Bump Microsoft.Build.Framework and Microsoft.Build.Utilities.Core (#893)

* Bump Microsoft.Build.Framework and Microsoft.Build.Utilities.Core

Bumps Microsoft.Build.Framework from 17.11.4 to 17.11.48
Bumps Microsoft.Build.Utilities.Core from 17.11.4 to 17.11.48

---
updated-dependencies:
- dependency-name: Microsoft.Build.Framework
  dependency-version: 17.11.48
  dependency-type: direct:production
- dependency-name: Microsoft.Build.Utilities.Core
  dependency-version: 17.11.48
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump Microsoft.Build.Framework and Microsoft.Build.Utilities.Core
Bumps Microsoft.Build.Framework from 17.11.4 to 17.11.48
Bumps Microsoft.Build.Utilities.Core from 17.11.4 to 17.11.48

* Update changelog

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Paul Turner <programming.hero@gmail.com>
Co-authored-by: Gáspár Nagy <gaspar.nagy@gmail.com>

Author: 3 people

CHANGELOG.md

@@ -4,6 +4,8 @@
 
 ## Bug fixes:
 
+* Address [Microsoft Security Advisory CVE-2025-55247 | .NET Denial of Service Vulnerability](https://github.com/advisories/GHSA-w3q9-fxm7-j8fq) (#893)
+
 *Contributors of this release (in alphabetical order):* 
 
 # v3.1.2 - 2025-10-07

Reqnroll.Tools.MsBuild.Generation/Reqnroll.Tools.MsBuild.Generation.csproj

@@ -70,8 +70,8 @@
   </ItemGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Build.Framework" Version="17.11.4" PrivateAssets="all" />
-    <PackageReference Include="Microsoft.Build.Utilities.Core" Version="17.11.4" PrivateAssets="all" />
+    <PackageReference Include="Microsoft.Build.Framework" Version="17.11.48" PrivateAssets="all" />
+    <PackageReference Include="Microsoft.Build.Utilities.Core" Version="17.11.48" PrivateAssets="all" />
     <PackageReference Include="Microsoft.VisualStudio.Composition" Version="17.11.13" PrivateAssets="all" />
     <PackageReference Include="Microsoft.VisualStudio.Threading.Only" Version="17.13.61" PrivateAssets="all" />
     <PackageReference Include="Microsoft.VisualStudio.Threading.Analyzers" Version="17.13.61" PrivateAssets="all" />

Tests/Reqnroll.GeneratorTests/Reqnroll.GeneratorTests.csproj

@@ -31,8 +31,8 @@
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
       <PrivateAssets>all</PrivateAssets>
     </PackageReference>
-    <PackageReference Include="Microsoft.Build.Framework" Version="17.11.4" />
-    <PackageReference Include="Microsoft.Build.Utilities.Core" Version="17.11.4" />
+    <PackageReference Include="Microsoft.Build.Framework" Version="17.11.48" />
+    <PackageReference Include="Microsoft.Build.Utilities.Core" Version="17.11.48" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.11.0" />
     <PackageReference Include="FluentAssertions" Version="6.12.0" />
     <PackageReference Include="Moq" Version="4.20.70" />