From 723b76e9dd1c93e43fbd932ab335017ce7c68d08 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 24 Oct 2026 05:06:47 +0000
Subject: [PATCH] Bump MessagePack from 2.5.307 to 3.1.12

---
updated-dependencies:
- dependency-name: MessagePack
  dependency-version: 3.1.12
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Directory.Packages.props | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Directory.Packages.props b/Directory.Packages.props
index c58484f..16023c5 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -38,7 +38,7 @@
   <ItemGroup>
     <PackageVersion Include="Aspire.Hosting.AppHost" Version="13.6.1" />
     <!-- Aspire.Hosting 13.6.1 brings in MessagePack 2.5.302 (GHSA-qhrr-8q5h-9q3h); pinned to the patched 2.5.x line. -->
-    <PackageVersion Include="MessagePack" Version="2.5.307" />
+    <PackageVersion Include="MessagePack" Version="3.1.12" />
     <!-- OpenTelemetry core and contrib Instrumentation.* packages version independently
          and can differ. Pin each to its own latest stable release rather than forcing a
          "lockstep" version that has no matching release. -->