Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix Component Governance alerts #254

Merged
merged 5 commits into from
Aug 14, 2024
Merged

Fix Component Governance alerts #254

merged 5 commits into from
Aug 14, 2024

Conversation

msftrubengu
Copy link
Contributor

The following packages were updated:

  • Microsoft.Extensions.Configuration.AzureAppConfiguration from 4.1.0 to 7.2.0
  • Microsoft.Extensions.Configuration.Binder from 3.1.12 to 6.0.0
  • Microsoft.Extensions.DependencyInjection from 3.1.12 to 6.0.1
  • Azure.Identity from 1.11.3 to 1.11.4

The following packages were explicitly updated as the flagged version is a dependency of another pacakge:

  • System.Data.SqlClient 4.8.6
  • Azure.Security.KeyVault.Secrets 4.6.0

Other changes:

  • The TelemetryConfiguration constructor with the instrumentation key is now obsolete. Instead one must set the connection string.
  • There are more static analysis for Azure functions. In this case, we cannot use a member object in an orchestrator. Removed calls to telemetryClient. We are still going to get telemetry for activity functions.

@msftrubengu msftrubengu requested a review from a team as a code owner August 14, 2024 18:46
@msftrubengu msftrubengu merged commit 05d4836 into main Aug 14, 2024
4 checks passed
@msftrubengu msftrubengu deleted the cg branch August 14, 2024 22:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants