From 50f5f384b46344467c8a0fee4055d6139299f757 Mon Sep 17 00:00:00 2001
From: James Jackson-South <james_south@hotmail.com>
Date: Sat, 12 Sep 2026 16:11:13 +1000
Subject: [PATCH] Suppress SourceLink NuGet audit advisory

Adds a NuGet audit suppression for GHSA-23fw-v26w-5fgq in Directory.Build.props. This temporary workaround keeps the current SourceLink dependency pinned while the upstream package update is not yet available.
---
 Directory.Build.props | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/Directory.Build.props b/Directory.Build.props
index 9bda76f882..8219d5a293 100644
--- a/Directory.Build.props
+++ b/Directory.Build.props
@@ -21,6 +21,15 @@
   <!-- Import the shared global .props file -->
   <Import Project="$(MSBuildThisFileDirectory)shared-infrastructure\msbuild\props\SixLabors.Global.props" />
 
+  <!--
+    Suppress the advisory against Microsoft.Build.Tasks.Git 8.0.0, pulled in by the SourceLink
+    package pinned in shared infrastructure, while we wait for the ability to update it.
+    https://github.com/advisories/GHSA-23fw-v26w-5fgq
+  -->
+  <ItemGroup>
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-23fw-v26w-5fgq" />
+  </ItemGroup>
+
   <PropertyGroup Condition="'$(TargetFramework)' == 'net8.0' OR '$(TargetFramework)' == 'net9.0'">
     <LangVersion>12.0</LangVersion>
   </PropertyGroup>