Skip to content

[release/v7.6.5] Update branch for release - #27787

Open
Patrick Meinecke (SeeminglyScience) wants to merge 2 commits into
PowerShell:release/v7.6.5from
SeeminglyScience:manual/automation/package-references/release/v7.6.5-b91d454f1-7894349af
Open

[release/v7.6.5] Update branch for release#27787
Patrick Meinecke (SeeminglyScience) wants to merge 2 commits into
PowerShell:release/v7.6.5from
SeeminglyScience:manual/automation/package-references/release/v7.6.5-b91d454f1-7894349af

Conversation

@SeeminglyScience

Copy link
Copy Markdown
Contributor

(manual cherry pick of #27786)

lts - Automated by PowerShell Bot

Note for reviewers: This PR uses transitive dependency pinning (transitive=true, versionLock=minor). If this is the first time this workflow has run on this branch, a large number of transitive dependencies may appear pinned. This is expected behavior.

Copilot AI lite review requested due to automatic review settings August 9, 2026 16:57
@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

@SeeminglyScience Patrick Meinecke (SeeminglyScience) added the CL-BuildPackaging Indicates that a PR should be marked as a build or packaging change in the Change Log label Aug 9, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the release/v7.6.5 branch for release by bumping System.Security.Cryptography.Xml and its related dependency System.Security.Cryptography.Pkcs to address reported security vulnerabilities and keep package manifests in sync.

Changes:

  • Bump System.Security.Cryptography.Xml from 10.0.6 to 10.0.10 (security-related).
  • Bump System.Security.Cryptography.Pkcs from 10.0.6 to 10.0.10 (dependency constraint alignment).
  • Record the dependency updates in the v7.6 changelog dependency changes file.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.

File Description
tools/cgmanifest/main/cgmanifest.json Updates CG manifest entries for System.Security.Cryptography.Pkcs and System.Security.Cryptography.Xml to 10.0.10.
test/tools/TestService/TestService.csproj Updates package references for Pkcs and Xml to 10.0.10.
src/Microsoft.PowerShell.SDK/Microsoft.PowerShell.SDK.csproj Updates package references for Pkcs and Xml to 10.0.10.
CHANGELOG/v7.6/dependencychanges.json Adds entries documenting the Xml security update and the Pkcs follow-on update.

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

"https://github.com/advisories/GHSA-g8r8-53c2-pm3f",
"https://github.com/advisories/GHSA-mmjf-rqrv-855v"
],
"Justification": "",
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CL-BuildPackaging Indicates that a PR should be marked as a build or packaging change in the Change Log

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants