Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Deprecated dependencies make newest Visual Studio fail the build #547

Open
dizzyrobotix opened this issue Nov 28, 2024 · 2 comments
Open

Comments

@dizzyrobotix
Copy link

When updating Visual Studio to latest version, it is now more thorough when reporting vulnerable dependencies.
My project references RazorLight (v2.3.1) NuGet package which in its turn references Microsoft.Extensions.Caching.Memory (v6.0.0) which has high vulnerability, hence error.
As a result I cannot build the project on new version of Visual Studio.
Can you please update dependencies to non-vulnerable versions?

@toddams
Copy link
Owner

toddams commented Dec 2, 2024

That's an ideal first Pull Request you could make to the project, I'd be more than welcome to merge it

@doxxx
Copy link

doxxx commented Dec 4, 2024

That's an ideal first Pull Request you could make to the project, I'd be more than welcome to merge it

While I would normally agree, the dependencies in RazorLight are particularly old and it is non-trivial for an "outsider" to upgrade them. There are many gotchas like Microsoft.AspNetCore.Hosting.Abstractions being deprecated in favor of Microsoft.Extensions.Hosting.Abstractions and similar.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants