Merge pull request #3966 from eugene-doobu/feature/resolve-cve-2024-4…

…3485 resolve CVE-2024-43485
planetarium · Oct 14, 2024 · df2c36e · df2c36e
2 parents 940e7a4 + c7e30ee
commit df2c36e
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/CHANGES.md b/CHANGES.md
@@ -22,8 +22,13 @@ To be released.
 
 ### Dependencies
 
+ -  (Libplanet.Extensions.Cocona) Changed *System.Text.Json* from [6.0.7] to
+    [6.0.*].  [[#3966]]
+
 ### CLI tools
 
+[#3966]: https://github.com/planetarium/libplanet/pull/3966
+
 
 Version 5.3.0
 -------------

diff --git a/tools/Libplanet.Extensions.Cocona/Libplanet.Extensions.Cocona.csproj b/tools/Libplanet.Extensions.Cocona/Libplanet.Extensions.Cocona.csproj
@@ -8,7 +8,7 @@
   <ItemGroup>
     <PackageReference Include="Cocona.Lite" Version="2.0.*" />
     <PackageReference Include="System.ValueTuple" Version="4.5.0" />
-    <PackageReference Include="System.Text.Json" Version="6.0.7" />
+    <PackageReference Include="System.Text.Json" Version="6.0.*" />
   </ItemGroup>
 
   <ItemGroup Condition="'$(SkipSonar)' != 'true'">