Closed
Description
Please get dependency Newtonsoft.Json
up to date, both for the security fix found in >= 13.0.1 ( GHSA-5crp-9r3c-p9vr ), general bugfixes, and for (hopefully) getting the Azure powershell modules to work with the Visual Studio Code PowerShell extension + Windows PowerShell 5.1, where OmniSharp/csharp-language-server-protocol
is a component in PowerShellEditorServices.
Seems the renovate bot made a PR to update Newtonsoft.Json
, but some check failed (?) and it hasn't been merged:
Related issues:
- Azure PowerShell:
Az.Resources
v6.6.1 fails to import to Azure Automation Account with PowerShell v5.1 Azure/azure-powershell#21647 - PowerShellEditorServices: Conflict of Newtonsoft.Json between PSES and Azure PowerShell PowerShell/PowerShellEditorServices#2030
Edit: I see now that the security fix is already mitigated by setting max depth for JSON serialization. Still, would be nice to get Netwonsoft.Json
up to date for the two other mentioned reasons.
Metadata
Metadata
Assignees
Labels
No labels