From c3699f09623bc0b7225c9c5a6994a5c0759a46c9 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 12 Nov 2025 22:19:38 +0000
Subject: [PATCH] Bump Microsoft.AspNetCore.Mvc.NewtonsoftJson and
 Newtonsoft.Json

Bumps Microsoft.AspNetCore.Mvc.NewtonsoftJson from 7.0.0 to 9.0.11
Bumps Newtonsoft.Json from 12.0.3 to 13.0.3

---
updated-dependencies:
- dependency-name: Microsoft.AspNetCore.Mvc.NewtonsoftJson
  dependency-version: 9.0.11
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: Newtonsoft.Json
  dependency-version: 13.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Directory.Packages.props | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Directory.Packages.props b/Directory.Packages.props
index 434d2f7..6265f3f 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -11,13 +11,13 @@
     <PackageVersion Include="Microsoft.Extensions.DependencyInjection" Version="9.0.0" />
     
     <!-- Vulnerable direct dependencies -->
-    <PackageVersion Include="Newtonsoft.Json" Version="12.0.3" />  <!-- Has known vulnerabilities -->
+    <PackageVersion Include="Newtonsoft.Json" Version="13.0.3" />  <!-- Has known vulnerabilities -->
     <PackageVersion Include="System.Text.RegularExpressions" Version="4.3.0" /> <!-- Known regex vulnerability -->
     <PackageVersion Include="System.Net.Http" Version="4.3.0" /> <!-- Contains security vulnerabilities -->
     
     <!-- API dependencies -->
     <PackageVersion Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="8.0.0" /> <!-- Intentionally older version -->
-    <PackageVersion Include="Microsoft.AspNetCore.Mvc.NewtonsoftJson" Version="7.0.0" /> <!-- Older version -->
+    <PackageVersion Include="Microsoft.AspNetCore.Mvc.NewtonsoftJson" Version="9.0.11" /> <!-- Older version -->
     <PackageVersion Include="Microsoft.AspNetCore.OpenApi" Version="9.0.8" />
     <PackageVersion Include="Swashbuckle.AspNetCore" Version="6.2.3" /> <!-- Outdated version -->