Skip to content

Fix CG alerts for Microsoft.Bcl.Memory#7418

Open
wtgodbe wants to merge 4 commits intomainfrom
wtgodbe/CG319
Open

Fix CG alerts for Microsoft.Bcl.Memory#7418
wtgodbe wants to merge 4 commits intomainfrom
wtgodbe/CG319

Conversation

@wtgodbe
Copy link
Member

@wtgodbe wtgodbe commented Mar 19, 2026

Microsoft Reviewers: Open in CodeFlow

@wtgodbe wtgodbe requested a review from a team as a code owner March 19, 2026 23:42
Copilot AI review requested due to automatic review settings March 19, 2026 23:42
@github-actions github-actions bot added the area-ai Microsoft.Extensions.AI libraries label Mar 19, 2026
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds explicit Microsoft.Bcl.Memory package references to a handful of library and test projects to address Component Governance (CG) alerts caused by transitive dependency resolution, ensuring a centrally-managed version is used during restore.

Changes:

  • Add PackageReference Include="Microsoft.Bcl.Memory" to DataIngestion libraries.
  • Add PackageReference Include="Microsoft.Bcl.Memory" to several AI/DataIngestion test projects.

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 5 comments.

Show a summary per file
File Description
test/Libraries/Microsoft.Extensions.DataIngestion.Tests/Microsoft.Extensions.DataIngestion.Tests.csproj Adds explicit Microsoft.Bcl.Memory reference in tests to influence dependency resolution.
test/Libraries/Microsoft.Extensions.AI.Tests/Microsoft.Extensions.AI.Tests.csproj Adds explicit Microsoft.Bcl.Memory reference in unit tests.
test/Libraries/Microsoft.Extensions.AI.Integration.Tests/Microsoft.Extensions.AI.Integration.Tests.csproj Adds explicit Microsoft.Bcl.Memory reference in integration tests.
src/Libraries/Microsoft.Extensions.DataIngestion/Microsoft.Extensions.DataIngestion.csproj Adds explicit Microsoft.Bcl.Memory reference to the shipped library package.
src/Libraries/Microsoft.Extensions.DataIngestion.MarkItDown/Microsoft.Extensions.DataIngestion.MarkItDown.csproj Adds explicit Microsoft.Bcl.Memory reference to the shipped library package.

@wtgodbe wtgodbe requested a review from a team as a code owner March 25, 2026 18:35
Downgrade System.Linq.AsyncEnumerable package version from 10.0.5 to 10.0.4.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area-ai Microsoft.Extensions.AI libraries

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants