Skip to content

[Snyk] Security upgrade NUnit3TestAdapter from 3.16.1 to 5.0.0#9

Open
madisonmay wants to merge 2 commits intomasterfrom
snyk-fix-10a979114e48320f3b56b056eb7e450c
Open

[Snyk] Security upgrade NUnit3TestAdapter from 3.16.1 to 5.0.0#9
madisonmay wants to merge 2 commits intomasterfrom
snyk-fix-10a979114e48320f3b56b056eb7e450c

Conversation

@madisonmay
Copy link
Copy Markdown

@madisonmay madisonmay commented May 27, 2025

snyk-top-banner

Snyk has created this PR to fix 1 vulnerabilities in the nuget dependencies of this project.

Snyk changed the following file(s):

  • Indico.AutomationAnywhere.Connector.Tests/Indico.AutomationAnywhere.Connector.Tests.csproj

Vulnerabilities that will be fixed with an upgrade:

Issue Score
high severity Regular Expression Denial of Service (ReDoS)
SNYK-DOTNET-SYSTEMTEXTREGULAREXPRESSIONS-174708
  589  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)


Note

Low Risk
Low risk because this only changes a test-time dependency, but the major-version bump could affect local/CI test discovery or execution.

Overview
Upgrades NUnit3TestAdapter in Indico.AutomationAnywhere.Connector.Tests.csproj from 3.16.1 to 5.0.0 (Snyk-driven security update), with no production/runtime code changes.

Written by Cursor Bugbot for commit 7f002a1. This will update automatically on new commits. Configure here.

snyk-bot added 2 commits May 27, 2025 16:24
…ere.Connector.Tests.csproj to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-DOTNET-SYSTEMTEXTREGULAREXPRESSIONS-174708
…ere.Connector.Tests.csproj to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-DOTNET-SYSTEMTEXTREGULAREXPRESSIONS-174708
Copy link
Copy Markdown

@cursor cursor bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

<PackageReference Include="Moq" Version="4.16.0" />
<PackageReference Include="NUnit" Version="3.12.0" />
<PackageReference Include="NUnit3TestAdapter" Version="3.16.1" />
<PackageReference Include="NUnit3TestAdapter" Version="5.0.0" />
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Major breaking version upgrade may cause build/test failures

High Severity

NUnit3TestAdapter 5.0.0 introduces new transitive dependencies (Microsoft.Testing.Platform.MSBuild and Microsoft.Testing.Extensions.VSTestBridge >= 1.5.3) that didn't exist in 3.16.1. These Microsoft Testing Platform packages may be incompatible with the project's Microsoft.NET.Test.Sdk 16.5.0 and netcoreapp3.1 target framework, potentially causing build failures or tests not being discovered/executed. The NUnit version also remains at 3.12.0 while the adapter embeds engine 3.18.1. Snyk itself flags this as a breaking change.

Additional Locations (1)
Fix in Cursor Fix in Web

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants