From 5849caec1663dd36aadbb1d498d2bf0afd5bd0db Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 3 Oct 2026 07:26:50 +0000
Subject: [PATCH] deps: Bump the dotnet group with 7 updates

Bumps Aspire.Hosting from 13.5.4 to 13.6.0
Bumps Azure.Security.KeyVault.Secrets from 4.11.1 to 4.11.2
Bumps HotChocolate.AspNetCore from 16.6.6 to 16.6.7
Bumps HotChocolate.Subscriptions.InMemory from 16.6.6 to 16.6.7
Bumps Markdig from 1.3.2 to 1.4.0
Bumps Spectre.Console.Cli from 0.55.0 to 0.57.2
Bumps tap.studio.cli from 0.7.7 to 0.7.8

---
updated-dependencies:
- dependency-name: Aspire.Hosting
  dependency-version: 13.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Azure.Security.KeyVault.Secrets
  dependency-version: 4.11.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: HotChocolate.AspNetCore
  dependency-version: 16.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: HotChocolate.Subscriptions.InMemory
  dependency-version: 16.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Markdig
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Spectre.Console.Cli
  dependency-version: 0.57.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: tap.studio.cli
  dependency-version: 0.7.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .config/dotnet-tools.json |  2 +-
 Directory.Packages.props  | 12 ++++++------
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/.config/dotnet-tools.json b/.config/dotnet-tools.json
index a47b96e..33e5a15 100644
--- a/.config/dotnet-tools.json
+++ b/.config/dotnet-tools.json
@@ -3,7 +3,7 @@
   "isRoot": true,
   "tools": {
     "tap.studio.cli": {
-      "version": "0.7.7",
+      "version": "0.7.8",
       "commands": [
         "tap-studio"
       ],
diff --git a/Directory.Packages.props b/Directory.Packages.props
index 86c513b..de5f556 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -2,7 +2,7 @@
   <PropertyGroup>
     <ManagePackageVersionsCentrally>true</ManagePackageVersionsCentrally>
     <CentralPackageTransitivePinningEnabled>true</CentralPackageTransitivePinningEnabled>
-    <AspireVersion>13.5.4</AspireVersion>
+    <AspireVersion>13.6.0</AspireVersion>
     <AspNetCoreVersion>10.0.12</AspNetCoreVersion>
   </PropertyGroup>
   <ItemGroup>
@@ -17,8 +17,8 @@
     <PackageVersion Include="Spectre.Console" Version="0.57.2" />
     <!-- Spectre.Console.Cli ships from its own repo and its newest stable is 0.55.0
          (later versions are 1.0.0-alpha only). It floats up to Spectre.Console 0.57.2. -->
-    <PackageVersion Include="Spectre.Console.Cli" Version="0.55.0" />
-    <PackageVersion Include="Markdig" Version="1.3.2" />
+    <PackageVersion Include="Spectre.Console.Cli" Version="0.57.2" />
+    <PackageVersion Include="Markdig" Version="1.4.0" />
     <PackageVersion Include="YamlDotNet" Version="18.1.0" />
     <!-- RFC 9535 JSONPath over System.Text.Json nodes — backs the `jsonpath:` assertion
          extractor. Chosen over the alternatives because it binds to JsonNode directly and
@@ -41,7 +41,7 @@
          running inspector's redacted /api/agent/* surface. -->
     <PackageVersion Include="Microsoft.Extensions.Http" Version="$(AspNetCoreVersion)" />
     <PackageVersion Include="Azure.Identity" Version="1.21.0" />
-    <PackageVersion Include="Azure.Security.KeyVault.Secrets" Version="4.11.1" />
+    <PackageVersion Include="Azure.Security.KeyVault.Secrets" Version="4.11.2" />
     <PackageVersion Include="LibGit2Sharp" Version="0.32.0" />
 
     <!-- Test dependencies — only consumed by src/backend/Tap.Tests. -->
@@ -50,8 +50,8 @@
     <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="18.10.1" />
 
     <!-- Demo.Api dependencies — only consumed by samples/Demo.Api. -->
-    <PackageVersion Include="HotChocolate.AspNetCore" Version="16.6.6" />
-    <PackageVersion Include="HotChocolate.Subscriptions.InMemory" Version="16.6.6" />
+    <PackageVersion Include="HotChocolate.AspNetCore" Version="16.6.7" />
+    <PackageVersion Include="HotChocolate.Subscriptions.InMemory" Version="16.6.7" />
     <PackageVersion Include="Microsoft.EntityFrameworkCore.InMemory" Version="$(AspNetCoreVersion)" />
     <PackageVersion Include="OpenIddict.AspNetCore" Version="7.7.1" />
     <PackageVersion Include="OpenIddict.EntityFrameworkCore" Version="7.7.1" />