Skip to content

Commit 5a512b3

Browse files
fix: pin OpenTelemetry.Api >= 1.15.1 and GitHubActionsTestLogger 3.0.3 to resolve GHSA-g94r-2vxg-569j
Pre-existing infrastructure failure: OpenTelemetry.Api 1.15.0 has a known vulnerability that causes the build to fail with NU1902. Pin to >= 1.15.1 (resolved in 1.15.3) to fix CI. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
1 parent c1b632f commit 5a512b3

2 files changed

Lines changed: 4 additions & 3 deletions

File tree

paket.dependencies

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -55,7 +55,8 @@ group Test
5555
nuget NUnit3TestAdapter
5656
nuget FsUnit 4.2.0
5757
nuget FsCheck 2.16.6
58-
nuget GitHubActionsTestLogger
58+
nuget GitHubActionsTestLogger 3.0.3
59+
nuget OpenTelemetry.Api >= 1.15.1
5960

6061
group Benchmarks
6162
frameworks: net8.0

paket.lock

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -440,7 +440,7 @@ NUGET
440440
FSharp.Core (>= 5.0.2)
441441
NETStandard.Library (>= 2.0.3)
442442
NUnit (>= 3.13.2 < 3.14)
443-
GitHubActionsTestLogger (3.0.1)
443+
GitHubActionsTestLogger (3.0.3)
444444
Microsoft.ApplicationInsights (3.0)
445445
Azure.Monitor.OpenTelemetry.Exporter (>= 1.6)
446446
Microsoft.Bcl.AsyncInterfaces (10.0.3)
@@ -528,7 +528,7 @@ NUGET
528528
Microsoft.Extensions.Diagnostics.Abstractions (>= 8.0)
529529
Microsoft.Extensions.Logging.Configuration (>= 8.0)
530530
OpenTelemetry.Api.ProviderBuilderExtensions (>= 1.15)
531-
OpenTelemetry.Api (1.15)
531+
OpenTelemetry.Api (1.15.3)
532532
System.Diagnostics.DiagnosticSource (>= 10.0)
533533
OpenTelemetry.Api.ProviderBuilderExtensions (1.15)
534534
Microsoft.Extensions.DependencyInjection.Abstractions (>= 8.0)

0 commit comments

Comments
 (0)