From 6181018ab18d0c4c349009019db410c2ca232738 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 17 Nov 2025 23:22:17 +0000
Subject: [PATCH] chore(deps): Bump the nuget-agent group with 6 updates

Bumps Google.Protobuf from 3.33.0 to 3.33.1
Bumps Microsoft.Build from 17.14.28 to 18.0.2
Bumps NewRelic.Agent.Api from 10.45.0 to 10.46.1
Bumps NuGet.Protocol from 6.14.0 to 7.0.0
Bumps Serilog.Sinks.Console from 6.0.0 to 6.1.1
Bumps System.Formats.Asn1 from 9.0.10 to 10.0.0

---
updated-dependencies:
- dependency-name: Microsoft.Build
  dependency-version: 18.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-agent
- dependency-name: NewRelic.Agent.Api
  dependency-version: 10.46.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-agent
- dependency-name: NuGet.Protocol
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-agent
- dependency-name: NuGet.Protocol
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-agent
- dependency-name: NuGet.Protocol
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-agent
- dependency-name: Serilog.Sinks.Console
  dependency-version: 6.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-agent
- dependency-name: System.Formats.Asn1
  dependency-version: 10.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-agent
- dependency-name: System.Formats.Asn1
  dependency-version: 10.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-agent
- dependency-name: System.Formats.Asn1
  dependency-version: 10.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-agent
- dependency-name: Google.Protobuf
  dependency-version: 3.33.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-agent
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 build/Dotty/Dotty.csproj                               | 10 +++++-----
 build/NugetValidator/NugetValidator.csproj             |  4 ++--
 .../NugetVersionDeprecator.csproj                      |  4 ++--
 src/Agent/NewRelic/Agent/Core/Core.csproj              |  2 +-
 4 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/build/Dotty/Dotty.csproj b/build/Dotty/Dotty.csproj
index 7ad6a032c..b2b015ae6 100644
--- a/build/Dotty/Dotty.csproj
+++ b/build/Dotty/Dotty.csproj
@@ -6,13 +6,13 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Build" Version="17.14.28" />
-    <PackageReference Include="NewRelic.Agent.Api" Version="10.45.0" />
+    <PackageReference Include="Microsoft.Build" Version="18.0.2" />
+    <PackageReference Include="NewRelic.Agent.Api" Version="10.46.1" />
     <PackageReference Include="Octokit" Version="14.0.0" />
     <PackageReference Include="Serilog" Version="4.3.0" />
-    <PackageReference Include="Serilog.Sinks.Console" Version="6.0.0" />
-    <PackageReference Include="Nuget.Protocol" Version="6.14.0" />
-    <PackageReference Include="System.Formats.Asn1" Version="9.0.10" /> <!-- For Nuget.Protocol transient depedency vulnerability -->
+    <PackageReference Include="Serilog.Sinks.Console" Version="6.1.1" />
+    <PackageReference Include="Nuget.Protocol" Version="7.0.0" />
+    <PackageReference Include="System.Formats.Asn1" Version="10.0.0" /> <!-- For Nuget.Protocol transient depedency vulnerability -->
   </ItemGroup>
 
   <ItemGroup>
diff --git a/build/NugetValidator/NugetValidator.csproj b/build/NugetValidator/NugetValidator.csproj
index 528933393..ed94e8c9a 100644
--- a/build/NugetValidator/NugetValidator.csproj
+++ b/build/NugetValidator/NugetValidator.csproj
@@ -14,8 +14,8 @@
 
   <ItemGroup>
     <PackageReference Include="CommandLineParser" Version="2.9.1" />
-    <PackageReference Include="NuGet.Protocol" Version="6.14.0" />
-    <PackageReference Include="System.Formats.Asn1" Version="9.0.10" /> <!-- For Nuget.Protocol transient depedency vulnerability -->
+    <PackageReference Include="NuGet.Protocol" Version="7.0.0" />
+    <PackageReference Include="System.Formats.Asn1" Version="10.0.0" /> <!-- For Nuget.Protocol transient depedency vulnerability -->
     <PackageReference Include="YamlDotNet" Version="16.3.0" />
   </ItemGroup>
 
diff --git a/build/NugetVersionDeprecator/NugetVersionDeprecator.csproj b/build/NugetVersionDeprecator/NugetVersionDeprecator.csproj
index f8d8579bd..8b0e7fd5f 100644
--- a/build/NugetVersionDeprecator/NugetVersionDeprecator.csproj
+++ b/build/NugetVersionDeprecator/NugetVersionDeprecator.csproj
@@ -19,8 +19,8 @@
   <ItemGroup>
     <PackageReference Include="CommandLineParser" Version="2.9.1" />
     <PackageReference Include="Newtonsoft.Json" Version="13.0.4" />
-    <PackageReference Include="NuGet.Protocol" Version="6.14.0" />
-    <PackageReference Include="System.Formats.Asn1" Version="9.0.10" /> <!-- For Nuget.Protocol transient depedency vulnerability -->
+    <PackageReference Include="NuGet.Protocol" Version="7.0.0" />
+    <PackageReference Include="System.Formats.Asn1" Version="10.0.0" /> <!-- For Nuget.Protocol transient depedency vulnerability -->
     <PackageReference Include="Octokit" Version="14.0.0" />
     <PackageReference Include="RestSharp" Version="112.1.0" />
     <PackageReference Include="RestSharp.Serializers.NewtonsoftJson" Version="112.1.0" />
diff --git a/src/Agent/NewRelic/Agent/Core/Core.csproj b/src/Agent/NewRelic/Agent/Core/Core.csproj
index 5990856c3..ca3e67d8e 100644
--- a/src/Agent/NewRelic/Agent/Core/Core.csproj
+++ b/src/Agent/NewRelic/Agent/Core/Core.csproj
@@ -40,7 +40,7 @@
   <ItemGroup>
     <!-- Autofac v6+ doesn't support framework. We could possibly upgrade to v5.x but there's no compelling reason for it. -->
     <PackageReference Include="Autofac" Version="[4.5.0]" />
-    <PackageReference Include="Google.Protobuf" Version="3.33.0" />
+    <PackageReference Include="Google.Protobuf" Version="3.33.1" />
     <PackageReference Include="Grpc.Tools" Version="2.76.0">
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>