Skip to content

fix(deps): pin Microsoft.OpenApi to 2.7.5 (GHSA-v5pm-xwqc-g5wc)#552

Merged
JerrettDavis merged 1 commit into
mainfrom
fix/vuln-openapi
Jul 3, 2026
Merged

fix(deps): pin Microsoft.OpenApi to 2.7.5 (GHSA-v5pm-xwqc-g5wc)#552
JerrettDavis merged 1 commit into
mainfrom
fix/vuln-openapi

Conversation

@JerrettDavis

Copy link
Copy Markdown
Owner

Co-Authored-By: Claude noreply@anthropic.com

Co-Authored-By: Claude <noreply@anthropic.com>
@github-actions

github-actions Bot commented Jul 3, 2026

Copy link
Copy Markdown
Contributor

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 1 package(s) with unknown licenses.
See the Details below.

License Issues

src/JD.AI.Gateway/JD.AI.Gateway.csproj

PackageVersionLicenseIssue Type
Microsoft.OpenApi>= 0NullUnknown License
Denied Licenses: GPL-2.0, GPL-3.0, AGPL-3.0

OpenSSF Scorecard

PackageVersionScoreDetails
nuget/Microsoft.OpenApi >= 0 UnknownUnknown

Scanned Files

  • src/JD.AI.Gateway/JD.AI.Gateway.csproj

@github-actions

github-actions Bot commented Jul 3, 2026

Copy link
Copy Markdown
Contributor

Code Coverage

Summary
  Generated on: 07/03/2026 - 03:17:39
  Coverage date: 07/03/2026 - 03:15:33 - 07/03/2026 - 03:17:29
  Parser: MultiReport (7x Cobertura)
  Assemblies: 23
  Classes: 1067
  Files: 591
  Line coverage: 74.6%
  Covered lines: 36826
  Uncovered lines: 12488
  Coverable lines: 49314
  Total lines: 97285
  Branch coverage: 61.8% (13934 of 22512)
  Covered branches: 13934
  Total branches: 22512
  Method coverage: 86.4% (6316 of 7308)
  Full method coverage: 74.2% (5425 of 7308)
  Covered methods: 6316
  Fully covered methods: 5425
  Total methods: 7308

@github-actions

github-actions Bot commented Jul 3, 2026

Copy link
Copy Markdown
Contributor

Test Results

7 641 tests   7 622 ✅  3m 2s ⏱️
    7 suites     19 💤
    7 files        0 ❌

Results for commit 60f5979.

@JerrettDavis JerrettDavis merged commit 8a42210 into main Jul 3, 2026
15 checks passed
@JerrettDavis JerrettDavis deleted the fix/vuln-openapi branch July 3, 2026 03:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant