From f8f836d34f74411aeb488612cccacbd887ca0db8 Mon Sep 17 00:00:00 2001 From: maliming Date: Tue, 14 Jul 2026 12:23:29 +0800 Subject: [PATCH 1/2] Upgrade vulnerable NuGet packages to patched versions --- Directory.Packages.props | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/Directory.Packages.props b/Directory.Packages.props index 748e2a6dd6..753cb2e586 100644 --- a/Directory.Packages.props +++ b/Directory.Packages.props @@ -48,15 +48,15 @@ - + - - + + @@ -151,7 +151,7 @@ - + From 84b2dd1101668a4494e00c61be6fb8f6e767035a Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Tue, 14 Jul 2026 04:24:20 +0000 Subject: [PATCH 2/2] docs: update package version changes [skip ci] --- docs/en/package-version-changes.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/docs/en/package-version-changes.md b/docs/en/package-version-changes.md index 8865db1073..6abbf55554 100644 --- a/docs/en/package-version-changes.md +++ b/docs/en/package-version-changes.md @@ -11,6 +11,9 @@ | Package | Old Version | New Version | PR | |---------|-------------|-------------|-----| +| HtmlSanitizer | 9.0.886 | 9.0.892 | #25811 | +| Magick.NET-Q16-AnyCPU | 14.13.0 | 14.15.0 | #25811 | +| MailKit | 4.13.0 | 4.17.0 | #25811 | | Microsoft.AspNetCore.Authentication.JwtBearer | 10.0.7 | 10.0.9 | #25706 | | Microsoft.AspNetCore.Authentication.OpenIdConnect | 10.0.7 | 10.0.9 | #25706 | | Microsoft.AspNetCore.Authorization | 10.0.7 | 10.0.9 | #25706 | @@ -65,6 +68,7 @@ | Microsoft.IdentityModel.Protocols.OpenIdConnect | 8.16.0 | 8.19.1 | #25706 | | Microsoft.IdentityModel.Tokens | 8.16.0 | 8.19.1 | #25706 | | MongoDB.Driver | 3.9.0 | 3.10.0 | #25773 | +| Scriban | 7.2.1 | 7.2.5 | #25811 | | System.Collections.Immutable | 10.0.7 | 10.0.9 | #25706 | | System.IdentityModel.Tokens.Jwt | 8.16.0 | 8.19.1 | #25706 | | System.Management | 10.0.7 | 10.0.9 | #25706 |