This is an automated email from the ASF dual-hosted git repository.

hubcio pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/iggy.git


The following commit(s) were added to refs/heads/master by this push:
     new 1290e4fff chore(deps): remove Microsoft.SourceLink.GitHub package 
reference (#4113)
1290e4fff is described below

commit 1290e4fffcfca85abdad6a213567d61e1f2f21f4
Author: Ɓukasz Zborek <[email protected]>
AuthorDate: Thu Sep 10 07:31:52 2026 +0200

    chore(deps): remove Microsoft.SourceLink.GitHub package reference (#4113)
    
    Remove the explicit `Microsoft.SourceLink.GitHub` package reference.
    Since .NET 8 SourceLink is built into the SDK
    (https://github.com/dotnet/sourcelink),
    so the package is not needed.
    The pinned 10.0.108 also pulled in `Microsoft.Build.Tasks.Git` 10.0.108,
    flagged by CVE-2026-62900 (GHSA-23fw-v26w-5fgq), which failed CI
    restore for `Iggy_SDK.csproj` under `TreatWarningsAsErrors`.
---
 foreign/csharp/Directory.Build.props    | 4 ----
 foreign/csharp/Directory.Packages.props | 1 -
 2 files changed, 5 deletions(-)

diff --git a/foreign/csharp/Directory.Build.props 
b/foreign/csharp/Directory.Build.props
index 684da2c88..085aff825 100644
--- a/foreign/csharp/Directory.Build.props
+++ b/foreign/csharp/Directory.Build.props
@@ -26,8 +26,4 @@ under the License.
   <PropertyGroup Condition="'$(GITHUB_ACTIONS)' == 'true'">
     <ContinuousIntegrationBuild>true</ContinuousIntegrationBuild>
   </PropertyGroup>
-
-  <ItemGroup>
-    <PackageReference Include="Microsoft.SourceLink.GitHub" 
PrivateAssets="All" />
-  </ItemGroup>
 </Project>
diff --git a/foreign/csharp/Directory.Packages.props 
b/foreign/csharp/Directory.Packages.props
index 2388831f3..525f09c3c 100644
--- a/foreign/csharp/Directory.Packages.props
+++ b/foreign/csharp/Directory.Packages.props
@@ -27,7 +27,6 @@ under the License.
         <PackageVersion Include="Microsoft.Extensions.Logging.Abstractions" 
Version="8.0.0" />
         <PackageVersion Include="Microsoft.Extensions.Logging.Console" 
Version="10.0.11" />
         <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="18.9.0" />
-        <PackageVersion Include="Microsoft.SourceLink.GitHub" 
Version="10.0.108" />
         <PackageVersion Include="Microsoft.Testing.Extensions.CodeCoverage" 
Version="18.10.0" />
         <PackageVersion Include="Microsoft.Testing.Extensions.Retry" 
Version="2.3.3" />
         <PackageVersion Include="Microsoft.Testing.Extensions.TrxReport" 
Version="2.3.3" />

Reply via email to