Skip to content

Commit

Permalink
Update Newtonsoft.Json explicit reference
Browse files Browse the repository at this point in the history
There's a vulnerability in Newtonsoft.Json older versions. We don't use it directly, but the VSIX projects bring it in via dependencies. Adding an explicit reference to the new version.

(copied from main #2662 )
  • Loading branch information
DefaultRyan authored Jul 14, 2022
1 parent 483b720 commit 8c95522
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion dev/VSIX/Extension/ProjectReunion.Extension.csproj
Original file line number Diff line number Diff line change
Expand Up @@ -53,6 +53,7 @@
<Reference Include="System" />
</ItemGroup>
<ItemGroup>
<PackageReference Include="Newtonsoft.Json" Version="13.0.1" />
<PackageReference Include="Microsoft.VisualStudio.SDK" Version="17.0.0-previews-1-31325-273" ExcludeAssets="runtime">
<IncludeAssets>compile; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
</PackageReference>
Expand Down Expand Up @@ -323,4 +324,4 @@
Value="$(_OriginalVsixTags)"
Namespaces="&lt;Namespace Prefix='ns' Uri='http://schemas.microsoft.com/developer/vsx-schema/2011' /&gt;" />
</Target>
</Project>
</Project>

0 comments on commit 8c95522

Please sign in to comment.