From ffd0cd6efaadd0934aa051a9e5c2cbdac6d78882 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 23 Jul 2026 03:16:26 +0000
Subject: [PATCH] Bump Microsoft.AspNetCore.OpenApi from 10.0.9 to 10.0.10

---
updated-dependencies:
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: aspnetcore
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Version.props | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Version.props b/Version.props
index 7e9a0a9..93e6f84 100644
--- a/Version.props
+++ b/Version.props
@@ -40,7 +40,7 @@
         <VerifyXunitV3Version>31.20.0</VerifyXunitV3Version>
         <MicrosoftCodeAnalysisTestingVersion>1.1.3</MicrosoftCodeAnalysisTestingVersion>
         <XunitV3MtpV2Version>3.2.2</XunitV3MtpV2Version>
-        <MicrosoftAspNetCoreOpenApiVersion>10.0.9</MicrosoftAspNetCoreOpenApiVersion>
+        <MicrosoftAspNetCoreOpenApiVersion>10.0.10</MicrosoftAspNetCoreOpenApiVersion>
         <!-- Transitive pin: Microsoft.AspNetCore.OpenApi 10.0.9 pulls in Microsoft.OpenApi 2.0.0, which is
              vulnerable to CVE-2026-49451 (GHSA-v5pm-xwqc-g5wc, stack overflow on circular schema refs).
              Patched in the 2.x line at 2.7.5; pin to the latest 2.x to satisfy NU1903 (warnings-as-errors)