Any forecast for the next stable release?

[orbcom-tiagosantos]

Hi! The AngleSharp upgrade (GHSA-pgww-w46g-26qg fix) is already merged and available in the nightly packages (AngleSharp 1.5.2), but the latest stable releases still ship with the vulnerable AngleSharp 0.17.0, which NuGet Audit flags on every CI build (NU1902).

Two quick questions:

1. Is there an ETA for the next stable release that includes AngleSharp >= 1.5.0?
2. Would the team consider an interim patch release with just the AngleSharp bump (coordinated between PnP.Core and PnP Framework), instead of waiting for the next minor release cycle?

Thanks!

[Adam-it]

Thanks @orbcom-tiagosantos for reaching us out. TBH till now I did not consider the bump for AngleSharp to be major but I totally understand your point. From my point of view, performing a minor release of PnP Core and PnP Framework is a rather quick process (~30 min) and although I am fully booked I think it could be possible for me to do one next week.
I will rise your suggestion/question to the rest of the maintainers and try to get back to you with an answer ASAP 👍

[orbcom-tiagosantos]

Thank you for the quick and positive response, really appreciated! 🙌
A minor release with the AngleSharp bump would solve our compliance flag entirely.
We'll keep an eye on the releases page — thanks again for considering it.

[Adam-it]

@orbcom-tiagosantos I got some positive thumbs up from the rest of the maintainers internally which means I will do the release of PnP Core and PnP Framework at the end of next week (more or less 20-22.08) and most probably PnP PowerShell will follow after that

[Adam-it]

@orbcom-tiagosantos just to let you know we've just released a new version of PnP.Core, as promised.
Cheers