From fd73ec4342d44a4d6ba5965dd0bc337c47f38e94 Mon Sep 17 00:00:00 2001
From: J-P Nurmi <jpnurmi@gmail.com>
Date: Wed, 15 Oct 2025 15:04:53 +0200
Subject: [PATCH] chore(deps): bump Microsoft.AspNetCore.Server.Kestrel.Core to
 2.3.6

---
 .../Sentry.AspNetCore.TestUtils.csproj                        | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/test/Sentry.AspNetCore.TestUtils/Sentry.AspNetCore.TestUtils.csproj b/test/Sentry.AspNetCore.TestUtils/Sentry.AspNetCore.TestUtils.csproj
index c60ea32096..d818679bb4 100644
--- a/test/Sentry.AspNetCore.TestUtils/Sentry.AspNetCore.TestUtils.csproj
+++ b/test/Sentry.AspNetCore.TestUtils/Sentry.AspNetCore.TestUtils.csproj
@@ -36,8 +36,8 @@
     <PackageReference Include="Microsoft.AspNetCore.Http" Version="2.1.22" />
     <PackageReference Include="Microsoft.AspNetCore.TestHost" Version="2.1.1" />
 
-    <!-- This is needed because the version that is brought in transitively also has a vulnerability warning -->
-    <PackageReference Include="Microsoft.AspNetCore.Server.Kestrel.Core" Version="2.1.25" />
+    <!-- https://github.com/advisories/GHSA-5rrx-jjjq-q2r5 -->
+    <PackageReference Include="Microsoft.AspNetCore.Server.Kestrel.Core" Version="2.3.6" />
     <!-- https://github.com/advisories/GHSA-vmch-3w2x-vhgq -->
     <PackageReference Include="Microsoft.AspNetCore.Server.Kestrel.Transport.Sockets" Version="2.1.40" />