Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update dependencies for 6.3.x #1559

Merged
merged 2 commits into from
May 30, 2024
Merged

Update dependencies for 6.3.x #1559

merged 2 commits into from
May 30, 2024

Conversation

AndersAbel
Copy link
Member

@AndersAbel
Bump Wilson version
9e4c19e 
- Microsoft.AspNetCore.Authentication.OpenIdConnect current versions 6.0.30 and 7.0.19 references Wilson 6.35.0
@AndersAbel
Bump Otel package versions
e31fc32 
- These are only referenced by the hosts so just going to latest
josephdecock
josephdecock approved these changes May 24, 2024
View reviewed changes
Copy link
Member

@josephdecock josephdecock left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Wilson version 6.35.0 is the same as the version depended on by the asp.net OIDC handler, and upgrades our transitive dependencies to not use a package with a known vulnerability. It also matches what we depend on in AccessTokenManagement v2.

@josephdecock
Copy link
Member

@brockallen - wanted to double check with you about the wilson version.

@brockallen brockallen added this to the 6.3.9 milestone May 30, 2024
@brockallen brockallen merged commit 8f9163a into releases/6.3.x May 30, 2024
3 checks passed
@brockallen brockallen deleted the anders/dependencies-6.3 branch May 30, 2024 13:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@brockallen brockallen brockallen approved these changes

@josephdecock josephdecock josephdecock approved these changes

Assignees
No one assigned
Labels
internal
Projects
None yet
Milestone
6.3.9
Development

Successfully merging this pull request may close these issues.
3 participants
@AndersAbel @josephdecock @brockallen