Skip to content

Commit

Permalink
Fix System.Private.Uri
Browse files Browse the repository at this point in the history
  • Loading branch information
sebastienros committed Oct 10, 2024
1 parent 16ebf46 commit 966b4cc
Showing 1 changed file with 4 additions and 2 deletions.
6 changes: 4 additions & 2 deletions Directory.Packages.props
Original file line number Diff line number Diff line change
Expand Up @@ -89,6 +89,7 @@
<GlobalPackageReference Include="Microsoft.SourceLink.GitHub" Version="8.0.0" />
<GlobalPackageReference Include="Microsoft.CodeAnalysis.CSharp.CodeStyle" Version="4.11.0" />
</ItemGroup>

<!-- These versions are used for tansitive dependency forced upgrades only. E.g. when a package references a vulnerable version. -->
<!-- To list all vulnerable direct references run 'dotnet list package -vulnerable' (use double dash, just XML comments can't contain it) -->
<!-- To list all vulnerable transitive references run 'dotnet list package -vulnerable -include-transitive' (use double dash, just XML comments can't contain it) -->
Expand Down Expand Up @@ -128,14 +129,15 @@
-->
<PackageVersion Include="System.Runtime.Caching" Version="8.0.1" />

<PackageReference Include="System.Private.Uri" Version="4.3.2" />
</ItemGroup>

<ItemGroup Condition="$(TargetFramework) == 'net8.0'" >
<ItemGroup Condition="'$(TargetFramework)' == 'net8.0'" >
<!-- Several transitive dependencies on 8.0.4 which is vulnerable -->
<PackageVersion Include="System.Text.Json" Version="8.0.5" />
</ItemGroup>

<ItemGroup Condition="$(TargetFramework) == 'net9.0'" >
<ItemGroup Condition="'$(TargetFramework)' == 'net9.0'" >
<!-- Several transitive dependencies on 8.0.4 which is vulnerable -->
<PackageVersion Include="System.Text.Json" Version="9.0.0-rc.2.24473.5" />
</ItemGroup>
Expand Down

0 comments on commit 966b4cc

Please sign in to comment.