From a6ee1b7efb3c0cb4438c7ee39363712a757c1e6c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 13 Jul 2026 04:38:05 +0000
Subject: [PATCH] deps: Bump MessagePack from 3.1.7 to 3.1.8

---
updated-dependencies:
- dependency-name: MessagePack
  dependency-version: 3.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .../SharpCoreDB.AppHost.csproj                | 76 +++++++++----------
 1 file changed, 38 insertions(+), 38 deletions(-)

diff --git a/src/SharpCoreDB.AppHost/SharpCoreDB.AppHost.csproj b/src/SharpCoreDB.AppHost/SharpCoreDB.AppHost.csproj
index 7db756bb..0f6dcc95 100644
--- a/src/SharpCoreDB.AppHost/SharpCoreDB.AppHost.csproj
+++ b/src/SharpCoreDB.AppHost/SharpCoreDB.AppHost.csproj
@@ -1,38 +1,38 @@
-<Project>
-  <!-- Aspire SDK requires special handling: disable CPM and SourceLink -->
-  <PropertyGroup>
-    <EnableSourceLink>false</EnableSourceLink>
-    <ManagePackageVersionsCentrally>false</ManagePackageVersionsCentrally>
-  </PropertyGroup>
-
-  <Sdk Name="Aspire.AppHost.Sdk" Version="13.2.0" />
-
-  <PropertyGroup>
-    <OutputType>Exe</OutputType>
-    <TargetFramework>net10.0</TargetFramework>
-    <LangVersion>14.0</LangVersion>
-    <Nullable>enable</Nullable>
-    <ImplicitUsings>enable</ImplicitUsings>
-    <IsPackable>false</IsPackable>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <ProjectCapability Include="Aspire" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <!-- Aspire implicit packages must have inline versions when CPM is repo-wide -->
-    <PackageReference Include="Aspire.Hosting.AppHost" Version="13.4.6" />
-    <PackageReference Include="Aspire.Hosting.Orchestration.win-x64" Version="13.4.6" />
-    <PackageReference Include="Aspire.Dashboard.Sdk.win-x64" Version="13.4.6" />
-    <PackageReference Include="KubernetesClient" Version="19.0.2" />
-    <!-- Explicit override for vulnerable transitive MessagePack brought by KubernetesClient + Aspire/StreamJsonRpc (>=2.5.302 required) -->
-    <PackageReference Include="MessagePack" Version="3.1.7" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <!-- Reference to server project -->
-    <ProjectReference Include="..\SharpCoreDB.Server\SharpCoreDB.Server.csproj" />
-  </ItemGroup>
-
-</Project>
+<Project>
+  <!-- Aspire SDK requires special handling: disable CPM and SourceLink -->
+  <PropertyGroup>
+    <EnableSourceLink>false</EnableSourceLink>
+    <ManagePackageVersionsCentrally>false</ManagePackageVersionsCentrally>
+  </PropertyGroup>
+
+  <Sdk Name="Aspire.AppHost.Sdk" Version="13.2.0" />
+
+  <PropertyGroup>
+    <OutputType>Exe</OutputType>
+    <TargetFramework>net10.0</TargetFramework>
+    <LangVersion>14.0</LangVersion>
+    <Nullable>enable</Nullable>
+    <ImplicitUsings>enable</ImplicitUsings>
+    <IsPackable>false</IsPackable>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <ProjectCapability Include="Aspire" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <!-- Aspire implicit packages must have inline versions when CPM is repo-wide -->
+    <PackageReference Include="Aspire.Hosting.AppHost" Version="13.4.6" />
+    <PackageReference Include="Aspire.Hosting.Orchestration.win-x64" Version="13.4.6" />
+    <PackageReference Include="Aspire.Dashboard.Sdk.win-x64" Version="13.4.6" />
+    <PackageReference Include="KubernetesClient" Version="19.0.2" />
+    <!-- Explicit override for vulnerable transitive MessagePack brought by KubernetesClient + Aspire/StreamJsonRpc (>=2.5.302 required) -->
+    <PackageReference Include="MessagePack" Version="3.1.8" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <!-- Reference to server project -->
+    <ProjectReference Include="..\SharpCoreDB.Server\SharpCoreDB.Server.csproj" />
+  </ItemGroup>
+
+</Project>