From 71e5c0b224c56e1b153e211651f882f7e1de739f Mon Sep 17 00:00:00 2001 From: Jay Harris Date: Wed, 1 Apr 2026 16:35:18 -0700 Subject: [PATCH 1/2] chore(azure): bump version to 2.2.1 and require Microsoft.Extensions.Azure 1.7.4 Resolves transitive Azure.Identity 1.7.0 vulnerability (GHSA-5mfx-4wcx-rv27, GHSA-m5vv-6r4h-3vj9, GHSA-wvxc-855f-jvrv) by raising the minimum Microsoft.Extensions.Azure from 1.6.0 to 1.7.4, which pulls in Azure.Identity >= 1.11.4. --- src/azure/src/azure/Aranasoft.Cobweb.Azure.csproj | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/azure/src/azure/Aranasoft.Cobweb.Azure.csproj b/src/azure/src/azure/Aranasoft.Cobweb.Azure.csproj index 6b90ee4..04d3f78 100644 --- a/src/azure/src/azure/Aranasoft.Cobweb.Azure.csproj +++ b/src/azure/src/azure/Aranasoft.Cobweb.Azure.csproj @@ -5,7 +5,7 @@ net8.0;net9.0;net10.0 Aranasoft.Cobweb.Azure Aranasoft.Cobweb.Azure - 2.2 + 2.2.1 @@ -16,7 +16,7 @@ - + From d6141b121f33aeba23de06eea05f9e2071ee558f Mon Sep 17 00:00:00 2001 From: Jay Harris Date: Wed, 1 Apr 2026 16:35:40 -0700 Subject: [PATCH 2/2] docs(azure): add CHANGELOG entry for 2.2.1 --- src/azure/CHANGELOG.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/src/azure/CHANGELOG.md b/src/azure/CHANGELOG.md index 101fc05..80435c7 100644 --- a/src/azure/CHANGELOG.md +++ b/src/azure/CHANGELOG.md @@ -1,3 +1,12 @@ +## 2.2.1 (2026-04-01) + + +### Bug Fixes + +* **vulnerability:** set minimum Microsoft.Extensions.Azure to 1.7.4 to resolve Azure.Identity vulnerabilities ([71e5c0b](https://github.com/aranasoft/cobweb/commit/71e5c0b)) + + + ## 2.2 (2026-02-10)