From b39509a6a3f6cb2f04eab43446b0732ac83fc018 Mon Sep 17 00:00:00 2001
From: AJ Isaacs <ajisaacs27@gmail.com>
Date: Fri, 2 Oct 2026 16:10:24 -0400
Subject: [PATCH] fix(server): update SQLite to patched native library

Microsoft.Data.Sqlite 8.0.11 bundled SQLitePCLRaw.lib.e_sqlite3 2.1.6 (SQLite 3.41.2), affected by CVE-2025-6965 / GHSA-2m69-gcr7-jv3q. 8.0.31 bundles 2.1.12 (SQLite 3.53.3).
---
 OpenNest.Server/OpenNest.Server.csproj | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/OpenNest.Server/OpenNest.Server.csproj b/OpenNest.Server/OpenNest.Server.csproj
index 8a19dab..c81157b 100644
--- a/OpenNest.Server/OpenNest.Server.csproj
+++ b/OpenNest.Server/OpenNest.Server.csproj
@@ -9,7 +9,7 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Data.Sqlite" Version="8.0.11" />
+    <PackageReference Include="Microsoft.Data.Sqlite" Version="8.0.31" />
   </ItemGroup>
 
   <ItemGroup>