Update System.Text.Json to 8.0.5 for 8.3x branches
Open
- Dominant language
- No language data
- Stars
- 1.9k
- Forks
- 173
- Avg merge
- 10d 13h
- Merged PRs (30d)
- 1
Description
The stale reference is being added to the generated .deps.json that ships in the SDK. This causes false positive for scanners that evaluate the deps.json file. The DLL is not actually present and the correct 8.0.5 version will be resolved from the Microsoft.NetCore.App folder.
https://github.com/dotnet/format/blob/42ef1d04e544c2a0dca064f9fc982639ca516a84/eng/Versions.props#L38
8.0.1xx branch already has the correct reference. It appears 8.3.x version is shipping in later feature bands of the 8.0 SDK (8.0.3xx and 8.0.4xx).
Updating the reference should help reduce the noise for customers
# Customer Impact
For more details, refer to DTS 2426059
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.