| FazBrowse GitHub Viewer | Trending | | Home |
| Tools: [Download Repo ZIP] [Original HTTPS Page] |
Sorry, something went wrong.
There was a problem hiding this comment.
This PR updates the AI Chat Web project template dependency baselines while reverting prior “workaround” pins/references added in #7561 (MessagePack) and #7579 (SQLitePCLRaw bundle). The intent is to keep the dependency upgrades but simplify the template output and associated snapshot expectations.
Changes:
Copilot reviewed 9 out of 9 changed files in this pull request and generated 1 comment.
Show a summary per file| File | Description |
|---|---|
| eng/packages/ProjectTemplates.props | Bumps Aspire AppHost + SqliteVec baselines; removes MessagePack/SQLite bundle pins; aligns System.Linq.AsyncEnumerable override. |
| eng/packages/Tests.props | Bumps CommunityToolkit.VectorData.SqliteVec used by tests to 1.0.0-preview.4. |
| src/ProjectTemplates/.../AIChatWeb-CSharp.Web.csproj-in | Removes explicit SQLitePCLRaw.bundle_e_sqlite3 PackageReference from local vector store configuration. |
| src/ProjectTemplates/.../AIChatWeb-CSharp.AppHost.csproj-in | Removes explicit MessagePack PackageReference from AppHost template. |
| test/.../aichatweb.o_q.../aichatweb.AppHost.csproj | Snapshot update removing MessagePack reference (Qdrant + Aspire variant). |
| test/.../aichatweb.A.../aichatweb.Web.csproj | Snapshot update removing SQLitePCLRaw bundle reference (Aspire variant). |
| test/.../aichatweb.A.../aichatweb.AppHost.csproj | Snapshot update removing MessagePack reference (Aspire variant). |
| test/.../aichatweb.A_aoai_aais.../aichatweb.AppHost.csproj | Snapshot update removing MessagePack reference (Aspire + Azure variant). |
| test/.../aichatweb._defaults.../aichatweb.csproj | Snapshot update removing SQLitePCLRaw bundle reference (defaults variant). |
Sorry, something went wrong.
…teVec (#7639) * Revert template dependency workarounds and bump package versions * Remove NuGetAuditSuppress for GHSA-2m69-gcr7-jv3q from DataIngestion tests --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
| Back | FazBrowse Home | New Git URL |
This PR rolls back the workaround-heavy dependency changes introduced in #7561 and #7579, while keeping the intended dependency upgrades. It updates AI template dependency baselines by bumping Aspire.Hosting.AppHost and CommunityToolkit.VectorData.SqliteVec, and removes explicit workaround references that are no longer desired.
Dependency baseline updates
Reverted PR Fix transitive MessagePack vulnerability in AI template AppHost projects #7561 workaround surface
Reverted PR Fix SQLitePCLRaw.lib.e_sqlite3 vulnerability by replacing SemanticKernel connectors with CommunityToolkit #7579 SQLite bundle workaround surface
Example (template dependency simplification):
Microsoft Reviewers: Open in CodeFlow