.NET dependabot alert for system.common.drawing
- Dominant language
- Python
- Stars
- 8
- Forks
- 2
- Avg merge
- 14h 34m
- Merged PRs (30d)
- 46
Description
There is an open critical dependabot alert for upgrading system.common.drawing from 5.0.2 to 5.0.3 in conversion. The issue is this package is no longer being supported for linux by microsoft and upgrading to any newer versions throws an error when we deploy in local docker or openshift. This ticket is being created in order to analyze the issue and see if any fix will become available in the future.
https://github.com/bcgov/foi-docreviewer/security/dependabot/12
https://learn.microsoft.com/en-us/dotnet/core/compatibility/core-libraries/6.0/system-drawing-common-windows-only
https://learn.microsoft.com/en-us/dotnet/core/compatibility/core-libraries/7.0/system-drawing
Contributor guide
Research direction
No repository files or tests are named. Start by reviewing the System.Drawing.Common compatibility links and the conversion deployment configuration for local Docker and OpenShift; done means documenting a viable fix or confirming that no supported upgrade avoids the deployment error.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- csharp, docker
- Domain
- backend, devops
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100