Release 0.5.2, CVE update (#338)

* update dependencies for CVE-2023-29331 * Increment version to 0.5.2 * updating nuspec per CR
Azure · Jul 17, 2023 · fc07a3a · fc07a3a
1 parent 31d3026
commit fc07a3a
Show file tree

Hide file tree

Showing 6 changed files with 13 additions and 12 deletions.
diff --git a/src/Analyzer.Core.NuGet/Analyzer.Core.nuspec b/src/Analyzer.Core.NuGet/Analyzer.Core.nuspec
@@ -13,12 +13,12 @@
     <dependencies>
       <group targetFramework="net6.0">
         <dependency id="Azure.Bicep.Core" version="0.14.85" />
-        <dependency id="Azure.Deployments.Core" version="1.0.815" />
-        <dependency id="Azure.Deployments.Expression" version="1.0.815" />
-        <dependency id="Azure.Deployments.Templates" version="1.0.815" />
+        <dependency id="Azure.Deployments.Core" version="1.0.1010" />
+        <dependency id="Azure.Deployments.Expression" version="1.0.1010" />
+        <dependency id="Azure.Deployments.Templates" version="1.0.1010" />
         <dependency id="Newtonsoft.Json" version="13.0.3" />
         <dependency id="Microsoft.Extensions.Logging.Abstractions" version="6.0.1" />
-        <dependency id="Microsoft.PowerShell.SDK" version="7.2.4" />
+        <dependency id="Microsoft.PowerShell.SDK" version="7.2.12" />
         <dependency id="Microsoft.PSRule.Rules.Azure" version="1.22.0-B0011" />
         <dependency id="Microsoft.PSRule.SDK" version="2.6.0-B0013" />
         <dependency id="Sarif.Sdk" version="2.4.12" />

diff --git a/src/Analyzer.PowerShellRuleEngine/Analyzer.PowerShellRuleEngine.csproj b/src/Analyzer.PowerShellRuleEngine/Analyzer.PowerShellRuleEngine.csproj
@@ -7,7 +7,7 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.PowerShell.SDK" Version="7.2.4" />
+    <PackageReference Include="Microsoft.PowerShell.SDK" Version="7.2.12" />
     <PackageReference Include="Microsoft.PSRule.Rules.Azure" Version="1.26.0-B0011" />
     <PackageReference Include="Microsoft.PSRule.SDK" Version="2.8.0" />
   </ItemGroup>

diff --git a/src/Analyzer.TemplateProcessing.NuGet/Analyzer.TemplateProcessing.nuspec b/src/Analyzer.TemplateProcessing.NuGet/Analyzer.TemplateProcessing.nuspec
@@ -14,9 +14,9 @@
    <dependencies>
       <group targetFramework="net6.0">
         <dependency id="Azure.Bicep.Core" version="0.14.85" />
-        <dependency id="Azure.Deployments.Core" version="1.0.815" />
-        <dependency id="Azure.Deployments.Expression" version="1.0.815" />
-        <dependency id="Azure.Deployments.Templates" version="1.0.815" />
+        <dependency id="Azure.Deployments.Core" version="1.0.1010" />
+        <dependency id="Azure.Deployments.Expression" version="1.0.1010" />
+        <dependency id="Azure.Deployments.Templates" version="1.0.1010" />
         <dependency id="Newtonsoft.Json" version="13.0.3" />
         <dependency id="Microsoft.Extensions.Logging.Abstractions" version="6.0.1" />
       </group>

diff --git a/src/Analyzer.TemplateProcessor/Analyzer.TemplateProcessor.csproj b/src/Analyzer.TemplateProcessor/Analyzer.TemplateProcessor.csproj
@@ -7,9 +7,9 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Azure.Deployments.Core" Version="1.0.815" />
-    <PackageReference Include="Azure.Deployments.Expression" Version="1.0.815" />
-    <PackageReference Include="Azure.Deployments.Templates" Version="1.0.815" />
+    <PackageReference Include="Azure.Deployments.Core" Version="1.0.1010" />
+    <PackageReference Include="Azure.Deployments.Expression" Version="1.0.1010" />
+    <PackageReference Include="Azure.Deployments.Templates" Version="1.0.1010" />
     <PackageReference Include="Microsoft.Extensions.Logging.Abstractions" Version="6.0.1" />
   </ItemGroup>
 

diff --git a/src/Analyzer.TemplateProcessor/ArmTemplateProcessor.cs b/src/Analyzer.TemplateProcessor/ArmTemplateProcessor.cs
@@ -439,6 +439,7 @@ private TemplateExpressionEvaluationHelper GetTemplateFunctionEvaluationHelper(T
                 functionsLookup: functionsLookup,
                 parametersLookup: parametersLookup,
                 variablesLookup: variablesLookup,
+                validationContext: null,
                 diagnostics: null);
 
             // Set reference lookup

diff --git a/src/Directory.Build.props b/src/Directory.Build.props
@@ -1,6 +1,6 @@
 <Project>
   <PropertyGroup>
-    <Version>0.5.1</Version>
+    <Version>0.5.2</Version>
     <Authors>Microsoft</Authors>
     <Copyright>© Microsoft Corporation. All rights reserved.</Copyright>
   </PropertyGroup>