From ea06d0d681b5cb319a878e418c86c01ccb64c7c8 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 26 Jun 2026 06:47:28 +0000
Subject: [PATCH 1/2] [main] Bump Aspire.Hosting.Testing and StreamJsonRpc

Bumps Aspire.Hosting.Testing from 13.2.1 to 13.4.6
Bumps StreamJsonRpc from 2.24.84 to 2.25.29

---
updated-dependencies:
- dependency-name: Aspire.Hosting.Testing
  dependency-version: 13.4.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: StreamJsonRpc
  dependency-version: 2.25.29
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Directory.Packages.props | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Directory.Packages.props b/Directory.Packages.props
index 7b2308b23b..3283906ef2 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -113,7 +113,7 @@
     <PackageVersion Include="Newtonsoft.Json" Version="13.0.3" />
     <PackageVersion Include="Polly" Version="8.6.6" />
     <PackageVersion Include="Polly.Contrib.WaitAndRetry" Version="1.1.1" />
-    <PackageVersion Include="StreamJsonRpc" Version="2.24.84" />
+    <PackageVersion Include="StreamJsonRpc" Version="2.25.29" />
     <!--
       Nerdbank.MessagePack and MessagePack both come transitively via StreamJsonRpc, but we pin them
       here to pick up versions that fix security vulnerabilities in the transitive versions shipped
@@ -165,7 +165,7 @@
     PackageVersion), so the duplication can never ship out of sync.
     -->
   <ItemGroup Label="Declared by MSTest.Sdk but not used directly">
-    <PackageVersion Include="Aspire.Hosting.Testing" Version="13.2.1" />
+    <PackageVersion Include="Aspire.Hosting.Testing" Version="13.4.6" />
     <PackageVersion Include="Microsoft.Playwright.MSTest.v4" Version="1.60.0" />
   </ItemGroup>
   <Target Name="_ValidateBundledSdkFeatureVersions"

From 8d9d3d6f0c8da7b8a884740b7e7b9fcec71ddd69 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Amaury=20Lev=C3=A9?= <amauryleve@microsoft.com>
Date: Fri, 26 Jun 2026 10:30:07 +0200
Subject: [PATCH 2/2] Sync AspireHostingTestingVersion property with bumped
 PackageVersion

Dependabot only updates the Aspire.Hosting.Testing PackageVersion, so the
_ValidateBundledSdkFeatureVersions target failed because the consuming
AspireHostingTestingVersion property still pointed at 13.2.1. Update it to
13.4.6 to match.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---
 Directory.Packages.props | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Directory.Packages.props b/Directory.Packages.props
index 3283906ef2..437bc74a84 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -16,7 +16,7 @@
          template. It MUST be kept in sync with the literal Aspire.Hosting.Testing PackageVersion
          declared near the bottom of this file (the one Dependabot updates). The
          _ValidateBundledSdkFeatureVersions target there fails the build if the two drift apart. -->
-    <AspireHostingTestingVersion>13.2.1</AspireHostingTestingVersion>
+    <AspireHostingTestingVersion>13.4.6</AspireHostingTestingVersion>
     <MicrosoftBuildVersion>17.11.48</MicrosoftBuildVersion>
     <MicrosoftCodeAnalysisVersion>3.11.0</MicrosoftCodeAnalysisVersion>
     <MicrosoftCodeAnalysisVersionForTests>4.10.0</MicrosoftCodeAnalysisVersionForTests>