Skip to content

Commit 4a06a5d

Browse files
committed
Lucene.Net.Replicator.AspNetCore: Removed PackageReference to transitive dependency System.Text.Encodings.Web, which only existed to bump the package to one without known security vulnerabilities. Bumped Microsoft.AspNetCore.Http.Abstractions to 2.3.0.
1 parent e057d33 commit 4a06a5d

2 files changed

Lines changed: 1 addition & 5 deletions

File tree

.build/dependencies.props

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@
3939
<!-- J2N will break binary compatibility in 3.0.0 to fix the APIs of collection types -->
4040
<J2NPackageVersion>[2.1.0, 3.0.0)</J2NPackageVersion>
4141
<LiquidTestReportsMarkdownPackageVersion>1.0.9</LiquidTestReportsMarkdownPackageVersion>
42-
<MicrosoftAspNetCoreHttpAbstractionsPackageVersion>2.1.1</MicrosoftAspNetCoreHttpAbstractionsPackageVersion>
42+
<MicrosoftAspNetCoreHttpAbstractionsPackageVersion>2.3.0</MicrosoftAspNetCoreHttpAbstractionsPackageVersion>
4343
<MicrosoftAspNetCoreTestHostPackageVersion>8.0.19</MicrosoftAspNetCoreTestHostPackageVersion>
4444
<MicrosoftCodeAnalysisAnalyzersPackageVersion>2.9.8</MicrosoftCodeAnalysisAnalyzersPackageVersion>
4545
<MicrosoftCodeAnalysisCSharpPackageVersion>2.6.1</MicrosoftCodeAnalysisCSharpPackageVersion>
@@ -76,7 +76,6 @@
7676
<SystemRuntimeInteropServicesRuntimeInformationPackageVersion>4.3.0</SystemRuntimeInteropServicesRuntimeInformationPackageVersion>
7777
<SystemTextEncodingCodePagesPackageVersion>4.3.0</SystemTextEncodingCodePagesPackageVersion>
7878
<SystemTextEncodingCodePagesPackageVersion Condition=" '$(TargetFramework)' == 'net472' ">5.0.0</SystemTextEncodingCodePagesPackageVersion>
79-
<SystemTextEncodingsWebPackageVersion>8.0.0</SystemTextEncodingsWebPackageVersion>
8079
<SystemTextJsonPackageVersion>6.0.10</SystemTextJsonPackageVersion>
8180
<SystemTextRegularExpressionsPackageVersion>4.3.1</SystemTextRegularExpressionsPackageVersion>
8281
<TimeZoneConverterPackageVersion>6.1.0</TimeZoneConverterPackageVersion>

src/dotnet/Lucene.Net.Replicator.AspNetCore/Lucene.Net.Replicator.AspNetCore.csproj

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -40,9 +40,6 @@
4040

4141
<ItemGroup>
4242
<PackageReference Include="Microsoft.AspNetCore.Http.Abstractions" Version="$(MicrosoftAspNetCoreHttpAbstractionsPackageVersion)" />
43-
44-
<!-- This is a transitive dependency of Microsoft.AspNetCore.Http.Abstractions, but the referenced version of System.Text.Encodings.Web has high severity vulnerabilities, so we are upgrading it. -->
45-
<PackageReference Include="System.Text.Encodings.Web" Version="$(SystemTextEncodingsWebPackageVersion)" />
4643
</ItemGroup>
4744

4845
</Project>

0 commit comments

Comments
 (0)