From c31893842b593e9d8029dbd0630a75f3346702a0 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 10 Oct 2026 07:27:43 +0000
Subject: [PATCH] deps: Bump the dotnet group with 7 updates

Bumps Aspire.Hosting from 13.5.4 to 13.6.1
Bumps Azure.Security.KeyVault.Secrets from 4.11.1 to 4.11.2
Bumps HotChocolate.AspNetCore from 16.6.6 to 16.6.8
Bumps HotChocolate.Subscriptions.InMemory from 16.6.6 to 16.6.8
Bumps Markdig from 1.3.2 to 1.4.0
Bumps Spectre.Console.Cli from 0.55.0 to 0.57.2
Bumps tap.studio.cli from 0.7.7 to 0.7.8

---
updated-dependencies:
- dependency-name: Aspire.Hosting
  dependency-version: 13.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Azure.Security.KeyVault.Secrets
  dependency-version: 4.11.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: HotChocolate.AspNetCore
  dependency-version: 16.6.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: HotChocolate.Subscriptions.InMemory
  dependency-version: 16.6.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
- dependency-name: Markdig
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: Spectre.Console.Cli
  dependency-version: 0.57.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet
- dependency-name: tap.studio.cli
  dependency-version: 0.7.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .config/dotnet-tools.json |  2 +-
 Directory.Packages.props  | 12 ++++++------
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/.config/dotnet-tools.json b/.config/dotnet-tools.json
index a47b96e..33e5a15 100644
--- a/.config/dotnet-tools.json
+++ b/.config/dotnet-tools.json
@@ -3,7 +3,7 @@
   "isRoot": true,
   "tools": {
     "tap.studio.cli": {
-      "version": "0.7.7",
+      "version": "0.7.8",
       "commands": [
         "tap-studio"
       ],
diff --git a/Directory.Packages.props b/Directory.Packages.props
index 86c513b..a28674b 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -2,7 +2,7 @@
   <PropertyGroup>
     <ManagePackageVersionsCentrally>true</ManagePackageVersionsCentrally>
     <CentralPackageTransitivePinningEnabled>true</CentralPackageTransitivePinningEnabled>
-    <AspireVersion>13.5.4</AspireVersion>
+    <AspireVersion>13.6.1</AspireVersion>
     <AspNetCoreVersion>10.0.12</AspNetCoreVersion>
   </PropertyGroup>
   <ItemGroup>
@@ -17,8 +17,8 @@
     <PackageVersion Include="Spectre.Console" Version="0.57.2" />
     <!-- Spectre.Console.Cli ships from its own repo and its newest stable is 0.55.0
          (later versions are 1.0.0-alpha only). It floats up to Spectre.Console 0.57.2. -->
-    <PackageVersion Include="Spectre.Console.Cli" Version="0.55.0" />
-    <PackageVersion Include="Markdig" Version="1.3.2" />
+    <PackageVersion Include="Spectre.Console.Cli" Version="0.57.2" />
+    <PackageVersion Include="Markdig" Version="1.4.0" />
     <PackageVersion Include="YamlDotNet" Version="18.1.0" />
     <!-- RFC 9535 JSONPath over System.Text.Json nodes — backs the `jsonpath:` assertion
          extractor. Chosen over the alternatives because it binds to JsonNode directly and
@@ -41,7 +41,7 @@
          running inspector's redacted /api/agent/* surface. -->
     <PackageVersion Include="Microsoft.Extensions.Http" Version="$(AspNetCoreVersion)" />
     <PackageVersion Include="Azure.Identity" Version="1.21.0" />
-    <PackageVersion Include="Azure.Security.KeyVault.Secrets" Version="4.11.1" />
+    <PackageVersion Include="Azure.Security.KeyVault.Secrets" Version="4.11.2" />
     <PackageVersion Include="LibGit2Sharp" Version="0.32.0" />
 
     <!-- Test dependencies — only consumed by src/backend/Tap.Tests. -->
@@ -50,8 +50,8 @@
     <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="18.10.1" />
 
     <!-- Demo.Api dependencies — only consumed by samples/Demo.Api. -->
-    <PackageVersion Include="HotChocolate.AspNetCore" Version="16.6.6" />
-    <PackageVersion Include="HotChocolate.Subscriptions.InMemory" Version="16.6.6" />
+    <PackageVersion Include="HotChocolate.AspNetCore" Version="16.6.8" />
+    <PackageVersion Include="HotChocolate.Subscriptions.InMemory" Version="16.6.8" />
     <PackageVersion Include="Microsoft.EntityFrameworkCore.InMemory" Version="$(AspNetCoreVersion)" />
     <PackageVersion Include="OpenIddict.AspNetCore" Version="7.7.1" />
     <PackageVersion Include="OpenIddict.EntityFrameworkCore" Version="7.7.1" />