Repository navigation
修补剩余 HTTP、正则表达式和 JSON 依赖告警 - #68
Merged
transbot merged 1 commit intoNov 12, 2026
Merged
Conversation
This was referenced Nov 12, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
修补中文版解决方案剩余的 HTTP、正则表达式和 JSON 包告警。System.Net.Http 固定到 4.3.4、System.Text.RegularExpressions 固定到 4.3.1,引用范围为章节测试工具链。Chapter10 显式引用 System.Text.Json 8.0.5,并通过项目引用覆盖 Chapter10.Tests。
变更共三个依赖配置文件、六行新增。教材源码、现有测试内容、net6.0/net7.0/net8.0 目标框架和 CI 配置均未修改。
对全部 46 个项目执行包含间接包的 NuGet 审计,结果为 0 个已知包漏洞告警。
逐项比对 138 个项目/框架还原图,HTTP 与正则修补覆盖全部 69 个测试目标,JSON 修补覆盖 Chapter10 及 Chapter10.Tests 的六个目标。传递解析同时将测试依赖中的 System.Runtime 更新到 4.3.1、Microsoft.NETCore.Targets 更新到 1.1.3,并将 11 个 OpenSSL 兼容包更新到 4.3.2。JSON 8.0.5 的 net8.0 依赖组不再引用 System.Text.Encodings.Web,因此该包从两个 net8.0 目标的 NuGet 图中移除。其余 22 个教材项目的还原图与基线完全一致。
本地 VS2026 完整重建及测试通过,.NET 6 为 640/640,.NET 7 为 646/646,.NET 8 为 650/650,合计 1,936 项,零失败、零跳过。逐方法及数据行比对 TRX,20 个既有 CompilerAssert 方法展开后,每个框架均为 34/34 通过。清单 3.02 的 CS0165、CS8602 和清单 6.54 的 CS0191 保留,清单 6.39 的 CS9035 按原条件仅在 .NET 7、8 验证。
Chapter10 及其测试在 .NET 6、7 下输出的 JSON DLL 与官方 8.0.5 包的 SHA-256 一致。HTTP、正则包在全部 69 个测试输出中均无包 DLL。
提交为 da463fd。UTF-8 检查通过,1,186 个文本文件,24 个二进制资产排除。SDK 8.0.428,实际运行时 6.0.36、7.0.20、8.0.34。Ubuntu 日志中的 102 条编译诊断测试通过记录已与本地逐项核对。
六项检查全部通过,五组测试均零失败、零跳过。最终配置差异已审阅。
合并后复核完成。合并提交 826cde8348eccc4c1cd7a8e1331d55edf657e73f 的六项检查全部通过:三平台构建测试、简体中文及法语测试、代码分析。五个测试任务每个均实际运行 69 个程序集,1,936 项通过,零失败、零跳过。138 份 SARIF 的项目、框架、规则及级别数量与 PR 一致。合并后的正式工作区重新还原、审计,138 个依赖图与 PR 相同,全部 46 个项目仍为零已知包漏洞告警。