Skip to content

Update System.Text.Json to 8.0.5 for 8.3x branches #2236

@joeloff

Description

@joeloff

The stale reference is being added to the generated .deps.json that ships in the SDK. This causes false positive for scanners that evaluate the deps.json file. The DLL is not actually present and the correct 8.0.5 version will be resolved from the Microsoft.NetCore.App folder.

<SystemTextJsonVersion>8.0.4</SystemTextJsonVersion>

8.0.1xx branch already has the correct reference. It appears 8.3.x version is shipping in later feature bands of the 8.0 SDK (8.0.3xx and 8.0.4xx).
 
Updating the reference should help reduce the noise for customers

Customer Impact

For more details, refer to DTS 2426059

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions