Amazon Pay C# SDK 3.9.2

amzn · Aug 11, 2022 · 4392cae · 4392cae
1 parent a4223dd
commit 4392cae
Show file tree

Hide file tree

Showing 6 changed files with 13 additions and 10 deletions.
diff --git a/AmazonPay.nuspec b/AmazonPay.nuspec
@@ -2,19 +2,19 @@
 <package >
   <metadata>
     <id>$id$</id>
-    <version>3.9.1</version>
+    <version>3.9.2</version>
     <title>$title$</title>
     <authors>AmazonPay</authors>
     <owners>AmazonPay</owners>
     <projectUrl>https://github.com/amzn/amazon-pay-sdk-csharp</projectUrl>
     <iconUrl>https://images-na.ssl-images-amazon.com/images/G/01/Iris3_US/en_US/inca/images/60x38-white-x1.png</iconUrl>
     <requireLicenseAcceptance>false</requireLicenseAcceptance>
     <description>AmazonPay service. This API section enables you to programmatically retrieve shipping and payment information provided by the buyer from their Amazon account. It allows you to authorize, capture, and refund payments, enabling a variety of payments scenarios.</description>
-    <releaseNotes>v3.9.1</releaseNotes>
+    <releaseNotes>v3.9.2</releaseNotes>
     <copyright>Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.</copyright>
     <tags>AmazonPay</tags>
     <dependencies>
-      <dependency id="Newtonsoft.Json" version="12.0.2" />
+      <dependency id="Newtonsoft.Json" version="13.0.1" />
       <dependency id="Common.Logging" version="2.0.0" />
     </dependencies>
   </metadata>

diff --git a/AmazonPay/AmazonPay.csproj b/AmazonPay/AmazonPay.csproj
@@ -4,12 +4,12 @@
     <TargetFrameworks>netstandard2.0;net20</TargetFrameworks>
     <Copyright>Copyright Amazon.com Inc. or its affiliates.</Copyright>
     <Company>Amazon Pay</Company>
-    <Version>3.9.1</Version>
+    <Version>3.9.2</Version>
     <SignAssembly>true</SignAssembly>
     <AssemblyOriginatorKeyFile>KeyFile.snk</AssemblyOriginatorKeyFile>
   </PropertyGroup>
   <ItemGroup>
-    <PackageReference Include="Newtonsoft.Json" Version="12.0.2" />
+    <PackageReference Include="Newtonsoft.Json" Version="13.0.1" />
     <PackageReference Include="Common.Logging" Version="2.0.0" />
   </ItemGroup>
 

diff --git a/AmazonPay/AmazonPay.nuspec b/AmazonPay/AmazonPay.nuspec
@@ -2,19 +2,19 @@
 <package >
   <metadata>
     <id>$id$</id>
-    <version>3.9.1</version>
+    <version>3.9.2</version>
     <title>$title$</title>
     <authors>AmazonPay</authors>
     <owners>AmazonPay</owners>
     <projectUrl>https://github.com/amzn/amazon-pay-sdk-csharp</projectUrl>
     <iconUrl>https://images-na.ssl-images-amazon.com/images/G/01/Iris3_US/en_US/inca/images/60x38-white-x1.png</iconUrl>
     <requireLicenseAcceptance>false</requireLicenseAcceptance>
     <description>AmazonPay service. This API section enables you to programmatically retrieve shipping and payment information provided by the buyer from their Amazon account. It allows you to authorize, capture, and refund payments, enabling a variety of payments scenarios.</description>
-    <releaseNotes>v3.9.1</releaseNotes>
+    <releaseNotes>v3.9.2</releaseNotes>
     <copyright>Copyright Amazon.com Inc. or its affiliates.</copyright>
     <tags>AmazonPay</tags>
     <dependencies>
-      <dependency id="Newtonsoft.Json" version="12.0.2" />
+      <dependency id="Newtonsoft.Json" version="13.0.1" />
       <dependency id="Common.Logging" version="2.0.0" />
     </dependencies>
   </metadata>

diff --git a/AmazonPay/Constants.cs b/AmazonPay/Constants.cs
@@ -7,7 +7,7 @@ namespace AmazonPay
 {
     public static class Constants
     {
-        public static readonly string SDKClientVersion = "3.9.1";
+        public static readonly string SDKClientVersion = "3.9.2";
         public static readonly string SDKName = "amazon-pay-sdk-csharp";
         public static readonly string PaymentsServiceVersion = "2013-01-01";
         public static readonly int MaxErrorRetry = 3;

diff --git a/CHANGES.txt b/CHANGES.txt
@@ -1,3 +1,6 @@
+Version 3.9.2 - August 2022
+- Fixed security vulnerabilities by upgrading Newtonsoft.Json to 13.0.1
+
 Version 3.9.1 - March 2021
 - Fixed security risk - Buyer Access token is passed as HTTP header instead of query parameter in URL for GetUserInfo API
 

diff --git a/UnitTests/UnitTests.csproj b/UnitTests/UnitTests.csproj
@@ -17,7 +17,7 @@
   <ItemGroup>
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="16.8.0" />
     <PackageReference Include="NUnit3TestAdapter" Version="3.14.0" />
-    <PackageReference Include="Newtonsoft.Json" Version="12.0.2" />
+    <PackageReference Include="Newtonsoft.Json" Version="13.0.1" />
     <PackageReference Include="Common.Logging" Version="2.0.0" />
   </ItemGroup>