From 27d7730493631bc2b5e022719ac5fabfa1611981 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 4 Aug 2026 12:04:58 +0000 Subject: [PATCH] Bump the nuget group with 2 updates Bumps Microsoft.OpenApi from 2.11.0 to 3.9.0 Bumps StackExchange.Redis from 3.0.17 to 3.1.3 --- updated-dependencies: - dependency-name: Microsoft.OpenApi dependency-version: 3.9.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget - dependency-name: StackExchange.Redis dependency-version: 3.1.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget ... Signed-off-by: dependabot[bot] --- Directory.Packages.props | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Directory.Packages.props b/Directory.Packages.props index a3b98d2..f2074e8 100644 --- a/Directory.Packages.props +++ b/Directory.Packages.props @@ -12,7 +12,7 @@ mutable model (e.g. IOpenApiMediaType.Example has a setter). 3.x made that read-only, which breaks the generated code (https://github.com/dotnet/aspnetcore/issues/64317). 2.11.0 is patched against the vulnerable 2.0.0-preview.11 - 2.7.4 range (GHSA-v5pm-xwqc-g5wc / CVE-2026-49451). --> - + @@ -35,7 +35,7 @@ - +