Skip to content

Update dependencies to fix vulnerability warnings#827

Merged
tautropfli merged 8 commits intomainfrom
audit-warnings
Jan 30, 2025
Merged

Update dependencies to fix vulnerability warnings#827
tautropfli merged 8 commits intomainfrom
audit-warnings

Conversation

@tautropfli
Copy link
Member

Resolves #824

FreeApophis
FreeApophis previously approved these changes Jan 30, 2025
@tautropfli
Copy link
Member Author

sigh I finally figured it out: The audit warnings only appear when restoring with the linux-x64 runtime because then System.Private.Uri gets pulled in transitively. To reproduce it locally one has to also enable auditing of transitive dependencies using /p:NugetAuditMode=all (which is enabled by default on CI apparently).

Full command to reproduce: dotnet restore -r linux-x64 /p:NugetAuditMode=all Funcky.TrimmingTest.

@FreeApophis
Copy link
Member

FreeApophis commented Jan 30, 2025

Visual Studio's Package Manager also checks the transitive dependencies since the new Visual Studio release.

@tautropfli tautropfli merged commit 62e101a into main Jan 30, 2025
9 checks passed
@tautropfli tautropfli deleted the audit-warnings branch January 30, 2025 15:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Warning NU1904 cluttering the Build in Visual Studio

2 participants