Revise dependencies with special regard to OOB packages (#71)

configcat · Jun 5, 2023 · fe45139 · fe45139
1 parent 5c9c8ce
commit fe45139
Showing 1 changed file with 24 additions and 7 deletions.
diff --git a/src/ConfigCatClient/ConfigCatClient.csproj b/src/ConfigCatClient/ConfigCatClient.csproj
@@ -56,6 +56,8 @@
       <ItemGroup>
         <Reference Include="System.Net.Http" />
         <PackageReference Include="Newtonsoft.Json" Version="13.0.2" />
+        <!--Do not remove this reference, it was added due to a SNYK security report-->
+        <PackageReference Include="System.Text.RegularExpressions" Version="4.3.1" />
         <PackageReference Include="System.Threading.Tasks.Extensions" Version="4.5.4" />
         <PackageReference Include="System.Memory" Version="4.5.5" />
       </ItemGroup>
@@ -64,16 +66,33 @@
     <When Condition="'$(TargetFramework)' == 'net461'">
       <ItemGroup>
         <Reference Include="System.Net.Http" />
-        <PackageReference Include="System.Text.Json" Version="6.0.5" />
+        <!--Do not remove this reference, it was added due to a SNYK security report-->
+        <PackageReference Include="System.Text.RegularExpressions" Version="4.3.1" />
+        <PackageReference Include="System.Text.Json" Version="6.0.0" />
       </ItemGroup>
     </When>
 
-    <Otherwise>
+    <When Condition="'$(TargetFramework)' == 'netstandard2.0'">
       <ItemGroup>
-        <PackageReference Include="System.Net.Http" Version="4.3.4" />
-        <PackageReference Include="System.Text.Json" Version="6.0.5" />
+        <!--Do not remove this reference, it was added due to a SNYK security report-->
+        <PackageReference Include="System.Text.RegularExpressions" Version="4.3.1" />
+        <PackageReference Include="System.Text.Json" Version="6.0.0" />
       </ItemGroup>
-    </Otherwise>
+    </When>
+
+    <When Condition="'$(TargetFramework)' == 'netstandard2.1'">
+      <ItemGroup>
+        <!--Do not remove this reference, it was added due to a SNYK security report-->
+        <PackageReference Include="System.Text.RegularExpressions" Version="4.3.1" />
+        <PackageReference Include="System.Text.Json" Version="6.0.0" />
+      </ItemGroup>
+    </When>
+
+    <When Condition="'$(TargetFramework)' == 'net5.0'">
+      <ItemGroup>
+        <PackageReference Include="System.Text.Json" Version="6.0.0" />
+      </ItemGroup>
+    </When>
   </Choose>
 
   <ItemGroup>
@@ -82,8 +101,6 @@
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
     </PackageReference>
     <PackageReference Include="Microsoft.SourceLink.GitHub" Version="1.1.1" PrivateAssets="all" />
-    <!--Do not remove this reference, it was added due to a SNYK security report-->
-    <PackageReference Include="System.Text.RegularExpressions" Version="4.3.1" />
     <None Include="icon.png" Pack="true" Visible="false" PackagePath="" />
     <None Include="..\..\README.md" Pack="true" PackagePath="" />
   </ItemGroup>