Downgrade System.Text.Json to 8.0.4 (#590)

Insecure version needed for package compatibility with downlevel Visual Studio versions. VS team working on a general fix. Upgrade tracked in #591
microsoft · Nov 5, 2024 · a725019 · a725019
1 parent 7b94813
commit a725019
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/Directory.Packages.props b/Directory.Packages.props
@@ -15,7 +15,12 @@
     <PackageVersion Include="Newtonsoft.Json" Version="13.0.3" />
     <PackageVersion Include="System.CodeDom" Version="8.0.0" />
     <PackageVersion Include="System.Collections.Immutable" Version="8.0.0" />
-    <PackageVersion Include="System.Text.Json" Version="8.0.5" />
+
+    <!-- Suppress high vuln Component Governance alert. >8.0.4 breaks downlevel VS installations. VS team working to fix. -->
+    <!-- https://github.com/microsoft/MSBuildSdks/issues/591 -->
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-8g4q-xg66-9fp4" />
+    <PackageVersion Include="System.Text.Json" Version="8.0.4" />
+
     <PackageVersion Include="System.Threading.Tasks.Dataflow" Version="8.0.1" /> 
 
     <!-- Pinning vulnerable packages -->