Skip to content

Pin TestWeb System.* overrides to 10.x for net10.0 - #539

Closed
devlead wants to merge 1 commit into
developfrom
fix/testweb-net10-packages
Closed

devlead wants to merge 1 commit into
developfrom
fix/testweb-net10-packages

Conversation

@devlead

@devlead devlead commented Nov 12, 2026

Copy link
Copy Markdown
Owner

ARI.TestWeb targets net10.0, but its security override pins for System.Security.Cryptography.Xml, System.Drawing.Common and System.DirectoryServices.Protocols were on 11.0.0. This moves them to 10.0.15, the latest patched 10.x. dotnet list package --vulnerable --include-transitive reports no vulnerable packages.

@devlead

devlead commented Nov 12, 2026

Copy link
Copy Markdown
Owner Author

Superseded by 540: TestWeb retargeted to net11.0 instead, keeping the 11.0.0 pins.

@devlead devlead closed this Nov 12, 2026
@devlead
devlead deleted the fix/testweb-net10-packages branch November 12, 2026 10:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant