Skip to content

[release/10.0] Suppress NuGet vulnerability audit warnings in RepoTasks#66424

Merged
wtgodbe merged 2 commits intorelease/10.0from
backport/pr-66423-to-release/10.0
Apr 23, 2026
Merged

[release/10.0] Suppress NuGet vulnerability audit warnings in RepoTasks#66424
wtgodbe merged 2 commits intorelease/10.0from
backport/pr-66423-to-release/10.0

Conversation

@github-actions
Copy link
Copy Markdown
Contributor

Backport of #66423 to release/10.0

/cc @wtgodbe

Suppress NuGet vulnerability audit warnings in RepoTasks

Summary of the changes (Less than 80 chars)

Description

{Detail}

Fixes #{bug number} (in this specific format)

Customer Impact

{Justification}

Regression?

  • Yes
  • No

[If yes, specify the version the behavior has regressed from]

Risk

  • High
  • Medium
  • Low

[Justify the selection above]

Verification

  • Manual (required)
  • Automated

Packaging changes reviewed?

  • Yes
  • No
  • N/A

When servicing release/2.3

  • Make necessary changes in eng/PatchConfig.props

RepoTasks is a build-time MSBuild task project that is not shipped to
customers. Suppress NU1901-NU1904 vulnerability audit warnings to
unblock the internal CI pipeline, which has been 100% broken for 24+
hours due to a newly published advisory for the transitive dependency
System.Security.Cryptography.Xml 8.0.0.

Affects main, release/10.0, and internal/release/10.0-nonstable.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@github-actions github-actions Bot requested review from a team and wtgodbe as code owners April 22, 2026 20:44
@github-actions github-actions Bot added the area-infrastructure Includes: MSBuild projects/targets, build scripts, CI, Installers and shared framework label Apr 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area-infrastructure Includes: MSBuild projects/targets, build scripts, CI, Installers and shared framework

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant