Skip to content

[release/9.0] Bump Crypto.Xml to 8.0.3 for RepoTasks#66765

Merged
wtgodbe merged 2 commits into
release/9.0from
wtgodbe/cryptoxml9again
Jun 3, 2026
Merged

[release/9.0] Bump Crypto.Xml to 8.0.3 for RepoTasks#66765
wtgodbe merged 2 commits into
release/9.0from
wtgodbe/cryptoxml9again

Conversation

@wtgodbe

@wtgodbe wtgodbe commented May 20, 2026

Copy link
Copy Markdown
Member

Fixes a CG alert

Updated RepoTasksSystemSecurityCryptographyXmlVersion from 8.0.0 to 8.0.3.
Copilot AI review requested due to automatic review settings May 20, 2026 19:37
@wtgodbe wtgodbe requested a review from a team as a code owner May 20, 2026 19:37
@wtgodbe

wtgodbe commented May 20, 2026

Copy link
Copy Markdown
Member Author

/backport to release/8.0

@dotnet-policy-service dotnet-policy-service Bot added this to the 9.0.x milestone May 20, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Started backporting to release/8.0 (link to workflow run)

@github-actions

Copy link
Copy Markdown
Contributor

@wtgodbe backporting to release/8.0 failed, the patch most likely resulted in conflicts. Please backport manually!

git am output
$ git am --3way --empty=keep --ignore-whitespace --keep-non-patch changes.patch

Applying: Bump Crypto.Xml to 8.0.3 for RepoTasks
Using index info to reconstruct a base tree...
M	eng/Versions.props
Falling back to patching base and 3-way merge...
Auto-merging eng/Versions.props
CONFLICT (content): Merge conflict in eng/Versions.props
error: Failed to merge in the changes.
hint: Use 'git am --show-current-patch=diff' to see the failed patch
hint: When you have resolved this problem, run "git am --continue".
hint: If you prefer to skip this patch, run "git am --skip" instead.
hint: To restore the original branch and stop patching, run "git am --abort".
hint: Disable this message with "git config set advice.mergeConflict false"
Patch failed at 0001 Bump Crypto.Xml to 8.0.3 for RepoTasks
Error: The process '/usr/bin/git' failed with exit code 128

Link to workflow output

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the pinned System.Security.Cryptography.Xml package version used by the RepoTasks build tool to address a CG/security alert on the release/9.0 branch.

Changes:

  • Bump RepoTasksSystemSecurityCryptographyXmlVersion from 8.0.0 to 8.0.3 in eng/Versions.props.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@wtgodbe

wtgodbe commented May 21, 2026

Copy link
Copy Markdown
Member Author

Needs dotnet/source-build-assets#1676

@Youssef1313

Copy link
Copy Markdown
Member

@wtgodbe still needed?

@wtgodbe

wtgodbe commented Jun 2, 2026

Copy link
Copy Markdown
Member Author

still needed?

Yes, still need dependency flow from source-build-assets

@wtgodbe

wtgodbe commented Jun 2, 2026

Copy link
Copy Markdown
Member Author

#66992 will unblock

@wtgodbe wtgodbe merged commit 0c8a01a into release/9.0 Jun 3, 2026
21 of 25 checks passed
@wtgodbe wtgodbe deleted the wtgodbe/cryptoxml9again branch June 3, 2026 07:26
@dotnet-policy-service dotnet-policy-service Bot modified the milestones: 9.0.x, 9.0.18 Jun 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area-infrastructure Includes: MSBuild projects/targets, build scripts, CI, Installers and shared framework

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants