search

dapr / dotnet-sdk

Dapr SDK for .NET
Apache License 2.0
1.12k stars 340 forks source link

Dapr Workflow pacakge || Update the dependency 'System.Text.Json' to the latest version #1414

Closed AlbertoVPersonal closed 5 days ago

AlbertoVPersonal commented 5 days ago

Describe the proposal

Current scenario

Given a solution in .NET, when the user executes the following command 

dotnet add package Dapr.Workflow --version 1.14.0

then the system shows a warning

warn : NU1903: El paquete "System.Text.Json" 6.0.0 tiene una vulnerabilidad de gravedad alta conocida

Workaround

Update the package with the command:

dotnet add package System.Text.Json

PS: Albert0 (from Discord).

WhitWaldo commented 5 days ago

This is already covered in the master branch as part of the .NET 9 support.