Skip to content

[.NET SDK] Upgrades test dependencies (xunit 2.9.3, Microsoft.NET.Test.Sdk 18.0.1) - #580

Merged
gbiernacki-dropbox merged 1 commit into
mainfrom
dotnet-test-deps-update
Oct 19, 2026
Merged

gbiernacki-dropbox merged 1 commit into
mainfrom
dotnet-test-deps-update

Conversation

@gbiernacki-dropbox

Copy link
Copy Markdown
Contributor

Upgrades the .NET SDK test project dependencies:

  • xunit 2.4.1 → 2.9.3
  • xunit.runner.visualstudio 2.4.1 → 3.1.5
  • Microsoft.NET.Test.Sdk 17.2.0 → 18.0.1

This removes the outdated transitive System.Net.Http, System.Text.RegularExpressions and System.Xml.ReaderWriter 4.3.0 packages (CVE-2018-8292, CVE-2019-0820, CVE-2018-0764) pulled in by the old xunit.

Test-only change: the Dropbox.Sign package contents are unchanged. It will ship as a patch release (2.5.1) to bring the fix to the SDK repository.

@gbiernacki-dropbox gbiernacki-dropbox added the SDK - Dotnet Affects the Dotnet SDK label Oct 19, 2026
@gbiernacki-dropbox
gbiernacki-dropbox merged commit 678d51f into main Oct 19, 2026
9 checks passed
@gbiernacki-dropbox
gbiernacki-dropbox deleted the dotnet-test-deps-update branch October 19, 2026 06:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

SDK - Dotnet Affects the Dotnet SDK

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants