Skip to content

Fix Dependabot security vulnerabilities: bump bootstrap and ASP.NET Identity packages#4

Merged
congiuluc merged 1 commit intomasterfrom
copilot/fix-dependabot-security-issues
Mar 31, 2026
Merged

Fix Dependabot security vulnerabilities: bump bootstrap and ASP.NET Identity packages#4
congiuluc merged 1 commit intomasterfrom
copilot/fix-dependabot-security-issues

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented Mar 31, 2026

Resolves all open Dependabot security alerts by applying the proposed version bumps from PRs #2 and #3.

Package updates (WebApiApp/packages.config)

  • bootstrap 3.0.0 → 5.0.0 — fixes XSS vulnerabilities in Bootstrap < 3.4.0
  • Microsoft.AspNet.Identity.Core 2.2.1 → 2.2.4
  • Microsoft.AspNet.Identity.Owin 2.2.1 → 2.2.4

Project file updates (WebApiApp/WebApiApp.csproj)

  • Updated HintPath references for Identity.Core and Identity.Owin to point to 2.2.4 package paths
  • Added explicit assembly version and PublicKeyToken to Include attributes

Assembly binding redirect (WebApiApp/Areas/HelpPage/Views/Web.config)

  • Added <runtime> section with binding redirect for Microsoft.AspNet.Identity.Owin (0.0.0.0-2.0.0.02.0.0.0)

All updated package versions verified clean against the GitHub Advisory Database. Microsoft.AspNet.Identity.EntityFramework remains at 2.2.1 — no advisory exists for that package.

…soft.AspNet.Identity.Core/Owin 2.2.1->2.2.4

Agent-Logs-Url: https://github.com/congiuluc/EventiApp/sessions/b65e5997-12e7-4c73-978a-1cee2da2268a

Co-authored-by: congiuluc <9011632+congiuluc@users.noreply.github.com>
@congiuluc congiuluc marked this pull request as ready for review March 31, 2026 13:36
@congiuluc congiuluc merged commit ab2b159 into master Mar 31, 2026
@congiuluc congiuluc deleted the copilot/fix-dependabot-security-issues branch March 31, 2026 13:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants