Skip to content

Commit 80f2dbf

Browse files
authored
[examples] Bump packages dependent on vulnerable System.Text.Json versions (open-telemetry#2194)
1 parent 03880e5 commit 80f2dbf

File tree

2 files changed

+2
-6
lines changed

2 files changed

+2
-6
lines changed

examples/kafka/Examples.ConfluentKafka.csproj

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -10,12 +10,10 @@
1010
</ItemGroup>
1111

1212
<ItemGroup>
13-
<PackageReference Include="Microsoft.Extensions.Hosting" Version="8.0.0" />
13+
<PackageReference Include="Microsoft.Extensions.Hosting" Version="8.0.1" />
1414
<PackageReference Include="OpenTelemetry.Extensions.Hosting" Version="$(OpenTelemetryCoreLatestVersion)" />
1515
<PackageReference Include="OpenTelemetry.Exporter.OpenTelemetryProtocol" Version="$(OpenTelemetryCoreLatestVersion)" />
1616
<PackageReference Include="OpenTelemetry.Exporter.Console" Version="$(OpenTelemetryCoreLatestVersion)" />
17-
<!-- System.Text.Json is indirect reference. It is needed to upgrade it directly to avoid https://github.com/advisories/GHSA-hh2w-p6rv-4g7w -->
18-
<PackageReference Include="System.Text.Json" Version="8.0.4" />
1917
</ItemGroup>
2018

2119
</Project>

examples/wcf/client-core/Examples.Wcf.Client.DotNet.csproj

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -8,11 +8,9 @@
88
<ItemGroup>
99
<PackageReference Include="System.ServiceModel.Http" Version="4.7.0" />
1010
<PackageReference Include="System.ServiceModel.NetTcp" Version="4.7.0" />
11-
<PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="8.0.0" />
11+
<PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="8.0.1" />
1212
<PackageReference Include="Microsoft.Extensions.Configuration.Binder" Version="8.0.2" />
1313
<PackageReference Include="OpenTelemetry.Exporter.Zipkin" Version="$(OpenTelemetryCoreLatestVersion)" />
14-
<!-- System.Text.Json is indirect reference. It is needed to upgrade it directly to avoid https://github.com/advisories/GHSA-hh2w-p6rv-4g7w -->
15-
<PackageReference Include="System.Text.Json" Version="8.0.4" />
1614
</ItemGroup>
1715

1816
<ItemGroup>

0 commit comments

Comments
 (0)