From fd65af932c46224836f06c37f194d059d8f46e7f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 6 Nov 2026 17:22:32 +0000
Subject: [PATCH 1/2] Bump the dotnet-dependencies group with 4 updates

Bumps CommunityToolkit.Aspire.Hosting.JavaScript.Extensions from 13.6.0 to 13.6.1
Bumps MessagePack from 2.5.307 to 3.1.12
Bumps Microsoft.Testing.Platform from 2.5.1 to 2.5.2
Bumps System.Security.Cryptography.Pkcs from 10.0.13 to 10.0.14

---
updated-dependencies:
- dependency-name: CommunityToolkit.Aspire.Hosting.JavaScript.Extensions
  dependency-version: 13.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: MessagePack
  dependency-version: 3.1.12
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.Testing.Platform
  dependency-version: 2.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: Microsoft.Testing.Platform
  dependency-version: 2.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
- dependency-name: System.Security.Cryptography.Pkcs
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 backend/Menu.AppHost/Menu.AppHost.csproj                   | 4 ++--
 backend/Menu.MigrationService/Menu.MigrationService.csproj | 2 +-
 backend/MenuApi.Tests/MenuApi.Tests.csproj                 | 2 +-
 backend/MenuDB.Tests/MenuDB.Tests.csproj                   | 2 +-
 backend/MenuDB/MenuDB.csproj                               | 2 +-
 5 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/backend/Menu.AppHost/Menu.AppHost.csproj b/backend/Menu.AppHost/Menu.AppHost.csproj
index a1b070c5..8b915a4d 100644
--- a/backend/Menu.AppHost/Menu.AppHost.csproj
+++ b/backend/Menu.AppHost/Menu.AppHost.csproj
@@ -13,8 +13,8 @@
     <PackageReference Include="Aspire.Hosting.JavaScript" Version="13.6.4" />
     <PackageReference Include="Aspire.Hosting.Redis" Version="13.6.4" />
     <PackageReference Include="Aspire.Hosting.SqlServer" Version="13.6.4" />
-    <PackageReference Include="CommunityToolkit.Aspire.Hosting.JavaScript.Extensions" Version="13.6.0" />
-    <PackageReference Include="MessagePack" Version="2.5.307" />
+    <PackageReference Include="CommunityToolkit.Aspire.Hosting.JavaScript.Extensions" Version="13.6.1" />
+    <PackageReference Include="MessagePack" Version="3.1.12" />
     <PackageReference Include="OpenTelemetry.Exporter.OpenTelemetryProtocol" Version="1.20.1" />
     <PackageReference Include="OpenTelemetry.Extensions.Hosting" Version="1.20.1" />
     <PackageReference Include="System.Security.Cryptography.Pkcs" Version="10.0.13" />
diff --git a/backend/Menu.MigrationService/Menu.MigrationService.csproj b/backend/Menu.MigrationService/Menu.MigrationService.csproj
index 33811ce9..0fc000f2 100644
--- a/backend/Menu.MigrationService/Menu.MigrationService.csproj
+++ b/backend/Menu.MigrationService/Menu.MigrationService.csproj
@@ -10,7 +10,7 @@
 
   <ItemGroup>
     <PackageReference Include="Aspire.Microsoft.EntityFrameworkCore.SqlServer" Version="13.6.4" />
-    <PackageReference Include="System.Security.Cryptography.Pkcs" Version="10.0.13" />
+    <PackageReference Include="System.Security.Cryptography.Pkcs" Version="10.0.14" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/backend/MenuApi.Tests/MenuApi.Tests.csproj b/backend/MenuApi.Tests/MenuApi.Tests.csproj
index aef8cc63..81695c66 100644
--- a/backend/MenuApi.Tests/MenuApi.Tests.csproj
+++ b/backend/MenuApi.Tests/MenuApi.Tests.csproj
@@ -38,7 +38,7 @@
 		<PackageReference Include="FakeItEasy" Version="9.0.1" />
 		<PackageReference Include="GitHubActionsTestLogger" Version="3.0.5" />
 		<PackageReference Include="Microsoft.EntityFrameworkCore.InMemory" Version="10.0.14" />
-		<PackageReference Include="Microsoft.Testing.Platform" Version="2.5.1" />
+		<PackageReference Include="Microsoft.Testing.Platform" Version="2.5.2" />
 		<PackageReference Include="Microsoft.Testing.Extensions.CodeCoverage" Version="18.12.0" />
 		<PackageReference Include="xunit.v3.mtp-v2" Version="4.0.2" />
 	</ItemGroup>
diff --git a/backend/MenuDB.Tests/MenuDB.Tests.csproj b/backend/MenuDB.Tests/MenuDB.Tests.csproj
index 8a48ec45..f0d0778f 100644
--- a/backend/MenuDB.Tests/MenuDB.Tests.csproj
+++ b/backend/MenuDB.Tests/MenuDB.Tests.csproj
@@ -17,7 +17,7 @@
 
 	<ItemGroup>
 		<PackageReference Include="Microsoft.EntityFrameworkCore.InMemory" Version="10.0.14" />
-		<PackageReference Include="Microsoft.Testing.Platform" Version="2.5.1" />
+		<PackageReference Include="Microsoft.Testing.Platform" Version="2.5.2" />
 		<PackageReference Include="Microsoft.Testing.Extensions.CodeCoverage" Version="18.12.0" />
 		<PackageReference Include="xunit.v3.mtp-v2" Version="4.0.2" />
 		<PackageReference Include="AwesomeAssertions" Version="9.6.0" />
diff --git a/backend/MenuDB/MenuDB.csproj b/backend/MenuDB/MenuDB.csproj
index 2d65810c..450b899c 100644
--- a/backend/MenuDB/MenuDB.csproj
+++ b/backend/MenuDB/MenuDB.csproj
@@ -8,7 +8,7 @@
 
 	<ItemGroup>
 		<PackageReference Include="Microsoft.EntityFrameworkCore.SqlServer" Version="10.0.14" />
-		<PackageReference Include="System.Security.Cryptography.Pkcs" Version="10.0.13" />
+		<PackageReference Include="System.Security.Cryptography.Pkcs" Version="10.0.14" />
 		<PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.14">
 		  <PrivateAssets>all</PrivateAssets>
 		  <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>

From e2411019205e4c3443d5c2dde80faa35dd92e9a7 Mon Sep 17 00:00:00 2001
From: Daniel Gee <dan@dan-gee.co.uk>
Date: Fri, 6 Nov 2026 21:46:28 +0000
Subject: [PATCH 2/2] Align transitive package versions

Co-authored-by: Codex <codex@openai.com>
---
 .../MenuApi.Integration.Tests/MenuApi.Integration.Tests.csproj  | 2 +-
 backend/MenuApi/MenuApi.csproj                                  | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/backend/MenuApi.Integration.Tests/MenuApi.Integration.Tests.csproj b/backend/MenuApi.Integration.Tests/MenuApi.Integration.Tests.csproj
index 7c1c3c11..fdefbbf3 100644
--- a/backend/MenuApi.Integration.Tests/MenuApi.Integration.Tests.csproj
+++ b/backend/MenuApi.Integration.Tests/MenuApi.Integration.Tests.csproj
@@ -23,7 +23,7 @@
 
 	<ItemGroup>
 		<PackageReference Include="Aspire.Hosting.Testing" Version="13.6.4" />
-		<PackageReference Include="MessagePack" Version="2.5.307" />
+		<PackageReference Include="MessagePack" Version="3.1.12" />
 		<PackageReference Include="AutoFixture.Xunit3" Version="4.19.0" />		
 		<PackageReference Include="AwesomeAssertions" Version="9.6.0" />		
 		<PackageReference Include="AwesomeAssertions.Analyzers" Version="9.0.8">
diff --git a/backend/MenuApi/MenuApi.csproj b/backend/MenuApi/MenuApi.csproj
index 870e41d1..dc0c33ca 100644
--- a/backend/MenuApi/MenuApi.csproj
+++ b/backend/MenuApi/MenuApi.csproj
@@ -44,7 +44,7 @@
 		  <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
 		</PackageReference>
 		<PackageReference Include="Microsoft.VisualStudio.Azure.Containers.Tools.Targets" Version="1.23.0" />
-		<PackageReference Include="System.Security.Cryptography.Pkcs" Version="10.0.13" />
+		<PackageReference Include="System.Security.Cryptography.Pkcs" Version="10.0.14" />
 		<PackageReference Include="Riok.Mapperly" Version="4.3.1" />
 		<PackageReference Include="Vogen" Version="8.0.7" />
 	</ItemGroup>