diff --git a/Directory.Packages.props b/Directory.Packages.props
index 642f4b0f..e2c21d19 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -69,7 +69,7 @@
     <PackageVersion Include="Microsoft.CodeAnalysis.CSharp.Scripting" Version="4.12.0" />
     <PackageVersion Include="Microsoft.CodeAnalysis.CSharp.Workspaces" Version="5.0.0" />
     <PackageVersion Include="Microsoft.Data.SqlClient" Version="6.1.1" />
-    <PackageVersion Include="Microsoft.Data.Sqlite" Version="10.0.7" />
+    <PackageVersion Include="Microsoft.Data.Sqlite" Version="10.0.13" />
     <PackageVersion Include="Microsoft.EntityFrameworkCore" Version="10.0.7" />
     <PackageVersion Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.7" />
     <PackageVersion Include="Microsoft.EntityFrameworkCore.InMemory" Version="10.0.7" />
@@ -151,8 +151,11 @@
       range, <= 2.1.11). 2.1.12 is the first fixed native bundle (embeds the SQLite 3.50.2+ patch).
       A direct PackageReference in Core.AlarmHistorian promotes this to the resolved version,
       clearing the advisory without CentralPackageTransitivePinningEnabled (which breaks the Roslyn split).
+      Now 2.1.13 because Microsoft.Data.Sqlite 10.0.13 (above — the dotnet/efcore#39009 pool
+      double-handout fix, lmxopcua#772 / scadaproj#26) depends on bundle_e_sqlite3 >= 2.1.13; a
+      2.1.12 pin fails restore with NU1109. Move the two pins together.
     -->
-    <PackageVersion Include="SQLitePCLRaw.bundle_e_sqlite3" Version="2.1.12" />
+    <PackageVersion Include="SQLitePCLRaw.bundle_e_sqlite3" Version="2.1.13" />
     <!--
       Surgical transitive pin #2. Four NU1903 high-severity advisories (GHSA-23rf-6693-g89p,
       GHSA-8q5v-6pqq-x66h, GHSA-cvvh-rhrc-wg4q, GHSA-g8r8-53c2-pm3f) landed in the NuGet audit