Repository navigation

Bump StreamJsonRpc to 2.25.29 to clear MessagePack NU1903 - #18155

Merged

Mitch Denny (mitchdenny) merged 10 commits into

mainfrom

mitchdenny/fix-messagepack-vulnerability-warning

Jun 16, 2026

Merged

Bump StreamJsonRpc to 2.25.29 to clear MessagePack NU1903#18155
Mitch Denny (mitchdenny) merged 10 commits into
mainfrom
mitchdenny/fix-messagepack-vulnerability-warning

Commits on Jun 12, 2026
- Bump StreamJsonRpc to 2.25.25 to clear MessagePack NU1903
  
  Mitch Denny (mitchdenny)
  and
  Copilot
  committed
  020f29c
- Pin MessagePack to 2.5.302 to fully clear GHSA-hv8m-jj95-wg3x
  
  Mitch Denny (mitchdenny)
  and
  Copilot
  committed
  4f03129
- Revert StreamJsonRpc bump; keep MessagePack 2.5.302 pin
  
  Mitch Denny (mitchdenny)
  and
  Copilot
  committed
  87194e4
Commits on Jun 14, 2026
- Bump StreamJsonRpc to 2.25.28 and drop MessagePack pin
  
  Mitch Denny (mitchdenny)
  and
  Copilot
  committed
  17566e8
- Strip StreamJsonRpc analyzer from consumer AppHost builds
  
  Mitch Denny (mitchdenny)
  and
  Copilot
  committed
  85746c4
- Move StreamJsonRpc analyzer strip to Aspire.Hosting buildTransitive
  
  Mitch Denny (mitchdenny)
  and
  Copilot
  committed
  7be1c42
Commits on Jun 15, 2026
- Simplify StreamJsonRpc analyzer-strip condition using %(Filename)
  
  Mitch Denny (mitchdenny)
  and
  Copilot
  committed
  a5dfa00
Commits on Jun 16, 2026