Skip to content

Commit a00da67

Browse files
committed
fix(deps): pin floating NuGet versions to current latest
Replace wildcard PackageReference Version specifiers with exact versions so builds become reproducible and a malicious republish of a floating version can't silently change what we link. - System.Drawing.Common 10.* -> 10.0.8 (both Imazen.WebP and test proj) - Microsoft.NET.Test.Sdk 18.* -> 18.5.1 (test only) - xunit 2.* -> 2.9.3 (test only) - xunit.runner.visualstudio 3.* -> 3.1.5 (test only) Maintainers can bump these explicitly when new releases drop. Already- exact pins (System.Runtime.InteropServices.RuntimeInformation 4.3.0, Microsoft.NETFramework.ReferenceAssemblies* 1.0.3) left alone.
1 parent 5c66ba0 commit a00da67

2 files changed

Lines changed: 5 additions & 5 deletions

File tree

src/Imazen.Test.Webp/Imazen.Test.Webp.csproj

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -7,9 +7,9 @@
77
</PropertyGroup>
88

99
<ItemGroup>
10-
<PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.*" />
11-
<PackageReference Include="xunit" Version="2.*" />
12-
<PackageReference Include="xunit.runner.visualstudio" Version="3.*">
10+
<PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.5.1" />
11+
<PackageReference Include="xunit" Version="2.9.3" />
12+
<PackageReference Include="xunit.runner.visualstudio" Version="3.1.5">
1313
<PrivateAssets>all</PrivateAssets>
1414
<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
1515
</PackageReference>
@@ -25,7 +25,7 @@
2525

2626
<!-- System.Drawing.Common for .NET Core tests on Windows -->
2727
<ItemGroup Condition="'$(TargetFramework)' == 'net8.0' Or '$(TargetFramework)' == 'net10.0'">
28-
<PackageReference Include="System.Drawing.Common" Version="10.*" />
28+
<PackageReference Include="System.Drawing.Common" Version="10.0.8" />
2929
</ItemGroup>
3030

3131
<ItemGroup>

src/Imazen.WebP/Imazen.WebP.csproj

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@
1818

1919
<!-- System.Drawing.Common for netstandard2.0 and net8.0 -->
2020
<ItemGroup Condition="'$(TargetFramework)' == 'netstandard2.0' Or '$(TargetFramework)' == 'net8.0'">
21-
<PackageReference Include="System.Drawing.Common" Version="10.*" />
21+
<PackageReference Include="System.Drawing.Common" Version="10.0.8" />
2222
</ItemGroup>
2323

2424
<!-- System.Runtime.InteropServices.RuntimeInformation for net472/net48 -->

0 commit comments

Comments
 (0)