Skip to content

Commit f13549b

Browse files
xperiandriclaude
andcommitted
Updated Microsoft.SourceLink.GitHub to 10.0.401
`8.0.0` pulls in `Microsoft.Build.Tasks.Git` `8.0.0`, which has a known moderate severity vulnerability (GHSA-23fw-v26w-5fgq). NuGet audit reports it as NU1902, which fails Release builds because warnings are treated as errors there. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
1 parent fe92a97 commit f13549b

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

‎Packages.props‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -48,7 +48,7 @@
4848
<PackageReference Update="FSharp.Compiler.Service" Version="43.7.300" />
4949
<PackageReference Update="Mono.Posix.NETStandard" Version="1.0.0" />
5050
<PackageReference Update="MSBuild.StructuredLogger" Version="2.*" />
51-
<PackageReference Include="Microsoft.SourceLink.GitHub" Version="8.0.0" PrivateAssets="All" />
51+
<PackageReference Include="Microsoft.SourceLink.GitHub" Version="10.0.401" PrivateAssets="All" />
5252
</ItemGroup>
5353
<ItemGroup Label="Test platform">
5454
<PackageReference Update="BenchmarkDotNet" Version="0.15.*" />

0 commit comments

Comments
 (0)