Skip to content

[release/v7.6.5] Update branch for release - #27786

Closed
powershell-pr-automation[bot] wants to merge 2 commits into
release/v7.6.5from
automation/package-references/release/v7.6.5-b91d454f1-7894349af
Closed

powershell-pr-automation[bot] wants to merge 2 commits into
release/v7.6.5from
automation/package-references/release/v7.6.5-b91d454f1-7894349af

Conversation

@powershell-pr-automation

Copy link
Copy Markdown
Contributor

lts - Automated by PowerShell Bot

Note for reviewers: This PR uses transitive dependency pinning (transitive=true, versionLock=minor). If this is the first time this workflow has run on this branch, a large number of transitive dependencies may appear pinned. This is expected behavior.

Copilot AI lite review requested due to automatic review settings August 8, 2026 03:49
@powershell-pr-automation powershell-pr-automation Bot added the CL-BuildPackaging Indicates that a PR should be marked as a build or packaging change in the Change Log label Aug 8, 2026
@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Updates cryptography-related NuGet dependencies to address reported vulnerabilities and keeps manifests/changelogs in sync.

Changes:

  • Bumped System.Security.Cryptography.Xml from 10.0.6 to 10.0.10 across manifest and project files.
  • Bumped System.Security.Cryptography.Pkcs from 10.0.6 to 10.0.10 to satisfy dependency constraints.
  • Added dependency change log entries (including CVEs/GHSAs) for the release branch.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.

File Description
tools/cgmanifest/main/cgmanifest.json Updates cgmanifest NuGet versions for Pkcs and Xml.
test/tools/TestService/TestService.csproj Bumps the Pkcs and Xml PackageReferences used by the test service.
src/Microsoft.PowerShell.SDK/Microsoft.PowerShell.SDK.csproj Bumps the Pkcs and Xml PackageReferences used by the SDK project.
CHANGELOG/v7.6/dependencychanges.json Records the dependency update with vulnerability metadata and rationale.

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

"https://github.com/advisories/GHSA-g8r8-53c2-pm3f",
"https://github.com/advisories/GHSA-mmjf-rqrv-855v"
],
"Justification": "",
@jshigetomi
Justin Chung (jshigetomi) deleted the automation/package-references/release/v7.6.5-b91d454f1-7894349af branch August 17, 2026 16:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CL-BuildPackaging Indicates that a PR should be marked as a build or packaging change in the Change Log

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants