Siegfried Pammer
87748e0cde
Override vulnerable transitive packages from the DiaSymReader chain
...
The Microsoft.DiaSymReader / .PortablePdb packages pull NETStandard.Library
1.6.1, which drags in 4.3.0 builds of System.Net.Http, System.Private.Uri
and System.Text.RegularExpressions, all carrying known advisories (NU1902/
NU1903). They are framework-provided at runtime on net10.0; pin the patched
4.3.4 / 4.3.2 / 4.3.1 via central transitive pinning so NuGet audit passes.
Enabling transitive pinning also aligns a handful of other transitive
packages to their declared central versions.
Assisted-by: Claude:claude-opus-4-8:Claude Code
4 weeks ago
Christoph Wille
5833ee57a4
Updates for .NET Preview 4
2 months ago
Christoph Wille
6cd4131d59
Update NuGet packages (vulnerable and basic)
2 months ago
Siegfried Pammer
d3e9121a32
ilspycmd: reference ICSharpCode.BamlDecompiler
2 months ago
Christoph Wille
f99b4a21a7
Nuget package updates 04/26
3 months ago
Christoph Wille
e66bcc2cde
Introduce version variables for often-used package version
3 months ago
Christoph Wille
c0d26255fa
.NET Update 10.0.4 to 10.0.5 ( #3681 )
4 months ago
Christoph Wille
2f311c233d
Roslyn 5.3.0 ( #3665 )
...
NuGet updates 4/26 including Roslyn 5.3.0
4 months ago
Christoph Wille
a1e2a4aa91
NuGet Update 02/26 ( #3663 )
...
* NuGet Update 02/26
* Update to latest build agent software
* Use Wix 6.0.2, manually install version-locked WixToolset.UI.wixext extension
5 months ago
Siegfried Pammer
ceed812e3d
Remove explicit PackageReference to NetAnalyzers again
6 months ago
Siegfried Pammer
d3e12d0ebf
Migrate from .ruleset to .editorconfig
6 months ago
Christoph Wille
1070b03468
NuGet December 2025 Updates ( #3634 )
7 months ago
Christoph Wille
ac8503c005
.NET 10 RTM Package Update ( #3609 )
8 months ago
Christoph Wille
4f11813829
.NET 10 RC2 packages ( #3599 )
...
Note: transport feed had only 106 for dotnet-format and ILCompiler.Reflection.ReadyToRun.Experimental
9 months ago
Christoph Wille
b4d33af238
Update packages to .NET 10 RC1
10 months ago
Christoph Wille
afcdcec146
Update for .NET 10 Preview 7 packages ( #3537 )
...
* Update NUnit (was: 4.3.2) to 4.4 and MTP (was: 1.7.3) to 1.8.1 (had to add VSTestBridge explicitly to override ref complaints by compiler)
* Update to .NET 10 Preview 7 NuGet packages
* Update dotnet-format
11 months ago
Daniel Grunwald
90cd265e89
Update System.Reflection.Metadata dependency to 9.0.0.
...
Add explicit System.Security.Cryptography.Pkcs dependency to avoid security vulnerability warning in ILSpyCmd.
Suppress security vulnerability warnings in test projects.
11 months ago
Christoph Wille
dad304d230
Update to .NET 10 Preview 6 NuGets ( #3514 )
12 months ago
Christoph Wille
36d2135ecf
.NET 10.0 Preview5 NuGet Updates ( #3511 )
...
Bump all Microsoft.* and System.* to 10.0.0-preview5
Microsoft.CodeAnalysis.* to 4.14.0
Update other dependencies to latest
1 year ago
Andrew Au
9beb9cbdcb
Upgrade packages
1 year ago
Siegfried Pammer
a85ac055b5
Disable package pruning by force
1 year ago
Siegfried Pammer
e4ebe20602
Upgrade dotnet target framework to net10
1 year ago
Christoph Wille
3ed6da38df
NuGet updates 04/25 ( #3459 )
1 year ago
Christoph Wille
dee50f4be0
NuGet updates for January 25 Patch Tuesday ( #3369 )
1 year ago
Christoph Wille
1048cd9557
Enable repeatable package restores ( #3359 )
...
Locking restricted to projects that create NuGet packages
ICSharpCode.Decompiler
ICSharpCode.ILSpyX
ILSpyCmd
ICSharpCode.BamlDecompiler
2 years ago