From 32a34099ff6630c5cc691d9d08e32275aa76f6c8 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 6 Jul 2026 13:26:01 +0000
Subject: [PATCH] Bump Refit from 7.2.22 to 13.1.0

---
updated-dependencies:
- dependency-name: Refit
  dependency-version: 13.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 src/comissions.app.api/comissions.app.api.csproj | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/comissions.app.api/comissions.app.api.csproj b/src/comissions.app.api/comissions.app.api.csproj
index 6582d22..e5d821f 100644
--- a/src/comissions.app.api/comissions.app.api.csproj
+++ b/src/comissions.app.api/comissions.app.api.csproj
@@ -28,7 +28,7 @@
         <PackageReference Include="Npgsql.EntityFrameworkCore.PostgreSQL.Design" Version="1.1.0" />
         <!-- Security pins: force fixed transitive versions to satisfy the image vulnerability scan gate. -->
         <PackageReference Include="Npgsql" Version="8.0.3" /> <!-- CVE-2024-32655, transitive via EFCore.PostgreSQL 8.0.0 -->
-        <PackageReference Include="Refit" Version="7.2.22" /> <!-- CVE-2024-51501, transitive via Novu 0.3.3 -->
+        <PackageReference Include="Refit" Version="13.1.0" /> <!-- CVE-2024-51501, transitive via Novu 0.3.3 -->
         <PackageReference Include="Stripe.net" Version="43.12.0" />
         <PackageReference Include="Swashbuckle.AspNetCore" Version="6.4.0"/>
     </ItemGroup>