Skip to content

Deprecated transitive dependency on Microsoft.NETCore.Targets #580

Closed
@david-brink-talogy

Description

@david-brink-talogy

Please clearly describe what the SQL Sink is doing incorrectly:

Serilog.Sinks.MsSqlServer has a dependency on System.Private.Uri, which in turn depends on package Microsoft.NETCore.Targets, which is listed as deprecated on nuget.org.

An explicit reference to System.Private.Uri was added on #555 to address a vulnerability. The README for this package notes that "Internal implementation package not meant for direct consumption. Please do not reference directly". System.Private.Uri is only seen as a dependency when a project specifies runtime identifiers in its configuration.

Please clearly describe the expected behavior:

Serilog.Sinks.MsSqlServer does not depend on deprecated packages.

List the names and versions of all Serilog packages used in the project:

  • Serilog: 4.0.0
  • Serilog.Sinks.MSSqlServer: 7.0.1
  • (configuration, etc.): N/A

Target framework and operating system:

[x] .NET 6
[ ] .NET Framework 4.8
[ ] .NET Framework 4.7
[ ] .NET Framework 4.6
OS: Windows 10

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions