Bump to dotnet/msbuild@10fbfbf2 #241
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Changes: dotnet/msbuild@v17.9.5...v17.10.4 Updates $(MSBuildPackageReferenceVersion) to the latest VS 2022 LTS. This new package version brings in System.Security.Cryptography.Xml v8.0.0 as a transitive dependency, and as such the explicitl v7.0.1 package reference should no longer be necessary. An explicit package reference has been added for System.Formats.Asn1 v8.0.1 to address CVE-2024-38095.
|
/azp run |
|
Testing further with dotnet/android#9216 |
|
Azure Pipelines successfully started running 1 pipeline(s). |
jonathanpeppers
approved these changes
Aug 16, 2024
There was a problem hiding this comment.
When I've updated $(MSBuildPackageReferenceVersion) in the past, it has been a pain to bump everything. I think things break until I had the change everywhere: android-sdk-installer, monodroid, dotnet/android. Just fyi.
I think we have to update the occasionally, it's just painful.
dellis1972
approved these changes
Aug 17, 2024
jonpryor
pushed a commit
to dotnet/java-interop
that referenced
this pull request
Aug 21, 2024
Changes: dotnet/android-tools@7ec795c...6575743 * dotnet/android-tools@6575743: Bump to dotnet/msbuild@10fbfbf2 (dotnet/android-tools#241) Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
jonpryor
pushed a commit
to dotnet/android
that referenced
this pull request
Aug 22, 2024
Changes: dotnet/android-tools@7ec795c...6575743 * dotnet/android-tools@6575743: Bump to dotnet/msbuild@10fbfbf2 (dotnet/android-tools#241) Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
pjcollins
added a commit
that referenced
this pull request
Oct 23, 2024
Changes: dotnet/msbuild@v17.9.5...v17.10.4 Updates $(MSBuildPackageReferenceVersion) to the latest VS 2022 LTS. This new package version brings in System.Security.Cryptography.Xml v8.0.0 as a transitive dependency, and as such the explicitl v7.0.1 package reference should no longer be necessary. An explicit package reference has been added for System.Formats.Asn1 v8.0.1 to address CVE-2024-38095.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Changes: dotnet/msbuild@v17.9.5...v17.10.4
Updates $(MSBuildPackageReferenceVersion) to the latest VS 2022 LTS.
This new package version brings in System.Security.Cryptography.Xml
v8.0.0 as a transitive dependency, and as such the explicit v7.0.1
package reference should no longer be necessary.
An explicit package reference has been added for System.Formats.Asn1
v8.0.1 (another transitive dependency of Microsoft.Build) to address
GHSA-447r-wph3-92pm.