From 50d79ed1c05ab83e7649bb1e97a8d075b66f30ac Mon Sep 17 00:00:00 2001 From: Joseph Doherty Date: Sat, 18 Jul 2026 03:20:14 -0400 Subject: [PATCH] fix(deps): bump ZB.MOM.WW.Auth 0.1.3 -> 0.1.5 for the SQLitePCLRaw security fix Auth.ApiKeys pulled SQLitePCLRaw.lib.e_sqlite3 2.1.11, which carries high-severity advisory GHSA-2m69-gcr7-jv3q. ScadaBridge was genuinely exposed -- verified 2.1.11 resolving before the bump and 2.1.12 after, with the vulnerability scan now clean. This jump crosses 0.1.4 (ExpiresUtc verifier enforcement), but that change was additive: Security, Security.Tests, InboundAPI and InboundAPI.Tests all build clean with no source changes. Suites match their documented baselines exactly -- Security 181/181, InboundAPI 269/269. Note: a full-solution build is currently blocked by a PRE-EXISTING and unrelated NU1902 error (AngleSharp 1.1.1 in CentralUI.Tests under TreatWarningsAsErrors), confirmed present on a clean tree before this change. Claude-Session: https://claude.ai/code/session_01BL2Vu1ESDQ9SCN4gVKkdts --- Directory.Packages.props | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/Directory.Packages.props b/Directory.Packages.props index 68a5108f..75f68348 100644 --- a/Directory.Packages.props +++ b/Directory.Packages.props @@ -80,10 +80,10 @@ - - - - + + + +