From ff6e0efc612b7e400541ce0baee4216a95ba7dea Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 21 Jul 2026 18:42:10 +0000
Subject: [PATCH] Bump MessagePack from 2.5.301 to 3.1.8

---
updated-dependencies:
- dependency-name: MessagePack
  dependency-version: 3.1.8
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 code/K9Crush-scaffold/K9Crush/Directory.Packages.props | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/code/K9Crush-scaffold/K9Crush/Directory.Packages.props b/code/K9Crush-scaffold/K9Crush/Directory.Packages.props
index 5f9164c..68c0170 100644
--- a/code/K9Crush-scaffold/K9Crush/Directory.Packages.props
+++ b/code/K9Crush-scaffold/K9Crush/Directory.Packages.props
@@ -50,7 +50,7 @@
          decompression). Pinned explicitly here + referenced directly in
          Api.Host.csproj to force resolution to the patched version rather
          than silently carrying a vulnerable transitive dependency. -->
-    <PackageVersion Include="MessagePack" Version="2.5.301" />                          <!-- [verified - fixes GHSA-hv8m-jj95-wg3x and related] -->
+    <PackageVersion Include="MessagePack" Version="3.1.8" />                          <!-- [verified - fixes GHSA-hv8m-jj95-wg3x and related] -->
 
     <!-- Caching / Real-time -->
     <PackageVersion Include="StackExchange.Redis" Version="2.8.24" />                   <!-- [good-faith] -->