This is an automated email from the ASF dual-hosted git repository.

rskraba pushed a commit to branch branch-1.11
in repository https://gitbox.apache.org/repos/asf/avro.git


The following commit(s) were added to refs/heads/branch-1.11 by this push:
     new 768f0c93d3 AVRO-4196: Bump C# build utilities (#3549)
768f0c93d3 is described below

commit 768f0c93d32ca9a962a594c932607c77b735763f
Author: Ryan Skraba <[email protected]>
AuthorDate: Sun Nov 16 12:55:30 2025 +0100

    AVRO-4196: Bump C# build utilities (#3549)
---
 lang/csharp/versions.props | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/lang/csharp/versions.props b/lang/csharp/versions.props
index 4acdaa9d75..0b3a7be35c 100644
--- a/lang/csharp/versions.props
+++ b/lang/csharp/versions.props
@@ -47,7 +47,8 @@
     See https://github.com/apache/avro/pull/1126 & 
https://github.com/apache/avro/pull/981 for more details
   -->
   <PropertyGroup Label="Minimum Package Versions">
-    <NewtonsoftJsonMinimumVersion>10.0.3</NewtonsoftJsonMinimumVersion>
+    <!-- Newtonsoft.Json prior to version 13.0.1 is vulnerable. See 
https://github.com/advisories/GHSA-5crp-9r3c-p9vr -->
+    <NewtonsoftJsonMinimumVersion>13.0.1</NewtonsoftJsonMinimumVersion>
   </PropertyGroup>
 
   <!--

Reply via email to