Bump System.Security.Permissions from 6.0.0 to 9.0.8 #731
Conversation
dependabot
bot
added
.NET
|
Important Review skippedBot user detected. To trigger a single review, invoke the You can disable this status message by setting the Comment |
gstraccini
bot
added
the
☑️ auto-merge
github-actions
bot
added
the
size/XS
![gstraccini[bot]](https://avatars.githubusercontent.com/in/480132?s=60&v=4){kind=small}
guibranco
left a comment
guibranco
left a comment
There was a problem hiding this comment.
Automatically approved by gstraccini[bot]
|
@dependabot squash and merge |
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
|
One of your CI runs failed on this pull request, so Dependabot won't merge it. Dependabot will still automatically merge this pull request if you amend it and your tests pass. |
|
Caution Review the following alerts detected in dependencies. According to your organization's Security Policy, you must resolve all "Block" alerts before proceeding. Learn more about Socket for GitHub.
|
|
✅ Build CrispyWaffle 10.0.440 completed (commit e97f096433 by @gstraccini[bot]) |
|
✅ Build CrispyWaffle 10.0.523 completed (commit fa7276df4a by @gstraccini[bot]) |
Coverage summary from CodacySee diff coverage on Codacy
Coverage variation details
Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: Diff coverage details
Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: See your quality gate settings Change summary preferences |
|
❌ Build CrispyWaffle 10.0.559 failed (commit 3b60a9bc14 by @gstraccini[bot]) |
|
@dependabot recreate |
--- updated-dependencies: - dependency-name: System.Security.Permissions dependency-version: 9.0.8 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
force-pushed
the
dependabot/nuget/System.Security.Permissions-9.0.8
branch
from
f25b25d to
2f99346
Compare
|
❌ Build CrispyWaffle 10.0.589 failed (commit 9f266a9255 by @gstraccini[bot]) |
|
❌ Build CrispyWaffle 10.0.607 failed (commit 154a4a2f6a by @gstraccini[bot]) |
|
Infisical secrets check: ✅ No secrets leaked! 💻 Scan logsA new release of infisical is available: 0.41.90 -> 0.41.99
To update, run: sudo apt-get update && sudo apt-get install infisical
2:41PM INF scanning for exposed secrets...
2:41PM INF 701 commits scanned.
2:41PM INF scan completed in 1.15s
2:41PM INF no leaks found
|
|
Coverage summary from CodacySee diff coverage on Codacy
Coverage variation details
Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: Diff coverage details
Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: See your quality gate settings Change summary preferences |
|
❌ Build CrispyWaffle 10.0.618 failed (commit 1baa8c9710 by @gstraccini[bot]) |
Pull request was closed
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
guibranco
deleted the
dependabot/nuget/System.Security.Permissions-9.0.8
branch
Updated System.Security.Permissions from 6.0.0 to 9.0.8.
Release notes
Sourced from System.Security.Permissions's releases.
9.0.8
Release
What's Changed
InvalidOperationExceptiononTestOutputHelperlogging. by @ilonatommy in [release/9.0-staging][wbt] PreventInvalidOperationExceptiononTestOutputHelperlogging. dotnet/runtime#116916Ping_TimedOut_*tests by @github-actions[bot] in [release/9.0-staging] HardenPing_TimedOut_*tests dotnet/runtime#116630Full Changelog: dotnet/runtime@v9.0.7...v9.0.8
9.0.7
Release
What's Changed
sort_mark_listby @github-actions in [release/9.0-staging] throw an exception instead of infinite loop insort_mark_listdotnet/runtime#115529Full Changelog: dotnet/runtime@v9.0.6...v9.0.7
9.0.6
Bug Fixes
Read messages from binlog if process output is missing build finished message (#114676)
Improves reliability of the WebAssembly build process by reading messages from the binlog when the process output does not contain the expected build finished message, preventing build failures in certain scenarios.
Fix debugger app hangs related to thread exit (#114917)
Resolves an issue where applications could hang during debugging when threads exit, ensuring smoother debugging experiences and preventing deadlocks.
[Mono] Workaround MSVC miscompiling sgen_clz (#114903)
Addresses a compiler miscompilation issue in MSVC affecting the Mono garbage collector, improving runtime stability and correctness on affected platforms.
Do not set the salt or info if they are NULL for OpenSSL HKDF (#114877)
Fixes a cryptographic issue by ensuring that the salt or info parameters are not set when they are NULL in OpenSSL HKDF, preventing potential errors or unexpected behavior in key derivation.
[Test Only] Fix Idn tests (#115032)
Corrects issues in Internationalized Domain Name (Idn) tests, ensuring accurate and reliable test results for domain name handling.
JIT: revised fix for fp division issue in profile synthesis (#115026)
Provides a more robust fix for floating-point division issues in JIT profile synthesis, improving numerical accuracy and preventing incorrect calculations.
Handle OSSL 3.4 change to SAN:othername formatting (#115361)
Updates certificate handling to accommodate changes in Subject Alternative Name (SAN) formatting introduced in OpenSSL 3.4, ensuring compatibility and correct parsing of certificates.
[Mono] Fix c11 ARM64 atomics to issue full memory barrier (#115635)
Fixes atomic operations on ARM64 in Mono to issue a full memory barrier, ensuring correct synchronization and preventing subtle concurrency bugs.
Performance Improvements
[WinHTTP] Certificate caching on WinHttpHandler to eliminate extra call to Custom Certificate Validation (#114678)
Improves HTTP performance by caching certificates in WinHttpHandler, reducing redundant calls to custom certificate validation and speeding up secure connections.
Improve distribute_free_regions (#115167)
Optimizes memory management by enhancing the algorithm for distributing free memory regions, leading to better memory utilization and potentially improved application performance.
Technical Improvements
Strip trailing slash from source dir for cmake4 (#114905)
Refines build scripts by removing trailing slashes from source directories when using CMake 4, preventing potential build path issues and improving build reliability.
Don't expose TrustedCertificatesDirectory() and StartNewTlsSessionContext() to NetFx (#114995)
Restricts certain internal APIs from being exposed to .NET Framework, reducing surface area and preventing unintended usage.
Add support for more libicu versions (#115376)
Expands compatibility by supporting additional versions of the International Components for Unicode (ICU) library, enhancing globalization features across more environments.
Infrastructure
Optimizes CI/CD resources by limiting the outerloop pipeline to run only on release branches, reducing unnecessary test runs and speeding up development workflows.
... (truncated)
9.0.5
Release
What's Changed
osx.14.arm64.openandosx.15.amd64.openqueues by @github-actions in [release/9.0-staging] [infra][apple-mobile] Migrate MacCatalyst and iOS/tvOS simulator jobs toosx.14.arm64.openandosx.15.amd64.openqueues dotnet/runtime#114617... (truncated)
9.0.4
Release
What's Changed
BigInteger.Rotate{Left,Right}for backport by @github-actions in [release/9.0] FixBigInteger.Rotate{Left,Right}for backport dotnet/runtime#112991Full Changelog: dotnet/runtime@v9.0.3...v9.0.4
9.0.3
Release
What's Changed
NO-MERGElabel is applied by @github-actions in [release/9.0-staging] Add workflow to prevent merging a PR when theNO-MERGElabel is applied dotnet/runtime#111961Full Changelog: dotnet/runtime@v9.0.2...v9.0.3
9.0.2
Release
What's Changed
SetChecksumcreating invalid pdb by @github-actions in [release/9.0-staging] Fix System.Reflection.EmitSetChecksumcreating invalid pdb dotnet/runtime#110205BlockDominancePredsto avoid a JIT crash by @github-actions in [release/9.0-staging] JIT: Include more edges inBlockDominancePredsto avoid a JIT crash dotnet/runtime#110568SIGSEGVnative crashes to the defaultSIGSEGVhandler by @github-actions in [release/9.0-staging] [mono] ChainSIGSEGVnative crashes to the defaultSIGSEGVhandler dotnet/runtime#110863IsOSVersionAtLeastwhen build or revision are not provided by @github-actions in [release/9.0-staging] FixIsOSVersionAtLeastwhen build or revision are not provided dotnet/runtime#109332... (truncated)
9.0.1
Release
What's Changed
TensorPrimitivesXML docs:MinNumber/ReciprocalSqrt/ReciprocalSqrtEstimateoversights by @github-actions in [release/9.0-staging]TensorPrimitivesXML docs:MinNumber/ReciprocalSqrt/ReciprocalSqrtEstimateoversights dotnet/runtime#109922UnsafeAccessorfield targets by @github-actions in [release/9.0-staging] Ignore modopts/modreqs forUnsafeAccessorfield targets dotnet/runtime#109709Full Changelog: dotnet/runtime@v9.0.0...v9.0.1
9.0.0
Release
What's Changed
InlineArrayswift lowering in mono by @jkurdek in [release/9.0] FixInlineArrayswift lowering in mono dotnet/runtime#108483... (truncated)
9.0.0-rc.2.24473.5
Release
9.0.0-rc.1.24431.7
Release
9.0.0-preview.7.24405.7
Release
9.0.0-preview.5.24306.7
Release
9.0.0-preview.4.24266.19
Release
9.0.0-preview.3.24172.9
Release
9.0.0-preview.2.24128.5
[Release[(https://github.com/dotnet/core/releases/tag/v9.0.0-preview.2)
9.0.0-preview.1.24080.9
Release
8.0.19
Release
What's Changed
GCPROTECTfor duplicate slot by @github-actions[bot] in [release/8.0-staging] Remove invalidGCPROTECTfor duplicate slot dotnet/runtime#117030Ping_TimedOut_*tests by @github-actions[bot] in [release/8.0-staging] HardenPing_TimedOut_*tests dotnet/runtime#116631BigInteger.Rotate{Left,Right}for backport by @github-actions[bot] in [release/8.0] FixBigInteger.Rotate{Left,Right}for backport dotnet/runtime#112992Full Changelog: dotnet/runtime@v8.0.18...v8.0.19
8.0.18
Release
What's Changed
sort_mark_listby @github-actions in [release/8.0-staging] throw an exception instead of infinite loop insort_mark_listdotnet/runtime#115528Full Changelog: dotnet/runtime@v8.0.17...v8.0.18
8.0.17
Bug Fixes
Work around MSVC miscompiling sgen_clz (#114904)
Addresses an issue where the Microsoft Visual C++ (MSVC) compiler was miscompiling the
sgen_clzfunction in Mono. This workaround ensures correct behavior and stability for affected builds.Fix Idn tests (#115030)
Resolves issues in the Internationalized Domain Name (Idn) tests, improving test reliability and ensuring accurate validation of related functionality.
Handle OSSL 3.4 change to SAN:othername formatting (#115367)
Updates the handling of Subject Alternative Name (SAN) formatting to accommodate changes introduced in OpenSSL 3.4. This ensures compatibility and correct certificate processing.
Don't expose TrustedCertificatesDirectory() and StartNewTlsSessionContext() to NetFx (#115008)
Prevents certain internal APIs from being exposed to .NET Framework (NetFx), reducing the risk of unintended usage and improving API surface consistency.
Fix line endings (#115414)
Corrects line ending inconsistencies in the codebase, which helps prevent cross-platform issues and improves code readability.
Performance Improvements
Optimizes the algorithm for distributing free memory regions, leading to better memory management and potentially improved application performance.
Technical Improvements
Strip trailing slash from source dir for cmake4 (#114906)
Refines the build process by removing unnecessary trailing slashes from source directory paths when using CMake 4, reducing potential build errors and improving consistency.
Add support for more libicu versions (#115378)
Expands compatibility by supporting additional versions of the International Components for Unicode (ICU) library, enhancing globalization features across more environments.
Infrastructure
Update dependencies from dotnet/arcade (#114441)
Refreshes build and engineering dependencies from the Arcade repository, ensuring the latest tooling and infrastructure improvements are incorporated.
Migrate MacCatalyst and iOS/tvOS simulator jobs to new queues (#114633)
Moves MacCatalyst and iOS/tvOS simulator jobs to updated build queues (
osx.14.arm64.openandosx.15.amd64.open), improving build reliability and aligning with current infrastructure standards.Run outerloop pipeline only for release branches (#115012)
Adjusts CI pipeline triggers so that the outerloop pipeline runs only for release branches, reducing unnecessary builds and streamlining the development workflow.
Update OpenSUSE (#115028)
Updates support for the OpenSUSE Linux distribution, ensuring compatibility and up-to-date platform support.
Update dependencies from dotnet/emsdk (#114830)
Updates the Emscripten SDK dependencies, improving WebAssembly build support and incorporating the latest fixes and features.
Update MacOS signing to use PME (#115633)
Switches MacOS code signing to use PME (Public Managed Environment), enhancing security and compliance for MacOS builds.
... (truncated)
8.0.16
Release
What's Changed
MAX_PATHby @github-actions in [release/8.0-staging] Support setting ACLs on file paths longer thanMAX_PATHdotnet/runtime#113801Description has been truncated
Description by Korbit AI
What change is being made?
Bump the version of System.Security.Permissions from 6.0.0 to 9.0.8 in the Directory.Packages.props file.
Why are these changes being made?
This update is necessary to benefit from security enhancements, bug fixes, and new features available in the newer version of System.Security.Permissions. Upgrading the package ensures the codebase remains current with the latest improvements and resolves any potential vulnerabilities present in the earlier version.