update packages

Directory.Packages.props

@@ -1,21 +1,17 @@
 <Project>
-
   <PropertyGroup>
     <ManagePackageVersionsCentrally>true</ManagePackageVersionsCentrally>
     <CentralPackageTransitivePinningEnabled>true</CentralPackageTransitivePinningEnabled>
   </PropertyGroup>
-
   <!--
     Versions are pinned here for the whole solution. Packages are added per milestone
     rather than all at once, so that every entry is one we have actually verified and
     restored. See docs/adr/ for the choices behind the notable ones.
   -->
-
   <ItemGroup Label="ASP.NET Core">
     <PackageVersion Include="Microsoft.AspNetCore.OpenApi" Version="10.0.10" />
     <PackageVersion Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="10.0.10" />
   </ItemGroup>
-
   <ItemGroup Label="Endpoints">
     <!--
       FastEndpoints drags FluentValidation, JobQueues and Messaging in behind it. None of the
@@ -28,7 +24,6 @@
     -->
     <PackageVersion Include="FastEndpoints" Version="8.2.0" />
   </ItemGroup>
-
   <ItemGroup Label="Pinned transitive dependencies">
     <!--
       Microsoft.AspNetCore.OpenApi 10.0.10 resolves Microsoft.OpenApi 2.0.0, which is
@@ -38,7 +33,6 @@
       itself moves off 2.0.0.
     -->
     <PackageVersion Include="Microsoft.OpenApi" Version="2.11.0" />
-
     <!--
       Microsoft.EntityFrameworkCore.Sqlite 10.0.10 resolves SQLitePCLRaw 2.1.11, whose bundled
       SQLite build is covered by GHSA-2m69-gcr7-jv3q (high). 2.1.12 is the fix and is a patch bump
@@ -55,7 +49,6 @@
     <PackageVersion Include="SQLitePCLRaw.lib.e_sqlite3" Version="2.1.12" />
     <PackageVersion Include="SQLitePCLRaw.provider.e_sqlite3" Version="2.1.12" />
   </ItemGroup>
-
   <ItemGroup Label="Persistence">
     <!--
       EF Core pinned explicitly. The Npgsql provider asks only for 10.0.4 while
@@ -82,7 +75,6 @@
     -->
     <PackageVersion Include="Microsoft.EntityFrameworkCore.Sqlite" Version="10.0.10" />
   </ItemGroup>
-
   <ItemGroup Label="Cryptography">
     <!--
       NSec wraps libsodium. Chosen over the BCL because .NET has no X25519 or Ed25519, and
@@ -99,7 +91,6 @@
     <!-- Managed differential oracle for the crypto test suite only. -->
     <PackageVersion Include="BouncyCastle.Cryptography" Version="2.6.2" />
   </ItemGroup>
-
   <ItemGroup Label="Desktop client">
     <!--
       SSH.NET already covers PTY shells, all three auth methods, ed25519/RSA/ECDSA, encrypted
@@ -109,27 +100,24 @@
       ProxyJump both go through a loopback TCP bridge. See docs/adr/.
     -->
     <PackageVersion Include="SSH.NET" Version="2025.1.0" />
-
     <!--
       Avalonia 12.1.0, with the WebView control on 12.0.1 — the latest it has shipped. Its
       dependency is Avalonia >= 12.0.0 with no upper bound and it targets net10.0, so the skew
       is fine. Checked rather than assumed, because a control package lagging the core version
       is exactly where a silent runtime mismatch would hide.
     -->
-    <PackageVersion Include="Avalonia" Version="12.1.0" />
-    <PackageVersion Include="Avalonia.Desktop" Version="12.1.0" />
-    <PackageVersion Include="Avalonia.Themes.Fluent" Version="12.1.0" />
-    <PackageVersion Include="Avalonia.Fonts.Inter" Version="12.1.0" />
+    <PackageVersion Include="Avalonia" Version="12.1.1" />
+    <PackageVersion Include="Avalonia.Desktop" Version="12.1.1" />
+    <PackageVersion Include="Avalonia.Themes.Fluent" Version="12.1.1" />
+    <PackageVersion Include="Avalonia.Fonts.Inter" Version="12.1.1" />
     <PackageVersion Include="Avalonia.Controls.WebView" Version="12.0.1" />
-
     <!--
       Lets a test lay out real XAML and measure it, which is the only way this repository can catch a
       control clipped off the bottom of a column — the defect this window has already shipped once. Pinned
       to the core version exactly rather than allowed to drift: the whole value of the harness is that the
       numbers it measures are the numbers the application renders.
     -->
-    <PackageVersion Include="Avalonia.Headless" Version="12.1.0" />
-
+    <PackageVersion Include="Avalonia.Headless" Version="12.1.1" />
     <!--
       Source-generated MVVM, so there is no reflection and trimming stays viable. ReactiveUI's one
       real advantage is observable composition over streams, and the place that would help — the
@@ -137,13 +125,11 @@
     -->
     <PackageVersion Include="CommunityToolkit.Mvvm" Version="8.4.2" />
   </ItemGroup>
-
   <ItemGroup Label="Analyzers">
     <PackageVersion Include="Microsoft.CodeAnalysis.BannedApiAnalyzers" Version="5.6.0" />
     <PackageVersion Include="Microsoft.CodeAnalysis.PublicApiAnalyzers" Version="5.6.0" />
-    <PackageVersion Include="Meziantou.Analyzer" Version="3.0.134" />
+    <PackageVersion Include="Meziantou.Analyzer" Version="3.0.137" />
   </ItemGroup>
-
   <ItemGroup Label="Testing">
     <!--
       xunit.v3 runs on Microsoft.Testing.Platform, not VSTest. Microsoft.NET.Test.Sdk and
@@ -171,5 +157,4 @@
     -->
     <PackageVersion Include="WireMock.Net" Version="2.13.0" />
   </ItemGroup>
-
-</Project>
+</Project>