Releases: Ken-Tucker/OpenWeatherMap.Standard
V3
Now supports .net 8 and .net standard 2.0
Added sbom to nuget package
Updated samples to include an Avalonia UI sample
What's Changed
- update code ql query by @vb2ae in #41
- Update codeql-config.yml by @vb2ae in #42
- fix codeql issues by @vb2ae in #43
- last issue by @vb2ae in #44
- Updated Multilingual support by @mvietri in #45
- Update OpenWeatherMap.Standard.csproj by @vb2ae in #46
- Update codeql-analysis.yml by @vb2ae in #47
- 6 add wpf sample by @vb2ae in #50
- Update codeql-analysis.yml by @vb2ae in #51
- Update dotnet-core.yml by @vb2ae in #52
- Update dotnet-core.yml by @vb2ae in #53
- Update dotnet-core.yml by @vb2ae in #54
- Update dotnet-core.yml by @vb2ae in #55
- Update dotnet-core.yml by @vb2ae in #56
- Increase code coverage by @vb2ae in #59
- Update README.md by @vb2ae in #60
- update code coverage action by @vb2ae in #61
- Update codeql-config.yml by @vb2ae in #62
- Create dependabot.yml by @vb2ae in #63
- Bump Microsoft.NET.Test.Sdk from 17.11.1 to 17.12.0 by @dependabot in #64
- Update README.md by @vb2ae in #65
- Create FUNDING.yml by @vb2ae in #69
- Bump Avalonia from 11.2.1 to 11.2.2 by @dependabot in #70
- Simplify exception handling in RestServiceCaller.cs by @vb2ae in #72
- add deploy to push nupkg to nuget by @vb2ae in #73
- Bump Avalonia and Avalonia.Desktop by @dependabot in #77
- Bump Avalonia and Avalonia.Fonts.Inter by @dependabot in #76
- Bump Avalonia and Avalonia.Themes.Fluent by @dependabot in #75
- Add strong name and sboms by @vb2ae in #78
- Update CI configs, add versioning, and package metadata by @vb2ae in #80
- Bump CommunityToolkit.Mvvm from 8.3.2 to 8.4.0 by @dependabot in #79
- Update NuGet handling in GitHub Actions workflow by @vb2ae in #81
- fix path by @vb2ae in #82
- Update package feed URL and fix dotnet pack config case by @vb2ae in #83
- Update NuGet upload path in dotnet-core.yml by @vb2ae in #84
- fix by @vb2ae in #85
- Bump Avalonia and Avalonia.Fonts.Inter by @dependabot in #90
- Bump xunit.runner.visualstudio from 2.8.2 to 3.0.0 by @dependabot in #88
- Update xunit by @vb2ae in #91
Full Changelog: V2.0...V3
Contributors
Assets 2
Release 2.0
V1.7
Fixes security issue
Newtonsoft.Json prior to version 13.0.1 is vulnerable to Insecure Defaults due to improper handling of StackOverFlow exception (SOE) whenever nested expressions are being processed. Exploiting this vulnerability results in Denial Of Service (DoS), and it is exploitable when an attacker sends 5 requests that cause SOE in time frame of 5 minutes. This vulnerability affects Internet Information Services (IIS) Applications.
References
JamesNK/Newtonsoft.Json#2457
JamesNK/Newtonsoft.Json#2462
JamesNK/Newtonsoft.Json@7e77bbe
https://alephsecurity.com/2018/10/22/StackOverflowException/
https://alephsecurity.com/vulns/aleph-2018004
https://security.snyk.io/vuln/SNYK-DOTNET-NEWTONSOFTJSON-2774678