Skip to content

[release/9.0] Bump Crypto.Xml to 8.0.3 for RepoTasks#66765

Open
wtgodbe wants to merge 1 commit into
release/9.0from
wtgodbe/cryptoxml9again
Open

[release/9.0] Bump Crypto.Xml to 8.0.3 for RepoTasks#66765
wtgodbe wants to merge 1 commit into
release/9.0from
wtgodbe/cryptoxml9again

Conversation

@wtgodbe
Copy link
Copy Markdown
Member

@wtgodbe wtgodbe commented May 20, 2026

Fixes a CG alert

Updated RepoTasksSystemSecurityCryptographyXmlVersion from 8.0.0 to 8.0.3.
Copilot AI review requested due to automatic review settings May 20, 2026 19:37
@wtgodbe wtgodbe requested a review from a team as a code owner May 20, 2026 19:37
@wtgodbe
Copy link
Copy Markdown
Member Author

wtgodbe commented May 20, 2026

/backport to release/8.0

@dotnet-policy-service dotnet-policy-service Bot added this to the 9.0.x milestone May 20, 2026
@github-actions
Copy link
Copy Markdown
Contributor

Started backporting to release/8.0 (link to workflow run)

@github-actions
Copy link
Copy Markdown
Contributor

@wtgodbe backporting to release/8.0 failed, the patch most likely resulted in conflicts. Please backport manually!

git am output
$ git am --3way --empty=keep --ignore-whitespace --keep-non-patch changes.patch

Applying: Bump Crypto.Xml to 8.0.3 for RepoTasks
Using index info to reconstruct a base tree...
M	eng/Versions.props
Falling back to patching base and 3-way merge...
Auto-merging eng/Versions.props
CONFLICT (content): Merge conflict in eng/Versions.props
error: Failed to merge in the changes.
hint: Use 'git am --show-current-patch=diff' to see the failed patch
hint: When you have resolved this problem, run "git am --continue".
hint: If you prefer to skip this patch, run "git am --skip" instead.
hint: To restore the original branch and stop patching, run "git am --abort".
hint: Disable this message with "git config set advice.mergeConflict false"
Patch failed at 0001 Bump Crypto.Xml to 8.0.3 for RepoTasks
Error: The process '/usr/bin/git' failed with exit code 128

Link to workflow output

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the pinned System.Security.Cryptography.Xml package version used by the RepoTasks build tool to address a CG/security alert on the release/9.0 branch.

Changes:

  • Bump RepoTasksSystemSecurityCryptographyXmlVersion from 8.0.0 to 8.0.3 in eng/Versions.props.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@github-actions github-actions Bot added the area-infrastructure Includes: MSBuild projects/targets, build scripts, CI, Installers and shared framework label May 20, 2026
@dotnet-policy-service
Copy link
Copy Markdown
Contributor

Hey @dotnet/aspnet-build, looks like this PR is something you want to take a look at.

@wtgodbe
Copy link
Copy Markdown
Member Author

wtgodbe commented May 21, 2026

Needs dotnet/source-build-assets#1676

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area-infrastructure Includes: MSBuild projects/targets, build scripts, CI, Installers and shared framework

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants