From 91fd673b711aa59b0c7043a1ecb8defbf300abeb Mon Sep 17 00:00:00 2001 From: maxiar Date: Thu, 15 Oct 2026 11:06:56 -0300 Subject: [PATCH] fix(deps): bump the .NET 10 patch line to 10.0.13 and pin Cryptography.Pkcs System.Security.Cryptography.Xml/Pkcs 10.0.12 now carry GHSA-846f-f764-76mx, GHSA-7hqp-7c5m-4vq6, GHSA-c399-9853-6jmj, GHSA-r955-8q5j-3h83 and GHSA-2fmv-rv2c-59x7, so NuGetAudit fails restore for every project under TreatWarningsAsErrors. Pkcs also floats in at 9.0.x/10.0.0 via MailKit and the Aspire hosting stack, so pin it transitively alongside Cryptography.Xml. Co-Authored-By: Claude Opus 5.5 --- src/Directory.Packages.props | 66 +++++++++++++++++++----------------- 1 file changed, 35 insertions(+), 31 deletions(-) diff --git a/src/Directory.Packages.props b/src/Directory.Packages.props index 39ac673040..bdcf0674b3 100644 --- a/src/Directory.Packages.props +++ b/src/Directory.Packages.props @@ -57,40 +57,40 @@ - - - + + + - - - - - - - - - - + + + - - - - - - - - - - - - - - - + + + + + + + + + + + + + + + @@ -104,7 +104,7 @@ - + - + + + - +