Skip to content

Commit b81ee32

Browse files
Pin Microsoft.Data.OData nuspec dependency to [5.8.4, 6.0.0) and bump to 6.0.1.0
The previous nuspec dependency range '[5.*, 6.0.0)' has a subtle bug: in NuGet PackageReferences a '5.*' wildcard floats to the latest 5.x at build time, but inside a .nuspec dependency element it is interpreted as the minimum version of the range, so a fresh restore of GeneXus.Odata.Client picks up Microsoft.Data.OData 5.0.0.50403 — the oldest 5.x with the high-severity advisory GHSA-mv2r-q4g5-j8q5. Pin the lower bound to 5.8.4 (the last vulnerability-free 5.x) so consumers default to that version. Bump AssemblyVersion to 6.0.1.0. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
1 parent 99e7083 commit b81ee32

2 files changed

Lines changed: 4 additions & 4 deletions

File tree

GXOData.Client.nuspec

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -20,15 +20,15 @@
2020
<tags>odata data rest client netstandard net7 net8 mono android ios</tags>
2121
<dependencies>
2222
<group targetFramework="netstandard2.0">
23-
<dependency id="Microsoft.Data.OData" version="[5.*, 6.0.0)" />
23+
<dependency id="Microsoft.Data.OData" version="[5.8.4, 6.0.0)" />
2424
<dependency id="Microsoft.OData.Core" version="[7.4.4, 8.0)" />
2525
</group>
2626
<group targetFramework="net7.0">
27-
<dependency id="Microsoft.Data.OData" version="[5.*, 6.0.0)" />
27+
<dependency id="Microsoft.Data.OData" version="[5.8.4, 6.0.0)" />
2828
<dependency id="Microsoft.OData.Core" version="[7.4.4, 8.0)" />
2929
</group>
3030
<group targetFramework="net8.0">
31-
<dependency id="Microsoft.Data.OData" version="[5.*, 6.0.0)" />
31+
<dependency id="Microsoft.Data.OData" version="[5.8.4, 6.0.0)" />
3232
<dependency id="Microsoft.OData.Core" version="[7.4.4, 8.0)" />
3333
</group>
3434
</dependencies>

src/GXOdata.Client.All/Directory.Build.props

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
<Import Project="$([MSBuild]::GetPathOfFileAbove('Directory.Build.props', '$(MSBuildThisFileDirectory)../'))" />
44

55
<PropertyGroup>
6-
<AssemblyVersion>6.0.0.0</AssemblyVersion>
6+
<AssemblyVersion>6.0.1.0</AssemblyVersion>
77
<FileVersion>$(AssemblyVersion)</FileVersion>
88
<InformationalVersion>$([System.DateTime]::UtcNow.ToString("yyyyMMddHHmmss")).$(GITHUB_SHA)</InformationalVersion>
99
<Company>GeneXus</Company>

0 commit comments

Comments
 (0)