-
Notifications
You must be signed in to change notification settings - Fork 172
Open
Description
The stale reference is being added to the generated .deps.json that ships in the SDK. This causes false positive for scanners that evaluate the deps.json file. The DLL is not actually present and the correct 8.0.5 version will be resolved from the Microsoft.NetCore.App folder.
Line 38 in 42ef1d0
| <SystemTextJsonVersion>8.0.4</SystemTextJsonVersion> |
8.0.1xx branch already has the correct reference. It appears 8.3.x version is shipping in later feature bands of the 8.0 SDK (8.0.3xx and 8.0.4xx).
Updating the reference should help reduce the noise for customers
Customer Impact
For more details, refer to DTS 2426059
Metadata
Metadata
Assignees
Labels
No labels