Depend on Microsoft.AspNetCore.App for .NET 8 and .NET 10 (#1544)

This commit is contained in:
Stef Heyenrath authored and GitHub committed 2026-11-15 09:09:00 +01:00
1 parent e4e11d35b5
commit 95c6ccdbf8
3 files changed
+10 -8

No files matched your search

@@ -7,10 +7,6 @@
<Nullable>enable</Nullable>
</PropertyGroup>
<ItemGroup>
<PackageReference Update="SonarAnalyzer.CSharp" Version="10.12.0.118525" />
</ItemGroup>
<ItemGroup>
<PackageReference Include="WireMock.Net" Version="2.30.0" />
</ItemGroup>
@@ -26,11 +26,19 @@
</PropertyGroup>
<!-- CVE -->
<ItemGroup>
<ItemGroup Condition=" '$(TargetFramework)' != 'net8.0' and '$(TargetFramework)' != 'net10.0' ">
<PackageReference Include="Microsoft.AspNetCore.Http" Version="2.3.14" />
<PackageReference Include="Microsoft.AspNetCore.WebUtilities" Version="2.3.14" />
</ItemGroup>
<ItemGroup Condition=" '$(TargetFramework)' == 'net8.0' or '$(TargetFramework)' == 'net10.0' ">
<!--
This project referenced the legacy Microsoft.AspNetCore.Http 2.3.x package which depends on a
Microsoft.AspNetCore.WebUtilities inside GHSA-6527-9fp8-r4x6, so it shipped a vulnerable dependency to every consumer.
-->
<FrameworkReference Include="Microsoft.AspNetCore.App" />
</ItemGroup>
<ItemGroup>
<PackageReference Include="Stef.Validation" Version="0.3.0" />
<PackageReference Include="AnyOf" Version="0.5.0.1" />
@@ -16,7 +16,7 @@
<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
</PackageReference>
<PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.11.0" />
<PackageReference Include="WireMock.Net" Version="2.21.0" />
<PackageReference Include="WireMock.Net" Version="2.31.0" />
<PackageReference Include="xunit.v3" Version="3.2.2" />
<PackageReference Include="xunit.runner.visualstudio" Version="3.1.5">
<PrivateAssets>all</PrivateAssets>
@@ -29,14 +29,12 @@
</ItemGroup>
<ItemGroup>
<!--<PackageReference Update="JetBrains.Annotations" Version="2025.2.4" />-->
<PackageReference Include="OpenTelemetry" Version="1.17.0" />
<PackageReference Include="OpenTelemetry.Api" Version="1.17.0" />
<PackageReference Include="OpenTelemetry.Api.ProviderBuilderExtensions" Version="1.17.0" />
<PackageReference Include="OpenTelemetry.Exporter.OpenTelemetryProtocol" Version="1.17.0" />
<PackageReference Include="OpenTelemetry.Extensions.Hosting" Version="1.17.0" />
<PackageReference Include="OpenTelemetry.Instrumentation.AspNetCore" Version="1.17.0" />
<PackageReference Update="SonarAnalyzer.CSharp" Version="10.11.0.117924" />
</ItemGroup>
<!-- CVE -->