Skip to content

Commit f23d7c1

Browse files
Krishna-Chaitanya4Krishna-Chaitanya4
authored
fix(security): upgrade .NET runtime to 8.0.21 and resolve NuGet vulnerabilities (#2699)
1 parent 8261296 commit f23d7c1

File tree

21 files changed

+47
-45
lines changed

21 files changed

+47
-45
lines changed

‎build/azure-devops/variables/build.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,3 @@
11
variables:
2-
DotNet.Sdk.Version: '8.0.414'
2+
DotNet.Sdk.Version: '8.0.415'
33
DotNet.Configuration: 'release'

‎src/Promitor.Agents.Core/Promitor.Agents.Core.csproj‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22

33
<PropertyGroup>
44
<TargetFramework>net8.0</TargetFramework>
5-
<RuntimeFrameworkVersion>8.0.20</RuntimeFrameworkVersion>
5+
<RuntimeFrameworkVersion>8.0.21</RuntimeFrameworkVersion>
66
</PropertyGroup>
77

88
<PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|AnyCPU'">
@@ -14,10 +14,10 @@
1414
</PropertyGroup>
1515

1616
<ItemGroup>
17-
<PackageReference Include="Arcus.Observability.Telemetry.AspNetCore" Version="2.8.0" />
18-
<PackageReference Include="Arcus.Observability.Telemetry.Serilog.Enrichers" Version="2.8.0" />
19-
<PackageReference Include="Arcus.Observability.Telemetry.Serilog.Sinks.ApplicationInsights" Version="2.8.0" />
20-
<PackageReference Include="Arcus.WebApi.Logging" Version="1.7.1" />
17+
<PackageReference Include="Arcus.Observability.Telemetry.AspNetCore" Version="3.0.0" />
18+
<PackageReference Include="Arcus.Observability.Telemetry.Serilog.Enrichers" Version="3.0.0" />
19+
<PackageReference Include="Arcus.Observability.Telemetry.Serilog.Sinks.ApplicationInsights" Version="3.0.0" />
20+
<PackageReference Include="Arcus.WebApi.Logging" Version="2.0.0" />
2121
<PackageReference Include="CronScheduler.AspNetCore" Version="3.2.0" />
2222
<PackageReference Include="Microsoft.AspNetCore.Mvc" Version="2.2.0" />
2323
<PackageReference Include="Microsoft.AspNetCore.Mvc.Formatters.Json" Version="2.2.0" />

‎src/Promitor.Agents.ResourceDiscovery/Dockerfile.linux‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ COPY Promitor.Integrations.Sinks.Core/* Promitor.Integrations.Sinks.Core/
1414
COPY Promitor.Integrations.Sinks.Prometheus/* Promitor.Integrations.Sinks.Prometheus/
1515
RUN dotnet publish Promitor.Agents.ResourceDiscovery/Promitor.Agents.ResourceDiscovery.csproj --configuration release --output /app /p:Version=$VERSION
1616

17-
FROM mcr.microsoft.com/dotnet/aspnet:8.0.20-cbl-mariner2.0-distroless AS runtime-base
17+
FROM mcr.microsoft.com/dotnet/aspnet:8.0.21-cbl-mariner2.0-distroless AS runtime-base
1818

1919
FROM mcr.microsoft.com/cbl-mariner/base/core:2.0 AS installer
2020

‎src/Promitor.Agents.ResourceDiscovery/Promitor.Agents.ResourceDiscovery.csproj‎

Lines changed: 8 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
<PropertyGroup>
44
<TargetFramework>net8.0</TargetFramework>
55
<DockerComposeProjectPath>..\docker-compose.dcproj</DockerComposeProjectPath>
6-
<RuntimeFrameworkVersion>8.0.20</RuntimeFrameworkVersion>
6+
<RuntimeFrameworkVersion>8.0.21</RuntimeFrameworkVersion>
77
<GenerateDocumentationFile>true</GenerateDocumentationFile>
88
<DocumentationFile>Docs\Open-Api.xml</DocumentationFile>
99
<UserSecretsId>159d036b-3697-40d4-bdc4-7d9736521375</UserSecretsId>
@@ -32,19 +32,20 @@
3232
</ItemGroup>
3333

3434
<ItemGroup>
35-
<PackageReference Include="Arcus.Observability.Telemetry.Core" Version="2.8.0" />
35+
<PackageReference Include="Arcus.Observability.Telemetry.Core" Version="3.0.0" />
3636
<PackageReference Include="Guard.NET" Version="3.0.0" />
3737
<PackageReference Include="Microsoft.Azure.Management.ResourceGraph" Version="2.1.0" />
3838
<PackageReference Include="Microsoft.Azure.Services.AppAuthentication" Version="1.6.2" />
39-
<PackageReference Include="Microsoft.Extensions.Logging.Console" Version="8.0.1" />
39+
<PackageReference Include="Microsoft.Extensions.Logging.Console" Version="9.0.10" />
4040
<PackageReference Include="Microsoft.VisualStudio.Azure.Containers.Tools.Targets" Version="1.22.1" />
4141
<PackageReference Include="NetEscapades.Configuration.Yaml" Version="3.1.0" />
42-
<PackageReference Include="Polly" Version="8.6.2" />
42+
<PackageReference Include="Polly" Version="8.6.4" />
4343

4444
<!-- Explicitly pin dependencies on container project to mitigate security vulnerabilities -->
45-
<PackageReference Include="System.Drawing.Common" Version="9.0.9" />
46-
<PackageReference Include="System.Security.Cryptography.Pkcs" Version="9.0.9" />
47-
<PackageReference Include="System.Security.Cryptography.Xml" Version="9.0.9" />
45+
<PackageReference Include="System.Drawing.Common" Version="9.0.10" />
46+
<PackageReference Include="System.Security.Cryptography.Pkcs" Version="9.0.10" />
47+
<PackageReference Include="System.Security.Cryptography.Xml" Version="9.0.10" />
48+
<PackageReference Include="System.Text.RegularExpressions" Version="4.3.1" />
4849
</ItemGroup>
4950

5051
<ItemGroup>

‎src/Promitor.Agents.Scraper/Dockerfile.linux‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ COPY Promitor.Integrations.Sinks.Statsd/* Promitor.Integrations.Sinks.Statsd/
1818
COPY Promitor.Agents.Scraper/* Promitor.Agents.Scraper/
1919
RUN dotnet publish Promitor.Agents.Scraper/Promitor.Agents.Scraper.csproj --configuration release --output app /p:Version=$VERSION
2020

21-
FROM mcr.microsoft.com/dotnet/aspnet:8.0.20-cbl-mariner2.0-distroless AS runtime-base
21+
FROM mcr.microsoft.com/dotnet/aspnet:8.0.21-cbl-mariner2.0-distroless AS runtime-base
2222

2323
FROM mcr.microsoft.com/cbl-mariner/base/core:2.0 AS installer
2424

‎src/Promitor.Agents.Scraper/Promitor.Agents.Scraper.csproj‎

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
<PropertyGroup>
44
<TargetFramework>net8.0</TargetFramework>
55
<DockerComposeProjectPath>..\docker-compose.dcproj</DockerComposeProjectPath>
6-
<RuntimeFrameworkVersion>8.0.20</RuntimeFrameworkVersion>
6+
<RuntimeFrameworkVersion>8.0.21</RuntimeFrameworkVersion>
77
<!--<DockerDefaultTargetOS>Windows</DockerDefaultTargetOS>-->
88
</PropertyGroup>
99

@@ -38,14 +38,15 @@
3838
<PackageReference Include="AutoMapper" Version="12.0.1" />
3939
<PackageReference Include="AutoMapper.Extensions.Microsoft.DependencyInjection" Version="12.0.1" />
4040
<PackageReference Include="CronExpressionDescriptor" Version="2.44.0" />
41-
<PackageReference Include="Microsoft.Azure.Kusto.Language" Version="12.0.0" />
41+
<PackageReference Include="Microsoft.Azure.Kusto.Language" Version="12.2.0" />
4242
<PackageReference Include="System.Net.Http" Version="4.3.4" />
43+
<PackageReference Include="System.Text.RegularExpressions" Version="4.3.1" />
4344
<PackageReference Include="YamlDotNet" Version="15.1.6" />
4445

4546
<!-- Explicitly pin dependencies on container project to mitigate security vulnerabilities -->
46-
<PackageReference Include="System.Drawing.Common" Version="9.0.9" />
47-
<PackageReference Include="System.Security.Cryptography.Pkcs" Version="9.0.9" />
48-
<PackageReference Include="System.Security.Cryptography.Xml" Version="9.0.9" />
47+
<PackageReference Include="System.Drawing.Common" Version="9.0.10" />
48+
<PackageReference Include="System.Security.Cryptography.Pkcs" Version="9.0.10" />
49+
<PackageReference Include="System.Security.Cryptography.Xml" Version="9.0.10" />
4950
</ItemGroup>
5051

5152
<ItemGroup>

‎src/Promitor.Core.Contracts/Promitor.Core.Contracts.csproj‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22

33
<PropertyGroup>
44
<TargetFramework>net8.0</TargetFramework>
5-
<RuntimeFrameworkVersion>8.0.20</RuntimeFrameworkVersion>
5+
<RuntimeFrameworkVersion>8.0.21</RuntimeFrameworkVersion>
66
</PropertyGroup>
77

88
<PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|AnyCPU'">

‎src/Promitor.Core.Scraping/Promitor.Core.Scraping.csproj‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22

33
<PropertyGroup>
44
<TargetFramework>net8.0</TargetFramework>
5-
<RuntimeFrameworkVersion>8.0.20</RuntimeFrameworkVersion>
5+
<RuntimeFrameworkVersion>8.0.21</RuntimeFrameworkVersion>
66
<LangVersion>8</LangVersion>
77
</PropertyGroup>
88

‎src/Promitor.Core.Telemetry/Promitor.Core.Telemetry.csproj‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22

33
<PropertyGroup>
44
<TargetFramework>net8.0</TargetFramework>
5-
<RuntimeFrameworkVersion>8.0.20</RuntimeFrameworkVersion>
5+
<RuntimeFrameworkVersion>8.0.21</RuntimeFrameworkVersion>
66
</PropertyGroup>
77

88
<PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|AnyCPU'">
@@ -15,8 +15,8 @@
1515

1616
<ItemGroup>
1717
<PackageReference Include="Microsoft.ApplicationInsights" Version="2.23.0" />
18-
<PackageReference Include="Microsoft.Extensions.Logging.Abstractions" Version="8.0.2" />
19-
<PackageReference Include="Microsoft.Extensions.Logging.Console" Version="8.0.1" />
18+
<PackageReference Include="Microsoft.Extensions.Logging.Abstractions" Version="9.0.10" />
19+
<PackageReference Include="Microsoft.Extensions.Logging.Console" Version="9.0.10" />
2020
</ItemGroup>
2121

2222
<ItemGroup>

‎src/Promitor.Core/Promitor.Core.csproj‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22

33
<PropertyGroup>
44
<TargetFramework>net8.0</TargetFramework>
5-
<RuntimeFrameworkVersion>8.0.20</RuntimeFrameworkVersion>
5+
<RuntimeFrameworkVersion>8.0.21</RuntimeFrameworkVersion>
66
</PropertyGroup>
77

88
<PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|AnyCPU'">
@@ -20,8 +20,8 @@
2020
<PackageReference Include="Humanizer" Version="2.14.1" />
2121
<PackageReference Include="Microsoft.ApplicationInsights" Version="2.23.0" />
2222
<PackageReference Include="Microsoft.Azure.Management.Monitor.Fluent" Version="1.38.1" />
23-
<PackageReference Include="Microsoft.Extensions.Logging.Abstractions" Version="8.0.2" />
24-
<PackageReference Include="Microsoft.Extensions.Logging.Console" Version="8.0.1" />
23+
<PackageReference Include="Microsoft.Extensions.Logging.Abstractions" Version="9.0.10" />
24+
<PackageReference Include="Microsoft.Extensions.Logging.Console" Version="9.0.10" />
2525
<PackageReference Include="YamlDotNet" Version="15.1.6" />
2626
</ItemGroup>
2727

0 commit comments

Comments
 (0)