Update donations (#1582)

dotnet · Nov 20, 2024 · 0e91017 · 0e91017
1 parent 25261a3
commit 0e91017
Show file tree

Hide file tree

Showing 5 changed files with 29 additions and 4 deletions.
diff --git a/Donations.md b/Donations.md
@@ -1,10 +1,12 @@
 # List of Donations
 
-### Recurring Donations
+### Special Donations
 
-| Amount | Name
-| ---:| ---
-| $13.00 USD / month | Ian Kemp
+| Amount | Name | Comment
+| ---:| --- | ---
+| $6000.00 USD | [.NET on AWS Open Source Software Fund](https://github.com/aws/dotnet-foss) | $500.00 for 12 months starting November 2024
+| $1000.00 USD | Microsoft | -
+| $13.00 USD / month | Ian Kemp | starting July 2021 
 
 ### Donations
 

diff --git a/README.md b/README.md
@@ -36,6 +36,13 @@ Contributions are welcome! If you are interested please see:
 
 TIP: Bugfixes or small improvements can be implemented right away. Larger task like adding new analyzer or refactoring should be discussed first.
 
+## Donations
+
+Special thanks to:
+  - [.NET on AWS Open Source Software Fund](https://github.com/aws/dotnet-foss) for donating $6000.00 USD ($500.00 for 12 months starting November 2024).
+  - Microsoft for donating $1000.00 USD.
+  - Ian Kemp for donating $13.00 USD / month starting July 2021.
+
 ## .NET Foundation
 
 This project is supported by the [.NET Foundation](https://www.dotnetfoundation.org/projects).

diff --git a/src/CommandLine/CommandLine.csproj b/src/CommandLine/CommandLine.csproj
@@ -45,6 +45,15 @@
     <NuspecProperties>publishDir=$([MSBuild]::NormalizeDirectory($(IntermediatePackDir)));version=$(RoslynatorCliPackageVersion)</NuspecProperties>
   </PropertyGroup>
 
+  <ItemGroup>
+    <!-- Package 'Microsoft.IO.Redist' 6.0.0 has a known high severity vulnerability -->
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-hq7w-xv5x-g34j" />
+    <!-- Package 'System.Text.Json' 8.0.0 has a known high severity vulnerability -->
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-8g4q-xg66-9fp4" />
+    <!-- Package 'System.Text.Json' 8.0.0 has a known high severity vulnerability -->
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-hh2w-p6rv-4g7w" />
+  </ItemGroup>
+
   <ItemGroup>
     <PackageReference Include="CommandLineParser" Version="2.8.0" />
     <PackageReference Include="Microsoft.Build.Locator" Version="$(RoslynatorMicrosoftBuildLocatorVersion)" />

diff --git a/src/CommandLine/EncodingHelpers.cs b/src/CommandLine/EncodingHelpers.cs
@@ -16,7 +16,9 @@ public static Encoding DetectEncoding(Stream stream)
 
         var buffer = new byte[4];
 
+#pragma warning disable CA2022
         stream.Read(buffer, 0, 4);
+#pragma warning restore CA2022
 
         if (buffer[0] == 0xFE
             && buffer[1] == 0xFF)

diff --git a/src/VisualStudio/VisualStudio.csproj b/src/VisualStudio/VisualStudio.csproj
@@ -32,6 +32,11 @@
     <PackageReference Include="Microsoft.VSSDK.BuildTools" Version="17.4.2119" PrivateAssets="all" />
   </ItemGroup>
 
+  <ItemGroup>
+    <!-- Package 'MessagePack' 2.2.85 has a known moderate severity vulnerability -->
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-4qm4-8hg2-g2xm" />
+  </ItemGroup>
+
   <PropertyGroup>
     <StartAction>Program</StartAction>
     <StartProgram>$(DevEnvDir)devenv.exe</StartProgram>