chore(deps): update dependency messagepack to 3.1.6

[thomhurst]

This PR contains the following updates:

Package	Type	Update	Change
MessagePack	nuget	patch	3.1.5 → 3.1.6

---

Release Notes

MessagePack-CSharp/MessagePack-CSharp (MessagePack)

v3.1.6

What's Changed

• Add several known unsafe 'gadgets' to the disallow list by @​AArnott in #​2270

Full Changelog: MessagePack-CSharp/MessagePack-CSharp@v3.1.5...v3.1.6

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[claude]

This is a routine patch-level dependency update bumping MessagePack from 3.1.5 to 3.1.6.

The change is a single-line version bump in Directory.Packages.props, which is the correct centralized location for NuGet package version management in this repo.

Notable aspect of this update: The 3.1.6 release specifically adds several known unsafe 'gadgets' to the disallow list (see MessagePack-CSharp#2270). This is a security-relevant patch that hardens deserialization safety — merging promptly is advisable.

No concerns with this change. Automerge is already enabled, which is appropriate for a patch-level security-hardening dependency update like this.

[codacy-production]

Up to standards ✅

🟢 Issues0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics0 complexity

Metric	Results
Complexity	0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}