From 5a5f5b10a630e069588c35a416964eee154e8493 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 12 Oct 2026 09:15:14 +0000
Subject: [PATCH] Bump Aspire.Hosting.AppHost and 7 others

Bumps Aspire.Hosting.AppHost from 13.5.4 to 13.6.0
Bumps Azure.Security.KeyVault.Secrets from 4.11.1 to 4.11.2
Bumps MessagePack from 3.1.10 to 3.1.11
Bumps Microsoft.Identity.Web from 4.15.0 to 4.16.0
Bumps Umbraco.Automate from 17.4.0 to 17.5.0
Bumps Umbraco.Automate.Core from 17.4.0 to 17.5.0
Bumps Umbraco.Automate.Persistence.Sqlite from 17.4.0 to 17.5.0
Bumps uSync.BackOffice from 17.4.2 to 17.4.3

---
updated-dependencies:
- dependency-name: Aspire.Hosting.AppHost
  dependency-version: 13.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Azure.Security.KeyVault.Secrets
  dependency-version: 4.11.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: MessagePack
  dependency-version: 3.1.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Microsoft.Identity.Web
  dependency-version: 4.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Umbraco.Automate
  dependency-version: 17.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Umbraco.Automate.Core
  dependency-version: 17.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Umbraco.Automate.Persistence.Sqlite
  dependency-version: 17.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: uSync.BackOffice
  dependency-version: 17.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Directory.Build.props                                  | 2 +-
 src/UmbracoPrism.AppHost/UmbracoPrism.AppHost.csproj   | 4 ++--
 src/UmbracoPrism.Automate/UmbracoPrism.Automate.csproj | 3 ++-
 src/UmbracoPrism.Core/UmbracoPrism.Core.csproj         | 6 +++---
 src/UmbracoPrism.TestSite/UmbracoPrism.TestSite.csproj | 4 ++--
 src/UmbracoPrism.uSync/UmbracoPrism.uSync.csproj       | 1 +
 6 files changed, 11 insertions(+), 9 deletions(-)

diff --git a/Directory.Build.props b/Directory.Build.props
index ba1f2c9e..cad02b6a 100644
--- a/Directory.Build.props
+++ b/Directory.Build.props
@@ -11,7 +11,7 @@
     <UmbracoVersion>17.7.0</UmbracoVersion>
     <UmbracoPackageRange>[$(UmbracoVersion), $([MSBuild]::Add($(UmbracoMajor), 1)).0.0)</UmbracoPackageRange>
     <!-- uSync's major tracks Umbraco's, so it gets the same treatment. -->
-    <USyncVersion>17.4.2</USyncVersion>
+    <USyncVersion>17.4.3</USyncVersion>
     <USyncPackageRange>[$(USyncVersion), $([MSBuild]::Add($(UmbracoMajor), 1)).0.0)</USyncPackageRange>
     <!-- Microsoft.OpenApi is deliberately NOT pinned in this estate: it flows transitively from
          Umbraco.Cms.Api.Management ($(UmbracoVersion)) at the version Umbraco itself requires
diff --git a/src/UmbracoPrism.AppHost/UmbracoPrism.AppHost.csproj b/src/UmbracoPrism.AppHost/UmbracoPrism.AppHost.csproj
index 11ccb7b7..458e42d5 100644
--- a/src/UmbracoPrism.AppHost/UmbracoPrism.AppHost.csproj
+++ b/src/UmbracoPrism.AppHost/UmbracoPrism.AppHost.csproj
@@ -10,12 +10,12 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Aspire.Hosting.AppHost" Version="13.5.4" />
+    <PackageReference Include="Aspire.Hosting.AppHost" Version="13.6.0" />
     <PackageReference Include="Aspire.Hosting.NodeJs" Version="9.5.2" />
     <!-- Floor raised to whatever Aspire.Hosting.AppHost 13.4.6 itself now requires transitively. -->
     <PackageReference Include="KubernetesClient" Version="19.0.2" PrivateAssets="all" />
     <PackageReference Include="OpenTelemetry.Api" Version="1.19.1" />
-    <PackageReference Include="MessagePack" Version="3.1.10" PrivateAssets="all" />
+    <PackageReference Include="MessagePack" Version="3.1.11" PrivateAssets="all" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/src/UmbracoPrism.Automate/UmbracoPrism.Automate.csproj b/src/UmbracoPrism.Automate/UmbracoPrism.Automate.csproj
index 8b8ddc07..b5faf1c8 100644
--- a/src/UmbracoPrism.Automate/UmbracoPrism.Automate.csproj
+++ b/src/UmbracoPrism.Automate/UmbracoPrism.Automate.csproj
@@ -10,8 +10,9 @@
     <!-- Umbraco Automate versions independently of the Umbraco.Cms major/minor it targets — track
          the same 17.x line TestSite's own Umbraco.Automate/Umbraco.Automate.Persistence.Sqlite
          PackageReferences use, not $(UmbracoPackageRange). -->
+    <PackageReference Include="MessagePack" Version="3.1.11" />
     <PackageReference Include="System.Security.Cryptography.Xml" Version="10.0.12" />
-    <PackageReference Include="Umbraco.Automate.Core" Version="17.4.0" />
+    <PackageReference Include="Umbraco.Automate.Core" Version="17.5.0" />
     <PackageReference Include="OpenTelemetry.Api" Version="1.19.1" />
     <!-- Umbraco.Automate.Core pulls in SQLitePCLRaw.lib.e_sqlite3 2.1.11 transitively, which has
          a known high-severity advisory (GHSA-2m69-gcr7-jv3q, bundled SQLite < 3.50.2). The
diff --git a/src/UmbracoPrism.Core/UmbracoPrism.Core.csproj b/src/UmbracoPrism.Core/UmbracoPrism.Core.csproj
index d16e9b4c..7c0385ab 100644
--- a/src/UmbracoPrism.Core/UmbracoPrism.Core.csproj
+++ b/src/UmbracoPrism.Core/UmbracoPrism.Core.csproj
@@ -31,12 +31,12 @@
     <PackageReference Include="Azure.Extensions.AspNetCore.Configuration.Secrets" Version="1.5.2" />
     <PackageReference Include="FirebaseAdmin" Version="3.7.0" />
     <PackageReference Include="Azure.Identity" Version="1.21.0" />
-    <PackageReference Include="Azure.Security.KeyVault.Secrets" Version="4.11.1" />
-    <PackageReference Include="MessagePack" Version="3.1.10" />
+    <PackageReference Include="Azure.Security.KeyVault.Secrets" Version="4.11.2" />
+    <PackageReference Include="MessagePack" Version="3.1.11" />
     <PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="10.0.12" />
     <PackageReference Include="Microsoft.AspNetCore.Authentication.OpenIdConnect" Version="10.0.12" />
     <PackageReference Include="Microsoft.Extensions.Http.Resilience" Version="10.10.0" />
-    <PackageReference Include="Microsoft.Identity.Web" Version="4.15.0" />
+    <PackageReference Include="Microsoft.Identity.Web" Version="4.16.0" />
     <PackageReference Include="MimeKit" Version="4.18.1" />
     <PackageReference Include="MailKit" Version="4.18.1" />
     <PackageReference Include="Polly" Version="8.8.0" />
diff --git a/src/UmbracoPrism.TestSite/UmbracoPrism.TestSite.csproj b/src/UmbracoPrism.TestSite/UmbracoPrism.TestSite.csproj
index 5e628672..88660990 100644
--- a/src/UmbracoPrism.TestSite/UmbracoPrism.TestSite.csproj
+++ b/src/UmbracoPrism.TestSite/UmbracoPrism.TestSite.csproj
@@ -31,8 +31,8 @@
          JugglingLicenceDecisionAutomationSeeder). Registers itself through its own
          UmbracoAutomateComposer, picked up automatically by Umbraco's own composer discovery —
          a bare package reference is enough, no explicit AddUmbracoAutomate() call. -->
-    <PackageReference Include="Umbraco.Automate" Version="17.4.0" />
-    <PackageReference Include="Umbraco.Automate.Persistence.Sqlite" Version="17.4.0" />
+    <PackageReference Include="Umbraco.Automate" Version="17.5.0" />
+    <PackageReference Include="Umbraco.Automate.Persistence.Sqlite" Version="17.5.0" />
     <!-- Umbraco.AI and its Automate add-on (the Run AI Agent action), on the Umbraco 17 line, with the
          Google provider for the field-recording demo's free Gemini profile. Each registers itself
          through its own composer, so bare package references are enough. -->
diff --git a/src/UmbracoPrism.uSync/UmbracoPrism.uSync.csproj b/src/UmbracoPrism.uSync/UmbracoPrism.uSync.csproj
index e9203e3c..37c9b496 100644
--- a/src/UmbracoPrism.uSync/UmbracoPrism.uSync.csproj
+++ b/src/UmbracoPrism.uSync/UmbracoPrism.uSync.csproj
@@ -7,6 +7,7 @@
   </PropertyGroup>
 
   <ItemGroup>
+    <PackageReference Include="MessagePack" Version="3.1.11" />
     <PackageReference Include="uSync.BackOffice" Version="$(USyncPackageRange)" />
     <PackageReference Include="System.Security.Cryptography.Xml" Version="10.0.12" PrivateAssets="all" />
   </ItemGroup>