eclipse-tractusx / policy-hub

Policy Hub
Apache License 2.0
3 stars 10 forks source link

chore(dependencies): bump efcore to 8.0.7 #175

Closed ntruchsess closed 1 month ago

ntruchsess commented 1 month ago

Description

increase efcore version to latest 8.0.7

Why

efcore 8.0.3 has transitive dependency System.Text.Json 8.0.0 which has a security-vulerability that is clasified as high. Upgrade to efcore 8.0.7 implicitly upgrades this dependency to System.Text.Json 8.0.4 which resolves the vulnerability.

Issue

https://github.com/eclipse-tractusx/portal/issues/369

Checklist

Please delete options that are not relevant.

sonarcloud[bot] commented 1 month ago

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud