dotnet/eShop

Duende Version 7.0.5 breaks build

frankbolero opened this issue · 3 comments

frankbolero commented

Duende Version 7.0.5 breaks the build because of a vulnerability (GHSA-ff4q-64jc-gx98). A fix has been made in version 7.0.6 and this needs to be applied to this project in order for it to build correctly.

adityamandaleeka commented

This will be sorted out when this PR is merged on August 13. For more information, check the discussion in that PR.

Until then, if you're blocked because of this error, you can update the version yourself in Directory.Packages.props: https://github.com/dotnet/eShop/blob/main/Directory.Packages.props#L11. If you're in an environment that then runs into the NU3042 error, you can update your environment to trust the Sectigo certificate.

  • 👍1
baskint commented

yup, the suggested path fixes that, then i have another issue here. sorry for the duplicate.
#492

adityamandaleeka commented

This has been addressed. We're on 7.0.6 and have the new SDK version now.