Remove upper constraint of 12.99 for Newtonsoft.Json dependency for UmbracoCms.Core #12231
DanDiplo
started this conversation in
Features and ideas
Replies: 2 comments
-
Sure, doesn't look like they're listing and real breaking changes so we can relax it: #12235 We have no release date for 8.18.4 yet, for now you can install the google apis as usual when there's too many restrictions by ignoring them, use this in the Package Manager Console: |
Beta Was this translation helpful? Give feedback.
0 replies
-
Especially after this: GHSA-5crp-9r3c-p9vr Important for v7 too.. |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
Currently UmbracoCms.Core NuGet package (in Umbraco 8) has a dependency on
Newtonsoft.Json
expressed as:Newtonsoft.Json (>= 12.0.1 && < 12.999999.0)
This prevents upgrading to the latest version of
Newtonsoft.Json
(currently13.0.1
) and, more crucially, prevents installing any other dependencies that require a later version than Umbraco allows.For instance, I was trying to install the latest version of some Google APIs, but these all required 13.0.1 and Umbraco's dependency on this prevented installation. See https://www.nuget.org/packages/Google.Apis.Core/ for an example. This means you can never use any of Google's recent APIs with Umbraco 8. It's also possible that there may be improvements or security fixes in
Newtonsoft.Json
that Umbraco will prevent being installed.Is there a good reason why this constraint can't be raised to 13.x ? If not, could it be removed for reasons outlined above. Thank you!
Beta Was this translation helpful? Give feedback.
All reactions