From cc8cde6623e3ed6e85eeccc76c33b486aac4d0cb Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 17 Aug 2026 12:38:34 +0000
Subject: [PATCH] Bump Microsoft.NET.StringTools from 18.6.3 to 18.9.6

---
updated-dependencies:
- dependency-name: Microsoft.NET.StringTools
  dependency-version: 18.9.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Directory.Packages.props       | 2 +-
 src/Wick.Core/Wick.Core.csproj | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/Directory.Packages.props b/Directory.Packages.props
index 6fdef18..748309d 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -29,7 +29,7 @@
     <PackageVersion Include="Microsoft.CodeAnalysis.Workspaces.MSBuild" Version="5.6.0" />
     <PackageVersion Include="Microsoft.Build.Locator" Version="1.11.2" />
     <PackageVersion Include="Microsoft.Build.Framework" Version="18.6.3" />
-    <PackageVersion Include="Microsoft.NET.StringTools" Version="18.6.3" />
+    <PackageVersion Include="Microsoft.NET.StringTools" Version="18.9.6" />
   </ItemGroup>
   <!-- Networking -->
   <ItemGroup>
diff --git a/src/Wick.Core/Wick.Core.csproj b/src/Wick.Core/Wick.Core.csproj
index 99c55a6..ca73a6a 100644
--- a/src/Wick.Core/Wick.Core.csproj
+++ b/src/Wick.Core/Wick.Core.csproj
@@ -15,6 +15,7 @@
     <PackageReference Include="Microsoft.Extensions.Hosting.Abstractions" />
     <PackageReference Include="Microsoft.Extensions.Logging.Abstractions" />
     <PackageReference Include="Microsoft.Extensions.DependencyInjection.Abstractions" />
+    <PackageReference Include="Microsoft.NET.StringTools" VersionOverride="18.9.6" />
     <PackageReference Include="StreamJsonRpc" />
     <!-- Direct references so the patched versions pinned centrally win
          over StreamJsonRpc 2.24.92's vulnerable transitive floors