-
Notifications
You must be signed in to change notification settings - Fork 416
-
Notifications
You must be signed in to change notification settings - Fork 416
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[WebToolsE2E][Aspire] Creating Aspire project, there are warning icons displayed on Dependencies | Packages of the AppHost project. #5679
Comments
Should be a similar issue caused by SDK 9.0 RC2 as dotnet/sdk#43341. |
Is there any indication for what is being warned? |
This a duplicate issue. Tracked by #5436 which indicates it is fixed in Aspire 9.0.0-preview.4.24454.4. |
I don't think this is a duplicate, the referenced one was around project nodes and we ended up figuring out the issue for that, but this is about NuGet package dependencies, so I don't think this is a dupe. Re-opening to ensure we get to the bottom of the issue. |
I think I found out what the problem is. The issue is likely caused by the new feature in NuGet to surface vulnerabilities in dependencies. There is a vulnerability declared in NuGet for package Here is the dependency chain of how System.Text.Json 8.0.0 is coming to the picture:
|
Yes, after manually updating 'System.Text.Json' to 8.0.4, the warning disappeared. |
REGRESSION
INSTALL STEPS
REPRO STEPS
dotnet new aspire-starter -o AspireStarterApp
ACTUAL
Dependencies | Packages show warning icon. No warnings in Error List.
EXPECTED
There should be no warning icons displayed.
The text was updated successfully, but these errors were encountered: