Skip to content

Fix Blazor build by bumping AngleSharp dependency#3015

Open
jattasNI wants to merge 4 commits into
mainfrom
anglesharp-build-error
Open

Fix Blazor build by bumping AngleSharp dependency#3015
jattasNI wants to merge 4 commits into
mainfrom
anglesharp-build-error

Conversation

@jattasNI

@jattasNI jattasNI commented Jul 20, 2026

Copy link
Copy Markdown
Contributor

Pull Request

🤨 Rationale

PR builds (example) and local builds of main are failing with these errors:

@ni-private/blazor-workspace:build: /home/runner/work/nimble/nimble/packages/blazor-workspace/Tests/OkBlazor.Tests/OkBlazor.Tests.csproj : error NU1902: Warning As Error: Package 'AngleSharp' 1.4.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-pgww-w46g-26qg [/home/runner/work/nimble/nimble/packages/blazor-workspace/BlazorWorkspace.slnx]
@ni-private/blazor-workspace:build: /home/runner/work/nimble/nimble/packages/blazor-workspace/Tests/SprightBlazor.Tests/SprightBlazor.Tests.csproj : error NU1902: Warning As Error: Package 'AngleSharp' 1.4.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-pgww-w46g-26qg [/home/runner/work/nimble/nimble/packages/blazor-workspace/BlazorWorkspace.slnx]
@ni-private/blazor-workspace:build: /home/runner/work/nimble/nimble/packages/blazor-workspace/Tests/NimbleBlazor.Tests/NimbleBlazor.Tests.csproj : error NU1902: Warning As Error: Package 'AngleSharp' 1.4.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-pgww-w46g-26qg [/home/runner/work/nimble/nimble/packages/blazor-workspace/BlazorWorkspace.slnx]

The cause is this vulnerability in AngleSharp, which is pulled in by our dependency on bunit. This seems correct anyway since some test code uses it but relies on the transitive dependency to cause it to be present.

👩‍💻 Implementation

We are on the latest bunit so the only way I'm aware to fix this is to explicitly depend on AngleSharp in order to request the latest version.

🧪 Testing

Local and PR builds pass.

✅ Checklist

  • I have updated the project documentation to reflect my changes or determined no changes are needed.

@jattasNI
jattasNI marked this pull request as ready for review July 20, 2026 21:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant