diff --git a/CHANGES.md b/CHANGES.md index 828a0cc..855f0ec 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -1,3 +1,6 @@ +# 8.2.2 +* Fixed issue #624: Enforce new version of transient dependency to fix vulnerability and avoid nuget.org version de-listing until SqlClient 6.1 is released. + # 8.2.1 * Updated SqlClient to 5.2.3 (thanks to @cancakar35) * Fixes in .editorconfig (thanks to @cancakar35) diff --git a/Directory.Packages.props b/Directory.Packages.props index ea880d7..f850608 100644 --- a/Directory.Packages.props +++ b/Directory.Packages.props @@ -11,6 +11,7 @@ + diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..667f8e8 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,9 @@ +# Security Policy + +## Supported Versions + +We currently do not maintain older major versions of the sink and backport security fixes. Fixes are usually created as a new release based on the latest existing release. + +## Reporting a Vulnerability + +If you find a security related problem in the library, please create an issue in the GitHub repository and give us as much details and context as you can. diff --git a/src/Serilog.Sinks.MSSqlServer/Serilog.Sinks.MSSqlServer.csproj b/src/Serilog.Sinks.MSSqlServer/Serilog.Sinks.MSSqlServer.csproj index 8cccba2..4f1da52 100644 --- a/src/Serilog.Sinks.MSSqlServer/Serilog.Sinks.MSSqlServer.csproj +++ b/src/Serilog.Sinks.MSSqlServer/Serilog.Sinks.MSSqlServer.csproj @@ -2,7 +2,7 @@ A Serilog sink that writes events to Microsoft SQL Server and Azure SQL - 8.2.1 + 8.2.2 true 8.0.0 Michiel van Oudheusden;Christian Kadluba;Serilog Contributors @@ -36,6 +36,7 @@ +