From 4a3e6815978282601fd1a15862fc999f5af879c6 Mon Sep 17 00:00:00 2001 From: Jake Aitchison Date: Mon, 7 Apr 2025 12:32:17 +0100 Subject: [PATCH 1/3] Bump version to 3.2.3 and update System.Configuration.ConfigurationManager to version 8.0.1 fixes #678 --- build/nHapi.v3.nuspec | 6 +++--- src/NHapi.Base/NHapi.Base.csproj | 4 ++-- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/build/nHapi.v3.nuspec b/build/nHapi.v3.nuspec index 539b3c5e2..4f9f58674 100644 --- a/build/nHapi.v3.nuspec +++ b/build/nHapi.v3.nuspec @@ -2,7 +2,7 @@ nhapi - 3.2.2 + 3.2.3 Chad Chenoweth,Duane Edwards,Jake Aitchison MPL-2.0 https://github.com/nHapiNET/nHapi @@ -20,7 +20,7 @@ This nuget package is just a metapackage for conveniance. docs\README.md - + @@ -35,7 +35,7 @@ This nuget package is just a metapackage for conveniance. - + diff --git a/src/NHapi.Base/NHapi.Base.csproj b/src/NHapi.Base/NHapi.Base.csproj index cda29cf61..f9b747212 100644 --- a/src/NHapi.Base/NHapi.Base.csproj +++ b/src/NHapi.Base/NHapi.Base.csproj @@ -4,7 +4,7 @@ net35;netstandard2.0 bin\$(Configuration)\$(TargetFramework)\$(AssemblyName).xml nhapi.base - 3.2.0 + 3.2.3 The core components for parsing/encoding HL7 messages. Contains the base classes and interfaces for datatypes, segments, and messages. NHapi Common Library 1591 @@ -23,7 +23,7 @@ - + From 33eed998d62c469e09117fc6e4734f6261f83b84 Mon Sep 17 00:00:00 2001 From: Jake Aitchison Date: Mon, 7 Apr 2025 13:20:39 +0100 Subject: [PATCH 2/3] Remove System.Threading.Tasks.Extensions package reference closes #683 --- tests/NHapi.Base.NUnit/NHapi.Base.NUnit.csproj | 2 -- 1 file changed, 2 deletions(-) diff --git a/tests/NHapi.Base.NUnit/NHapi.Base.NUnit.csproj b/tests/NHapi.Base.NUnit/NHapi.Base.NUnit.csproj index bcafffd58..fef2eca23 100644 --- a/tests/NHapi.Base.NUnit/NHapi.Base.NUnit.csproj +++ b/tests/NHapi.Base.NUnit/NHapi.Base.NUnit.csproj @@ -43,8 +43,6 @@ all runtime; build; native; contentfiles; analyzers; buildtransitive - - \ No newline at end of file From e8fb6f4c25bb8484beb447ca46d8bedec1502359 Mon Sep 17 00:00:00 2001 From: Jake Aitchison Date: Mon, 7 Apr 2025 13:39:03 +0100 Subject: [PATCH 3/3] Update CHANGELOG for version 3.2.3 and update release notes URL in nuspec in preparation for next release. --- CHANGELOG.md | 10 ++++++++++ build/nHapi.v3.nuspec | 2 +- 2 files changed, 11 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 8838ef29d..0e43b7839 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -8,6 +8,16 @@ All notable changes to this project will be documented in this file. ## Previous Releases +## [3.2.3] - 2025-04-07 + +This release fixes a security vulnerability with a transitive dependency. + +### Other + +- [#678](https://github.com/nHapiNET/nHapi/issues/678) Update `System.Configuration.ConfigurationManager` dependency for `netstandard2.0` target framework to `8.0.1` to fix [transitive dependency vulnerability](https://github.com/advisories/GHSA-rxg9-xrhp-64gj). + +By @milkshakeuk + ## [3.2.2] - 2023-01-24 This release is purely superficial, it does not fix or add anything. diff --git a/build/nHapi.v3.nuspec b/build/nHapi.v3.nuspec index 4f9f58674..27ddb60f1 100644 --- a/build/nHapi.v3.nuspec +++ b/build/nHapi.v3.nuspec @@ -14,7 +14,7 @@ NHapi allows Microsoft .NET developers to easily use an HL7 2.x object model. Th This project is NOT affiliated with the HL7 organization. This software just conforms to the HL7 2.x specifications. This nuget package is just a metapackage for conveniance. - https://github.com/nHapiNET/nHapi/releases/tag/v3.2.2 + https://github.com/nHapiNET/nHapi/releases/tag/v3.2.3 HL7 ER7 XML parsing healthcare HAPI docs\README.md