From 7966992d32454755c731e3e68395783733c66dad Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 14 Aug 2026 04:19:04 +0000
Subject: [PATCH] Bump Microsoft.AspNetCore.OpenApi from 10.0.10 to 10.0.11

---
updated-dependencies:
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 10.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: aspnetcore
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Directory.Packages.props                               |  2 +-
 samples/Signalboard/packages.lock.json                 |  8 ++++----
 .../packages.lock.json                                 | 10 +++++-----
 3 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/Directory.Packages.props b/Directory.Packages.props
index 54ed7af..4f2ee4d 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -28,7 +28,7 @@
     <PackageVersion Include="Microsoft.Extensions.TimeProvider.Testing" Version="10.9.0" />
     <PackageVersion Include="Microsoft.Extensions.Options" Version="10.0.11" />
     <PackageVersion Include="Microsoft.Extensions.Http" Version="10.0.11" />
-    <PackageVersion Include="Microsoft.AspNetCore.OpenApi" Version="10.0.10" />
+    <PackageVersion Include="Microsoft.AspNetCore.OpenApi" Version="10.0.11" />
     <!-- Pinned above the transitive 2.0.0 that Microsoft.AspNetCore.OpenApi resolves:
          GHSA-v5pm-xwqc-g5wc is high severity and patched in 2.7.5. The vulnerable-package
          gate in CI caught it, which is the whole reason that gate exists. -->
diff --git a/samples/Signalboard/packages.lock.json b/samples/Signalboard/packages.lock.json
index 979b2eb..a22fb9c 100644
--- a/samples/Signalboard/packages.lock.json
+++ b/samples/Signalboard/packages.lock.json
@@ -23,11 +23,11 @@
       },
       "Microsoft.AspNetCore.OpenApi": {
         "type": "Direct",
-        "requested": "[10.0.10, )",
-        "resolved": "10.0.10",
-        "contentHash": "d4Atx9IHq7JgX0F/h7Db+m9zAUzC+cKdI9k+OWnnyQIOUQtfvjIEuhvbjPigVMkAmPUgCbJ8Yp6M9ghUqHtJSQ==",
+        "requested": "[10.0.11, )",
+        "resolved": "10.0.11",
+        "contentHash": "R/1EATnPLU+gRfB6lwVkMcymmyAY5ppBBdRN/5lhNEiT3xP1sWccuSFkU/f1lQvN/WgRq5Vn8AhCdE3fqgsL/w==",
         "dependencies": {
-          "Microsoft.OpenApi": "2.0.0"
+          "Microsoft.OpenApi": "[2.7.5, 3.0.0)"
         }
       },
       "Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore": {
diff --git a/tests/LakeWright.TenantIsolation.Tests/packages.lock.json b/tests/LakeWright.TenantIsolation.Tests/packages.lock.json
index a450c08..5ab3cd9 100644
--- a/tests/LakeWright.TenantIsolation.Tests/packages.lock.json
+++ b/tests/LakeWright.TenantIsolation.Tests/packages.lock.json
@@ -1864,7 +1864,7 @@
         "dependencies": {
           "Azure.Core": "[1.60.0, )",
           "LakeWright.AspNetCore": "[0.1.0, )",
-          "Microsoft.AspNetCore.OpenApi": "[10.0.10, )",
+          "Microsoft.AspNetCore.OpenApi": "[10.0.11, )",
           "Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore": "[10.0.10, )"
         }
       },
@@ -1885,11 +1885,11 @@
       },
       "Microsoft.AspNetCore.OpenApi": {
         "type": "CentralTransitive",
-        "requested": "[10.0.10, )",
-        "resolved": "10.0.10",
-        "contentHash": "d4Atx9IHq7JgX0F/h7Db+m9zAUzC+cKdI9k+OWnnyQIOUQtfvjIEuhvbjPigVMkAmPUgCbJ8Yp6M9ghUqHtJSQ==",
+        "requested": "[10.0.11, )",
+        "resolved": "10.0.11",
+        "contentHash": "R/1EATnPLU+gRfB6lwVkMcymmyAY5ppBBdRN/5lhNEiT3xP1sWccuSFkU/f1lQvN/WgRq5Vn8AhCdE3fqgsL/w==",
         "dependencies": {
-          "Microsoft.OpenApi": "2.0.0"
+          "Microsoft.OpenApi": "[2.7.5, 3.0.0)"
         }
       },
       "Microsoft.Azure.Databricks.Client": {