security: forces dependency version for message pack

microsoft · Nov 18, 2024 · e60af4a · e60af4a
1 parent 79e974c
commit e60af4a
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/kiota/kiota.csproj b/src/kiota/kiota.csproj
@@ -53,6 +53,8 @@
       <PrivateAssets>all</PrivateAssets>
     </PackageReference>
     <PackageReference Include="StreamJsonRpc" Version="2.20.17" />
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-4qm4-8hg2-g2xm" />
+    <PackageReference Include="MessagePack" Version="2.5.187" />
     <PackageReference Include="System.CommandLine" Version="2.0.0-beta4.22272.1" />
     <PackageReference Include="Microsoft.SourceLink.GitHub" Version="8.0.0" PrivateAssets="All" />
     <PackageReference Include="System.CommandLine.Rendering" Version="0.4.0-alpha.22272.1" />
@@ -70,4 +72,4 @@
       <CopyToOutputDirectory>PreserveNewest</CopyToOutputDirectory>
     </Content>
   </ItemGroup>
-</Project>
+</Project>