зеркало из https://github.com/microsoft/BuildXL.git
Merged PR 768051: Addressing CVE-2024-0057
Bump up NuGet nuget packages to address CG alert to address CVE-2024-0057 Related work items: #2149122, #2149123
This commit is contained in:
Родитель
021c829d8c
Коммит
39315f8517
|
@ -2400,7 +2400,7 @@
|
|||
"Type": "NuGet",
|
||||
"NuGet": {
|
||||
"Name": "Newtonsoft.Json",
|
||||
"Version": "13.0.1"
|
||||
"Version": "13.0.3"
|
||||
}
|
||||
}
|
||||
},
|
||||
|
@ -2418,7 +2418,7 @@
|
|||
"Type": "NuGet",
|
||||
"NuGet": {
|
||||
"Name": "NuGet.CommandLine",
|
||||
"Version": "6.4.2"
|
||||
"Version": "6.9.1"
|
||||
}
|
||||
}
|
||||
},
|
||||
|
@ -2427,7 +2427,7 @@
|
|||
"Type": "NuGet",
|
||||
"NuGet": {
|
||||
"Name": "NuGet.Common",
|
||||
"Version": "5.11.5"
|
||||
"Version": "6.9.1"
|
||||
}
|
||||
}
|
||||
},
|
||||
|
@ -2436,7 +2436,7 @@
|
|||
"Type": "NuGet",
|
||||
"NuGet": {
|
||||
"Name": "NuGet.Configuration",
|
||||
"Version": "5.11.5"
|
||||
"Version": "6.9.1"
|
||||
}
|
||||
}
|
||||
},
|
||||
|
@ -2445,7 +2445,7 @@
|
|||
"Type": "NuGet",
|
||||
"NuGet": {
|
||||
"Name": "NuGet.Frameworks",
|
||||
"Version": "5.11.5"
|
||||
"Version": "6.9.1"
|
||||
}
|
||||
}
|
||||
},
|
||||
|
@ -2454,7 +2454,7 @@
|
|||
"Type": "NuGet",
|
||||
"NuGet": {
|
||||
"Name": "NuGet.Packaging",
|
||||
"Version": "5.11.5"
|
||||
"Version": "6.9.1"
|
||||
}
|
||||
}
|
||||
},
|
||||
|
@ -2463,7 +2463,7 @@
|
|||
"Type": "NuGet",
|
||||
"NuGet": {
|
||||
"Name": "NuGet.Protocol",
|
||||
"Version": "5.11.5"
|
||||
"Version": "6.9.1"
|
||||
}
|
||||
}
|
||||
},
|
||||
|
@ -2472,7 +2472,7 @@
|
|||
"Type": "NuGet",
|
||||
"NuGet": {
|
||||
"Name": "NuGet.Versioning",
|
||||
"Version": "5.11.5"
|
||||
"Version": "6.9.1"
|
||||
}
|
||||
}
|
||||
},
|
||||
|
@ -3858,7 +3858,7 @@
|
|||
"Type": "NuGet",
|
||||
"NuGet": {
|
||||
"Name": "System.Text.Json",
|
||||
"Version": "7.0.0"
|
||||
"Version": "7.0.3"
|
||||
}
|
||||
}
|
||||
},
|
||||
|
|
16
config.dsc
16
config.dsc
|
@ -147,7 +147,7 @@ config({
|
|||
{ id: "Microsoft.Tpl.Dataflow", version: "4.5.24" },
|
||||
{ id: "Microsoft.TypeScript.Compiler", version: "1.8" },
|
||||
{ id: "Microsoft.WindowsAzure.ConfigurationManager", version: "1.8.0.0" },
|
||||
{ id: "Newtonsoft.Json", version: "13.0.1" },
|
||||
{ id: "Newtonsoft.Json", version: "13.0.3" },
|
||||
{ id: "Newtonsoft.Json.Bson", version: "1.0.1" },
|
||||
{ id: "System.Reflection.Metadata", version: "7.0.0" },
|
||||
// The VBCS logger is used by QuickBuild and runs in the context of old VS installations, so it cannot use a higher version
|
||||
|
@ -157,13 +157,13 @@ config({
|
|||
{ id: "System.Threading.Tasks.Dataflow", version: "7.0.0" },
|
||||
|
||||
// Nuget
|
||||
{ id: "NuGet.Packaging", version: "5.11.5" },
|
||||
{ id: "NuGet.Configuration", version: "5.11.5" },
|
||||
{ id: "NuGet.Common", version: "5.11.5" },
|
||||
{ id: "NuGet.Protocol", version: "5.11.5" },
|
||||
{ id: "NuGet.Versioning", version: "5.11.5" },
|
||||
{ id: "NuGet.CommandLine", version: "6.4.2" },
|
||||
{ id: "NuGet.Frameworks", version: "5.11.5"}, // needed for qtest on .net core
|
||||
{ id: "NuGet.Packaging", version: "6.9.1" },
|
||||
{ id: "NuGet.Configuration", version: "6.9.1" },
|
||||
{ id: "NuGet.Common", version: "6.9.1" },
|
||||
{ id: "NuGet.Protocol", version: "6.9.1" },
|
||||
{ id: "NuGet.Versioning", version: "6.9.1" },
|
||||
{ id: "NuGet.CommandLine", version: "6.9.1" },
|
||||
{ id: "NuGet.Frameworks", version: "6.9.1"}, // needed for qtest on .net core
|
||||
|
||||
// ProjFS (virtual file system)
|
||||
{ id: "Microsoft.Windows.ProjFS", version: "1.2.19351.1" },
|
||||
|
|
|
@ -239,7 +239,7 @@ export const pkgs = [
|
|||
{ id: "System.Security.AccessControl", version: pkgVersion6 },
|
||||
{ id: "System.Security.Principal.Windows", version: pkgVersion6Preview },
|
||||
|
||||
{ id: "System.Text.Json", version: "7.0.0" },
|
||||
{ id: "System.Text.Json", version: "7.0.3" },
|
||||
{ id: "System.Threading.AccessControl", version: pkgVersionNext },
|
||||
|
||||
// Non-standard version ones
|
||||
|
|
Загрузка…
Ссылка в новой задаче