From dcef1306cf296d8a254758de2d5d46b314406f7a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Amaury=20Lev=C3=A9?= <amauryleve@microsoft.com>
Date: Mon, 21 Oct 2024 15:45:01 +0200
Subject: [PATCH] Bump dependency (#3956)

---
 Directory.Packages.props | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/Directory.Packages.props b/Directory.Packages.props
index f1bab54f5f..4b44ce9907 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -58,6 +58,8 @@
     <PackageVersion Include="Codecov" Version="1.12.3" />
     <PackageVersion Include="FluentAssertions" Version="6.12.0" />
     <PackageVersion Include="FSharp.Core" Version="8.0.200" />
+    <!-- CVE-2024-48924 / Transitive deps of StreamJsonRpc -->
+    <PackageVersion Include="MessagePack" Version="2.5.187" />
     <!-- Pinned to 4.18.4 for security -->
     <PackageVersion Include="Moq" Version="4.18.4" />
     <PackageVersion Include="Microsoft.Extensions.FileSystemGlobbing" Version="8.0.0" />