RazorLight icon indicating copy to clipboard operation
RazorLight copied to clipboard

Deprecated dependencies make newest Visual Studio fail the build

Open dizzyrobotix opened this issue 1 year ago • 2 comments

When updating Visual Studio to latest version, it is now more thorough when reporting vulnerable dependencies. My project references RazorLight (v2.3.1) NuGet package which in its turn references Microsoft.Extensions.Caching.Memory (v6.0.0) which has high vulnerability, hence error. As a result I cannot build the project on new version of Visual Studio. Can you please update dependencies to non-vulnerable versions?

dizzyrobotix avatar Nov 28 '24 21:11 dizzyrobotix

That's an ideal first Pull Request you could make to the project, I'd be more than welcome to merge it

toddams avatar Dec 02 '24 16:12 toddams

That's an ideal first Pull Request you could make to the project, I'd be more than welcome to merge it

While I would normally agree, the dependencies in RazorLight are particularly old and it is non-trivial for an "outsider" to upgrade them. There are many gotchas like Microsoft.AspNetCore.Hosting.Abstractions being deprecated in favor of Microsoft.Extensions.Hosting.Abstractions and similar.

doxxx avatar Dec 04 '24 19:12 doxxx