Fix component governance alerts (#4750)

* Fix component governance alerts * Refactor
dotnet · Nov 23, 2023 · c838390 · c838390
1 parent c66f947
commit c838390
Show file tree

Hide file tree

Showing 3 changed files with 15 additions and 1 deletion.
diff --git a/eng/packages/General.props b/eng/packages/General.props
@@ -71,6 +71,8 @@
     <PackageVersion Include="Microsoft.AspNetCore.Http" Version="2.2.2" />
     <PackageVersion Include="Microsoft.AspNetCore.Routing.Abstractions" Version="2.2.0" />
     <PackageVersion Include="Microsoft.AspNetCore.Routing" Version="2.2.2" />
+    <PackageVersion Include="System.IO.Pipelines" Version="4.5.1" />
+    <PackageVersion Include="System.Security.Cryptography.Xml" Version="4.7.1" />    
   </ItemGroup>
 
 </Project>
diff --git a/....Extensions.Diagnostics.Probes.Tests/Microsoft.Extensions.Diagnostics.Probes.Tests.csproj b/....Extensions.Diagnostics.Probes.Tests/Microsoft.Extensions.Diagnostics.Probes.Tests.csproj
@@ -12,7 +12,14 @@
   </ItemGroup>
 
   <ItemGroup>
-    <PackageReference Include="System.Net.Http" Condition="'$(TargetFramework)' == 'net462'" />
     <PackageReference Include="Microsoft.AspNetCore.Mvc.Testing" />
   </ItemGroup>
+
+  <ItemGroup Condition="'$(TargetFramework)' == 'net462'" >
+    <PackageReference Include="System.Net.Http" />
+
+    <!-- Direct dependencies as Microsoft.AspNetCore.Mvc.Testing references vulnerable versions. -->
+    <PackageReference Include="Microsoft.AspNetCore.Http" />
+    <PackageReference Include="System.IO.Pipelines" />
+  </ItemGroup>
 </Project>
diff --git a/...soft.Extensions.Http.Diagnostics.Tests/Microsoft.Extensions.Http.Diagnostics.Tests.csproj b/...soft.Extensions.Http.Diagnostics.Tests/Microsoft.Extensions.Http.Diagnostics.Tests.csproj
@@ -30,5 +30,10 @@
 
   <ItemGroup Condition="'$(TargetFramework)' == 'net462'">
     <PackageReference Include="Microsoft.AspNetCore.Mvc" />
+
+    <!-- Direct dependencies as Microsoft.AspNetCore.Mvc references vulnerable versions. -->
+    <PackageReference Include="Microsoft.AspNetCore.Http" />
+    <PackageReference Include="System.IO.Pipelines" />
+    <PackageReference Include="System.Security.Cryptography.Xml" />
   </ItemGroup>
 </Project>