Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump Microsoft.Extensions.DependencyModel #2371

Merged
merged 2 commits into from
Nov 29, 2024

Conversation

Morilli
Copy link
Contributor

@Morilli Morilli commented Nov 29, 2024

This is mainly to bump the transitive System.Text.Json dependency from 8.0.0 to 9.0.0, fixing GHSA-hh2w-p6rv-4g7w.

Closes #2370. As described in that issue, the System.Text.Json dependency is shipped to all consumers of the Silk.NET.Core package and will result in build warnings when building with the .NET 9 SDK.

this also bumps the transitive System.Text.Json dependency from 8.0.0 to 9.0.0, fixing GHSA-hh2w-p6rv-4g7w
@Morilli Morilli requested a review from a team as a code owner November 29, 2024 02:14
@Morilli
Copy link
Contributor Author

Morilli commented Nov 29, 2024

@dotnet-policy-service agree

Copy link
Member

@Perksey Perksey left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM if build passes, thanks :)

@Perksey Perksey enabled auto-merge (squash) November 29, 2024 14:42
@Perksey Perksey merged commit bd2f7a1 into dotnet:main Nov 29, 2024
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: Done
Development

Successfully merging this pull request may close these issues.

Build warning due to vulnerable transitive System.Text.Json dependency
2 participants