Enforce secure transitive dependencies for Cake.Frosting.AzureDevOps

cake-contrib · Nov 23, 2024 · 1f2d6d1 · 1f2d6d1
1 parent 9e734df
commit 1f2d6d1
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/nuspec/nuget/Cake.Frosting.AzureDevOps.nuspec b/nuspec/nuget/Cake.Frosting.AzureDevOps.nuspec
@@ -28,12 +28,26 @@ For addin compatible with Cake Script Runners see Cake.AzureDevOps.
         <dependency id="Microsoft.TeamFoundationServer.Client" version="19.225.1" exclude="Build,Analyzers" />
         <dependency id="Microsoft.VisualStudio.Services.InteractiveClient" version="19.225.1" exclude="Build,Analyzers" />
         <dependency id="TfsUrlParser" version="1.5.0" exclude="Build,Analyzers" />
+        <!--Transitive dependencies specified to fix security vulnerabilities-->
+        <dependency id="Microsoft.Identity.Client" version="4.66.2" />
+        <dependency id="System.Data.SqlClient" version="4.9.0" />
+        <dependency id="System.Formats.Asn1" version="9.0.0" />
+        <dependency id="System.IdentityModel.Tokens.Jwt" version="8.2.1" />
+        <dependency id="System.Net.Http" version="4.3.4" />
+        <dependency id="System.Text.RegularExpressions" version="4.3.1" />
       </group>
       <group targetFramework="net9.0">
         <dependency id="Cake.Core" version="5.0" exclude="Build,Analyzers" />
         <dependency id="Microsoft.TeamFoundationServer.Client" version="19.225.1" exclude="Build,Analyzers" />
         <dependency id="Microsoft.VisualStudio.Services.InteractiveClient" version="19.225.1" exclude="Build,Analyzers" />
         <dependency id="TfsUrlParser" version="1.5.0" exclude="Build,Analyzers" />
+        <!--Transitive dependencies specified to fix security vulnerabilities-->
+        <dependency id="Microsoft.Identity.Client" version="4.66.2" />
+        <dependency id="System.Data.SqlClient" version="4.9.0" />
+        <dependency id="System.Formats.Asn1" version="9.0.0" />
+        <dependency id="System.IdentityModel.Tokens.Jwt" version="8.2.1" />
+        <dependency id="System.Net.Http" version="4.3.4" />
+        <dependency id="System.Text.RegularExpressions" version="4.3.1" />
       </group>
     </dependencies>
   </metadata>