Repository navigation
Conversation
New Pkcs and Xml advisories fail restore under warnings-as-errors, blocking every pull request. Signed-off-by: Yordis Prieto <yordis.prieto@gmail.com>
|
Warning Review limit reachedYou've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository. Next included review available in 6 minutes. View limit details
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. |
Bugbot couldn't run - usage limit reachedBugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit. A user or team admin can review and increase usage limits in the Cursor dashboard. (requestId: adeb5ecb-45ce-432c-b4ab-d25c6e8ed757) |
…ated The .NET 10 runtime keeps named mutex state under the user's home directory. The image created the eventstore user without one, so every node exited at startup with an IOException from the database lock. Creating the home directory lets the lock be acquired again. Signed-off-by: Yordis Prieto <yordis.prieto@gmail.com>
Bugbot couldn't run - usage limit reachedBugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit. A user or team admin can review and increase usage limits in the Cursor dashboard. (requestId: ec876a18-1746-4dbd-b5ad-992e677ca2ca) |
Note
Low Risk
Dependency version bumps and an explicit test project reference address known crypto advisories; the Docker user flag change only affects container user setup.
Overview
Bumps centrally managed System.Security.Cryptography.Pkcs and System.Security.Cryptography.Xml from
10.0.10to10.0.14so NuGet restore no longer fails on new security advisories when warnings are treated as errors.EventStore.SourceGenerators.Tests now references
System.Security.Cryptography.Pkcsexplicitly so the project uses the pinned10.0.14version instead of an older transitive dependency.Separately, the runtime Dockerfile creates a home directory for the
eventstoreuser (--create-homeinstead of--no-create-home).Reviewed by Cursor Bugbot for commit 53b231b. Bugbot is set up for automated code reviews on this repo. Configure here.