Skip to content
This repository was archived by the owner on Jan 5, 2026. It is now read-only.

Conversation

@sw-joelmut
Copy link
Collaborator

Related issue: #6741
#minor

Description

This PR removes netcoreapp3.1 from the projects and pipelines, and fixes System.Text.Json https://github.com/microsoft/botbuilder-dotnet/security/dependabot/41 (CVE-2024-30105) and System.Formats.Asn1 security issues.

Specific Changes

  • Removed all netcoreapp3.1 configurations from all projects.
  • Removed netcoreapp3.1 from CI pipelines.
  • Removed netcoreapp3.1 conditionals in the code.
  • Removed System.Text.Json and System.Text.Encodings.Web packages from Azure.Blobs, Adaptive.Runtime, Connector.Streaming.
  • Updated remaining System.Text.Json to latest 8.0.4 version.
  • Updated System.Formats.Asn1 to latest 8.0.1 version due to vulnerability issue.

Testing

The following image shows the pipeline tests passing, and no errors/warnings for System.Text.Json.
image
image

@sw-joelmut sw-joelmut requested a review from a team as a code owner July 11, 2024 20:44
@sw-joelmut sw-joelmut mentioned this pull request Jul 11, 2024
@sw-joelmut sw-joelmut added the Automation: No parity PR does not need to be applied to other languages. label Jul 11, 2024
@sw-joelmut sw-joelmut requested a review from tracyboehrer July 11, 2024 20:52
@BruceHaley
Copy link
Contributor

✔️ No Binary Compatibility issues for Microsoft.Bot.Builder.AI.Luis.dll
✔️ No Binary Compatibility issues for Microsoft.Bot.Builder.AI.QnA.dll
✔️ No Binary Compatibility issues for Microsoft.Bot.Builder.Integration.AspNet.Core.dll
✔️ No Binary Compatibility issues for Microsoft.Bot.Builder.TemplateManager.dll

@tracyboehrer tracyboehrer merged commit 276bb33 into main Jul 16, 2024
@tracyboehrer tracyboehrer deleted the southworks/remove/netcore3.1 branch July 16, 2024 20:26
tracyboehrer pushed a commit that referenced this pull request Sep 9, 2024
* Remove netcoreapp3.1 and fix System.Text.Json issue

* Fix System.Formats.Asn1 security issue

* Fix remaining System.Text.Json issue
tracyboehrer added a commit that referenced this pull request Sep 10, 2024
* Fix for Skills endorsement check (#6846)

Co-authored-by: Tracy Boehrer <trboehre@microsoft.com>

* FederatedAppCredentials and factory

* add token credential authentication to BlobsTranscriptStore (#6813)

* [#6741] Remove .Net Core 3.1 from projects (#6819)

* Remove netcoreapp3.1 and fix System.Text.Json issue

* Fix System.Formats.Asn1 security issue

* Fix remaining System.Text.Json issue

* Removed unused argument from FederatedAuthenticator.CreateClientApplication

* Fix Microsoft.Bcl.AsyncInterfaces warning (#6837)

# Conflicts:
#	libraries/Microsoft.Bot.Builder.Azure/Microsoft.Bot.Builder.Azure.csproj

* add code ql comment about TypeNameHandling.None (#6843)

---------

Co-authored-by: Tracy Boehrer <trboehre@microsoft.com>
Co-authored-by: Jhonatan Sandoval Velasco <122501764+JhontSouth@users.noreply.github.com>
Co-authored-by: Joel Mut <62260472+sw-joelmut@users.noreply.github.com>
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

Automation: No parity PR does not need to be applied to other languages.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants