Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(csharp): remove specific minor version for System deps #4479

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

morganleroi
Copy link
Contributor

🧭 What and Why

Remove minor version for System dependencies.

Fixes algolia/algoliasearch-client-csharp#866

@morganleroi morganleroi requested a review from a team as a code owner February 18, 2025 11:10
@algolia-bot
Copy link
Collaborator

algolia-bot commented Feb 18, 2025

✔️ Code generated!

Name Link
🪓 Triggered by 4cd19af8994b2e4fd708e9ba46ff34d682682138
🍃 Generated commit 40b82885d8baf12db3ed1edc4999df648a9e5b05
🌲 Generated branch generated/fix/csharp-remove-deps-minor
📊 Benchmark results

Benchmarks performed on the method using a mock server, the results might not reflect the real-world performance.

Language Req/s
csharp 1339

Copy link
Collaborator

@millotp millotp left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nice !

<PackageReference Include="System.Text.Json" Version="[8.0.0, 10.0.0)" />
<PackageReference Include="Microsoft.Extensions.Logging" Version="[8.0, 10.0)" />
<PackageReference Include="Microsoft.Extensions.Logging.Abstractions" Version="[8.0, 10.0)" />
<PackageReference Include="System.Text.Json" Version="[8.0, 10.0)" />
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

should it be 8.0.1 to exclude the vulnerable version ? I think this is what the issue is complaining about

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[security] System.Text.Json v8.0.0 known vulnerability
3 participants