Skip to content

Conversation

@Aniruddh25
Copy link
Collaborator

@Aniruddh25 Aniruddh25 commented Dec 8, 2022

Why make this change?

  • Component governance detected a high severity security alert while doing static analysis. This PR is to fix that alert and unblock pipeline merges

_


[INFO] |Security Alerts |
[INFO] |_______________________|
[INFO] |Alert title |Affected component |Severity |Due date |
[INFO] |||||
[INFO] |GHSA-5crp-9r3c-p9vr |Newtonsoft.Json 13.0.1 |High | |
[INFO] ||||
|
[INFO]
##[error]Component Governance failed due to the presence of 1 security alerts at or above 'Medium' severity. Microsoft’s Open Source policy requires that all high and critical security vulnerabilities found by this task be addressed by upgrading vulnerable components. Vulnerabilities in indirect dependencies should be addressed by upgrading the root dependency.

What is this change?

  • Upgrade the version of Newtonsoft.Json to 13.0.2

@Aniruddh25 Aniruddh25 changed the title Upgrade Newtonsoft.Json Upgrade Newtonsoft.Json to 13.0.2 Dec 8, 2022
@Aniruddh25 Aniruddh25 changed the title Upgrade Newtonsoft.Json to 13.0.2 Upgrade Newtonsoft.Json to 13.0.2 Dec 8, 2022
@Aniruddh25 Aniruddh25 enabled auto-merge (squash) December 8, 2022 05:32
Copy link
Contributor

@aaronburtle aaronburtle left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the quick fix

@Aniruddh25 Aniruddh25 merged commit 53c0c58 into main Dec 8, 2022
@Aniruddh25 Aniruddh25 deleted the dev/anmunde/upgradeNewtonsoft branch December 8, 2022 05:47
Copy link
Contributor

@seantleonard seantleonard left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants