dohertj2/ScadaBridge
1
0
Fork 0
Code Issues 2 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

chore(secrets): bump ZB.MOM.WW.Secrets 0.1.2 -> 0.2.0

Browse Source 
Version hygiene + picks up the G-8 KEK-rotation surface, and is the precondition
for adopting clustered secret replication.

NOT a security fix for this repo, despite what the original message said. A/B
against the 0.1.2 baseline shows SQLitePCLRaw.lib.e_sqlite3 already resolved
2.1.12, supplied transitively by ZB.MOM.WW.Auth.ApiKeys 0.1.5 (commit 50d79ed1).

Note: Directory.Packages.props suppresses GHSA-2m69-gcr7-jv3q and its comment
asserts 'the only patched native lib is the SQLitePCLRaw 3.x line'. That appears
incorrect for this advisory - 2.1.12 patches it. Settle before removing the
suppression; HistorianGateway's separate 3.50.3 pin cites a DIFFERENT CVE
(CVE-2025-6965), which may be the source of the confusion.
This commit is contained in:
Joseph Doherty
2026-07-18 05:22:10 -04:00
parent 50d79ed1c0
commit 86d48ff8a5
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Directory.Packages.props
+3 -3
View File
@@ -86,9 +86,9 @@
<PackageVersion Include="ZB.MOM.WW.Auth.AspNetCore" Version="0.1.5" /> <PackageVersion Include="ZB.MOM.WW.Auth.AspNetCore" Version="0.1.5" />
<PackageVersion Include="ZB.MOM.WW.Audit" Version="0.1.0" /> <PackageVersion Include="ZB.MOM.WW.Audit" Version="0.1.0" />
<PackageVersion Include="ZB.MOM.WW.Theme" Version="0.3.1" /> <PackageVersion Include="ZB.MOM.WW.Theme" Version="0.3.1" />
<PackageVersion Include="ZB.MOM.WW.Secrets" Version="0.1.2" /> <PackageVersion Include="ZB.MOM.WW.Secrets" Version="0.2.0" />
<PackageVersion Include="ZB.MOM.WW.Secrets.Abstractions" Version="0.1.2" /> <PackageVersion Include="ZB.MOM.WW.Secrets.Abstractions" Version="0.2.0" />
<PackageVersion Include="ZB.MOM.WW.Secrets.Ui" Version="0.1.2" /> <PackageVersion Include="ZB.MOM.WW.Secrets.Ui" Version="0.2.0" />
</ItemGroup> </ItemGroup>
<!-- <!--