Skip to content

fix security Vulnerability#105

Merged
danielloganking merged 1 commit intodevelopfrom
fix-vulnerability
Jan 27, 2026
Merged

fix security Vulnerability#105
danielloganking merged 1 commit intodevelopfrom
fix-vulnerability

Conversation

@yongliu-mdsol
Copy link
Contributor

fixing two vulnerabilities reported by dependabot.

Copilot AI review requested due to automatic review settings January 27, 2026 00:31
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR addresses security vulnerabilities by updating dependencies to patched versions. The changes upgrade Microsoft.Owin packages from version 4.2.0 to 4.2.3 and Microsoft.Extensions.Caching.Memory from 6.0.1 to 6.0.3, as identified by Dependabot security alerts.

Changes:

  • Updated Microsoft.Owin-related packages to version 4.2.3
  • Updated Microsoft.Extensions.Caching.Memory to version 6.0.3

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File Description
tests/Medidata.MAuth.OwinTests/Medidata.MAuth.OwinTests.csproj Updated three Microsoft.Owin test dependencies to patched version 4.2.3
src/Medidata.MAuth.Owin/Medidata.MAuth.Owin.csproj Updated Microsoft.Owin package to patched version 4.2.3
src/Medidata.MAuth.Core/Medidata.MAuth.Core.csproj Updated Microsoft.Extensions.Caching.Memory to patched version 6.0.3

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copy link
Contributor

@danielloganking danielloganking left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@danielloganking danielloganking merged commit a0a87ee into develop Jan 27, 2026
3 checks passed
@danielloganking danielloganking deleted the fix-vulnerability branch January 27, 2026 14:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants