Skip to content

Exclude unused Kafka libraries and update .NET to 10.0.13 - #6019

Open
boblangley wants to merge 1 commit into
release-6.21from
release-6.21-dotnet-10.0.13
Open

boblangley wants to merge 1 commit into
release-6.21from
release-6.21-dotnet-10.0.13

Conversation

@boblangley

@boblangley boblangley commented Oct 17, 2026 •

Copy link
Copy Markdown
Member

Backport of:

Which fixes for the release-6.21 branch:

This is a clean cherry-pick of #6004. Both branches package RavenDB 6.2.18, so the exclusions and the new packaged-RavenDB test apply as-is.

This needs to merge before #6016. Since the October .NET advisories were published, every build on release-6.21 fails at restore because NuGet audit treats the System.Security.Cryptography.Pkcs 10.0.11 findings as errors. #6016 is red for exactly that reason.

The commit records its source with a cherry picked from line. I left the release-note labels on #6017 and #6018 instead of this PR so the release notes don't list it twice.

🤖 Generated with Claude Code

* Exclude native Kafka dependencies from the RavenDB installer package

* Pin the patched PKCS dependency to unblock NuGet audit

* Align the runtime and Microsoft packages at 10.0.13

(cherry picked from commit 620563c)
@boblangley boblangley added this to the 6.21.3 milestone Oct 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant