Azure / durabletask

Durable Task Framework allows users to write long running persistent workflows in C# using the async/await capabilities.
Apache License 2.0
1.51k stars 290 forks source link

Upgrade various dependencies with advisory warnings #1020

Closed davidmrdavid closed 9 months ago

davidmrdavid commented 9 months ago

As of recently, building the DTFx project failed with errors of the following kind:

"Warning as Error: Package has a known high severity vulnerability" and it points to this advisory: "

The warnings were for:

In this PR, I upgrade these dependencies to remove the warnings. In particular,

While making this upgrade, I also noticed that we reference Newtonsoft.Json in almost every .csproj despite it being a transitive dependency. To minimize our management burden in the future, I removed this transitive dependency from those .csprojs.

davidmrdavid commented 9 months ago

Replaced by: https://github.com/Azure/durabletask/pull/1023