Updated nuget packages and take a explicit dependency on Microsoft.IdentityModel.JsonWebTokens (#16935)

This commit is contained in:
Bjarke Berg
2024-08-21 10:25:39 +02:00
committed by GitHub
parent f99f821a6d
commit 79080ffa93
7 changed files with 28 additions and 13 deletions

View File

@@ -8,6 +8,9 @@
<!-- Take top-level depedendency on Azure.Identity, because Microsoft.EntityFrameworkCore.SqlServer depends on a vulnerable version -->
<PackageReference Include="Azure.Identity" />
<PackageReference Include="Microsoft.EntityFrameworkCore.SqlServer" />
<!-- Both OpenIddict.AspNetCore, Npoco.SqlServer and Microsoft.EntityFrameworkCore.SqlServer bring in a vulnerable version of Microsoft.IdentityModel.JsonWebTokens -->
<PackageReference Include="Microsoft.IdentityModel.JsonWebTokens"/>
</ItemGroup>
<ItemGroup>