Skip to content

Fixed: broken tests due to transitive vulnerable dependencies#133

Merged
bart-vmware merged 1 commit into
mainfrom
fix-transitive-dependencies-build-failure
May 11, 2026
Merged

Fixed: broken tests due to transitive vulnerable dependencies#133
bart-vmware merged 1 commit into
mainfrom
fix-transitive-dependencies-build-failure

Conversation

@bart-vmware
Copy link
Copy Markdown
Member

Fix for failed run at https://github.com/SteeltoeOSS/NetCoreToolTemplates/actions/runs/25636308634.

Error: Expected sandbox.CommandExitCode to be 0 because build should succeed, while output was:
  Determining projects to restore...
/tmp/DotNetNewTemplatesSandboxes/P_67a57604db3d4862a0c48a029e3d6b52/P_67a57604db3d4862a0c48a029e3d6b52.csproj : error NU1902: Warning As Error: Package 'SharpCompress' 0.30.1 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-6c8g-7p36-r338 [/tmp/DotNetNewTemplatesSandboxes/P_67a57604db3d4862a0c48a029e3d6b52/P_67a57604db3d4862a0c48a029e3d6b52.slnx]
/tmp/DotNetNewTemplatesSandboxes/P_67a57604db3d4862a0c48a029e3d6b52/P_67a57604db3d4862a0c48a029e3d6b52.csproj : error NU1903: Warning As Error: Package 'Snappier' 1.0.0 has a known high severity vulnerability, https://github.com/advisories/GHSA-pggp-6c3x-2xmx [/tmp/DotNetNewTemplatesSandboxes/P_67a57604db3d4862a0c48a029e3d6b52/P_67a57604db3d4862a0c48a029e3d6b52.slnx]
  Failed to restore /tmp/DotNetNewTemplatesSandboxes/P_67a57604db3d4862a0c48a029e3d6b52/P_67a57604db3d4862a0c48a029e3d6b52.csproj (in 780 ms).

Build FAILED.

@bart-vmware bart-vmware marked this pull request as ready for review May 11, 2026 11:11
@bart-vmware bart-vmware requested a review from TimHess May 11, 2026 11:11
@bart-vmware bart-vmware merged commit c001699 into main May 11, 2026
8 checks passed
@bart-vmware bart-vmware deleted the fix-transitive-dependencies-build-failure branch May 11, 2026 15:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants