From 1df12a852ee41b7cf7c94cec7c09e0217e5e6763 Mon Sep 17 00:00:00 2001
From: maxiar <edujimenez86@hotmail.com>
Date: Wed, 9 Sep 2026 15:39:50 -0300
Subject: [PATCH] fix(deps): bump Microsoft.SourceLink.GitHub to 10.0.401 to
 clear GHSA-23fw-v26w-5fgq

SourceLink 8.0.0 pulls Microsoft.Build.Tasks.Git 8.0.0, which now carries a
moderate-severity advisory. With NuGet audit plus TreatWarningsAsErrors that
surfaces as NU1902 and fails the whole solution build, not just the projects
that pack.

10.0.401 is the current stable line and is the only build-affecting change here;
no source changes were needed.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
---
 src/Directory.Packages.props | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/Directory.Packages.props b/src/Directory.Packages.props
index 0d38b28190..b41a0ca91a 100644
--- a/src/Directory.Packages.props
+++ b/src/Directory.Packages.props
@@ -9,7 +9,7 @@
     <!-- Pack default lives in Directory.Build.props (false; source-ownership model). -->
   </PropertyGroup>
   <ItemGroup>
-    <PackageVersion Include="Microsoft.SourceLink.GitHub" Version="8.0.0" />
+    <PackageVersion Include="Microsoft.SourceLink.GitHub" Version="10.0.401" />
   </ItemGroup>
   <ItemGroup Label="Aspire">
     <PackageVersion Include="Aspire.Hosting.JavaScript" Version="13.4.0" />