Merge pull request #117 from stephentoub/patch-1

Remove upper bound on System.Text.Json package reference

CHANGELOG.md

@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## Unreleased
 
+## [0.5.6] - 2024-03-06
+
+### Changed
+
+- Removed upper bound on system.text.json to allow people migrate to net9
+
 ## [0.5.5] - 2024-03-06
 
 ### Changed

src/lib/apimanifest.csproj

@@ -3,7 +3,7 @@
   <PropertyGroup>
     <TargetFramework>netstandard2.0</TargetFramework>
     <PackageId>Microsoft.OpenApi.ApiManifest</PackageId>
-    <VersionPrefix>0.5.5</VersionPrefix>
+    <VersionPrefix>0.5.6</VersionPrefix>
     <VersionSuffix>preview</VersionSuffix>
     <PackageIconUrl>http://go.microsoft.com/fwlink/?LinkID=288890</PackageIconUrl>
     <PackageProjectUrl>https://github.com/Microsoft/OpenApi.ApiManifest</PackageProjectUrl>
@@ -35,7 +35,10 @@
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
       <PrivateAssets>all</PrivateAssets>
     </PackageReference>
-    <PackageReference Include="System.Text.Json" Version="[6.0,9.0)" />
+    <!-- suppressed because of this CVE https://github.com/advisories/GHSA-hh2w-p6rv-4g7w 
+     The target application is the one which will resolve the correct version
+     when the version range is updated to > 8.0.4 in the future, remove the nowarn suppression -->
+    <PackageReference Include="System.Text.Json" Version="[6.0,)" NoWarn="NU1903" />
   </ItemGroup>
 
 </Project>