is assigned, so enforcing that a value is set is more complete.

## Validation
Loads in PS 7.2.8 now.

…nifest object (#4934)

This change was needed as part of the effort to make exported manifest
(from winget download msstore apps) to be re-parsed and uploaded to
winget rest source.
 
Updated the some of the manifest schemas to add "required" for some
required fields previously missing.

Also, during my cross validation with the manifest schemas, I found
ExpectedReturnCode::Custom was added in manifest but not actually
updated in code. So I updated the ExpectedReturnCode map in code with
this change too.