From 6f034e4edc07a049b0fee3ca1aa4ef528cc6443a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 15 Jul 2026 22:24:49 +0000 Subject: [PATCH 1/2] Bump Microsoft.AspNetCore.OpenApi from 10.0.9 to 10.0.10 --- updated-dependencies: - dependency-name: Microsoft.AspNetCore.OpenApi dependency-version: 10.0.10 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .../PureQL.CSharp.Model.OpenAPI.Schema.csproj | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/PureQL.CSharp.Model.OpenAPI.Schema/PureQL.CSharp.Model.OpenAPI.Schema.csproj b/src/PureQL.CSharp.Model.OpenAPI.Schema/PureQL.CSharp.Model.OpenAPI.Schema.csproj index d8e9e47..0d558b3 100644 --- a/src/PureQL.CSharp.Model.OpenAPI.Schema/PureQL.CSharp.Model.OpenAPI.Schema.csproj +++ b/src/PureQL.CSharp.Model.OpenAPI.Schema/PureQL.CSharp.Model.OpenAPI.Schema.csproj @@ -17,6 +17,6 @@ 0.1.0-preview.0.1.1 - + From a0c6a05f12c168ef4dc9807bee5e6a9512f1c980 Mon Sep 17 00:00:00 2001 From: Dmitry Kurochkin Date: Thu, 6 Aug 2026 06:21:44 +0000 Subject: [PATCH 2/2] Pin Microsoft.OpenApi to 2.11.0 to fix NU1903 vulnerability Microsoft.AspNetCore.OpenApi resolves Microsoft.OpenApi to its minimum-declared version (2.0.0), which is affected by GHSA-v5pm-xwqc-g5wc. Pinning it directly forces resolution to a patched version. --- .../PureQL.CSharp.Model.OpenAPI.Schema.csproj | 1 + 1 file changed, 1 insertion(+) diff --git a/src/PureQL.CSharp.Model.OpenAPI.Schema/PureQL.CSharp.Model.OpenAPI.Schema.csproj b/src/PureQL.CSharp.Model.OpenAPI.Schema/PureQL.CSharp.Model.OpenAPI.Schema.csproj index 0d558b3..d8a250a 100644 --- a/src/PureQL.CSharp.Model.OpenAPI.Schema/PureQL.CSharp.Model.OpenAPI.Schema.csproj +++ b/src/PureQL.CSharp.Model.OpenAPI.Schema/PureQL.CSharp.Model.OpenAPI.Schema.csproj @@ -18,5 +18,6 @@ +