Skip to content

v0.29.2

Latest

Choose a tag to compare

@github-actions github-actions released this 14 Oct 15:18

Security

  • SystemHarness.Apps.Email no longer restores a vulnerable System.Security.Cryptography.Pkcs. MailKit/MimeKit depend on
    System.Security.Cryptography.Pkcs >= 10.0.0, which resolved to 10.0.0 — affected by GHSA-846f-f764-76mx (high, denial of service,
    10.0.0–10.0.12) and GHSA-2fmv-rv2c-59x7 (moderate). The package now depends on 10.0.13, so a consumer's restore no longer fails
    with NU1903 where vulnerability warnings are errors.

Dependencies

  • MailKit 4.18.1 · Microsoft.Extensions.DependencyInjection(.Abstractions) / Hosting 10.0.13 · Microsoft.Extensions.AI /
    .AI.OpenAI 10.11.0 · Microsoft.Playwright 1.63.0 · SkiaSharp 4.153.1 · Microsoft.Windows.CsWin32 0.3.363.

Changed

  • The packages from this repository depend on each other at exactly the same version ([x.y.z]), not a floor.
    A consumer that moves one of them while a family member it depends on resolves at an older version now gets restore warning NU1608 naming
    the pair (an error where warnings are errors) — before, the mixed versions restored silently and could fail at run time.
    A member that reaches you only through another package's floor is not covered: pin every member you load and move them together.
  • The nuget.org «Release Notes» of every package link to the GitHub release of its version, whose notes are this CHANGELOG's section for that version.

Documentation

  • README: Browser Automation. Names PlaywrightBrowser, the IBrowser implementation in SystemHarness.Apps.Browser,
    with a usage snippet and the Playwright browser-install step.