Serilog.AspNetCore depends on a version of Serilog.Settings.Configuration that depends on a deprecated dependency with expired signature
julian94 opened this issue · comments
Description
Serilog.AspNetCore depends on a version of Serilog.Settings.Configuration that depends on Microsoft.Extensions.Options 2.0.0 which was signed by a certificate that expired last year.
This caused an issue on my build servers as dotnet restore refused to restore Microsoft.Extensions.Options 2.0.0 as the signing certificate expired in 2021.
This was resolved in Serilog.Settings.Configuration 3.4.0, so I bumped my local version and that resolved my issue. But it should be bumped in this package as well.
Expected behavior
I expected the most recent version to not have any transitive dependencies on deprecated packages with expired signatures.
Relevant package, tooling and runtime versions
Using: Serilog.AspNetCore 6.1.0
Suggested fix
Update this dependency to 3.4.0 (latest).