Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove vulnerable dependencies #2327

Merged
merged 24 commits into from
Dec 3, 2024
Merged
Show file tree
Hide file tree
Changes from 22 commits
Commits
Show all changes
24 commits
Select commit Hold shift + click to select a range
dc00905
Package 'Microsoft.Extensions.Caching.Memory' 8.0.0 has a known high …
adamsitnik Nov 29, 2024
5363c37
Package 'System.Text.Json' 8.0.4 has a known high severity vulnerability
adamsitnik Nov 29, 2024
623b768
remove HealthChecks.DocumentDb as it relies on a deprecated Microsoft…
adamsitnik Nov 29, 2024
3e3302b
update Microsoft.Extensions.Configuration.Json to 8.0.1 to remove +- …
adamsitnik Nov 29, 2024
f75bded
update Microsoft.Extensions.Diagnostics.HealthChecks to 8.0.11 for al…
adamsitnik Nov 29, 2024
95fe361
Package 'RestSharp' 110.1.0 has a known moderate severity vulnerability,
adamsitnik Nov 29, 2024
340da97
Package 'Microsoft.Data.SqlClient' 5.1.1 has a known high severity vu…
adamsitnik Nov 29, 2024
aa68b06
Package 'Npgsql' 8.0.0 has a known high severity vulnerability
adamsitnik Nov 29, 2024
4818160
Package 'Microsoft.Extensions.Caching.Memory' 8.0.0 has a known high …
adamsitnik Nov 29, 2024
ec7e736
Package 'Microsoft.IdentityModel.JsonWebTokens' 7.0.0 has a known mod…
adamsitnik Nov 29, 2024
d69fe50
Package 'Microsoft.Rest.ClientRuntime' 2.3.21 has a known moderate se…
adamsitnik Nov 29, 2024
e232ce1
Package 'Newtonsoft.Json' 10.0.2 has a known high severity vulnerability
adamsitnik Nov 29, 2024
d8524b1
Package 'System.Text.Json' 8.0.2 has a known high severity vulnerability
adamsitnik Nov 29, 2024
be4924a
Package 'System.Text.Json' 7.0.3 has a known high severity vulnerability
adamsitnik Nov 29, 2024
6900086
Package 'System.Text.Json' 8.0.0 has a known high severity vulnerability
adamsitnik Nov 29, 2024
b302b22
update xUnit to remove NS1.6 transitive dependency that was brining a…
adamsitnik Nov 29, 2024
42570ef
Package 'System.Text.RegularExpressions' 4.3.0 has a known high sever…
adamsitnik Nov 29, 2024
c5ee8c4
remove unnecessary dependency
adamsitnik Nov 29, 2024
4791917
Package 'System.Text.Json' 8.0.0 has a known high severity vulnerability
adamsitnik Nov 29, 2024
8bdb819
fix the build
adamsitnik Nov 29, 2024
9b92245
Merge remote-tracking branch 'upstream/master' into vNextPrep
adamsitnik Dec 2, 2024
dc9d89a
remove the reference (it was added to the Directory.props file)
adamsitnik Dec 2, 2024
85f4832
Merge remote-tracking branch 'upstream/master' into vNextPrep
adamsitnik Dec 3, 2024
64d260e
re-apply my changes once again, but using CPM pattern
adamsitnik Dec 3, 2024
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 0 additions & 16 deletions .github/workflows/healthchecks_documentdb_cd.yml

This file was deleted.

17 changes: 0 additions & 17 deletions .github/workflows/healthchecks_documentdb_cd_preview.yml

This file was deleted.

36 changes: 0 additions & 36 deletions .github/workflows/healthchecks_documentdb_ci.yml

This file was deleted.

14 changes: 0 additions & 14 deletions AspNetCore.Diagnostics.HealthChecks.sln
Original file line number Diff line number Diff line change
Expand Up @@ -41,8 +41,6 @@ Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "HealthChecks.System", "src\
EndProject
Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "HealthChecks.Network", "src\HealthChecks.Network\HealthChecks.Network.csproj", "{46A58C98-B38F-486C-83BA-3772A217A24E}"
EndProject
Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "HealthChecks.DocumentDb", "src\HealthChecks.DocumentDb\HealthChecks.DocumentDb.csproj", "{F42DB8D6-65CE-4C7B-A1CB-560DDA468F93}"
EndProject
Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "HealthChecks.UI", "src\HealthChecks.UI\HealthChecks.UI.csproj", "{6AE01EB5-86D4-4603-B798-26C7DB63AEB3}"
EndProject
Project("{2150E333-8FDC-42A3-9474-1A3956D46DE8}") = "samples", "samples", "{092533AB-7505-4EDC-8932-D40BF575D0D2}"
Expand Down Expand Up @@ -204,8 +202,6 @@ Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "HealthChecks.Aws.S3.Tests",
EndProject
Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "HealthChecks.CosmosDb.Tests", "test\HealthChecks.CosmosDb.Tests\HealthChecks.CosmosDb.Tests.csproj", "{B67AF15E-698D-44E6-A58C-2BC7CCF62CBE}"
EndProject
Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "HealthChecks.DocumentDb.Tests", "test\HealthChecks.DocumentDb.Tests\HealthChecks.DocumentDb.Tests.csproj", "{6C09D144-19C9-48B7-84C4-5AADFE0552E9}"
EndProject
Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "HealthChecks.DynamoDb.Tests", "test\HealthChecks.DynamoDb.Tests\HealthChecks.DynamoDb.Tests.csproj", "{BCD169E1-EA86-45D5-9658-BEA330E9EBAC}"
EndProject
Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "HealthChecks.Gcp.CloudFirestore.Tests", "test\HealthChecks.Gcp.CloudFirestore.Tests\HealthChecks.Gcp.CloudFirestore.Tests.csproj", "{6DE9B1D7-0A38-4D11-8C1B-164CC6310E63}"
Expand Down Expand Up @@ -372,10 +368,6 @@ Global
{46A58C98-B38F-486C-83BA-3772A217A24E}.Debug|Any CPU.Build.0 = Debug|Any CPU
{46A58C98-B38F-486C-83BA-3772A217A24E}.Release|Any CPU.ActiveCfg = Release|Any CPU
{46A58C98-B38F-486C-83BA-3772A217A24E}.Release|Any CPU.Build.0 = Release|Any CPU
{F42DB8D6-65CE-4C7B-A1CB-560DDA468F93}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
{F42DB8D6-65CE-4C7B-A1CB-560DDA468F93}.Debug|Any CPU.Build.0 = Debug|Any CPU
{F42DB8D6-65CE-4C7B-A1CB-560DDA468F93}.Release|Any CPU.ActiveCfg = Release|Any CPU
{F42DB8D6-65CE-4C7B-A1CB-560DDA468F93}.Release|Any CPU.Build.0 = Release|Any CPU
{6AE01EB5-86D4-4603-B798-26C7DB63AEB3}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
{6AE01EB5-86D4-4603-B798-26C7DB63AEB3}.Debug|Any CPU.Build.0 = Debug|Any CPU
{6AE01EB5-86D4-4603-B798-26C7DB63AEB3}.Release|Any CPU.ActiveCfg = Release|Any CPU
Expand Down Expand Up @@ -668,10 +660,6 @@ Global
{B67AF15E-698D-44E6-A58C-2BC7CCF62CBE}.Debug|Any CPU.Build.0 = Debug|Any CPU
{B67AF15E-698D-44E6-A58C-2BC7CCF62CBE}.Release|Any CPU.ActiveCfg = Release|Any CPU
{B67AF15E-698D-44E6-A58C-2BC7CCF62CBE}.Release|Any CPU.Build.0 = Release|Any CPU
{6C09D144-19C9-48B7-84C4-5AADFE0552E9}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
{6C09D144-19C9-48B7-84C4-5AADFE0552E9}.Debug|Any CPU.Build.0 = Debug|Any CPU
{6C09D144-19C9-48B7-84C4-5AADFE0552E9}.Release|Any CPU.ActiveCfg = Release|Any CPU
{6C09D144-19C9-48B7-84C4-5AADFE0552E9}.Release|Any CPU.Build.0 = Release|Any CPU
{BCD169E1-EA86-45D5-9658-BEA330E9EBAC}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
{BCD169E1-EA86-45D5-9658-BEA330E9EBAC}.Debug|Any CPU.Build.0 = Debug|Any CPU
{BCD169E1-EA86-45D5-9658-BEA330E9EBAC}.Release|Any CPU.ActiveCfg = Release|Any CPU
Expand Down Expand Up @@ -898,7 +886,6 @@ Global
{6DF5AF51-A3DE-437C-8983-9AF60FB16BF6} = {2A3FD988-2BB8-43CF-B3A2-B70E648259D4}
{E6AF5AD6-618A-491D-B8BB-F8EF56C6B403} = {2A3FD988-2BB8-43CF-B3A2-B70E648259D4}
{46A58C98-B38F-486C-83BA-3772A217A24E} = {2A3FD988-2BB8-43CF-B3A2-B70E648259D4}
{F42DB8D6-65CE-4C7B-A1CB-560DDA468F93} = {2A3FD988-2BB8-43CF-B3A2-B70E648259D4}
{6AE01EB5-86D4-4603-B798-26C7DB63AEB3} = {2A3FD988-2BB8-43CF-B3A2-B70E648259D4}
{7C8F7A48-2FF9-4CF4-AAAC-142053E34FC0} = {092533AB-7505-4EDC-8932-D40BF575D0D2}
{EEF1E206-DEE3-45F2-A753-73D2FFFF8EDA} = {2A3FD988-2BB8-43CF-B3A2-B70E648259D4}
Expand Down Expand Up @@ -972,7 +959,6 @@ Global
{C825E756-F1E0-4AE9-9814-B8A112B1CAA9} = {FF4414C2-8863-4ADA-8A1D-4B9F25C361FE}
{62B73D6A-076D-414B-9B4E-D6C3FF38E786} = {FF4414C2-8863-4ADA-8A1D-4B9F25C361FE}
{B67AF15E-698D-44E6-A58C-2BC7CCF62CBE} = {FF4414C2-8863-4ADA-8A1D-4B9F25C361FE}
{6C09D144-19C9-48B7-84C4-5AADFE0552E9} = {FF4414C2-8863-4ADA-8A1D-4B9F25C361FE}
{BCD169E1-EA86-45D5-9658-BEA330E9EBAC} = {FF4414C2-8863-4ADA-8A1D-4B9F25C361FE}
{6DE9B1D7-0A38-4D11-8C1B-164CC6310E63} = {FF4414C2-8863-4ADA-8A1D-4B9F25C361FE}
{4D28BC42-D6DB-47BA-92D2-219E41EBABE6} = {FF4414C2-8863-4ADA-8A1D-4B9F25C361FE}
Expand Down
2 changes: 0 additions & 2 deletions samples/HealthChecks.Sample/HealthChecks.Sample.csproj
Original file line number Diff line number Diff line change
Expand Up @@ -13,8 +13,6 @@
</ItemGroup>

<ItemGroup>
<ProjectReference Include="..\..\src\HealthChecks.CosmosDb\HealthChecks.CosmosDb.csproj" />
<ProjectReference Include="..\..\src\HealthChecks.DocumentDb\HealthChecks.DocumentDb.csproj" />
<ProjectReference Include="..\..\src\HealthChecks.OpenIdConnectServer\HealthChecks.OpenIdConnectServer.csproj" />
<ProjectReference Include="..\..\src\HealthChecks.Prometheus.Metrics\HealthChecks.Prometheus.Metrics.csproj" />
<ProjectReference Include="..\..\src\HealthChecks.Publisher.ApplicationInsights\HealthChecks.Publisher.ApplicationInsights.csproj" />
Expand Down
4 changes: 4 additions & 0 deletions src/Directory.Build.props
Original file line number Diff line number Diff line change
Expand Up @@ -34,4 +34,8 @@
<InternalsVisibleTo Include="$(MSBuildProjectName).Tests" Condition="'$(SignAssembly)' != 'true'"/>
</ItemGroup>

<ItemGroup Condition="!$(MSBuildProjectName.StartsWith('HealthChecks.UI')) OR '$(MSBuildProjectName)' == 'HealthChecks.UI.Core'">
<PackageReference Include="Microsoft.Extensions.Diagnostics.HealthChecks" Version="8.0.11" />
</ItemGroup>

</Project>
Original file line number Diff line number Diff line change
Expand Up @@ -7,10 +7,5 @@
<VersionPrefix>$(HealthCheckApplicationStatus)</VersionPrefix>
</PropertyGroup>

<ItemGroup>
<PackageReference Include="Microsoft.Extensions.Diagnostics.HealthChecks" Version="8.0.0" />
<PackageReference Include="Microsoft.Extensions.Hosting.Abstractions" Version="8.0.0" />
</ItemGroup>

</Project>

1 change: 0 additions & 1 deletion src/HealthChecks.ArangoDb/HealthChecks.ArangoDb.csproj
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,6 @@

<ItemGroup>
<PackageReference Include="ArangoDBNetStandard" Version="2.0.1" />
<PackageReference Include="Microsoft.Extensions.Diagnostics.HealthChecks" Version="8.0.0" />
</ItemGroup>

</Project>
1 change: 0 additions & 1 deletion src/HealthChecks.Aws.S3/HealthChecks.Aws.S3.csproj
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,6 @@

<ItemGroup>
<PackageReference Include="AWSSDK.S3" Version="3.7.302" />
<PackageReference Include="Microsoft.Extensions.Diagnostics.HealthChecks" Version="8.0.0" />
</ItemGroup>

</Project>
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,6 @@

<ItemGroup>
<PackageReference Include="AWSSDK.SecretsManager" Version="3.7.300.7" />
<PackageReference Include="Microsoft.Extensions.Diagnostics.HealthChecks" Version="8.0.0" />
</ItemGroup>

</Project>
1 change: 0 additions & 1 deletion src/HealthChecks.Aws.Sns/HealthChecks.Aws.Sns.csproj
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,6 @@

<ItemGroup>
<PackageReference Include="AWSSDK.SimpleNotificationService" Version="3.7.300.7" />
<PackageReference Include="Microsoft.Extensions.Diagnostics.HealthChecks" Version="8.0.0" />
</ItemGroup>

</Project>
1 change: 0 additions & 1 deletion src/HealthChecks.Aws.Sqs/HealthChecks.Aws.Sqs.csproj
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,6 @@

<ItemGroup>
<PackageReference Include="AWSSDK.SQS" Version="3.7.300.7" />
<PackageReference Include="Microsoft.Extensions.Diagnostics.HealthChecks" Version="8.0.0" />
</ItemGroup>

</Project>
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,6 @@

<ItemGroup>
<PackageReference Include="AWSSDK.SimpleSystemsManagement" Version="3.7.301.3" />
<PackageReference Include="Microsoft.Extensions.Diagnostics.HealthChecks" Version="8.0.0" />
</ItemGroup>

</Project>
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,6 @@
</PropertyGroup>

<ItemGroup>
<PackageReference Include="Microsoft.Extensions.Diagnostics.HealthChecks" Version="8.0.0" />
<PackageReference Include="Azure.Data.Tables" Version="12.8.2" />
</ItemGroup>

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -8,8 +8,7 @@
</PropertyGroup>

<ItemGroup>
<PackageReference Include="Microsoft.Azure.Devices" Version="1.39.0" />
<PackageReference Include="Microsoft.Extensions.Diagnostics.HealthChecks" Version="8.0.0" />
<PackageReference Include="Microsoft.Azure.Devices" Version="1.40.0" />
</ItemGroup>

</Project>
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,6 @@

<ItemGroup>
<PackageReference Include="Azure.Security.KeyVault.Secrets" Version="4.5.0" />
<PackageReference Include="Microsoft.Extensions.Diagnostics.HealthChecks" Version="8.0.0" />
</ItemGroup>

</Project>
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,6 @@

<ItemGroup>
<PackageReference Include="Azure.Messaging.EventHubs" Version="5.10.0" />
<PackageReference Include="Microsoft.Extensions.Diagnostics.HealthChecks" Version="8.0.0" />
</ItemGroup>

</Project>
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,6 @@

<ItemGroup>
<PackageReference Include="Azure.Storage.Blobs" Version="12.19.1" />
<PackageReference Include="Microsoft.Extensions.Diagnostics.HealthChecks" Version="8.0.0" />
</ItemGroup>

</Project>
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,6 @@

<ItemGroup>
<PackageReference Include="Azure.Storage.Files.Shares" Version="12.17.1" />
<PackageReference Include="Microsoft.Extensions.Diagnostics.HealthChecks" Version="8.0.0" />
</ItemGroup>

</Project>
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,6 @@

<ItemGroup>
<PackageReference Include="Azure.Storage.Queues" Version="12.17.1" />
<PackageReference Include="Microsoft.Extensions.Diagnostics.HealthChecks" Version="8.0.0" />
</ItemGroup>

</Project>
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,6 @@
</PropertyGroup>

<ItemGroup>
<PackageReference Include="Microsoft.Extensions.Diagnostics.HealthChecks" Version="8.0.0" />
<PackageReference Include="Microsoft.Extensions.Http" Version="8.0.0" />
</ItemGroup>

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,7 @@
<PackageReference Include="Azure.Identity" Version="1.12.0" />
<PackageReference Include="Microsoft.Azure.Management.DigitalTwins" Version="1.2.0" />
<PackageReference Include="Microsoft.Azure.Management.ResourceManager.Fluent" Version="1.38.1" />
<PackageReference Include="Microsoft.Extensions.Diagnostics.HealthChecks" Version="8.0.0" />
<!-- some of the packages listed above target NS1.6, hence include transitive dependency to STR 4.3.0 which is vulnerable -->
<PackageReference Include="System.Text.RegularExpressions" Version="4.3.1" />
</ItemGroup>
</Project>
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,6 @@
<PackageReference Include="Azure.Security.KeyVault.Certificates" Version="4.5.1" />
<PackageReference Include="Azure.Security.KeyVault.Keys" Version="4.5.0" />
<PackageReference Include="Azure.Security.KeyVault.Secrets" Version="4.5.0" />
<PackageReference Include="Microsoft.Extensions.Diagnostics.HealthChecks" Version="8.0.0" />
</ItemGroup>

</Project>
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,6 @@

<ItemGroup>
<PackageReference Include="Azure.Search.Documents" Version="11.5.0" />
<PackageReference Include="Microsoft.Extensions.Diagnostics.HealthChecks" Version="8.0.0" />
</ItemGroup>

</Project>
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,6 @@

<ItemGroup>
<PackageReference Include="Azure.Messaging.ServiceBus" Version="7.17.0" />
<PackageReference Include="Microsoft.Extensions.Diagnostics.HealthChecks" Version="8.0.0" />
</ItemGroup>

</Project>
1 change: 0 additions & 1 deletion src/HealthChecks.Consul/HealthChecks.Consul.csproj
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,6 @@

<ItemGroup>
<PackageReference Include="Microsoft.Extensions.Http" Version="8.0.0" />
<PackageReference Include="Microsoft.Extensions.Diagnostics.HealthChecks" Version="8.0.0" />
</ItemGroup>

</Project>
5 changes: 3 additions & 2 deletions src/HealthChecks.CosmosDb/HealthChecks.CosmosDb.csproj
Original file line number Diff line number Diff line change
Expand Up @@ -5,11 +5,12 @@
<PackageTags>$(PackageTags);Azure;CosmosDb</PackageTags>
<Description>HealthChecks.CosmosDb is the health check package for Azure CosmosDb.</Description>
<VersionPrefix>$(HealthCheckCosmosDb)</VersionPrefix>
<!-- Microsoft.Azure.Cosmos requires the app to install Newtonsoft.Json, we just disable that check here -->
<AzureCosmosDisableNewtonsoftJsonCheck>true</AzureCosmosDisableNewtonsoftJsonCheck>
</PropertyGroup>

<ItemGroup>
<PackageReference Include="Microsoft.Azure.Cosmos" Version="3.37.0" />
<PackageReference Include="Microsoft.Extensions.Diagnostics.HealthChecks" Version="8.0.0" />
<PackageReference Include="Microsoft.Azure.Cosmos" Version="3.46.0" />
</ItemGroup>

</Project>
1 change: 0 additions & 1 deletion src/HealthChecks.Dapr/HealthChecks.Dapr.csproj
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,6 @@
</PropertyGroup>

<ItemGroup>
<PackageReference Include="Microsoft.Extensions.Diagnostics.HealthChecks" Version="8.0.0" />
<PackageReference Include="Dapr.Client" Version="1.12.0" />
</ItemGroup>

Expand Down

This file was deleted.

Loading