jannis/Rbm.FamStack
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: bump ASP.NET Core/EF Core to 10.0.13 and pin vulnerable transitive packages
Deploy / prod (push) Skipped
Details
Deploy / test (push) Failing after 14s
Details

Browse Source 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
This commit is contained in:
JannisandClaude Sonnet 5.5 committed 2026-10-17 11:40:58 +02:00
1 parent bdf47d0f01
commit 87f338ed68
1 file changed
+9 -3
Download Patch File Download Diff File Expand all files Collapse all files
Directory.Packages.props
+9 -3
View File
@@ -1,13 +1,19 @@
<Project>
<PropertyGroup>
<ManagePackageVersionsCentrally>true</ManagePackageVersionsCentrally>
<CentralPackageTransitivePinningEnabled>false</CentralPackageTransitivePinningEnabled>
<CentralPackageTransitivePinningEnabled>true</CentralPackageTransitivePinningEnabled>
<AspireVersion>13.6.1</AspireVersion>
<AspNetCoreVersion>10.0.12</AspNetCoreVersion>
<EfCoreVersion>10.0.12</EfCoreVersion>
<AspNetCoreVersion>10.0.13</AspNetCoreVersion>
<EfCoreVersion>10.0.13</EfCoreVersion>
<OpenTelemetryVersion>1.19.1</OpenTelemetryVersion>
</PropertyGroup>
<ItemGroup Label="Transitive security pins">
<PackageVersion Include="System.Security.Cryptography.Pkcs" Version="$(AspNetCoreVersion)" />
<PackageVersion Include="System.Security.Cryptography.Xml" Version="$(AspNetCoreVersion)" />
<PackageVersion Include="MessagePack" Version="2.5.307" />
</ItemGroup>
<ItemGroup Label="Aspire">
<PackageVersion Include="Aspire.Hosting.SqlServer" Version="$(AspireVersion)" />
<PackageVersion Include="Aspire.Hosting.Docker" Version="$(AspireVersion)" />