ajandClaude Fable 5
9b2625de10
Swashbuckle 10.1.4 pulls in Microsoft.OpenApi 2.4.1, which has a known high-severity vulnerability. Pin the latest patched 2.x directly; 3.x is binary-incompatible with Swashbuckle (swagger.json returns 500). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
24 lines
848 B
XML
24 lines
848 B
XML
<Project Sdk="Microsoft.NET.Sdk.Web">
|
|
|
|
<ItemGroup>
|
|
<ProjectReference Include="..\TaskTracker.Core\TaskTracker.Core.csproj" />
|
|
<ProjectReference Include="..\TaskTracker.Infrastructure\TaskTracker.Infrastructure.csproj" />
|
|
</ItemGroup>
|
|
|
|
<ItemGroup>
|
|
<PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.3">
|
|
<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
|
|
<PrivateAssets>all</PrivateAssets>
|
|
</PackageReference>
|
|
<PackageReference Include="Microsoft.OpenApi" Version="2.11.0" />
|
|
<PackageReference Include="Swashbuckle.AspNetCore" Version="10.1.4" />
|
|
</ItemGroup>
|
|
|
|
<PropertyGroup>
|
|
<TargetFramework>net10.0</TargetFramework>
|
|
<Nullable>enable</Nullable>
|
|
<ImplicitUsings>enable</ImplicitUsings>
|
|
</PropertyGroup>
|
|
|
|
</Project>
|