Skip to content

Serilog.AspNetCore depends on a version of Serilog.Settings.Configuration that depends on a deprecated dependency with expired signature #311

Closed
@julian94

Description

@julian94

Description
Serilog.AspNetCore depends on a version of Serilog.Settings.Configuration that depends on Microsoft.Extensions.Options 2.0.0 which was signed by a certificate that expired last year.
This caused an issue on my build servers as dotnet restore refused to restore Microsoft.Extensions.Options 2.0.0 as the signing certificate expired in 2021.

This was resolved in Serilog.Settings.Configuration 3.4.0, so I bumped my local version and that resolved my issue. But it should be bumped in this package as well.

Expected behavior
I expected the most recent version to not have any transitive dependencies on deprecated packages with expired signatures.

Relevant package, tooling and runtime versions
Using: Serilog.AspNetCore 6.1.0

Suggested fix
Update this dependency to 3.4.0 (latest).

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions