mirror of
https://github.com/icsharpcode/ILSpy.git
synced 2026-10-12 02:15:58 +00:00
Siegfried Pammer
87748e0cde
The Microsoft.DiaSymReader / .PortablePdb packages pull NETStandard.Library 1.6.1, which drags in 4.3.0 builds of System.Net.Http, System.Private.Uri and System.Text.RegularExpressions, all carrying known advisories (NU1902/ NU1903). They are framework-provided at runtime on net10.0; pin the patched 4.3.4 / 4.3.2 / 4.3.1 via central transitive pinning so NuGet audit passes. Enabling transitive pinning also aligns a handful of other transitive packages to their declared central versions. Assisted-by: Claude:claude-opus-4-8:Claude Code
38 lines
1.3 KiB
JSON
38 lines
1.3 KiB
JSON
{
|
|
"version": 2,
|
|
"dependencies": {
|
|
"net10.0": {
|
|
"Microsoft.Sbom.Targets": {
|
|
"type": "Direct",
|
|
"requested": "[4.1.5, )",
|
|
"resolved": "4.1.5",
|
|
"contentHash": "i5z+cNu/cOcdO0AgFB8aXk8w6In2H+haaDfSgd9ImvQIK+rSHavHZIogVoAZLL8jLwYx4bAcs5b7EyuMMG4mQQ=="
|
|
},
|
|
"TomsToolbox.Composition.Analyzer": {
|
|
"type": "Direct",
|
|
"requested": "[2.24.0, )",
|
|
"resolved": "2.24.0",
|
|
"contentHash": "dKHqW1MeAMnDIbtx8qDTsGwy/7LUiQ3ccdzHX0PzCh1r98Lgl/1deIky9+ojZO0K5HjeA7uE+eW9/h+v7EOIBA=="
|
|
},
|
|
"icsharpcode.decompiler": {
|
|
"type": "Project",
|
|
"dependencies": {
|
|
"System.Collections.Immutable": "[9.0.0, )",
|
|
"System.Reflection.Metadata": "[9.0.0, )"
|
|
}
|
|
},
|
|
"System.Collections.Immutable": {
|
|
"type": "CentralTransitive",
|
|
"requested": "[10.0.8, )",
|
|
"resolved": "10.0.8",
|
|
"contentHash": "rvMGYko6bcE/ZTpj1Q/EM22rcZNiQyjH+71capjjfmqG+DDncVE4kSaE5ysCv2vEFIHt8+zALWYXgIETFvcFzw=="
|
|
},
|
|
"System.Reflection.Metadata": {
|
|
"type": "CentralTransitive",
|
|
"requested": "[10.0.8, )",
|
|
"resolved": "10.0.8",
|
|
"contentHash": "Ap8JPUYLRnwQPk/rpyhxSoD+55/a7zJfZsmSD0maudVJT9p/xR+xegyT8gQIwh1XMC/lRowQJM06EdQ0dfiMkA=="
|
|
}
|
|
}
|
|
}
|
|
} |