Browse Source

Suppress SourceLink NuGet audit advisory

Adds a NuGet audit suppression for GHSA-23fw-v26w-5fgq in Directory.Build.props. This temporary workaround keeps the current SourceLink dependency pinned while the upstream package update is not yet available.
release/4.1.x
James Jackson-South 3 weeks ago
parent
commit
50f5f384b4
  1. 9
      Directory.Build.props

9
Directory.Build.props

@ -21,6 +21,15 @@
<!-- Import the shared global .props file --> <!-- Import the shared global .props file -->
<Import Project="$(MSBuildThisFileDirectory)shared-infrastructure\msbuild\props\SixLabors.Global.props" /> <Import Project="$(MSBuildThisFileDirectory)shared-infrastructure\msbuild\props\SixLabors.Global.props" />
<!--
Suppress the advisory against Microsoft.Build.Tasks.Git 8.0.0, pulled in by the SourceLink
package pinned in shared infrastructure, while we wait for the ability to update it.
https://github.com/advisories/GHSA-23fw-v26w-5fgq
-->
<ItemGroup>
<NuGetAuditSuppress Include="https://github.com/advisories/GHSA-23fw-v26w-5fgq" />
</ItemGroup>
<PropertyGroup Condition="'$(TargetFramework)' == 'net8.0' OR '$(TargetFramework)' == 'net9.0'"> <PropertyGroup Condition="'$(TargetFramework)' == 'net8.0' OR '$(TargetFramework)' == 'net9.0'">
<LangVersion>12.0</LangVersion> <LangVersion>12.0</LangVersion>
</PropertyGroup> </PropertyGroup>

Loading…
Cancel
Save