Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Review Dependabot alerts for net6.0 and net7.0 target frameworks and bump all packages #2220

Merged
merged 6 commits into from
Nov 26, 2024

Conversation

raman-m
Copy link
Member

@raman-m raman-m commented Nov 26, 2024

Fixes

Proposed Changes

  • Updated all packages to their latest versions
  • Removed the net7.0 target framework from testing projects due to NETSDK1138 warning (indicating that .NET 7 is out of support)
  • Resolved warnings and messages

P.S.

It was impossible to address Dependabot alerts for .NET6-7 because of IdentityServer4 requires significant development efforts; therefore, we eliminate IS4 while upgrading to NET 9. Additionally, migrating from IdentityServer4 to Duende.IdentityServer is inappropriate due to its non-OSS status (and I don't want to advertise it). It is preferable to migrate testing projects to the ASP.NET Core Identity framework.

…nd will not receive security updates in the future. Please refer to https://aka.ms/dotnet-core-support for more information about the support policy.

Remove target framework 'net7.0' from testing projects.
@raman-m raman-m requested a review from ggnaegi November 26, 2024 13:46
@raman-m raman-m self-assigned this Nov 26, 2024
@raman-m raman-m added hotfix Gitflow: Hotfix issue, PR related to hotfix branch Nov'24 November 2024 release labels Nov 26, 2024
@raman-m raman-m added this to the November'24 milestone Nov 26, 2024
@raman-m raman-m changed the title Raman m/2218 net8 Security Dependabot alerts for net6.0 and net7.0 target frameworks with bumping all packages Nov 26, 2024
@raman-m raman-m changed the title Security Dependabot alerts for net6.0 and net7.0 target frameworks with bumping all packages Review Dependabot alerts for net6.0 and net7.0 target frameworks and bumping all packages Nov 26, 2024
@raman-m raman-m changed the title Review Dependabot alerts for net6.0 and net7.0 target frameworks and bumping all packages Review Dependabot alerts for net6.0 and net7.0 target frameworks and bump all packages Nov 26, 2024
@raman-m raman-m changed the base branch from develop to release/23.4 November 26, 2024 14:02
@raman-m raman-m added the dependencies Pull requests that update a dependency file label Nov 26, 2024
@raman-m raman-m requested review from ggnaegi and RaynaldM November 26, 2024 17:53
@raman-m raman-m merged commit e8c0b13 into release/23.4 Nov 26, 2024
1 check passed
@raman-m raman-m deleted the raman-m/2218-net8 branch November 26, 2024 19:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file hotfix Gitflow: Hotfix issue, PR related to hotfix branch Nov'24 November 2024 release
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants