Skip to content

Pin the patched System.Text.Json under the notebook extension #2116

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Rafael-SOWNet merged 1 commit into from
Oct 24, 2026
Merged

Pin the patched System.Text.Json under the notebook extension #2116

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 8 additions & 0 deletions Sources/Wrappers/AngouriMath.Interactive/AngouriMath.Interactive.fsproj
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -51,6 +51,14 @@
against rather than the SDK's: 8.0.403 is Plotly.NET's floor, and 10.1 hung a C# kernel under a
host carrying 10.0. https://github.com/asc-community/AngouriMath/issues/2108 -->
<PackageReference Update="FSharp.Core" Version="8.0.403" />
<!-- Pinned to pull the patched build of a transitive dependency forward. Microsoft.DotNet.Interactive
1.0.0-beta.23611.1 brings System.Text.Json 8.0.0, which has two high severity advisories (NU1903),
GHSA-hh2w-p6rv-4g7w and GHSA-8g4q-xg66-9fp4; 8.0.6 is the patched build on the same major line.
Not an upgrade of that package: the host supplies it, and building against a newer one than the
host's is what hung a kernel through FSharp.Core, above. Remove this line once the
Microsoft.DotNet.Interactive reference moves to a build whose own dependency is patched.
https://github.com/asc-community/AngouriMath/issues/542 -->
<PackageReference Include="System.Text.Json" Version="8.0.6" />
</ItemGroup>

<ItemGroup>
Expand Down
Loading