Skip to content

Conversation

VaclavElias
Copy link
Contributor

PR Details

Our current NuGet.* packages version 6.8.0 have depedency on vulnerable NuGet.Protocol 6.8.0 package.

45 occurences in the Visual Studio Build Output window.

Related Issue

Warnings when the Solution.sln is built.

D:\Projects\GitHub\stride\sources\editor\Stride.GameStudio\Stride.GameStudio.csproj : 
warning NU1904: Package 'NuGet.Packaging' 6.8.0 has a known critical severity vulnerability,
https://github.com/advisories/GHSA-68w7-72jg-6qpp

Types of changes

  • Docs change / refactoring / dependency upgrade
  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to change)

Checklist

  • My change requires a change to the documentation.
  • I have added tests to cover my changes.
  • All new and existing tests passed.
  • I have built and run the editor to try this change out.

@VaclavElias
Copy link
Contributor Author

I am not sure about other dependencies, let me know if I need to test anything else. Thanks.

@Eideren Eideren merged commit 5eab24e into stride3d:master Dec 6, 2024
3 checks passed
@Eideren
Copy link
Collaborator

Eideren commented Dec 6, 2024

Thanks, although we don't have a build:, maybe chore: ?

@VaclavElias VaclavElias changed the title [Build] Update NuGet.* packages to version 6.12.1 [Chore] Update NuGet.* packages to version 6.12.1 Dec 6, 2024
@VaclavElias VaclavElias changed the title [Chore] Update NuGet.* packages to version 6.12.1 chore: Update NuGet.* packages to version 6.12.1 Dec 6, 2024
@VaclavElias
Copy link
Contributor Author

Fixed. I use chore: in other places, not sure why I named it as build.

@VaclavElias VaclavElias deleted the nuget-packages-updates branch May 10, 2025 16:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants