Update packages (and fix Vulnerability CVE-2024-43485)

See maxkagamine/Moq.Contrib.HttpClient#18
jerone · Nov 16, 2024 · bc7b137 · bc7b137
1 parent d0b4874
commit bc7b137
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 3 deletions.
diff --git a/Directory.Packages.props b/Directory.Packages.props
@@ -9,13 +9,15 @@
     <PackageVersion Include="DevToys.Api" Version="2.0.6-preview" />
     <PackageVersion Include="DotNet.ReproducibleBuilds" Version="1.2.25" />
     <PackageVersion Include="GitHubActionsTestLogger" Version="2.4.1" />
-    <PackageVersion Include="Microsoft.Extensions.Primitives" Version="8.0.0" />
+    <PackageVersion Include="Microsoft.Extensions.Primitives" Version="9.0.0" />
     <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="17.11.1" />
     <PackageVersion Include="Moq" Version="4.20.72" />
     <PackageVersion Include="Moq.Contrib.HttpClient" Version="1.4.0" />
     <PackageVersion Include="PosInformatique.Moq.Analyzers" Version="1.11.0" />
     <PackageVersion Include="Semver" Version="3.0.0" />
-    <PackageVersion Include="Verify.Xunit" Version="28.2.0" />
+    <PackageVersion Include="System.Net.Http.Json" Version="9.0.0" />
+    <PackageVersion Include="System.Text.Json" Version="9.0.0" />
+    <PackageVersion Include="Verify.Xunit" Version="28.3.1" />
     <PackageVersion Include="xunit" Version="2.9.2" />
     <PackageVersion Include="xunit.runner.visualstudio" Version="2.8.2" />
   </ItemGroup>

diff --git a/Jvw.DevToys.SemverCalculator.Tests/Jvw.DevToys.SemverCalculator.Tests.csproj b/Jvw.DevToys.SemverCalculator.Tests/Jvw.DevToys.SemverCalculator.Tests.csproj
@@ -23,14 +23,16 @@
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
     </PackageReference>
-    <PackageReference Include="Microsoft.Extensions.Primitives" /> <!-- Package `Moq.Contrib.HttpClient` is using a too old version. -->
+    <PackageReference Include="Microsoft.Extensions.Primitives" /> <!-- Package `Moq.Contrib.HttpClient` is using a too old version. See https://github.com/maxkagamine/Moq.Contrib.HttpClient/issues/18 -->
     <PackageReference Include="Microsoft.NET.Test.Sdk" />
     <PackageReference Include="Moq" />
     <PackageReference Include="Moq.Contrib.HttpClient" />
     <PackageReference Include="PosInformatique.Moq.Analyzers">
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
     </PackageReference>
+    <PackageReference Include="System.Net.Http.Json" /> <!-- Package `Moq.Contrib.HttpClient` is using a too old version. See https://github.com/maxkagamine/Moq.Contrib.HttpClient/issues/18 -->
+    <PackageReference Include="System.Text.Json" /> <!-- Package `Moq.Contrib.HttpClient` is using a too old version. See https://github.com/maxkagamine/Moq.Contrib.HttpClient/issues/18 -->
     <PackageReference Include="Verify.Xunit" />
     <PackageReference Include="xunit" />
     <PackageReference Include="xunit.runner.visualstudio">