search

jbogard / MongoDB.Driver.Core.Extensions.DiagnosticSources

Apache License 2.0
46 stars 18 forks source link

Bump dependencies to fix security vulnerabilities #15

Closed mishamyte closed 2 years ago

mishamyte commented 2 years ago

Hello @jbogard,

Want to use your project as a part of OTLP stack. So due to abandonment of existing PR, updated some deps & pipelines.

Closes #13, #14

jbogard commented 2 years ago

Build failure :(

mishamyte commented 2 years ago

Failure caused by a known issue on a MongoDB Driver team side. It it caused by unmanaged compression libs, used by MongoDB driver. They say that it is fixed in the next driver release (2.18.0), but I don't have any timelines.

So I'm looking for a workarounds for now, but hope that release will be soon)

mishamyte commented 2 years ago

Looked through the MongoDB.Driver.Core repository. They supress it with <NoWarn>NU5100</NoWarn>, so seems legit)

jbogard commented 2 years ago

Ah that makes sense, thanks!

mishamyte commented 2 years ago

I think it could be merged.

Also I'm going to investigate is this package up to date or should be adjusted to the latest spec/practices of pckgs and contribute, if it will be needed