From 0a32a197ce2d71cad234dc1c77833d383821372b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 3 Sep 2026 03:17:15 +0000
Subject: [PATCH] Bump the aspnetcore group with 1 update

Bumps Microsoft.AspNetCore.OpenApi from 10.0.9 to 10.0.11

---
updated-dependencies:
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: aspnetcore
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Version.props | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Version.props b/Version.props
index 3cdeff8..8f8eb5d 100644
--- a/Version.props
+++ b/Version.props
@@ -40,7 +40,7 @@
         <VerifyXunitV3Version>32.0.0</VerifyXunitV3Version>
         <MicrosoftCodeAnalysisTestingVersion>1.1.4</MicrosoftCodeAnalysisTestingVersion>
         <XunitV3MtpV2Version>4.0.0</XunitV3MtpV2Version>
-        <MicrosoftAspNetCoreOpenApiVersion>10.0.9</MicrosoftAspNetCoreOpenApiVersion>
+        <MicrosoftAspNetCoreOpenApiVersion>10.0.11</MicrosoftAspNetCoreOpenApiVersion>
         <!-- Transitive pin: Microsoft.AspNetCore.OpenApi 10.0.9 pulls in Microsoft.OpenApi 2.0.0, which is
              vulnerable to CVE-2026-49451 (GHSA-v5pm-xwqc-g5wc, stack overflow on circular schema refs).
              Patched in the 2.x line at 2.7.5; pin to the latest 2.x to satisfy NU1903 (warnings-as-errors)