Skip to content

Conversation

@steveisok
Copy link
Member

Resolves CG alerts

@steveisok steveisok requested review from a team and Copilot September 18, 2025 18:43
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates version numbers for System.Text.Json and Microsoft.Build packages to address component governance alerts, as part of maintenance for the release/8.0 branch.

  • Updates System.Text.Json toolset version from 7.0.3 to 8.0.5
  • Updates Microsoft.Build version from 17.8.3 to 17.8.29

@MichaelSimons
Copy link
Member

cc @dotnet/source-build

@steveisok - I suspect these prebuilts are being detected because the corresponding Dependency entries in the https://github.com/dotnet/runtime/blob/release/8.0/eng/Version.Details.xml were not updated. For example, the Microsoft.Build dependency should be updated as well as the associated Microsoft.SourceBuild.Intermediate.msbuild dependency to the same commit and it's corresponding version. That is to say the dependencies from the same repo must be coherent.

@steveisok steveisok requested a review from a team September 26, 2025 12:11
@steveisok
Copy link
Member Author

@MichaelSimons thanks for your help!

@dotnet/runtime-infrastructure there are enough bumps here that I would like one or more to do another review.

Copy link
Member

@jeffhandley jeffhandley left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks all right to me

@steveisok steveisok added the Servicing-approved Approved for servicing release label Sep 26, 2025
@steveisok steveisok merged commit 3107bc7 into dotnet:release/8.0-staging Sep 26, 2025
192 of 196 checks passed
@steveisok steveisok deleted the bump-more-components-8 branch September 26, 2025 23:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Servicing-approved Approved for servicing release

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants