SDK - Updated DotNet SDK to 10.0.300

CHANGELOG.md

@@ -5,8 +5,10 @@ All notable changes to this project will be documented in this file.
 Please ADD ALL Changes to the UNRELEASED SECTION and not a specific release
 -->
 ## [Unreleased]
+### Security
 ### Added
 ### Fixed
+- Suppress known Scriban 6.2.0 vulnerabilities pending upgrade
 ### Changed
 - Dependencies - Updated NSubstitute.Analyzers.CSharp to 1.0.17
 - Switched to use minimal APIs
@@ -42,15 +44,14 @@ Please ADD ALL Changes to the UNRELEASED SECTION and not a specific release
 - Dependencies - Updated Credfeto.Version.Information.Generator to 1.0.121.1094
 - Dependencies - Updated Figgle to 0.6.6
 - Dependencies - Updated Meziantou.Analyzer to 3.0.22
-- SDK - Updated DotNet SDK to 10.0.200
 - Dependencies - Updated Credfeto.Enumeration to 1.2.139.1741
 - Dependencies - Updated FunFair.CodeAnalysis to 7.1.35.1745
 - Dependencies - Updated AWSSDK to 4.0.8.11
 - Dependencies - Updated Discord.Net to 3.19.1
 - Dependencies - Updated Microsoft.Extensions to 10.0.5
+- SDK - Updated DotNet SDK to 10.0.300
 ### Removed
 ### Deployment Changes
-
 <!--
 Releases that have at least been deployed to staging, BUT NOT necessarily released to live.  Changes should be moved from [Unreleased] into here as they are merged into the appropriate release branch
 -->

src/BuildBot/BuildBot.csproj

@@ -33,6 +33,7 @@
     <OptimizationPreference>speed</OptimizationPreference>
     <OutputType>Exe</OutputType>
     <PackageTags>FunFair BuildBot</PackageTags>
+    <PublishAot>false</PublishAot>
     <PublishTrimmed>false</PublishTrimmed>
     <RepositoryUrl>https://github.com/funfair-tech/BuildBot</RepositoryUrl>
     <RunAOTCompilation>false</RunAOTCompilation>
@@ -114,4 +115,20 @@
     <PackageReference Include="Credfeto.Version.Information.Generator" Version="1.0.121.1094" PrivateAssets="All" ExcludeAssets="runtime" />
     <PackageReference Include="ToStringWithoutOverrideAnalyzer" Version="0.6.0" PrivateAssets="All" ExcludeAssets="runtime" />
   </ItemGroup>
-</Project>
+  <ItemGroup>
+    <!-- Scriban 6.2.0 known vulnerabilities - upgrade tracked in funfair-tech/BuildBot#352 -->
+    <!-- error NU1903: Package 'Scriban' 6.2.0 has known high/moderate/critical vulnerabilities -->
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-24c8-4792-22hx" />
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-5rpf-x9jg-8j5p" />
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-5wr9-m6jw-xx44" />
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-c875-h985-hvrc" />
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-grr9-747v-xvcp" />
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-m2p3-hwv5-xpqw" />
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-p6q4-fgr8-vx4p" />
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-v66j-x4hw-fv9g" />
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-wgh7-7m3c-fx25" />
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-x6m9-38vm-2xhf" />
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-xcx6-vp38-8hr5" />
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-xw6w-9jjh-p9cr" />
+  </ItemGroup>
+</Project>

src/global.json

@@ -1,6 +1,6 @@
 {
   "sdk": {
-    "version": "10.0.200",
+    "version": "10.0.300",
     "allowPrerelease": false,
     "rollForward": "latestPatch"
   },