Disable transitive package version pinning (#15406)
* Disable transitive package version pinning * Take top-level dependencies on Azure.Identity and System.Net.Http * Take top-level dependencies on System.Security.Cryptography.Xml and System.Text.RegularExpressions
This commit is contained in:
@@ -5,6 +5,8 @@
|
||||
</PropertyGroup>
|
||||
|
||||
<ItemGroup>
|
||||
<!-- Take top-level depedendency on Azure.Identity, because NPoco.SqlServer depends on a vulnerable version -->
|
||||
<PackageReference Include="Azure.Identity" />
|
||||
<PackageReference Include="NPoco.SqlServer" />
|
||||
</ItemGroup>
|
||||
|
||||
|
||||
Reference in New Issue
Block a user