timothy/ersatztv
1
0
Fork 0
Code Issues 58 Pull Requests 8 Actions Packages Projects Releases 9 Wiki Activity

fix(deps): bump Scriban.Signed 6.5.2 → 7.2.5 (GHSA-5wr9-m6jw-xx44) #137

Merged
timothy merged 1 commits from fix/scriban-ghsa-5wr9 into main 2026-07-07 09:09:56 +02:00
Conversation 0 Commits 1 Files Changed 1
+1 -1
timothy commented 2026-07-07 08:59:31 +02:00
Owner
Copy Link
Copy Source

A critical advisory (sandbox escape, GHSA-5wr9-m6jw-xx44) published against Scriban < 7.0.0 makes NuGetAudit fail restore with NU1904 (warnings-as-errors) in the test projects — every CI build is currently broken, so this needs to land ahead of open feature PRs.

  • One-line central-version bump in Directory.Packages.props (CPM).
  • Validated locally on the #93 worktree: full solution build clean; ErsatzTV.Tests 482/482; ErsatzTV.Core.Tests 493/493 (+1 skipped) — XMLTV goldens unchanged, so Scriban 7's template output is behavior-identical for our usage (Template.Parse/ScriptObject in XMLTV refresh, MPEG-TS scripts, credits, graphics subtitles).

🤖 Generated with Claude Code

A critical advisory (sandbox escape, GHSA-5wr9-m6jw-xx44) published against Scriban < 7.0.0 makes NuGetAudit fail restore with NU1904 (warnings-as-errors) in the test projects — **every CI build is currently broken**, so this needs to land ahead of open feature PRs. - One-line central-version bump in `Directory.Packages.props` (CPM). - Validated locally on the #93 worktree: full solution build clean; ErsatzTV.Tests 482/482; ErsatzTV.Core.Tests 493/493 (+1 skipped) — **XMLTV goldens unchanged**, so Scriban 7's template output is behavior-identical for our usage (Template.Parse/ScriptObject in XMLTV refresh, MPEG-TS scripts, credits, graphics subtitles). 🤖 Generated with [Claude Code](https://claude.com/claude-code)
timothy added 1 commit 2026-07-07 08:59:31 +02:00
fix(deps): bump Scriban.Signed 6.5.2 -> 7.2.5 (GHSA-5wr9-m6jw-xx44)
Build ErsatzTV Image / Build & test (.NET) (pull_request) Successful in 4m59s
Details
Build ErsatzTV Image / EF migration integrity (SQLite + MySql) (pull_request) Successful in 5m20s
Details
Build ErsatzTV Image / Build & push image (amd64) (pull_request) Has been skipped
Details
47c3c3b5e2 
The advisory published against Scriban < 7.0.0 (sandbox escape) turns
NuGetAudit's NU1904 into a restore failure for every build, blocking all
CI. Full solution builds and both test suites pass on 7.2.5 (XMLTV
goldens unchanged).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
timothy merged commit 82a93ea3be into main 2026-07-07 09:09:56 +02:00
timothy deleted branch fix/scriban-ghsa-5wr9 2026-07-07 09:09:57 +02:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
ad-hoc
One-off / ad-hoc work not tracked by a dedicated issue
 api
REST API / HTTP endpoints
 bug
Something isn't working
 ci-cd
Build, test, deploy pipeline
 content
Channel content / schedules / playlists
 dependencies
Dependency updates (Renovate)
 enhancement
New feature or improvement
 frontend
ChicoryTV React SPA frontend
 in-progress
Claimed by an active session — do not pick up
 jellyfin
Jellyfin tuner / IPTV integration
 parked
Excluded from automatic queue pickup; work only when explicitly selected
 priority: high
priority: low
priority: medium
review
Adversarial review finding
 security
Security / vulnerability fix
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
renovate timothy (Timothy)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: timothy/ersatztv#137