Sitelet https://github.com/PowerShell/PowerShell/pull/27787
Skip to content

[release/v7.6.5] Update branch for release - #27787

Merged
Justin Chung (jshigetomi) merged 2 commits into
PowerShell:release/v7.6.5from
SeeminglyScience:manual/automation/package-references/release/v7.6.5-b91d454f1-7894349af
Aug 10, 2026
Merged

[release/v7.6.5] Update branch for release#27787
Justin Chung (jshigetomi) merged 2 commits into
PowerShell:release/v7.6.5from
SeeminglyScience:manual/automation/package-references/release/v7.6.5-b91d454f1-7894349af

Conversation

@SeeminglyScience

Copy link
Copy Markdown
Contributor

(manual cherry pick of #27786)

lts - Automated by PowerShell Bot

Note for reviewers: This PR uses transitive dependency pinning (transitive=true, versionLock=minor). If this is the first time this workflow has run on this branch, a large number of transitive dependencies may appear pinned. This is expected behavior.

Copilot AI lite review requested due to automatic review settings August 9, 2026 16:57
@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

@SeeminglyScience Patrick Meinecke (SeeminglyScience) added the CL-BuildPackaging Indicates that a PR should be marked as a build or packaging change in the Change Log label Aug 9, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the release/v7.6.5 branch for release by bumping System.Security.Cryptography.Xml and its related dependency System.Security.Cryptography.Pkcs to address reported security vulnerabilities and keep package manifests in sync.

Changes:

  • Bump System.Security.Cryptography.Xml from 10.0.6 to 10.0.10 (security-related).
  • Bump System.Security.Cryptography.Pkcs from 10.0.6 to 10.0.10 (dependency constraint alignment).
  • Record the dependency updates in the v7.6 changelog dependency changes file.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.

File Description
tools/cgmanifest/main/cgmanifest.json Updates CG manifest entries for System.Security.Cryptography.Pkcs and System.Security.Cryptography.Xml to 10.0.10.
test/tools/TestService/TestService.csproj Updates package references for Pkcs and Xml to 10.0.10.
src/Microsoft.PowerShell.SDK/Microsoft.PowerShell.SDK.csproj Updates package references for Pkcs and Xml to 10.0.10.
CHANGELOG/v7.6/dependencychanges.json Adds entries documenting the Xml security update and the Pkcs follow-on update.

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

"https://github.com/advisories/GHSA-g8r8-53c2-pm3f",
"https://github.com/advisories/GHSA-mmjf-rqrv-855v"
],
"Justification": "",
@jshigetomi
Justin Chung (jshigetomi) merged commit 7471ff5 into PowerShell:release/v7.6.5 Aug 10, 2026
38 of 39 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CL-BuildPackaging Indicates that a PR should be marked as a build or packaging change in the Change Log

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants