Skip to content

Commit

Permalink
Bump to Microsoft.DotNet.Arcade.MSBuild.Xcopy 17.10.0-pre4.0 (#10602)
Browse files Browse the repository at this point in the history
Fixes #
CG alerts CVE-2024-29415, CVE-2024-28863, CVE-2023-42282 which are resulted from xcopy-msbuild 17.8.5.
 

Context
xcopy-msbuild (Microsoft.DotNet.Arcade.MSBuild.Xcopy) higher version > 17.9.6 removed NodeJs modules under MSBuild\Microsoft\VisualStudio\NodeJs. The vulnerability didn't exist.

Changes Made
Bump Microsoft.DotNet.Arcade.MSBuild.Xcopy to 17.10.0-pre4.0 which is the latest available.
  • Loading branch information
GangWang01 authored Sep 11, 2024
1 parent 4abbd70 commit 977f965
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions global.json
Original file line number Diff line number Diff line change
Expand Up @@ -5,9 +5,9 @@
"tools": {
"dotnet": "9.0.100-preview.7.24407.12",
"vs": {
"version": "17.8.0"
"version": "17.10.0"
},
"xcopy-msbuild": "17.8.5"
"xcopy-msbuild": "17.10.0-pre.4.0"
},
"msbuild-sdks": {
"Microsoft.DotNet.Arcade.Sdk": "9.0.0-beta.24453.1"
Expand Down

0 comments on commit 977f965

Please sign in to comment.