From: miniduikboot <mini@duikbo.at>
Date: Sun, 28 Jul 2024 20:30:55 +0000 (+0200)
Subject: Bump System.Text.Json to 8.0.4
X-Git-Tag: v1.10.0~13
X-Git-Url: https://git.deb.at/?a=commitdiff_plain;h=2d82e1af198d51d76566cb779be1d7456d7358d9;p=rhonda%2Fimpostor.git

Bump System.Text.Json to 8.0.4

Fixes CVE-2024-30105 (High 7.5/10)
https://github.com/advisories/GHSA-hh2w-p6rv-4g7w

Impostor doesn't use the affected
JsonSerializer.DeserializeAsyncEnumerable method as it doesn't accept
JSON formatted payloads, but the NU1903 warning is shown on all builds,
leading to warning fatigue.
---

diff --git a/src/Impostor.Api.Innersloth.Generator/Impostor.Api.Innersloth.Generator.csproj b/src/Impostor.Api.Innersloth.Generator/Impostor.Api.Innersloth.Generator.csproj
index 33551f4..a042c52 100644
--- a/src/Impostor.Api.Innersloth.Generator/Impostor.Api.Innersloth.Generator.csproj
+++ b/src/Impostor.Api.Innersloth.Generator/Impostor.Api.Innersloth.Generator.csproj
@@ -14,7 +14,7 @@
     <PackageReference Include="Microsoft.CodeAnalysis.Analyzers" Version="3.3.4" PrivateAssets="all" />
     <PackageReference Include="PolySharp" Version="1.14.1" PrivateAssets="all" />
 
-    <PackageReference Include="System.Text.Json" Version="8.0.0" PrivateAssets="all" GeneratePathProperty="true" />
+    <PackageReference Include="System.Text.Json" Version="8.0.4" PrivateAssets="all" GeneratePathProperty="true" />
     <PackageReference Include="System.Text.Encodings.Web" Version="8.0.0" PrivateAssets="all" GeneratePathProperty="true" />
     <PackageReference Include="Microsoft.Bcl.AsyncInterfaces" Version="8.0.0" PrivateAssets="all" GeneratePathProperty="true" />
 
diff --git a/src/Impostor.Api.Innersloth.Generator/packages.lock.json b/src/Impostor.Api.Innersloth.Generator/packages.lock.json
index ad66cb1..4dd2e79 100644
--- a/src/Impostor.Api.Innersloth.Generator/packages.lock.json
+++ b/src/Impostor.Api.Innersloth.Generator/packages.lock.json
@@ -60,9 +60,9 @@
       },
       "System.Text.Json": {
         "type": "Direct",
-        "requested": "[8.0.0, )",
-        "resolved": "8.0.0",
-        "contentHash": "OdrZO2WjkiEG6ajEFRABTRCi/wuXQPxeV6g8xvUJqdxMvvuCCEk86zPla8UiIQJz3durtUEbNyY/3lIhS0yZvQ==",
+        "requested": "[8.0.4, )",
+        "resolved": "8.0.4",
+        "contentHash": "bAkhgDJ88XTsqczoxEMliSrpijKZHhbJQldhAmObj/RbrN3sU5dcokuXmWJWsdQAhiMJ9bTayWsL1C9fbbCRhw==",
         "dependencies": {
           "Microsoft.Bcl.AsyncInterfaces": "8.0.0",
           "System.Buffers": "4.5.1",