From c8d70ecc29a1e7de6ce3250e0a365c4a02830f42 Mon Sep 17 00:00:00 2001
From: Nicholas Blumhardt <nblumhardt@nblumhardt.com>
Date: Mon, 13 Jul 2026 10:35:06 +1000
Subject: [PATCH 1/2] Final 2026.1 dependency updates

---
 README.md                                   |  2 +-
 ci.global.json                              |  2 +-
 src/Roastery/Roastery.csproj                |  2 +-
 src/SeqCli/SeqCli.csproj                    | 14 +++++++-------
 test/SeqCli.EndToEnd/SeqCli.EndToEnd.csproj |  2 +-
 test/SeqCli.Tests/SeqCli.Tests.csproj       |  4 ++--
 6 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/README.md b/README.md
index 60aca3dc..ccd3af90 100644
--- a/README.md
+++ b/README.md
@@ -58,7 +58,7 @@ $token = (
 )
 ```
 
-### MCP and agent skills <sup>(preview)</sup>
+### MCP and agent skills
 
 The 2026.1 preview improves support for agent-driven diagnostics workflows:
 
diff --git a/ci.global.json b/ci.global.json
index d20023b3..f071a741 100644
--- a/ci.global.json
+++ b/ci.global.json
@@ -1,5 +1,5 @@
 {
   "sdk": {
-    "version": "10.0.203"
+    "version": "10.0.301"
   }
 }
diff --git a/src/Roastery/Roastery.csproj b/src/Roastery/Roastery.csproj
index 337aac00..5af15d3a 100644
--- a/src/Roastery/Roastery.csproj
+++ b/src/Roastery/Roastery.csproj
@@ -6,7 +6,7 @@
     </PropertyGroup>
 
     <ItemGroup>
-        <PackageReference Include="Serilog" Version="4.3.1" />
+        <PackageReference Include="Serilog" Version="4.4.0" />
         <PackageReference Include="SerilogTracing" Version="2.4.0" />
     </ItemGroup>
 
diff --git a/src/SeqCli/SeqCli.csproj b/src/SeqCli/SeqCli.csproj
index 7864a99c..39adb84c 100644
--- a/src/SeqCli/SeqCli.csproj
+++ b/src/SeqCli/SeqCli.csproj
@@ -27,20 +27,20 @@
     <Content Include="Skills\Resources\**\*" Link="Skills\%(RecursiveDir)%(Filename)%(Extension)" CopyToOutputDirectory="PreserveNewest" />
   </ItemGroup>
   <ItemGroup>
-    <PackageReference Include="ModelContextProtocol" Version="1.3.0" />
+    <PackageReference Include="ModelContextProtocol" Version="1.4.1" />
     <PackageReference Include="Newtonsoft.Json" Version="13.0.4" />
-    <PackageReference Include="Seq.Api" Version="2026.1.0-*" />
-    <PackageReference Include="Serilog" Version="4.3.1" />
+    <PackageReference Include="Seq.Api" Version="2026.1.0" />
+    <PackageReference Include="Serilog" Version="4.4.0" />
     <PackageReference Include="Serilog.Expressions" Version="5.0.0" />
     <PackageReference Include="Serilog.Formatting.Compact" Version="3.0.0" />
     <PackageReference Include="Serilog.Formatting.Compact.Reader" Version="4.0.0" />
     <PackageReference Include="Serilog.Sinks.Console" Version="6.1.1" />
     <PackageReference Include="Serilog.AspNetCore" Version="10.0.0" />
-    <PackageReference Include="Autofac" Version="9.1.0" />
-    <PackageReference Include="Autofac.Extensions.DependencyInjection" Version="11.0.0" />
+    <PackageReference Include="Autofac" Version="9.3.1" />
+    <PackageReference Include="Autofac.Extensions.DependencyInjection" Version="11.0.2" />
     <PackageReference Include="Superpower" Version="3.2.1" />
-    <PackageReference Include="System.Security.Cryptography.ProtectedData" Version="10.0.8" />
-    <PackageReference Include="System.ServiceProcess.ServiceController" Version="10.0.8" />
+    <PackageReference Include="System.Security.Cryptography.ProtectedData" Version="10.0.9" />
+    <PackageReference Include="System.ServiceProcess.ServiceController" Version="10.0.9" />
     <PackageReference Include="Serilog.Sinks.Seq" Version="9.1.0" />
     <PackageReference Include="Seq.Apps" Version="2023.4.0" />
     <PackageReference Include="Seq.Syntax" Version="1.1.1" />
diff --git a/test/SeqCli.EndToEnd/SeqCli.EndToEnd.csproj b/test/SeqCli.EndToEnd/SeqCli.EndToEnd.csproj
index 988cbea1..0816d85f 100644
--- a/test/SeqCli.EndToEnd/SeqCli.EndToEnd.csproj
+++ b/test/SeqCli.EndToEnd/SeqCli.EndToEnd.csproj
@@ -7,7 +7,7 @@
     <IsTestingPlatformApplication>false</IsTestingPlatformApplication>
   </PropertyGroup>
   <ItemGroup>
-    <PackageReference Include="JetBrains.Annotations" Version="2025.2.4" />
+    <PackageReference Include="JetBrains.Annotations" Version="2026.2.0" />
     <PackageReference Include="xunit" Version="2.9.3" />
   </ItemGroup>
   <ItemGroup>
diff --git a/test/SeqCli.Tests/SeqCli.Tests.csproj b/test/SeqCli.Tests/SeqCli.Tests.csproj
index 5cc1449c..9f76d650 100644
--- a/test/SeqCli.Tests/SeqCli.Tests.csproj
+++ b/test/SeqCli.Tests/SeqCli.Tests.csproj
@@ -3,14 +3,14 @@
     <TargetFramework>net10.0</TargetFramework>
   </PropertyGroup>
   <ItemGroup>
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.6.0" />
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.7.0" />
     <PackageReference Include="xunit" Version="2.9.3" />
     <PackageReference Include="xunit.runner.visualstudio" Version="3.1.5">
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
     </PackageReference>
     <PackageReference Include="Microsoft.ML.Tokenizers" Version="2.0.0" />
-    <PackageReference Include="Microsoft.ML.Tokenizers.Data.O200kBase" Version="1.0.3" />
+    <PackageReference Include="Microsoft.ML.Tokenizers.Data.O200kBase" Version="2.0.0" />
   </ItemGroup>
   <ItemGroup>
     <ProjectReference Include="..\..\src\SeqCli\SeqCli.csproj" />

From a74adf547b0aa6a4e0b3c87cbaf1cd681fdca245 Mon Sep 17 00:00:00 2001
From: Nicholas Blumhardt <nblumhardt@nblumhardt.com>
Date: Mon, 13 Jul 2026 10:42:11 +1000
Subject: [PATCH 2/2] Avoid a vulnerable Microsoft.Bcl.Memory version

---
 test/SeqCli.Tests/SeqCli.Tests.csproj | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/test/SeqCli.Tests/SeqCli.Tests.csproj b/test/SeqCli.Tests/SeqCli.Tests.csproj
index 9f76d650..3f878c5e 100644
--- a/test/SeqCli.Tests/SeqCli.Tests.csproj
+++ b/test/SeqCli.Tests/SeqCli.Tests.csproj
@@ -11,6 +11,9 @@
     </PackageReference>
     <PackageReference Include="Microsoft.ML.Tokenizers" Version="2.0.0" />
     <PackageReference Include="Microsoft.ML.Tokenizers.Data.O200kBase" Version="2.0.0" />
+    <!-- This is a transitive dependency of Microsoft.ML.Tokenizers, version is bumped here to avoid a
+      vulnerability in the 9.0.4 version referenced by that package. -->
+    <ProjectReference Include="Microsoft.Bcl.Memory" Version="10.0.9" />
   </ItemGroup>
   <ItemGroup>
     <ProjectReference Include="..\..\src\SeqCli\SeqCli.csproj" />