eclipse-tractusx / policy-hub

Policy Hub
Apache License 2.0
3 stars 10 forks source link

chore(dependencies): enforce System.Text.Json version 8.0.4 #184

Closed ntruchsess closed 1 month ago

ntruchsess commented 1 month ago

Description

framework version updated to 2.4.2 fix codeql-findings (nullable and use of async in program.cs)

Why

frameworks was referencing outdated System.Text.Json 8.0.0 which has a vulnerability-issue that must be fixed. Upgrading to frameworks 2.4.2 implicitly resolves this outdated dependency.

Issue

https://github.com/eclipse-tractusx/portal/issues/369

Checklist

Please delete options that are not relevant.

ntruchsess commented 1 month ago

We should wait until PR eclipse-tractusx/portal-backend#875 is merged and the framework nuget packages are updated. We than can directly update the nuget packages for this project as well.

done

sonarcloud[bot] commented 1 month ago

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud