Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update packages #18

Merged
merged 3 commits into from
Mar 4, 2024
Merged

Update packages #18

merged 3 commits into from
Mar 4, 2024

Conversation

AndreyBespamyatnov
Copy link
Contributor

Package 'Microsoft.AspNet.Identity.Owin' 2.2.3 has a known high severity vulnerability, https:/
/github.com/advisories/GHSA-25c8-p796-jg6r

Copy link
Owner

@dahlbyk dahlbyk left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I didn't realize Dependabot wasn't enabled - thanks!

(Since I use packages.lock.json the PRs can't be directly merged anyway: dependabot/dependabot-core#1303.)

@dahlbyk
Copy link
Owner

dahlbyk commented Mar 4, 2024

@AndreyBespamyatnov GitHub tip: try to avoid sending PRs from your main branch, so it's less confusing if the maintainer pushes an edit to the branch (as I just did).

First not-me PR to this project, so trying to adjust the workflow.

@dahlbyk dahlbyk merged commit 9c27ead into dahlbyk:main Mar 4, 2024
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants