Skip to content

chore(deps): bump WireMock.Net to 2.13.0, pin Scriban.Signed 7.2.5 #92

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
blehnen merged 1 commit into from
Jul 23, 2026
Merged

chore(deps): bump WireMock.Net to 2.13.0, pin Scriban.Signed 7.2.5 #92

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 8 additions & 7 deletions tests/Directory.Build.props
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,14 +12,15 @@
<ItemGroup>
<!--
Transitive security pin (test projects only).
WireMock.Net -> WireMock.Net.Minimal -> Scriban.Signed 7.2.0 carries a
parser-recursion DoS: GHSA-6q7j-xr26-3h2c / GHSA-q6rr-fm2g-g5x8
(affected >= 6.6.0, <= 7.2.0). 7.2.1 is the patched release. A direct
PackageReference overrides the transitive 7.2.0 and clears the NU1902
audit error that fails the warnings-as-errors build. Remove this pin once
WireMock.Net ships a build that references Scriban.Signed >= 7.2.1.
On a clean restore WireMock.Net -> WireMock.Net.Minimal still resolves the
transitive Scriban.Signed to a vulnerable 7.2.x (GHSA-6q7j-xr26-3h2c /
GHSA-q6rr-fm2g-g5x8; affected >= 6.6.0, <= 7.2.0). A direct PackageReference
forces the patched 7.2.5 (>= WireMock 2.13's floor, so no NU1605 downgrade)
and clears the NU1902 audit error under warnings-as-errors. Remove this pin
only once a WireMock.Net release resolves Scriban.Signed >= 7.2.1 on a clean
restore (verified in CI, not just a warm local cache).
-->
<PackageReference Include="Scriban.Signed" Version="7.2.1" />
<PackageReference Include="Scriban.Signed" Version="7.2.5" />
</ItemGroup>

</Project>
2 changes: 1 addition & 1 deletion tests/FrigateRelay.Host.Tests/FrigateRelay.Host.Tests.csproj
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@
<PackageReference Include="Microsoft.Extensions.Configuration" Version="10.0.9" />
<PackageReference Include="Microsoft.Extensions.DependencyInjection" Version="10.0.9" />
<!-- WireMock.Net: HTTP stub servers for end-to-end snapshot resolution test. -->
<PackageReference Include="WireMock.Net" Version="2.10.0" />
<PackageReference Include="WireMock.Net" Version="2.11.0" />
<!-- OpenTelemetry in-memory exporter — test-only, never in src/. Per PLAN-3.1 Task 1. -->
<PackageReference Include="OpenTelemetry.Exporter.InMemory" Version="1.16.0" />
<PackageReference Include="Microsoft.Extensions.Hosting" Version="10.0.9" />
Expand Down
2 changes: 1 addition & 1 deletion .../FrigateRelay.IntegrationTests.RealBroker/FrigateRelay.IntegrationTests.RealBroker.csproj
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@
<PackageReference Include="MSTest" Version="4.2.3" />
<PackageReference Include="FluentAssertions" Version="6.12.2" />
<PackageReference Include="MQTTnet" Version="5.2.0.1603" />
<PackageReference Include="WireMock.Net" Version="2.10.0" />
<PackageReference Include="WireMock.Net" Version="2.11.0" />
</ItemGroup>

<ItemGroup>
Expand Down
2 changes: 1 addition & 1 deletion tests/FrigateRelay.IntegrationTests/FrigateRelay.IntegrationTests.csproj
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@
<IncludeAssets>runtime; build; native; contentfiles; analyzers</IncludeAssets>
</PackageReference>
<PackageReference Include="Testcontainers" Version="4.13.0" />
<PackageReference Include="WireMock.Net" Version="2.10.0" />
<PackageReference Include="WireMock.Net" Version="2.11.0" />
<PackageReference Include="MQTTnet" Version="5.2.0.1603" />
<!-- OpenTelemetry in-memory exporter — test-only, never in src/. Per PLAN-3.1 Task 3. -->
<PackageReference Include="OpenTelemetry.Exporter.InMemory" Version="1.16.0" />
Expand Down
2 changes: 1 addition & 1 deletion tests/FrigateRelay.Plugins.BlueIris.Tests/FrigateRelay.Plugins.BlueIris.Tests.csproj
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@
<PrivateAssets>all</PrivateAssets>
<IncludeAssets>runtime; build; native; contentfiles; analyzers</IncludeAssets>
</PackageReference>
<PackageReference Include="WireMock.Net" Version="2.10.0" />
<PackageReference Include="WireMock.Net" Version="2.11.0" />
<PackageReference Include="Microsoft.Extensions.Hosting" Version="10.0.9" />
</ItemGroup>

Expand Down
2 changes: 1 addition & 1 deletion .../FrigateRelay.Plugins.CodeProjectAi.Tests/FrigateRelay.Plugins.CodeProjectAi.Tests.csproj
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@
<PrivateAssets>all</PrivateAssets>
<IncludeAssets>runtime; build; native; contentfiles; analyzers</IncludeAssets>
</PackageReference>
<PackageReference Include="WireMock.Net" Version="2.10.0" />
<PackageReference Include="WireMock.Net" Version="2.11.0" />
<PackageReference Include="Microsoft.Extensions.Hosting" Version="10.0.9" />
</ItemGroup>

Expand Down
2 changes: 1 addition & 1 deletion tests/FrigateRelay.Plugins.Doods2.Tests/FrigateRelay.Plugins.Doods2.Tests.csproj
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@
<PrivateAssets>all</PrivateAssets>
<IncludeAssets>runtime; build; native; contentfiles; analyzers</IncludeAssets>
</PackageReference>
<PackageReference Include="WireMock.Net" Version="2.10.0" />
<PackageReference Include="WireMock.Net" Version="2.11.0" />
<PackageReference Include="Microsoft.Extensions.Hosting" Version="10.0.9" />
</ItemGroup>

Expand Down
2 changes: 1 addition & 1 deletion ...gateRelay.Plugins.FrigateSnapshot.Tests/FrigateRelay.Plugins.FrigateSnapshot.Tests.csproj
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@
<PrivateAssets>all</PrivateAssets>
<IncludeAssets>runtime; build; native; contentfiles; analyzers</IncludeAssets>
</PackageReference>
<PackageReference Include="WireMock.Net" Version="2.10.0" />
<PackageReference Include="WireMock.Net" Version="2.11.0" />
<PackageReference Include="Microsoft.Extensions.Hosting" Version="10.0.9" />
</ItemGroup>

Expand Down
2 changes: 1 addition & 1 deletion tests/FrigateRelay.Plugins.Pushover.Tests/FrigateRelay.Plugins.Pushover.Tests.csproj
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@
<PrivateAssets>all</PrivateAssets>
<IncludeAssets>runtime; build; native; contentfiles; analyzers</IncludeAssets>
</PackageReference>
<PackageReference Include="WireMock.Net" Version="2.10.0" />
<PackageReference Include="WireMock.Net" Version="2.11.0" />
<PackageReference Include="Microsoft.Extensions.Hosting" Version="10.0.9" />
</ItemGroup>

Expand Down
2 changes: 1 addition & 1 deletion tests/FrigateRelay.Plugins.Roboflow.Tests/FrigateRelay.Plugins.Roboflow.Tests.csproj
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@
<PrivateAssets>all</PrivateAssets>
<IncludeAssets>runtime; build; native; contentfiles; analyzers</IncludeAssets>
</PackageReference>
<PackageReference Include="WireMock.Net" Version="2.10.0" />
<PackageReference Include="WireMock.Net" Version="2.11.0" />
<PackageReference Include="Microsoft.Extensions.Hosting" Version="10.0.9" />
</ItemGroup>

Expand Down
Loading