From fd2c538284fdbc0fa4820865c583c1ab82783c4f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 29 May 2026 21:46:01 +0000
Subject: [PATCH] Bump Nerdbank.MessagePack from 1.1.62 to 1.2.4

---
updated-dependencies:
- dependency-name: Nerdbank.MessagePack
  dependency-version: 1.2.4
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 src/Reactor.Cli/Reactor.Cli.csproj | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/Reactor.Cli/Reactor.Cli.csproj b/src/Reactor.Cli/Reactor.Cli.csproj
index 637a3f6c..ae2668a9 100644
--- a/src/Reactor.Cli/Reactor.Cli.csproj
+++ b/src/Reactor.Cli/Reactor.Cli.csproj
@@ -76,7 +76,7 @@
     <PackageReference Include="YamlDotNet" Version="16.3.0" />
     <!-- Pin the transitive Nerdbank.MessagePack (via GitHub.Copilot.SDK → StreamJsonRpc)
          to a version that includes the GHSA-2cwq-pwfr-wcw3 / CVE-2026-44375 fix. -->
-    <PackageReference Include="Nerdbank.MessagePack" Version="1.1.62" />
+    <PackageReference Include="Nerdbank.MessagePack" Version="1.2.4" />
   </ItemGroup>
 
   <ItemGroup>