From e3d2c4c444552f36d6f9cc778c1200c68548bb0c Mon Sep 17 00:00:00 2001
From: Marius Thesing <marius.thesing@gmail.com>
Date: Sat, 13 Jul 2024 08:51:23 +0200
Subject: [PATCH] Don't treat NuGet audit Warnings as Errors and fix warning

.NET 9 Preview 6 now also scans transitive dependencies, which
causes a build failure in the test projects:

warning NU1902: Package 'BouncyCastle.Cryptography' 2.2.1 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-8xfc-gm6g-vgpv

Don't treat these as errors and update Testcontainers to fix the warning.
---
 Directory.Build.props                                        | 5 +++++
 .../Renci.SshNet.IntegrationTests.csproj                     | 2 +-
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/Directory.Build.props b/Directory.Build.props
index b263d4fa9..1480717e0 100644
--- a/Directory.Build.props
+++ b/Directory.Build.props
@@ -23,6 +23,11 @@
     <EnforceCodeStyleInBuild>true</EnforceCodeStyleInBuild>
   </PropertyGroup>
 
+  <!-- don't treat NuGet Audit warnings as errors -->
+  <PropertyGroup>
+    <WarningsNotAsErrors>NU1901;NU1902;NU1903;NU1904</WarningsNotAsErrors>
+  </PropertyGroup>
+
   <!--
         Disable nullable warnings on old frameworks because of missing annotations.
   -->
diff --git a/test/Renci.SshNet.IntegrationTests/Renci.SshNet.IntegrationTests.csproj b/test/Renci.SshNet.IntegrationTests/Renci.SshNet.IntegrationTests.csproj
index 8cb42da93..0ad9f8ce8 100644
--- a/test/Renci.SshNet.IntegrationTests/Renci.SshNet.IntegrationTests.csproj
+++ b/test/Renci.SshNet.IntegrationTests/Renci.SshNet.IntegrationTests.csproj
@@ -16,7 +16,7 @@
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.9.0" />
     <PackageReference Include="MSTest.TestAdapter" Version="3.2.1" />
     <PackageReference Include="MSTest.TestFramework" Version="3.2.1" />
-    <PackageReference Include="Testcontainers" Version="3.7.0" />
+    <PackageReference Include="Testcontainers" Version="3.9.0" />
     <!--
         Testcontainers has a dependency on SSH.NET which causes build warnings during assembly resolution: