Skip to content

Commit d01a312

Browse files
committed
Fixed issue #624 (2nd try)
Enforce new version of transient dependency to fix vulnerability and avoid nuget.org version de-listing until SqlClient 6.1 is released. Now updated the vulnerable dependency (Microsoft.Identity.Client) to it's latest version 4.73.1 because even 4.72.1 is marked deprecated on nuget.org. This should hopefully satisfy the security scanners at nuget.org.
1 parent 3e4f68e commit d01a312

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

Directory.Packages.props

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@
1111
<PackageVersion Include="Microsoft.Extensions.Configuration.Json" Version="8.0.1" />
1212
<PackageVersion Include="Microsoft.Extensions.Hosting" Version="8.0.1" />
1313
<PackageVersion Include="Microsoft.Extensions.Options.ConfigurationExtensions" Version="8.0.0" />
14-
<PackageVersion Include="Microsoft.Identity.Client" Version="4.71.1" />
14+
<PackageVersion Include="Microsoft.Identity.Client" Version="4.73.1" />
1515
<PackageVersion Include="coverlet.collector" Version="3.2.0" />
1616
<PackageVersion Include="FluentAssertions" Version="6.12.1" />
1717
<PackageVersion Include="Dapper.StrongName" Version="2.1.35" />

0 commit comments

Comments
 (0)