eclipse-tractusx / ssi-authority-schema-registry

SSI Authority & Schema Registry
Apache License 2.0
3 stars 5 forks source link

chore(dependencies): bump System.Text.Json to 8.0.4 #46

Closed ntruchsess closed 3 months ago

ntruchsess commented 3 months ago

Description

dependency to Microsoft.EntityFrameworkCore was changed to Microsoft.EntityFrameworkCore.Design 8.0.7 dependency to frameworks was upgraded to 2.4.2

Why

System.Text.Json 8.0.0 has a vulnerability that must be fixed. It is references as an implicit dependency. Referencing Microsoft.EntityFrameworkCore.Design 8.0.7 instead of Microsoft.EntityFrameworkCore implicitly upgrades System.Json.Text to 8.0.4 which solves the security-issue. Same with frameworks - upgrading to latest 2.4.2 resolves outdated references to System.Text.Json 8.0.0

Issue

https://github.com/eclipse-tractusx/portal/issues/369

Checklist

Please delete options that are not relevant.

sonarcloud[bot] commented 3 months ago

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud