Skip to content

Update DarcLib to the latest version - #7421

Merged
lbussell merged 2 commits into
dotnet:nightlyfrom
lbussell:lbussell/fix-cryptography-alert
Oct 19, 2026
Merged

lbussell merged 2 commits into
dotnet:nightlyfrom
lbussell:lbussell/fix-cryptography-alert

Conversation

@lbussell

Copy link
Copy Markdown
Member

Microsoft.DotNet.DarcLib transitively resolves a vulnerable version of System.Security.Cryptography.Xml.

This PR updates DarcLib to the latest available version and applies the corresponding dependency and API migrations.

  • Updates Microsoft.DotNet.DarcLib to 1.1.0-beta.26519.4
  • Updates Azure.Identity, LibGit2Sharp, and Microsoft.TeamFoundationServer.Client to the versions required by DarcLib
  • Adapts to the updated Azure DevOps authentication, credentials, telemetry, and pull request APIs
  • Resolves System.Security.Cryptography.Xml 10.0.13 transitively

Pin System.Security.Cryptography.Xml to the first patched 8.0 release.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 0ead6371-ff39-4f04-9e1b-4b4e64df2459
Upgrade DarcLib and its direct dependency floors, and adapt to the current authentication, telemetry, and pull request APIs.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 0ead6371-ff39-4f04-9e1b-4b4e64df2459
@lbussell
lbussell marked this pull request as ready for review October 19, 2026 17:42
@lbussell
lbussell requested a review from a team as a code owner October 19, 2026 17:42
@lbussell
lbussell enabled auto-merge (squash) October 19, 2026 20:00
@lbussell
lbussell merged commit 30660d5 into dotnet:nightly Oct 19, 2026
130 checks passed
@lbussell
lbussell deleted the lbussell/fix-cryptography-alert branch October 19, 2026 20:20
@github-actions github-actions Bot added the needs-backport PR that should be backported to another branch label Oct 19, 2026
lbussell added a commit that referenced this pull request Nov 5, 2026
Copilot-Session: 0ead6371-ff39-4f04-9e1b-4b4e64df2459
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

needs-backport PR that should be backported to another branch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants