Skip to content

Update DarcLib to the latest version - #7421

Merged
lbussell merged 2 commits into
dotnet:nightlyfrom
lbussell:lbussell/fix-cryptography-alert
Oct 19, 2026
Merged

lbussell merged 2 commits into
dotnet:nightlyfrom
lbussell:lbussell/fix-cryptography-alert

Conversation

@lbussell

Copy link
Copy Markdown
Member

Microsoft.DotNet.DarcLib transitively resolves a vulnerable version of System.Security.Cryptography.Xml.

This PR updates DarcLib to the latest available version and applies the corresponding dependency and API migrations.

  • Updates Microsoft.DotNet.DarcLib to 1.1.0-beta.26519.4
  • Updates Azure.Identity, LibGit2Sharp, and Microsoft.TeamFoundationServer.Client to the versions required by DarcLib
  • Adapts to the updated Azure DevOps authentication, credentials, telemetry, and pull request APIs
  • Resolves System.Security.Cryptography.Xml 10.0.13 transitively

Pin System.Security.Cryptography.Xml to the first patched 8.0 release.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 0ead6371-ff39-4f04-9e1b-4b4e64df2459
Upgrade DarcLib and its direct dependency floors, and adapt to the current authentication, telemetry, and pull request APIs.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 0ead6371-ff39-4f04-9e1b-4b4e64df2459
@lbussell
lbussell marked this pull request as ready for review October 19, 2026 17:42
@lbussell
lbussell requested a review from a team as a code owner October 19, 2026 17:42
@lbussell
lbussell enabled auto-merge (squash) October 19, 2026 20:00
@lbussell
lbussell merged commit 30660d5 into dotnet:nightly Oct 19, 2026
130 checks passed
@lbussell
lbussell deleted the lbussell/fix-cryptography-alert branch October 19, 2026 20:20
@github-actions github-actions Bot added the needs-backport PR that should be backported to another branch label Oct 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

needs-backport PR that should be backported to another branch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants