From f8ae2c7142171042d85c6c2d70ad31e09152e6c4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 22 Jun 2026 05:36:18 +0000
Subject: [PATCH 1/2] Bump Markdig from 1.2.0 to 1.3.0

---
updated-dependencies:
- dependency-name: Markdig
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 DevProxy.Abstractions/DevProxy.Abstractions.csproj | 2 +-
 DevProxy.Abstractions/packages.lock.json           | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/DevProxy.Abstractions/DevProxy.Abstractions.csproj b/DevProxy.Abstractions/DevProxy.Abstractions.csproj
index e6ecb0b3..458be138 100644
--- a/DevProxy.Abstractions/DevProxy.Abstractions.csproj
+++ b/DevProxy.Abstractions/DevProxy.Abstractions.csproj
@@ -32,7 +32,7 @@
   </ItemGroup>
 
   <ItemGroup>
-    <PackageReference Include="Markdig" Version="1.2.0" />
+    <PackageReference Include="Markdig" Version="1.3.0" />
     <PackageReference Include="Microsoft.EntityFrameworkCore.Sqlite" Version="10.0.8" />
     <PackageReference Include="Microsoft.Extensions.Configuration" Version="10.0.9" />
     <PackageReference Include="Microsoft.Extensions.Configuration.Binder" Version="10.0.9" />
diff --git a/DevProxy.Abstractions/packages.lock.json b/DevProxy.Abstractions/packages.lock.json
index 95f919ce..73c797b6 100644
--- a/DevProxy.Abstractions/packages.lock.json
+++ b/DevProxy.Abstractions/packages.lock.json
@@ -4,9 +4,9 @@
     "net10.0": {
       "Markdig": {
         "type": "Direct",
-        "requested": "[1.2.0, )",
-        "resolved": "1.2.0",
-        "contentHash": "LoBVOgeDWfHthWTPzQJkjDkxImqBXRA5XpuTyjdM4SAURyWQGG1CbEEbfPbmvAavggnAZPaTYpbhIPUurWvIXA=="
+        "requested": "[1.3.0, )",
+        "resolved": "1.3.0",
+        "contentHash": "1cWDY3Rhd24SVe66p2ekhEPhaSAXuH3WgGn6EPNjqXL0Y4ycK7GXtq0UE5oeBYircNlqJIEQk9W2vz60hRaezA=="
       },
       "Microsoft.EntityFrameworkCore.Sqlite": {
         "type": "Direct",

From b1e29b0d8dda896e1097dead3c4c64b39d16dbf0 Mon Sep 17 00:00:00 2001
From: Waldek Mastykarz <waldek@mastykarz.nl>
Date: Mon, 22 Jun 2026 09:03:52 +0200
Subject: [PATCH 2/2] fix: suppress SQLitePCLRaw vulnerability advisory and
 update lock files

Suppress GHSA-2m69-gcr7-jv3q (SQLitePCLRaw.lib.e_sqlite3 2.1.11) as
there is no upstream fix available yet. Also regenerate lock files for
the Markdig 1.3.0 bump.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---
 DevProxy.Plugins/packages.lock.json | 6 +++---
 DevProxy/packages.lock.json         | 6 +++---
 Directory.Build.props               | 5 +++++
 3 files changed, 11 insertions(+), 6 deletions(-)
 create mode 100644 Directory.Build.props

diff --git a/DevProxy.Plugins/packages.lock.json b/DevProxy.Plugins/packages.lock.json
index 26cd9823..fdc27b0a 100644
--- a/DevProxy.Plugins/packages.lock.json
+++ b/DevProxy.Plugins/packages.lock.json
@@ -141,8 +141,8 @@
       },
       "Markdig": {
         "type": "Transitive",
-        "resolved": "1.2.0",
-        "contentHash": "LoBVOgeDWfHthWTPzQJkjDkxImqBXRA5XpuTyjdM4SAURyWQGG1CbEEbfPbmvAavggnAZPaTYpbhIPUurWvIXA=="
+        "resolved": "1.3.0",
+        "contentHash": "1cWDY3Rhd24SVe66p2ekhEPhaSAXuH3WgGn6EPNjqXL0Y4ycK7GXtq0UE5oeBYircNlqJIEQk9W2vz60hRaezA=="
       },
       "Microsoft.Bcl.AsyncInterfaces": {
         "type": "Transitive",
@@ -528,7 +528,7 @@
       "devproxy.abstractions": {
         "type": "Project",
         "dependencies": {
-          "Markdig": "[1.2.0, )",
+          "Markdig": "[1.3.0, )",
           "Microsoft.EntityFrameworkCore.Sqlite": "[10.0.8, )",
           "Microsoft.Extensions.Configuration": "[10.0.9, )",
           "Microsoft.Extensions.Configuration.Binder": "[10.0.9, )",
diff --git a/DevProxy/packages.lock.json b/DevProxy/packages.lock.json
index 30ca7bdb..8ac6e090 100644
--- a/DevProxy/packages.lock.json
+++ b/DevProxy/packages.lock.json
@@ -112,8 +112,8 @@
       },
       "Markdig": {
         "type": "Transitive",
-        "resolved": "1.2.0",
-        "contentHash": "LoBVOgeDWfHthWTPzQJkjDkxImqBXRA5XpuTyjdM4SAURyWQGG1CbEEbfPbmvAavggnAZPaTYpbhIPUurWvIXA=="
+        "resolved": "1.3.0",
+        "contentHash": "1cWDY3Rhd24SVe66p2ekhEPhaSAXuH3WgGn6EPNjqXL0Y4ycK7GXtq0UE5oeBYircNlqJIEQk9W2vz60hRaezA=="
       },
       "Microsoft.Bcl.AsyncInterfaces": {
         "type": "Transitive",
@@ -347,7 +347,7 @@
       "devproxy.abstractions": {
         "type": "Project",
         "dependencies": {
-          "Markdig": "[1.2.0, )",
+          "Markdig": "[1.3.0, )",
           "Microsoft.EntityFrameworkCore.Sqlite": "[10.0.8, )",
           "Microsoft.OpenApi": "[3.6.0, )",
           "Microsoft.OpenApi.YamlReader": "[3.6.0, )",
diff --git a/Directory.Build.props b/Directory.Build.props
new file mode 100644
index 00000000..7f8ac716
--- /dev/null
+++ b/Directory.Build.props
@@ -0,0 +1,5 @@
+<Project>
+  <ItemGroup>
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-2m69-gcr7-jv3q" />
+  </ItemGroup>
+</Project>