From af28836bb477508265587d403ef2ee29c233ede8 Mon Sep 17 00:00:00 2001 From: Chris Heppell Date: Tue, 23 Jun 2026 14:56:45 +0100 Subject: [PATCH] fix: handle missing dotnet CLI during NuGet runtime resolution scans Pulls in snyk-nuget-plugin 4.2.3, which handles the dotnet CLI being absent during runtime resolution scans. Transitively bumps lodash to ^4.18.1 as required by the plugin. Release: https://github.com/snyk/snyk-nuget-plugin/releases/tag/v4.2.3 Co-Authored-By: Claude Opus 4.8 (1M context) --- package-lock.json | 8 ++++---- package.json | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package-lock.json b/package-lock.json index 9d30dbc3a8..ce7e54aae7 100644 --- a/package-lock.json +++ b/package-lock.json @@ -20281,16 +20281,16 @@ "license": "ISC" }, "node_modules/snyk-nuget-plugin": { - "version": "4.2.0", - "resolved": "https://registry.npmjs.org/snyk-nuget-plugin/-/snyk-nuget-plugin-4.2.0.tgz", - "integrity": "sha512-EUVmfoDXBOXCmmOo7yL8zoRR9VWpCI+BlZZ1wQ2sI8Bj0IQnXCeBFSro9BpsaxaNyK9FApj+yCMCdx0GLTEf9A==", + "version": "4.2.3", + "resolved": "https://registry.npmjs.org/snyk-nuget-plugin/-/snyk-nuget-plugin-4.2.3.tgz", + "integrity": "sha512-UyikzoHsA0cIzl1kfufRXLYgWkk66n/7prGJq7fbC+2MsaL1rc5AEBEuzNstWtFp+I2T9OYNwxcu8oDJYrNm+A==", "dependencies": { "@snyk/cli-interface": "^2.14.0", "@snyk/dep-graph": "^2.8.1", "debug": "^4.3.4", "dotnet-deps-parser": "6.1.0", "jszip": "3.10.1", - "lodash": "^4.17.21", + "lodash": "^4.18.1", "node-cache": "^5.1.2", "snyk-paket-parser": "1.6.0", "tslib": "^2.6.2", diff --git a/package.json b/package.json index c397def01e..5597f0fdf0 100644 --- a/package.json +++ b/package.json @@ -123,7 +123,7 @@ "snyk-mvn-plugin": "^4.7.0", "snyk-nodejs-lockfile-parser": "2.8.1", "snyk-nodejs-plugin": "^2.0.1", - "snyk-nuget-plugin": "4.2.0", + "snyk-nuget-plugin": "4.2.3", "snyk-php-plugin": "1.12.1", "snyk-policy": "^4.1.6", "snyk-python-plugin": "^3.2.1",