From 18bcd5013148abe1e11031575952ff825a19ce54 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 13 Aug 2026 23:33:16 +0000
Subject: [PATCH] Bump MessagePack from 2.5.302 to 3.1.8

---
updated-dependencies:
- dependency-name: MessagePack
  dependency-version: 3.1.8
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Directory.Packages.props | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Directory.Packages.props b/Directory.Packages.props
index d23bfb1..3c6e39b 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -19,7 +19,7 @@
     <!-- Direct pins: lift StreamJsonRpc 2.24.92's vulnerable transitive
          floors (MessagePack 2.5.198 — GHSA-hv8m-jj95-wg3x high + 8
          moderates; Nerdbank.MessagePack 1.1.62 — 2 moderates). -->
-    <PackageVersion Include="MessagePack" Version="2.5.302" />
+    <PackageVersion Include="MessagePack" Version="3.1.8" />
     <PackageVersion Include="Nerdbank.MessagePack" Version="1.2.36" />
   </ItemGroup>
   <!-- Roslyn (C# provider) -->