Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump Microsoft.Data.SqlClient to 5.1.5 #1950

Merged
merged 2 commits into from
Feb 2, 2024

Conversation

martincostello
Copy link
Member

@martincostello martincostello commented Jan 29, 2024

Bump Microsoft.Data.SqlClient to 5.1.4 for fix for GHSA-98g6-xh36-x2p7.

Microsoft Reviewers: Open in CodeFlow

Bump Microsoft.Data.SqlClient to 5.1.4 for fix for GHSA-98g6-xh36-x2p7.
@dotnet-issue-labeler dotnet-issue-labeler bot added the area-integrations Issues pertaining to Aspire Integrations packages label Jan 29, 2024
@dotnet-policy-service dotnet-policy-service bot added the community-contribution Indicates that the PR has been added by a community member label Jan 29, 2024
@sebastienros sebastienros enabled auto-merge (squash) February 2, 2024 17:35
@sebastienros sebastienros changed the title Bump Microsoft.Data.SqlClient to 5.1.4 Bump Microsoft.Data.SqlClient to 5.1.5 Feb 2, 2024
@sebastienros
Copy link
Member

I created a branch and before I start the PR was wondering if someone had already done it ...

@martincostello
Copy link
Member Author

I only ended up doing it because for #1948 I had to add NuGet.org to the package config to get it to build locally, and then the NuGet client used the vulnerability database and broke the local build due to the CVE warning 😅.

@sebastienros sebastienros merged commit 9ba841b into dotnet:main Feb 2, 2024
8 checks passed
@martincostello martincostello deleted the patch-2 branch February 2, 2024 18:15
radical pushed a commit to radical/aspire that referenced this pull request Feb 6, 2024
@github-actions github-actions bot locked and limited conversation to collaborators Apr 22, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
area-integrations Issues pertaining to Aspire Integrations packages community-contribution Indicates that the PR has been added by a community member
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants