Update .NET SDK to 6.0.428 (#240)

* Update .NET SDK

Update .NET SDK to version 6.0.428.

---
updated-dependencies:
- dependency-name: Microsoft.NET.Sdk
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

* Bump .NET NuGet packages with 3 updates

Bump .NET NuGet packages with 3 updates:

Update Microsoft.AspNetCore.AzureAppServices.HostingStartup from 6.0.33 to 6.0.36.
Update Microsoft.AspNetCore.HeaderPropagation from 6.0.33 to 6.0.36.
Update Microsoft.Extensions.Configuration.Json from 8.0.0 to 8.0.1.

---
updated-dependencies:
- dependency-name: Microsoft.AspNetCore.AzureAppServices.HostingStartup
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: Microsoft.AspNetCore.HeaderPropagation
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: Microsoft.Extensions.Configuration.Json
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

* Change dependabot updates to monthly

* Remove unused suppression

---------

Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: HugoBurgess <hugo.burgess@ukho.gov.uk>

Author: 2 people

.github/dependabot.yml

@@ -3,7 +3,7 @@ updates:
   - package-ecosystem: "nuget"
     directory: "/UKHO.FmEssFssMock.API/UKHO.FmEssFssMock.API"
     schedule:
-      interval: "weekly"
+      interval: "monthly"
     ignore:
       - dependency-name: "*"
         update-types: ["version-update:semver-major"]
@@ -14,7 +14,7 @@ updates:
   - package-ecosystem: "nuget"
     directory: "/UKHO.PeriodicOutputService"
     schedule:
-      interval: "weekly"
+      interval: "monthly"
     ignore:
       - dependency-name: "*"
         update-types: ["version-update:semver-major"]

NVDSuppressions.xml

@@ -103,15 +103,6 @@
     </notes>
     <cve>CVE-2023-36052</cve>
   </suppress>
-  <suppress>
-    <notes>
-      <![CDATA[
-   file name: Various
-   False positive - applies to https://www.drupal.org
-   ]]>
-    </notes>
-    <cve>CVE-2014-9152</cve>
-  </suppress>
   <suppress>
     <notes>
       <![CDATA[
@@ -442,34 +433,44 @@
     <cve>CVE-2018-9117</cve>
   </suppress>
   <suppress>
-   <notes><![CDATA[
+    <notes>
+      <![CDATA[
    file name: Azure.Identity.dll
-   ]]></notes>
-   <cve>CVE-2024-35255</cve>
-</suppress>
-<suppress>
-   <notes><![CDATA[
+   ]]>
+    </notes>
+    <cve>CVE-2024-35255</cve>
+  </suppress>
+  <suppress>
+    <notes>
+      <![CDATA[
    file name: System.Text.Json:8.0.0
-   ]]></notes>
-   <vulnerabilityName>CVE-2024-30105</vulnerabilityName>
-</suppress>
-<suppress>
-   <notes><![CDATA[
+   ]]>
+    </notes>
+    <vulnerabilityName>CVE-2024-30105</vulnerabilityName>
+  </suppress>
+  <suppress>
+    <notes>
+      <![CDATA[
    file name: Azure.Core.dll
-   ]]></notes>
-   <cve>CVE-2024-43591</cve>
-</suppress>
-<suppress>
-   <notes><![CDATA[
+   ]]>
+    </notes>
+    <cve>CVE-2024-43591</cve>
+  </suppress>
+  <suppress>
+    <notes>
+      <![CDATA[
    file name: Microsoft.Extensions.Caching.Memory:8.0.0
-   ]]></notes>
-   <vulnerabilityName>CVE-2024-43483</vulnerabilityName>
-</suppress>
-<suppress>
-	  <notes><![CDATA[
+   ]]>
+    </notes>
+    <vulnerabilityName>CVE-2024-43483</vulnerabilityName>
+  </suppress>
+  <suppress>
+    <notes>
+      <![CDATA[
 	  file name: System.Text.Json:6.0.0
 	  file name: System.Text.Json:8.0.0
-	  ]]></notes>
-	  <vulnerabilityName>CVE-2024-43485</vulnerabilityName>
-</suppress>
+	  ]]>
+    </notes>
+    <vulnerabilityName>CVE-2024-43485</vulnerabilityName>
+  </suppress>
 </suppressions>

UKHO.FmEssFssMock.API/UKHO.FmEssFssMock.API/UKHO.FmEssFssMock.API.csproj

@@ -13,7 +13,7 @@
   <ItemGroup>
     <PackageReference Include="Azure.Storage.Blobs" Version="12.21.2" />
     <PackageReference Include="FluentValidation" Version="11.9.2" />
-    <PackageReference Include="Microsoft.AspNetCore.HeaderPropagation" Version="6.0.33" />
+    <PackageReference Include="Microsoft.AspNetCore.HeaderPropagation" Version="6.0.36" />
     <PackageReference Include="Newtonsoft.Json" Version="13.0.3" />
     <PackageReference Include="Swashbuckle.AspNetCore.Annotations" Version="6.7.3" />
   </ItemGroup>

UKHO.PKSWireMockService.API/UKHO.PKSWireMock.API.csproj

@@ -9,7 +9,7 @@
   <ItemGroup>
     <PackageReference Include="JsonConverter.Abstractions" Version="0.6.0" />
     <PackageReference Include="JsonConverter.Newtonsoft.Json" Version="0.6.0" />
-    <PackageReference Include="Microsoft.AspNetCore.AzureAppServices.HostingStartup" Version="6.0.33" />
+    <PackageReference Include="Microsoft.AspNetCore.AzureAppServices.HostingStartup" Version="6.0.36" />
     <PackageReference Include="Newtonsoft.Json" Version="13.0.3" />
     <PackageReference Include="Swashbuckle.AspNetCore" Version="6.7.3" />
     <PackageReference Include="WireMock.Net" Version="1.6.3" />

UKHO.PeriodicOutputService/UKHO.PeriodicOutputService.API.FunctionalTests/UKHO.PeriodicOutputService.API.FunctionalTests.csproj

@@ -11,7 +11,7 @@
   <ItemGroup>
     <PackageReference Include="FluentAssertions" Version="6.12.0" />
     <PackageReference Include="Microsoft.Extensions.Configuration.Binder" Version="8.0.2" />
-    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="8.0.0" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="8.0.1" />
     <PackageReference Include="Microsoft.Identity.Client" Version="4.64.0" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.11.1" />
     <PackageReference Include="Newtonsoft.Json" Version="13.0.3" />

global.json

@@ -1,6 +1,6 @@
 {
-    "sdk": {
-        "version": "6.0.425",
-        "rollForward": "latestFeature"
-    }
+  "sdk": {
+    "version": "6.0.428",
+    "rollForward": "latestFeature"
+  }
 }