Bump SourceLink to remove vulnerable Microsoft.Build.Tasks.Git restore path

[Copilot]

Restore was failing with NU1902 because Microsoft.Build.Tasks.Git 8.0.0 (transitive) is flagged as vulnerable and warnings are treated as errors. The failure impacted package restore for both core and DI projects.

• Dependency baseline update

  • Updated central package versioning in Directory.Packages.props:
    • Microsoft.SourceLink.GitHub 8.0.0 → 10.0.401
  • This advances the SourceLink toolchain and removes resolution to vulnerable Microsoft.Build.Tasks.Git 8.0.0.

• Scope of change

  • Single-file, central version change only.
  • No project-level package reference shape changes.

<!-- Directory.Packages.props -->
<PackageVersion Include="Microsoft.SourceLink.GitHub" Version="10.0.401" />

[Copilot]

🟡 Changes recommended

Document the additional test-file change in the PR description or commit rationale.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

Updates SourceLink to remove a vulnerable transitive build dependency and adds a required test namespace import.

Changes:

• Bumps Microsoft.SourceLink.GitHub to 10.0.401.
• Adds the CompaniesHouse.Response.Search namespace import.

File summaries

File	Description
tests/CompaniesHouse.ScenarioTests/SearchResponseDeserializationScenarioTests.cs	Adds the namespace required by the test.
Directory.Packages.props	Updates the centrally managed SourceLink version.

Review details

• Files reviewed: 2/2 changed files
• Comments generated: 1
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.