Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[SECURITY] Bump System.Text.Json from 6.0.0 to 6.0.10 #1245

Open
wants to merge 3 commits into
base: main
Choose a base branch
from

Conversation

AbhitejJohn
Copy link
Contributor

Essentially mirroring the changes here: https://dev.azure.com/dnceng/internal/_git/dotnet-try/pullrequest/45151?_a=files. Could use pointers on possible things I'd need to validate.

@jonsequitur
Copy link
Contributor

This warning is based on the version specified by .NET Interactive which comes here as a transitive dependency, so the proper fix would be in the .NET Interactive repo, but it's unnecessary since that uses 9.0.0.

So all that's needed is to update the .NET Interactive dependencies here.

@AbhitejJohn
Copy link
Contributor Author

@jonsequitur : Ah cool, how can I get that going? Looks like that might be helpful to do given the .NET 9 update as well (assuming we are good with that change overall).

@jonsequitur
Copy link
Contributor

Update the Microsoft.DotNet.Interactive* package versions and, because of the .NET 9 bump, the TFMs for the Try .NET projects.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants