From 09ff2090ecbbbc169f942bdb20fe6bebb2095fb2 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 28 Jul 2026 00:31:45 +0000
Subject: [PATCH] Bump Microsoft.AspNetCore.OpenApi and 9 others

Bumps Microsoft.AspNetCore.OpenApi from 10.0.9 to 10.0.10
Bumps Microsoft.CodeAnalysis.NetAnalyzers from 10.0.301 to 10.0.302
Bumps Microsoft.Extensions.ApiDescription.Server from 10.0.9 to 10.0.10
Bumps Microsoft.Extensions.Hosting from 10.0.9 to 10.0.10
Bumps Microsoft.NET.Test.Sdk from 18.7.0 to 18.8.1
Bumps Microsoft.OpenApi from 2.10.0 to 3.9.0
Bumps MSTest.TestAdapter from 4.2.3 to 4.3.2
Bumps MSTest.TestFramework from 4.2.3 to 4.3.2
Bumps Sarif.Sdk from 5.4.3 to 5.5.0
Bumps System.Text.Json from 10.0.9 to 10.0.10

---
updated-dependencies:
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.CodeAnalysis.NetAnalyzers
  dependency-version: 10.0.302
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.Extensions.ApiDescription.Server
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: Microsoft.OpenApi
  dependency-version: 3.9.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget
- dependency-name: MSTest.TestAdapter
  dependency-version: 4.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: MSTest.TestFramework
  dependency-version: 4.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: Sarif.Sdk
  dependency-version: 5.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: System.Text.Json
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Directory.Packages.props                      | 20 +++++++++----------
 .../ThreatModelForge.Api.Tests.csproj         |  1 +
 2 files changed, 11 insertions(+), 10 deletions(-)

diff --git a/Directory.Packages.props b/Directory.Packages.props
index c333e5d..20c5a98 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -1,25 +1,25 @@
 <Project>
   <ItemGroup>
-    <PackageVersion Include="Microsoft.AspNetCore.OpenApi" Version="10.0.9" />
+    <PackageVersion Include="Microsoft.AspNetCore.OpenApi" Version="10.0.10" />
     <!-- Pinned to 2.x: the ASP.NET Core 10 OpenAPI source generator is incompatible with
          Microsoft.OpenApi 3.x (IOpenApiMediaType.Example became read-only). 3.x lands with
          ASP.NET Core 11. Also carries the GHSA-v5pm-xwqc-g5wc patch. -->
-    <PackageVersion Include="Microsoft.OpenApi" Version="2.10.0" />
-    <PackageVersion Include="Microsoft.Extensions.ApiDescription.Server" Version="10.0.9" />
-    <PackageVersion Include="Microsoft.CodeAnalysis.NetAnalyzers" Version="10.0.301" />
+    <PackageVersion Include="Microsoft.OpenApi" Version="3.9.0" />
+    <PackageVersion Include="Microsoft.Extensions.ApiDescription.Server" Version="10.0.10" />
+    <PackageVersion Include="Microsoft.CodeAnalysis.NetAnalyzers" Version="10.0.302" />
     <PackageVersion Include="StyleCop.Analyzers" Version="1.1.118" />
-    <PackageVersion Include="System.Text.Json" Version="10.0.9" />
-    <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="18.7.0" />
+    <PackageVersion Include="System.Text.Json" Version="10.0.10" />
+    <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="18.8.1" />
     <!-- Test-only: hosts the /v1 API in memory so the endpoints are exercised over real HTTP
          (routing, status codes, content types, model binding) without binding a port. Version
          tracks the ASP.NET Core 10 packages above. Never referenced by a shipped artifact. -->
     <PackageVersion Include="Microsoft.AspNetCore.Mvc.Testing" Version="10.0.9" />
-    <PackageVersion Include="MSTest.TestAdapter" Version="4.2.3" />
-    <PackageVersion Include="MSTest.TestFramework" Version="4.2.3" />
+    <PackageVersion Include="MSTest.TestAdapter" Version="4.3.2" />
+    <PackageVersion Include="MSTest.TestFramework" Version="4.3.2" />
     <PackageVersion Include="coverlet.collector" Version="10.0.1" />
     <PackageVersion Include="Newtonsoft.Json" Version="13.0.4" />
-    <PackageVersion Include="Sarif.Sdk" Version="5.4.3" />
+    <PackageVersion Include="Sarif.Sdk" Version="5.5.0" />
     <PackageVersion Include="ModelContextProtocol" Version="1.4.1" />
-    <PackageVersion Include="Microsoft.Extensions.Hosting" Version="10.0.9" />
+    <PackageVersion Include="Microsoft.Extensions.Hosting" Version="10.0.10" />
   </ItemGroup>
 </Project>
diff --git a/test/ThreatModelForge.Api.Tests/ThreatModelForge.Api.Tests.csproj b/test/ThreatModelForge.Api.Tests/ThreatModelForge.Api.Tests.csproj
index 5a46c3d..25a3cc2 100644
--- a/test/ThreatModelForge.Api.Tests/ThreatModelForge.Api.Tests.csproj
+++ b/test/ThreatModelForge.Api.Tests/ThreatModelForge.Api.Tests.csproj
@@ -9,6 +9,7 @@
   </PropertyGroup>
 
   <ItemGroup>
+    <PackageReference Include="Microsoft.Extensions.Hosting" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" />
     <PackageReference Include="Microsoft.AspNetCore.Mvc.Testing" />
     <PackageReference Include="MSTest.TestAdapter" />