Skip to content

Conversation

@Morilli
Copy link
Contributor

@Morilli Morilli commented Nov 29, 2024

This is mainly to bump the transitive System.Text.Json dependency from 8.0.0 to 9.0.0, fixing GHSA-hh2w-p6rv-4g7w.

Closes #2370. As described in that issue, the System.Text.Json dependency is shipped to all consumers of the Silk.NET.Core package and will result in build warnings when building with the .NET 9 SDK.

this also bumps the transitive System.Text.Json dependency from 8.0.0 to 9.0.0, fixing GHSA-hh2w-p6rv-4g7w
@Morilli Morilli requested a review from a team as a code owner November 29, 2024 02:14
@Morilli
Copy link
Contributor Author

Morilli commented Nov 29, 2024

@dotnet-policy-service agree

Copy link
Member

@Perksey Perksey left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM if build passes, thanks :)

@Perksey Perksey enabled auto-merge (squash) November 29, 2024 14:42
@Perksey Perksey merged commit bd2f7a1 into dotnet:main Nov 29, 2024
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

Build warning due to vulnerable transitive System.Text.Json dependency

2 participants