[Component governance] Update Azure.Identity dependency (#1918)

aspnet · Oct 24, 2023 · 48205e2 · 48205e2
1 parent fe891e8
commit 48205e2
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/src/Benchmarks/Benchmarks.csproj b/src/Benchmarks/Benchmarks.csproj
@@ -27,6 +27,11 @@
 
   <ItemGroup>
     <PackageReference Include="Dapper" Version="2.0.123" />
+    <!--
+      We depend on this indirectly, via Microsoft.Data.SqlClient,
+      but they have yet to update from 1.7.0, which has a CVE.
+    -->
+    <PackageReference Include="Azure.Identity" Version="1.10.3" />
   </ItemGroup>
 
   <ItemGroup Condition="'$(TargetFramework)' == 'net6.0'">