VIH-11085 Upgrade packages with known vulnerabilities (#168)

hmcts · Nov 30, 2024 · 8ae695c · 8ae695c
1 parent 8ac0057
commit 8ae695c
Show file tree

Hide file tree

Showing 26 changed files with 1,254 additions and 1,238 deletions.
diff --git a/NotificationApi/NotificationApi.AcceptanceTests/ApiTests/AcApiTest.cs b/NotificationApi/NotificationApi.AcceptanceTests/ApiTests/AcApiTest.cs
@@ -15,6 +15,8 @@ namespace NotificationApi.AcceptanceTests.ApiTests;
 
 public abstract class AcApiTest
 {
+    protected readonly Bogus.Faker Faker = new();
+
     private IConfigurationRoot _configRoot;
     private AzureAdConfiguration _azureConfiguration;
     private ServicesConfiguration _serviceConfiguration;

diff --git a/NotificationApi/NotificationApi.AcceptanceTests/NotificationApi.AcceptanceTests.csproj b/NotificationApi/NotificationApi.AcceptanceTests/NotificationApi.AcceptanceTests.csproj
@@ -11,7 +11,7 @@
     <PropertyGroup><ErrorOnDuplicatePublishOutputFiles>false</ErrorOnDuplicatePublishOutputFiles></PropertyGroup>
   <ItemGroup>      
     <PackageReference Include="FluentAssertions" Version="6.12.0" />      
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.9.0" />      
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.11.1" />      
     <PackageReference Include="NUnit" Version="4.1.0" />
     <PackageReference Include="NUnit3TestAdapter" Version="4.5.0">
       <PrivateAssets>all</PrivateAssets>

diff --git a/NotificationApi/NotificationApi.AcceptanceTests/packages.lock.json b/NotificationApi/NotificationApi.AcceptanceTests/packages.lock.json
diff --git a/NotificationApi/NotificationApi.Common/NotificationApi.Common.csproj b/NotificationApi/NotificationApi.Common/NotificationApi.Common.csproj
@@ -9,7 +9,7 @@
     <PackageReference Include="Microsoft.ApplicationInsights.AspNetCore" Version="2.22.0" />
     <PackageReference Include="Microsoft.Extensions.Caching.Abstractions" Version="8.0.0" />
     <PackageReference Include="Microsoft.Extensions.Logging.ApplicationInsights" Version="2.22.0" />
-    <PackageReference Include="Microsoft.Identity.Client" Version="4.60.3" />
+    <PackageReference Include="Microsoft.Identity.Client" Version="4.66.2" />
     <PackageReference Include="Newtonsoft.Json" Version="13.0.3" />
     <PackageReference Include="SonarAnalyzer.CSharp" Version="9.24.0.89429">
       <PrivateAssets>all</PrivateAssets>

diff --git a/NotificationApi/NotificationApi.Common/packages.lock.json b/NotificationApi/NotificationApi.Common/packages.lock.json
@@ -56,9 +56,9 @@
       },
       "Microsoft.Identity.Client": {
         "type": "Direct",
-        "requested": "[4.60.3, )",
-        "resolved": "4.60.3",
-        "contentHash": "jve1RzmSpBhGlqMzPva6VfRbLMLZZc1Q8WRVZf8+iEruQkBgDTJPq8OeTehcY4GGYG1j6UB1xVofVE+n4BLDdw==",
+        "requested": "[4.66.2, )",
+        "resolved": "4.66.2",
+        "contentHash": "OsWRWpJs5iY9DxAF7DfWRGVNeFhjz75x+/bpHKB9Hbnu3THUgqYfQrYeQMgwx30ctweiV7h00aQpEua2kLeUpg==",
         "dependencies": {
           "Microsoft.IdentityModel.Abstractions": "6.35.0",
           "System.Diagnostics.DiagnosticSource": "6.0.1"
@@ -706,4 +706,4 @@
       }
     }
   }
-}
+}
diff --git a/NotificationApi/NotificationApi.DAL/NotificationApi.DAL.csproj b/NotificationApi/NotificationApi.DAL/NotificationApi.DAL.csproj
@@ -4,25 +4,27 @@
     <DisableImplicitNuGetFallbackFolder>true</DisableImplicitNuGetFallbackFolder>
   </PropertyGroup>
   <ItemGroup>
+    <PackageReference Include="Azure.Identity" Version="1.11.4" />
     <PackageReference Include="GovukNotify" Version="7.0.0" />
-    <PackageReference Include="Microsoft.EntityFrameworkCore" Version="8.0.4" />
-    <PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="8.0.4">
+    <PackageReference Include="Microsoft.EntityFrameworkCore" Version="8.0.10" />
+    <PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="8.0.10">
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
     </PackageReference>
-    <PackageReference Include="Microsoft.EntityFrameworkCore.Proxies" Version="8.0.4" />
-    <PackageReference Include="Microsoft.EntityFrameworkCore.SqlServer" Version="8.0.4" />
-    <PackageReference Include="Microsoft.EntityFrameworkCore.Tools" Version="8.0.4">
+    <PackageReference Include="Microsoft.EntityFrameworkCore.Proxies" Version="8.0.10" />
+    <PackageReference Include="Microsoft.EntityFrameworkCore.SqlServer" Version="8.0.10" />
+    <PackageReference Include="Microsoft.EntityFrameworkCore.Tools" Version="8.0.10">
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
     </PackageReference>
-    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="8.0.0" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.UserSecrets" Version="8.0.0" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="8.0.1" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.UserSecrets" Version="8.0.1" />
     <PackageReference Include="Newtonsoft.Json" Version="13.0.3" />
     <PackageReference Include="SonarAnalyzer.CSharp" Version="9.24.0.89429">
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
     </PackageReference>
+    <PackageReference Include="System.Formats.Asn1" Version="8.0.1" />
   </ItemGroup>
   <ItemGroup>
     <ProjectReference Include="..\NotificationApi.Common\NotificationApi.Common.csproj" />