From 5788c68d2a07a0694c0077047732396220bc257a Mon Sep 17 00:00:00 2001
From: Koen <koen@linker.io>
Date: Sun, 21 Jun 2026 18:58:58 +0000
Subject: [PATCH 1/2] fix: suppress advisory for SQLitePCLRaw.lib.e_sqlite3 due
 to CVE-2025-6965

---
 Directory.Build.props | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/Directory.Build.props b/Directory.Build.props
index 60e55b96..e703e84d 100644
--- a/Directory.Build.props
+++ b/Directory.Build.props
@@ -11,6 +11,14 @@
 	<InterceptorsNamespaces>$(InterceptorsNamespaces);ExpressiveSharp.Generated.Interceptors</InterceptorsNamespaces>
   </PropertyGroup>
 
+  <ItemGroup>
+	<!-- SQLitePCLRaw.lib.e_sqlite3 (transitive via Microsoft.EntityFrameworkCore.Sqlite,
+	     used only in benchmarks/docs/samples) bundles SQLite < 3.50.2 — CVE-2025-6965.
+	     No patched SQLitePCLRaw package exists yet, so a version pin cannot fix it.
+	     Suppress this single advisory; all other NuGet auditing stays active. -->
+	<NuGetAuditSuppress Include="https://github.com/advisories/GHSA-2m69-gcr7-jv3q" />
+  </ItemGroup>
+
   <PropertyGroup>
 	<Authors>Koen</Authors>
 	<Copyright>Copyright (c) Koen 2025</Copyright>

From e803b289e8515d11c6af96c064589c4961cbb758 Mon Sep 17 00:00:00 2001
From: Koen <koen@linker.io>
Date: Sun, 21 Jun 2026 20:05:11 +0100
Subject: [PATCH 2/2] Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
---
 Directory.Build.props | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/Directory.Build.props b/Directory.Build.props
index e703e84d..dbae29cc 100644
--- a/Directory.Build.props
+++ b/Directory.Build.props
@@ -11,11 +11,11 @@
 	<InterceptorsNamespaces>$(InterceptorsNamespaces);ExpressiveSharp.Generated.Interceptors</InterceptorsNamespaces>
   </PropertyGroup>
 
-  <ItemGroup>
-	<!-- SQLitePCLRaw.lib.e_sqlite3 (transitive via Microsoft.EntityFrameworkCore.Sqlite,
-	     used only in benchmarks/docs/samples) bundles SQLite < 3.50.2 — CVE-2025-6965.
+  <ItemGroup Condition="'$(IsPackable)' == 'false'">
+	<!-- SQLitePCLRaw.lib.e_sqlite3 (transitive via Microsoft.EntityFrameworkCore.Sqlite)
+	     bundles SQLite < 3.50.2 — CVE-2025-6965.
 	     No patched SQLitePCLRaw package exists yet, so a version pin cannot fix it.
-	     Suppress this single advisory; all other NuGet auditing stays active. -->
+	     Suppress this single advisory in non-packable projects; all other NuGet auditing stays active. -->
 	<NuGetAuditSuppress Include="https://github.com/advisories/GHSA-2m69-gcr7-jv3q" />
   </ItemGroup>