From 20beec34f35385c1da7023964d66854ef4ef43ec Mon Sep 17 00:00:00 2001
From: Mark Ridgwell <credfeto@users.noreply.github.com>
Date: Tue, 26 May 2026 16:38:47 +0000
Subject: [PATCH 1/2] SDK - Updated DotNet SDK to 10.0.300

---
 CHANGELOG.md    | 2 +-
 src/global.json | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4a68ca36..fad37285 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -42,12 +42,12 @@ Please ADD ALL Changes to the UNRELEASED SECTION and not a specific release
 - Dependencies - Updated Credfeto.Version.Information.Generator to 1.0.121.1094
 - Dependencies - Updated Figgle to 0.6.6
 - Dependencies - Updated Meziantou.Analyzer to 3.0.22
-- SDK - Updated DotNet SDK to 10.0.200
 - Dependencies - Updated Credfeto.Enumeration to 1.2.139.1741
 - Dependencies - Updated FunFair.CodeAnalysis to 7.1.35.1745
 - Dependencies - Updated AWSSDK to 4.0.8.11
 - Dependencies - Updated Discord.Net to 3.19.1
 - Dependencies - Updated Microsoft.Extensions to 10.0.5
+- SDK - Updated DotNet SDK to 10.0.300
 ### Removed
 ### Deployment Changes
 
diff --git a/src/global.json b/src/global.json
index cf1976b9..a4bfab3e 100644
--- a/src/global.json
+++ b/src/global.json
@@ -1,6 +1,6 @@
 {
   "sdk": {
-    "version": "10.0.200",
+    "version": "10.0.300",
     "allowPrerelease": false,
     "rollForward": "latestPatch"
   },

From 71c97fd1f6c6f2c6046043e7fe81b1c0b117b5f4 Mon Sep 17 00:00:00 2001
From: Mark Ridgwell <273118822+dnyw4l3n13@users.noreply.github.com>
Date: Tue, 26 May 2026 18:57:05 +0100
Subject: [PATCH 2/2] fix: suppress Scriban 6.2.0 vulnerability advisories
 pending upgrade

Inject NuGetAuditSuppress ItemGroup entries for 12 known Scriban 6.2.0 vulnerabilities
(GHSA-24c8-4792-22hx, GHSA-5rpf-x9jg-8j5p, GHSA-5wr9-m6jw-xx44, GHSA-c875-h985-hvrc,
GHSA-grr9-747v-xvcp, GHSA-m2p3-hwv5-xpqw, GHSA-p6q4-fgr8-vx4p, GHSA-v66j-x4hw-fv9g,
GHSA-wgh7-7m3c-fx25, GHSA-x6m9-38vm-2xhf, GHSA-xcx6-vp38-8hr5, GHSA-xw6w-9jjh-p9cr).
Upgrade tracked in funfair-tech/BuildBot#352.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---
 CHANGELOG.md                                  |  3 ++-
 src/.idea/.idea.BuildBot/.idea/.gitignore     | 11 -----------
 src/.idea/.idea.BuildBot/.idea/.name          |  1 -
 .../.idea/active-tab-highlighter.xml          | 13 -------------
 src/.idea/.idea.BuildBot/.idea/aws.xml        | 17 -----------------
 .../.idea/codeStyles/codeStyleConfig.xml      |  5 -----
 src/.idea/.idea.BuildBot/.idea/discord.xml    |  6 ------
 src/.idea/.idea.BuildBot/.idea/encodings.xml  |  4 ----
 .../.idea/externalDependencies.xml            |  8 --------
 .../.idea.BuildBot/.idea/indexLayout.xml      |  8 --------
 src/.idea/.idea.BuildBot/.idea/misc.xml       |  6 ------
 src/.idea/.idea.BuildBot/.idea/vcs.xml        |  6 ------
 src/BuildBot/BuildBot.csproj                  | 19 ++++++++++++++++++-
 13 files changed, 20 insertions(+), 87 deletions(-)
 delete mode 100644 src/.idea/.idea.BuildBot/.idea/.gitignore
 delete mode 100644 src/.idea/.idea.BuildBot/.idea/.name
 delete mode 100644 src/.idea/.idea.BuildBot/.idea/active-tab-highlighter.xml
 delete mode 100644 src/.idea/.idea.BuildBot/.idea/aws.xml
 delete mode 100644 src/.idea/.idea.BuildBot/.idea/codeStyles/codeStyleConfig.xml
 delete mode 100644 src/.idea/.idea.BuildBot/.idea/discord.xml
 delete mode 100644 src/.idea/.idea.BuildBot/.idea/encodings.xml
 delete mode 100644 src/.idea/.idea.BuildBot/.idea/externalDependencies.xml
 delete mode 100644 src/.idea/.idea.BuildBot/.idea/indexLayout.xml
 delete mode 100644 src/.idea/.idea.BuildBot/.idea/misc.xml
 delete mode 100644 src/.idea/.idea.BuildBot/.idea/vcs.xml

diff --git a/CHANGELOG.md b/CHANGELOG.md
index fad37285..9998bfc2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,8 +5,10 @@ All notable changes to this project will be documented in this file.
 Please ADD ALL Changes to the UNRELEASED SECTION and not a specific release
 -->
 ## [Unreleased]
+### Security
 ### Added
 ### Fixed
+- Suppress known Scriban 6.2.0 vulnerabilities pending upgrade
 ### Changed
 - Dependencies - Updated NSubstitute.Analyzers.CSharp to 1.0.17
 - Switched to use minimal APIs
@@ -50,7 +52,6 @@ Please ADD ALL Changes to the UNRELEASED SECTION and not a specific release
 - SDK - Updated DotNet SDK to 10.0.300
 ### Removed
 ### Deployment Changes
-
 <!--
 Releases that have at least been deployed to staging, BUT NOT necessarily released to live.  Changes should be moved from [Unreleased] into here as they are merged into the appropriate release branch
 -->
diff --git a/src/.idea/.idea.BuildBot/.idea/.gitignore b/src/.idea/.idea.BuildBot/.idea/.gitignore
deleted file mode 100644
index 7e60c964..00000000
--- a/src/.idea/.idea.BuildBot/.idea/.gitignore
+++ /dev/null
@@ -1,11 +0,0 @@
-# Default ignored files
-/shelf/
-/workspace.xml
-# Datasource local storage ignored files
-/dataSources/
-/dataSources.local.xml
-# Editor-based HTTP Client requests
-/httpRequests/
-
-# settings updater
-projectSettingsUpdater.xml
\ No newline at end of file
diff --git a/src/.idea/.idea.BuildBot/.idea/.name b/src/.idea/.idea.BuildBot/.idea/.name
deleted file mode 100644
index 5e39eb97..00000000
--- a/src/.idea/.idea.BuildBot/.idea/.name
+++ /dev/null
@@ -1 +0,0 @@
-BuildBot
\ No newline at end of file
diff --git a/src/.idea/.idea.BuildBot/.idea/active-tab-highlighter.xml b/src/.idea/.idea.BuildBot/.idea/active-tab-highlighter.xml
deleted file mode 100644
index 409aba97..00000000
--- a/src/.idea/.idea.BuildBot/.idea/active-tab-highlighter.xml
+++ /dev/null
@@ -1,13 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project version="4">
-  <component name="ActiveTabHighlighterConfiguration">
-    <option name="background">
-      <PersistentColor>
-        <option name="enabled" value="true" />
-        <option name="red" value="173" />
-        <option name="green" value="46" />
-        <option name="blue" value="156" />
-      </PersistentColor>
-    </option>
-  </component>
-</project>
\ No newline at end of file
diff --git a/src/.idea/.idea.BuildBot/.idea/aws.xml b/src/.idea/.idea.BuildBot/.idea/aws.xml
deleted file mode 100644
index 03f1bb6e..00000000
--- a/src/.idea/.idea.BuildBot/.idea/aws.xml
+++ /dev/null
@@ -1,17 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project version="4">
-  <component name="accountSettings">
-    <option name="activeProfile" value="profile:default" />
-    <option name="activeRegion" value="us-east-1" />
-    <option name="recentlyUsedProfiles">
-      <list>
-        <option value="profile:default" />
-      </list>
-    </option>
-    <option name="recentlyUsedRegions">
-      <list>
-        <option value="us-east-1" />
-      </list>
-    </option>
-  </component>
-</project>
\ No newline at end of file
diff --git a/src/.idea/.idea.BuildBot/.idea/codeStyles/codeStyleConfig.xml b/src/.idea/.idea.BuildBot/.idea/codeStyles/codeStyleConfig.xml
deleted file mode 100644
index a55e7a17..00000000
--- a/src/.idea/.idea.BuildBot/.idea/codeStyles/codeStyleConfig.xml
+++ /dev/null
@@ -1,5 +0,0 @@
-<component name="ProjectCodeStyleConfiguration">
-  <state>
-    <option name="PREFERRED_PROJECT_CODE_STYLE" value="Default" />
-  </state>
-</component>
\ No newline at end of file
diff --git a/src/.idea/.idea.BuildBot/.idea/discord.xml b/src/.idea/.idea.BuildBot/.idea/discord.xml
deleted file mode 100644
index 90797455..00000000
--- a/src/.idea/.idea.BuildBot/.idea/discord.xml
+++ /dev/null
@@ -1,6 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project version="4">
-  <component name="DiscordProjectSettings">
-    <option name="show" value="PROJECT" />
-  </component>
-</project>
\ No newline at end of file
diff --git a/src/.idea/.idea.BuildBot/.idea/encodings.xml b/src/.idea/.idea.BuildBot/.idea/encodings.xml
deleted file mode 100644
index df87cf95..00000000
--- a/src/.idea/.idea.BuildBot/.idea/encodings.xml
+++ /dev/null
@@ -1,4 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project version="4">
-  <component name="Encoding" addBOMForNewFiles="with BOM under Windows, with no BOM otherwise" />
-</project>
\ No newline at end of file
diff --git a/src/.idea/.idea.BuildBot/.idea/externalDependencies.xml b/src/.idea/.idea.BuildBot/.idea/externalDependencies.xml
deleted file mode 100644
index f9e1434e..00000000
--- a/src/.idea/.idea.BuildBot/.idea/externalDependencies.xml
+++ /dev/null
@@ -1,8 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project version="4">
-  <component name="ExternalDependencies">
-    <plugin id="cognitivecomplexity-rider" />
-    <plugin id="com.intellij.resharper.StructuredLogging" />
-    <plugin id="nsubstitutecomplete-rider" />
-  </component>
-</project>
\ No newline at end of file
diff --git a/src/.idea/.idea.BuildBot/.idea/indexLayout.xml b/src/.idea/.idea.BuildBot/.idea/indexLayout.xml
deleted file mode 100644
index 7b08163c..00000000
--- a/src/.idea/.idea.BuildBot/.idea/indexLayout.xml
+++ /dev/null
@@ -1,8 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project version="4">
-  <component name="UserContentModel">
-    <attachedFolders />
-    <explicitIncludes />
-    <explicitExcludes />
-  </component>
-</project>
\ No newline at end of file
diff --git a/src/.idea/.idea.BuildBot/.idea/misc.xml b/src/.idea/.idea.BuildBot/.idea/misc.xml
deleted file mode 100644
index 28a804d8..00000000
--- a/src/.idea/.idea.BuildBot/.idea/misc.xml
+++ /dev/null
@@ -1,6 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project version="4">
-  <component name="JavaScriptSettings">
-    <option name="languageLevel" value="ES6" />
-  </component>
-</project>
\ No newline at end of file
diff --git a/src/.idea/.idea.BuildBot/.idea/vcs.xml b/src/.idea/.idea.BuildBot/.idea/vcs.xml
deleted file mode 100644
index 6c0b8635..00000000
--- a/src/.idea/.idea.BuildBot/.idea/vcs.xml
+++ /dev/null
@@ -1,6 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project version="4">
-  <component name="VcsDirectoryMappings">
-    <mapping directory="$PROJECT_DIR$/.." vcs="Git" />
-  </component>
-</project>
\ No newline at end of file
diff --git a/src/BuildBot/BuildBot.csproj b/src/BuildBot/BuildBot.csproj
index fd177e7e..d4e1fb95 100644
--- a/src/BuildBot/BuildBot.csproj
+++ b/src/BuildBot/BuildBot.csproj
@@ -33,6 +33,7 @@
     <OptimizationPreference>speed</OptimizationPreference>
     <OutputType>Exe</OutputType>
     <PackageTags>FunFair BuildBot</PackageTags>
+    <PublishAot>false</PublishAot>
     <PublishTrimmed>false</PublishTrimmed>
     <RepositoryUrl>https://github.com/funfair-tech/BuildBot</RepositoryUrl>
     <RunAOTCompilation>false</RunAOTCompilation>
@@ -114,4 +115,20 @@
     <PackageReference Include="Credfeto.Version.Information.Generator" Version="1.0.121.1094" PrivateAssets="All" ExcludeAssets="runtime" />
     <PackageReference Include="ToStringWithoutOverrideAnalyzer" Version="0.6.0" PrivateAssets="All" ExcludeAssets="runtime" />
   </ItemGroup>
-</Project>
\ No newline at end of file
+  <ItemGroup>
+    <!-- Scriban 6.2.0 known vulnerabilities - upgrade tracked in funfair-tech/BuildBot#352 -->
+    <!-- error NU1903: Package 'Scriban' 6.2.0 has known high/moderate/critical vulnerabilities -->
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-24c8-4792-22hx" />
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-5rpf-x9jg-8j5p" />
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-5wr9-m6jw-xx44" />
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-c875-h985-hvrc" />
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-grr9-747v-xvcp" />
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-m2p3-hwv5-xpqw" />
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-p6q4-fgr8-vx4p" />
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-v66j-x4hw-fv9g" />
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-wgh7-7m3c-fx25" />
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-x6m9-38vm-2xhf" />
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-xcx6-vp38-8hr5" />
+    <NuGetAuditSuppress Include="https://github.com/advisories/GHSA-xw6w-9jjh-p9cr" />
+  </ItemGroup>
+</Project>