rock-sample-data/Directory.Build.props at main · SparkDevNetwork/rock-sample-data · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
<Project>

  <!-- Settings shared by every project. The loader library and its compatibility check also build for net472. -->
  <PropertyGroup>
    <TargetFramework>net10.0</TargetFramework>
    <Nullable>disable</Nullable>
    <ImplicitUsings>enable</ImplicitUsings>
  </PropertyGroup>

  <ItemGroup>
    <!--
      Rock's ImageSharp 2.1.12 has open advisories. The loader draws images it creates itself,
      and the builder decodes outside files only when delivering photos, which a developer runs
      on our own image model's output. So these do not apply here. Remove once Rock moves to a
      fixed version.
    -->
    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-gwg2-r3hj-4w44" />
    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-j3p4-wp97-rph4" />
    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-j9gm-c75j-xc9q" />
    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-jjfr-hcj7-qf5w" />
    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-wmxv-xphr-5c9g" />

    <!--
      On .NET Framework, the loader uses Rock's Microsoft.Data.SqlClient 6.1.4, which brings
      System.Security.Cryptography.Pkcs 8.0.1, the version Rock ships. A newer one would put a
      second version into RockWeb/bin. The loader never reads certificates or signed data itself.
      The .NET 10 build pins a fixed version. Remove these once Rock moves to a fixed version.
    -->
    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-2fmv-rv2c-59x7" />
    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-846f-f764-76mx" />
  </ItemGroup>

</Project>