Skip to content

Update vulnerable package dependencies - #82

Merged
tombogle merged 2 commits into
masterfrom
update-vulnerable-package-dependencies
Aug 28, 2026
Merged

Update vulnerable package dependencies#82
tombogle merged 2 commits into
masterfrom
update-vulnerable-package-dependencies

Conversation

@tombogle

@tombogletombogle commented Aug 27, 2026

Copy link
Copy Markdown
Contributor

Removed dependencies on vulnerable packages

  • Upgraded Microsoft.Build.Tasks.Core/Microsoft.Build.Utilities.Core from
    17.14.28 to 18.9.6
  • Upgraded SIL.Core from 7.0.0 to 17.0.0
  • Added a Microsoft.Win32.Registry package reference for the netstandard2.0
    target of SIL.BuildTasks, needed after the above upgrades since that type
    is no longer available from the framework reference assemblies there

This change is Reviewable

- Upgraded Microsoft.Build.Tasks.Core/Microsoft.Build.Utilities.Core from
17.14.28 to 18.9.6
- Upgraded SIL.Core from 7.0.0 to 17.0.0
- Added a Microsoft.Win32.Registry package reference for the netstandard2.0
target of SIL.BuildTasks, needed after the above upgrades since that type
is no longer available from the framework reference assemblies there
The Microsoft.Build.Tasks.Core/SIL.Core upgrades in this branch build fine
against .NET 9 SDK locally but haven't been verified against .NET 6 SDK,
which is what the GitHub Actions workflow currently installs (and which is
also out of support). Bumping to a current LTS avoids risking a CI failure
on this branch's own PR.
@github-actions

Copy link
Copy Markdown

Test Results

4 files ±0 66 suites ±0 26s ⏱️ +3s
222 tests ±0 222 ✅ ±0 0 💤 ±0 0 ❌ ±0 
444 runs ±0 442 ✅ ±0 2 💤 ±0 0 ❌ ±0 

Results for commit 4d71b92. ± Comparison against base commit 56de6f2.

@tombogle
tombogle merged commit 1d47241 into masterAug 28, 2026
5 of 6 checks passed
@tombogle
tombogle deleted the update-vulnerable-package-dependencies branch August 28, 2026 14:36
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@tombogle@ermshiperete