From 2e6f212efab74147d488d16acceceedcfefa85f4 Mon Sep 17 00:00:00 2001
From: Martin Hans <martin@artnim.io>
Date: Wed, 15 Jul 2026 09:47:47 +0200
Subject: [PATCH] Bump Swashbuckle.AspNetCore to 10.2.3 to resolve
 Microsoft.OpenApi vulnerability

Swashbuckle.AspNetCore 10.0.1 pulled in Microsoft.OpenApi 2.3.0, which is
affected by GHSA-v5pm-xwqc-g5wc (high severity, NU1903 restore warning).
10.2.3 depends on Microsoft.OpenApi 2.7.5, which contains the fix.
---
 Directory.Packages.props | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Directory.Packages.props b/Directory.Packages.props
index 8a97f56..0818a44 100755
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -44,7 +44,7 @@
         <PackageVersion Include="Papst.EventStore" Version="[6.1.0,7.0)" />
         <PackageVersion Include="SharpCompress" Version="0.48.1" />
         <PackageVersion Include="Shouldly" Version="4.3.0" />
-        <PackageVersion Include="Swashbuckle.AspNetCore" Version="10.0.1" />
+        <PackageVersion Include="Swashbuckle.AspNetCore" Version="10.2.3" />
         <PackageVersion Include="System.Formats.Asn1" Version="10.0.1" />
         <PackageVersion Include="System.Linq.Async" Version="7.0.0" />
         <PackageVersion Include="Testcontainers" Version="4.11.0" />