From 8646fe87467a0e5031a1a38f958ed9f41aef627b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 21 Sep 2026 17:24:27 +0000
Subject: [PATCH] Bump coverlet.collector and 17 others

Bumps coverlet.collector from 6.0.4 to 10.0.1
Bumps HotChocolate.AspNetCore from 14.3.2 to 16.6.6
Bumps HotChocolate.AspNetCore.Authorization from 14.3.2 to 16.6.6
Bumps Markdig from 0.37.0 to 1.4.0
Bumps Microsoft.Data.SqlClient from 6.1.4 to 7.1.0
Bumps Microsoft.Extensions.Configuration.EnvironmentVariables from 8.0.0 to 10.0.12
Bumps Microsoft.Extensions.Configuration.Json from 8.0.1 to 10.0.12
Bumps Microsoft.Extensions.DependencyInjection.Abstractions from 8.0.2 to 10.0.12
Bumps Microsoft.Extensions.Hosting.Abstractions from 8.0.1 to 10.0.12
Bumps Microsoft.IdentityModel.Tokens from 8.22.0 to 8.23.0
Bumps Microsoft.NET.Test.Sdk from 17.14.1 to 18.10.1
Bumps Serilog from 4.3.1 to 4.4.0
Bumps Serilog.AspNetCore from 8.0.3 to 10.0.0
Bumps Serilog.Sinks.File from 6.0.0 to 7.0.0
Bumps SixLabors.ImageSharp from 3.1.12 to 4.1.2
Bumps Swashbuckle.AspNetCore from 8.1.4 to 10.2.3
Bumps System.IdentityModel.Tokens.Jwt from 8.22.0 to 8.23.0
Bumps xunit.runner.visualstudio from 3.1.5 to 4.0.0

---
updated-dependencies:
- dependency-name: coverlet.collector
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
- dependency-name: HotChocolate.AspNetCore
  dependency-version: 16.6.6
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
- dependency-name: HotChocolate.AspNetCore.Authorization
  dependency-version: 16.6.6
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
- dependency-name: Markdig
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
- dependency-name: Microsoft.Data.SqlClient
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Configuration.EnvironmentVariables
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Configuration.EnvironmentVariables
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Configuration.Json
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Configuration.Json
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
- dependency-name: Microsoft.Extensions.Hosting.Abstractions
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
- dependency-name: Microsoft.IdentityModel.Tokens
  dependency-version: 8.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.10.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
- dependency-name: Serilog
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Serilog.AspNetCore
  dependency-version: 10.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
- dependency-name: Serilog.Sinks.File
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
- dependency-name: SixLabors.ImageSharp
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
- dependency-name: Swashbuckle.AspNetCore
  dependency-version: 10.2.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
- dependency-name: System.IdentityModel.Tokens.Jwt
  dependency-version: 8.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: xunit.runner.visualstudio
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 src/api/Directory.Packages.props              | 38 +++++++++----------
 .../VA.CMS.Infrastructure.csproj              |  2 +
 src/api/VA.CMS.Tests/VA.CMS.Tests.csproj      |  2 +
 3 files changed, 23 insertions(+), 19 deletions(-)

diff --git a/src/api/Directory.Packages.props b/src/api/Directory.Packages.props
index 937b7b6..c15322b 100644
--- a/src/api/Directory.Packages.props
+++ b/src/api/Directory.Packages.props
@@ -14,40 +14,40 @@
     <!-- #192 SharePoint HTML → Markdown normaliser. Parser only; no loader/network is ever configured. -->
     <PackageVersion Include="AngleSharp" Version="1.8.2" />
     <PackageVersion Include="dbup-sqlserver" Version="7.2.0" />
-    <PackageVersion Include="HotChocolate.AspNetCore" Version="14.3.2" />
-    <PackageVersion Include="HotChocolate.AspNetCore.Authorization" Version="14.3.2" />
+    <PackageVersion Include="HotChocolate.AspNetCore" Version="16.6.6" />
+    <PackageVersion Include="HotChocolate.AspNetCore.Authorization" Version="16.6.6" />
     <PackageVersion Include="MailKit" Version="4.18.0" />
-    <PackageVersion Include="Markdig" Version="0.37.0" />
+    <PackageVersion Include="Markdig" Version="1.4.0" />
     <PackageVersion Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="8.0.31" />
     <PackageVersion Include="Microsoft.AspNetCore.Authentication.Negotiate" Version="8.0.31" />
-    <PackageVersion Include="Microsoft.Data.SqlClient" Version="6.1.4" />
-    <PackageVersion Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="8.0.0" />
-    <PackageVersion Include="Microsoft.Extensions.Configuration.Json" Version="8.0.1" />
-    <PackageVersion Include="Microsoft.Extensions.DependencyInjection.Abstractions" Version="8.0.2" />
-    <PackageVersion Include="Microsoft.Extensions.Hosting.Abstractions" Version="8.0.1" />
-    <PackageVersion Include="Microsoft.Extensions.Logging.Abstractions" Version="8.0.3" />
+    <PackageVersion Include="Microsoft.Data.SqlClient" Version="7.1.0" />
+    <PackageVersion Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="10.0.12" />
+    <PackageVersion Include="Microsoft.Extensions.Configuration.Json" Version="10.0.12" />
+    <PackageVersion Include="Microsoft.Extensions.DependencyInjection.Abstractions" Version="10.0.12" />
+    <PackageVersion Include="Microsoft.Extensions.Hosting.Abstractions" Version="10.0.12" />
+    <PackageVersion Include="Microsoft.Extensions.Logging.Abstractions" Version="10.0.12" />
     <PackageVersion Include="Microsoft.Identity.Web" Version="4.14.2" />
-    <PackageVersion Include="Microsoft.IdentityModel.Tokens" Version="8.22.0" />
+    <PackageVersion Include="Microsoft.IdentityModel.Tokens" Version="8.23.0" />
     <PackageVersion Include="PetaPoco.Compiled" Version="6.0.683" />
     <!-- #166 observability. Serilog.AspNetCore 8.x keeps Microsoft.Extensions.* at 8.0 on net8.0;
          Serilog itself is pinned directly so the Splunk/EventLog sinks' floor (4.x) resolves. -->
-    <PackageVersion Include="Serilog" Version="4.3.1" />
-    <PackageVersion Include="Serilog.AspNetCore" Version="8.0.3" />
+    <PackageVersion Include="Serilog" Version="4.4.0" />
+    <PackageVersion Include="Serilog.AspNetCore" Version="10.0.0" />
     <PackageVersion Include="Serilog.Formatting.Compact" Version="3.0.0" />
     <PackageVersion Include="Serilog.Sinks.EventLog" Version="4.0.0" />
-    <PackageVersion Include="Serilog.Sinks.File" Version="6.0.0" />
+    <PackageVersion Include="Serilog.Sinks.File" Version="7.0.0" />
     <PackageVersion Include="Serilog.Sinks.Splunk" Version="5.2.0" />
-    <PackageVersion Include="SixLabors.ImageSharp" Version="3.1.12" />
-    <PackageVersion Include="Swashbuckle.AspNetCore" Version="8.1.4" />
-    <PackageVersion Include="System.IdentityModel.Tokens.Jwt" Version="8.22.0" />
+    <PackageVersion Include="SixLabors.ImageSharp" Version="4.1.2" />
+    <PackageVersion Include="Swashbuckle.AspNetCore" Version="10.2.3" />
+    <PackageVersion Include="System.IdentityModel.Tokens.Jwt" Version="8.23.0" />
   </ItemGroup>
 
   <ItemGroup Label="Tests">
-    <PackageVersion Include="coverlet.collector" Version="6.0.4" />
+    <PackageVersion Include="coverlet.collector" Version="10.0.1" />
     <PackageVersion Include="Microsoft.AspNetCore.Mvc.Testing" Version="8.0.31" />
-    <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
+    <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="18.10.1" />
     <PackageVersion Include="Testcontainers.MsSql" Version="4.15.0" />
     <PackageVersion Include="xunit" Version="2.9.3" />
-    <PackageVersion Include="xunit.runner.visualstudio" Version="3.1.5" />
+    <PackageVersion Include="xunit.runner.visualstudio" Version="4.0.0" />
   </ItemGroup>
 </Project>
diff --git a/src/api/VA.CMS.Infrastructure/VA.CMS.Infrastructure.csproj b/src/api/VA.CMS.Infrastructure/VA.CMS.Infrastructure.csproj
index 08b82ae..0bf1863 100644
--- a/src/api/VA.CMS.Infrastructure/VA.CMS.Infrastructure.csproj
+++ b/src/api/VA.CMS.Infrastructure/VA.CMS.Infrastructure.csproj
@@ -19,8 +19,10 @@
     <PackageReference Include="Microsoft.Extensions.Logging.Abstractions" />
     <PackageReference Include="MailKit" />
     <PackageReference Include="Markdig" />
+    <PackageReference Include="Microsoft.IdentityModel.Tokens" VersionOverride="8.23.0" />
     <PackageReference Include="PetaPoco.Compiled" />
     <PackageReference Include="SixLabors.ImageSharp" />
+    <PackageReference Include="System.IdentityModel.Tokens.Jwt" VersionOverride="8.23.0" />
   </ItemGroup>
 
 </Project>
diff --git a/src/api/VA.CMS.Tests/VA.CMS.Tests.csproj b/src/api/VA.CMS.Tests/VA.CMS.Tests.csproj
index 654859c..b16335a 100644
--- a/src/api/VA.CMS.Tests/VA.CMS.Tests.csproj
+++ b/src/api/VA.CMS.Tests/VA.CMS.Tests.csproj
@@ -15,6 +15,8 @@
     <PackageReference Include="HotChocolate.AspNetCore" />
     <PackageReference Include="Microsoft.AspNetCore.Mvc.Testing" />
     <PackageReference Include="Microsoft.Data.SqlClient" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" />
+    <PackageReference Include="Microsoft.Extensions.Configuration.Json" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" />
     <PackageReference Include="PetaPoco.Compiled" />
     <PackageReference Include="SixLabors.ImageSharp" />