From 15a255873cd8062bced1aee57504486e441b9a14 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 21 Jul 2026 03:23:36 +0000 Subject: [PATCH 1/2] Bump System.Security.Cryptography.Xml from 10.0.9 to 10.0.10 --- updated-dependencies: - dependency-name: System.Security.Cryptography.Xml dependency-version: 10.0.10 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- build/_build.csproj | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build/_build.csproj b/build/_build.csproj index 1bacc87..a82fb2a 100644 --- a/build/_build.csproj +++ b/build/_build.csproj @@ -20,7 +20,7 @@ - + From 58bde1dee086637c22a33e098044b71b04584b9d Mon Sep 17 00:00:00 2001 From: JerrettDavis Date: Tue, 21 Jul 2026 12:40:49 -0500 Subject: [PATCH 2/2] fix(deps): patch AngleSharp GHSA-pgww-w46g-26qg alongside this bump Vulnerability Check was failing (blocking Review Summary) due to a pre-existing moderate vulnerability unrelated to this PR's own diff: AngleSharp 1.4.0, pulled transitively via bunit 2.7.2, is vulnerable to GHSA-pgww-w46g-26qg / CVE-2026-54570 (mXSS via annotation-xml HTML integration point bypass). Pin to 1.5.2 (first patched: 1.5.0) so the gate is clean alongside the System.Security.Cryptography.Xml bump. Co-Authored-By: Claude Sonnet 5 --- tests/PokManager.Web.Tests/PokManager.Web.Tests.csproj | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/tests/PokManager.Web.Tests/PokManager.Web.Tests.csproj b/tests/PokManager.Web.Tests/PokManager.Web.Tests.csproj index 782a984..ab63c2c 100644 --- a/tests/PokManager.Web.Tests/PokManager.Web.Tests.csproj +++ b/tests/PokManager.Web.Tests/PokManager.Web.Tests.csproj @@ -15,6 +15,11 @@ + +