From cb90b561f5250c3c851966631f52b3b2348d0379 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 30 Sep 2026 01:44:58 +0000
Subject: [PATCH] Bump Avalonia and 24 others

Bumps Avalonia from 12.1.0 to 12.1.3
Bumps Avalonia.Desktop from 12.1.0 to 12.1.3
Bumps Avalonia.Fonts.Inter from 12.1.0 to 12.1.3
Bumps Avalonia.Headless from 12.1.0 to 12.1.3
Bumps Avalonia.Skia from 12.1.0 to 12.1.3
Bumps Avalonia.Themes.Fluent from 12.1.0 to 12.1.3
Bumps Dock.Avalonia from 12.1.0.1 to 12.1.0.6
Bumps Dock.Avalonia.Themes.Fluent from 12.1.0.1 to 12.1.0.6
Bumps Dock.Model.Mvvm from 12.1.0.1 to 12.1.0.6
Bumps FluentIcons.Avalonia from 2.1.333 to 2.1.343
Bumps FluentIcons.Common from 2.1.333 to 2.1.343
Bumps LettuceEncrypt from 1.3.2 to 1.3.3
Bumps Microsoft.AspNetCore.Mvc.Testing from 10.0.10 to 10.0.12
Bumps Microsoft.AspNetCore.SignalR.Client from 10.0.10 to 10.0.12
Bumps Microsoft.Data.Sqlite from 10.0.10 to 10.0.12
Bumps Microsoft.Diagnostics.Runtime from 2.2.332302 to 2.2.343001
Bumps Microsoft.Extensions.AI.Abstractions from 10.8.1 to 10.8.3
Bumps Microsoft.Extensions.AI.OpenAI from 10.8.1 to 10.8.3
Bumps Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.10 to 10.0.12
Bumps Microsoft.Extensions.Logging.Abstractions from 10.0.0 to 10.0.12
Bumps Microsoft.Extensions.Logging.Console from 10.0.0 to 10.0.12
Bumps Nerdbank.Streams from 2.13.16 to 2.13.31
Bumps SQLitePCLRaw.bundle_e_sqlite3 from 3.0.3 to 3.0.5
Bumps Tmds.DBus.Protocol from 0.94.1 to 0.94.2
Bumps xunit.runner.visualstudio from 3.1.4 to 3.1.5

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: Avalonia
  dependency-version: 12.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: FluentIcons.Avalonia
  dependency-version: 2.1.343
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: Avalonia.Desktop
  dependency-version: 12.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: Avalonia.Fonts.Inter
  dependency-version: 12.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: Avalonia.Themes.Fluent
  dependency-version: 12.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: Dock.Avalonia
  dependency-version: 12.1.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: Dock.Avalonia.Themes.Fluent
  dependency-version: 12.1.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: Dock.Model.Mvvm
  dependency-version: 12.1.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: FluentIcons.Common
  dependency-version: 2.1.343
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: Microsoft.AspNetCore.SignalR.Client
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: Microsoft.Data.Sqlite
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: SQLitePCLRaw.bundle_e_sqlite3
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: Microsoft.Data.Sqlite
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: Microsoft.Extensions.AI.Abstractions
  dependency-version: 10.8.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: Microsoft.Extensions.AI.OpenAI
  dependency-version: 10.8.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: SQLitePCLRaw.bundle_e_sqlite3
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: Tmds.DBus.Protocol
  dependency-version: 0.94.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: LettuceEncrypt
  dependency-version: 1.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: Nerdbank.Streams
  dependency-version: 2.13.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: Nerdbank.Streams
  dependency-version: 2.13.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: Nerdbank.Streams
  dependency-version: 2.13.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: Nerdbank.Streams
  dependency-version: 2.13.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: Avalonia.Headless
  dependency-version: 12.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: Microsoft.AspNetCore.Mvc.Testing
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: Microsoft.Extensions.Logging.Console
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: Avalonia.Fonts.Inter
  dependency-version: 12.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: Avalonia.Headless
  dependency-version: 12.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: Avalonia.Skia
  dependency-version: 12.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
- dependency-name: Microsoft.Diagnostics.Runtime
  dependency-version: 2.2.343001
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-patches
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 src/Agnes.Abstractions/Agnes.Abstractions.csproj |  2 +-
 src/Agnes.Acp/Agnes.Acp.csproj                   |  3 ++-
 src/Agnes.Agents.Codex/Agnes.Agents.Codex.csproj |  3 ++-
 .../Agnes.Agents.Native.csproj                   |  2 +-
 src/Agnes.App.Desktop/Agnes.App.Desktop.csproj   | 16 ++++++++--------
 src/Agnes.Client.Cache/Agnes.Client.Cache.csproj |  4 ++--
 src/Agnes.Client/Agnes.Client.csproj             |  2 +-
 src/Agnes.Host/Agnes.Host.csproj                 |  8 ++++----
 src/Agnes.Relay/Agnes.Relay.csproj               |  2 +-
 .../Agnes.Sandbox.Incus.csproj                   |  4 ++--
 src/Agnes.Sandbox/Agnes.Sandbox.csproj           |  2 +-
 src/Agnes.Ui.Core/Agnes.Ui.Core.csproj           |  3 ++-
 tests/Agnes.Acp.Tests/Agnes.Acp.Tests.csproj     |  2 +-
 .../Agnes.Agents.Antigravity.Tests.csproj        |  2 +-
 .../Agnes.Agents.Codex.Tests.csproj              |  4 ++--
 .../Agnes.Agents.Native.Tests.csproj             |  2 +-
 .../Agnes.Agents.Pi.Tests.csproj                 |  2 +-
 tests/Agnes.Cli.Tests/Agnes.Cli.Tests.csproj     |  2 +-
 .../Agnes.Client.Tests/Agnes.Client.Tests.csproj |  2 +-
 .../Agnes.Desktop.Tests.csproj                   |  4 ++--
 tests/Agnes.Host.Tests/Agnes.Host.Tests.csproj   |  2 +-
 .../Agnes.Integration.Tests.csproj               |  4 ++--
 tests/Agnes.Relay.Tests/Agnes.Relay.Tests.csproj |  2 +-
 .../Agnes.Sandbox.Tests.csproj                   |  2 +-
 tests/Agnes.TestKit/Agnes.TestKit.csproj         |  2 +-
 .../Agnes.Ui.Core.Tests.csproj                   |  2 +-
 tools/Agnes.Record/Agnes.Record.csproj           |  2 +-
 tools/Agnes.Screenshots/Agnes.Screenshots.csproj |  8 ++++----
 28 files changed, 49 insertions(+), 46 deletions(-)

diff --git a/src/Agnes.Abstractions/Agnes.Abstractions.csproj b/src/Agnes.Abstractions/Agnes.Abstractions.csproj
index b402d37a..2774cb94 100644
--- a/src/Agnes.Abstractions/Agnes.Abstractions.csproj
+++ b/src/Agnes.Abstractions/Agnes.Abstractions.csproj
@@ -8,7 +8,7 @@
     <!-- Minimal, dependency-free, first-party abstraction — needed so a plugin package's
          IAgnesPluginModule.ConfigureServices can register into the host's DI container without
          Agnes.Abstractions depending on a concrete DI implementation. -->
-    <PackageReference Include="Microsoft.Extensions.DependencyInjection.Abstractions" Version="10.0.10" />
+    <PackageReference Include="Microsoft.Extensions.DependencyInjection.Abstractions" Version="10.0.12" />
   </ItemGroup>
 
 </Project>
diff --git a/src/Agnes.Acp/Agnes.Acp.csproj b/src/Agnes.Acp/Agnes.Acp.csproj
index 810c55f0..b9aa1b1e 100644
--- a/src/Agnes.Acp/Agnes.Acp.csproj
+++ b/src/Agnes.Acp/Agnes.Acp.csproj
@@ -5,8 +5,9 @@
   </PropertyGroup>
 
   <ItemGroup>
+    <PackageReference Include="Nerdbank.Streams" Version="2.13.31" />
     <PackageReference Include="StreamJsonRpc" Version="2.25.29" />
-    <PackageReference Include="Microsoft.Extensions.Logging.Abstractions" Version="10.0.0" />
+    <PackageReference Include="Microsoft.Extensions.Logging.Abstractions" Version="10.0.12" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/src/Agnes.Agents.Codex/Agnes.Agents.Codex.csproj b/src/Agnes.Agents.Codex/Agnes.Agents.Codex.csproj
index 2f7b8f8b..a0b0ad1d 100644
--- a/src/Agnes.Agents.Codex/Agnes.Agents.Codex.csproj
+++ b/src/Agnes.Agents.Codex/Agnes.Agents.Codex.csproj
@@ -5,8 +5,9 @@
   </PropertyGroup>
 
   <ItemGroup>
+    <PackageReference Include="Nerdbank.Streams" Version="2.13.31" />
     <PackageReference Include="StreamJsonRpc" Version="2.25.29" />
-    <PackageReference Include="Microsoft.Extensions.Logging.Abstractions" Version="10.0.0" />
+    <PackageReference Include="Microsoft.Extensions.Logging.Abstractions" Version="10.0.12" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/src/Agnes.Agents.Native/Agnes.Agents.Native.csproj b/src/Agnes.Agents.Native/Agnes.Agents.Native.csproj
index 66644460..5073c434 100644
--- a/src/Agnes.Agents.Native/Agnes.Agents.Native.csproj
+++ b/src/Agnes.Agents.Native/Agnes.Agents.Native.csproj
@@ -5,7 +5,7 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Extensions.Logging.Abstractions" Version="10.0.0" />
+    <PackageReference Include="Microsoft.Extensions.Logging.Abstractions" Version="10.0.12" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/src/Agnes.App.Desktop/Agnes.App.Desktop.csproj b/src/Agnes.App.Desktop/Agnes.App.Desktop.csproj
index adb28538..bbe5be4e 100644
--- a/src/Agnes.App.Desktop/Agnes.App.Desktop.csproj
+++ b/src/Agnes.App.Desktop/Agnes.App.Desktop.csproj
@@ -13,13 +13,13 @@
   <ItemGroup>
     <InternalsVisibleTo Include="Agnes.Desktop.Tests" />
 
-    <PackageReference Include="Avalonia" Version="12.1.0" />
-    <PackageReference Include="Avalonia.Desktop" Version="12.1.0" />
-    <PackageReference Include="Avalonia.Themes.Fluent" Version="12.1.0" />
-    <PackageReference Include="Avalonia.Fonts.Inter" Version="12.1.0" />
-    <PackageReference Include="Dock.Avalonia" Version="12.1.0.1" />
-    <PackageReference Include="Dock.Avalonia.Themes.Fluent" Version="12.1.0.1" />
-    <PackageReference Include="Dock.Model.Mvvm" Version="12.1.0.1" />
+    <PackageReference Include="Avalonia" Version="12.1.3" />
+    <PackageReference Include="Avalonia.Desktop" Version="12.1.3" />
+    <PackageReference Include="Avalonia.Themes.Fluent" Version="12.1.3" />
+    <PackageReference Include="Avalonia.Fonts.Inter" Version="12.1.3" />
+    <PackageReference Include="Dock.Avalonia" Version="12.1.0.6" />
+    <PackageReference Include="Dock.Avalonia.Themes.Fluent" Version="12.1.0.6" />
+    <PackageReference Include="Dock.Model.Mvvm" Version="12.1.0.6" />
     <PackageReference Include="CommunityToolkit.Mvvm" Version="8.4.2" />
     <PackageReference Include="Markdown.Avalonia" Version="12.0.0-a3" />
     <!-- Icons. Microsoft's fluentui-system-icons (MIT) as an Avalonia control, over the whole ~2800-icon
@@ -28,7 +28,7 @@
          are generated from Microsoft's own repo, which is where the actual artwork risk would live. It is
          the only Avalonia icon package built against Avalonia 12. `Agnes.Ui.Core` takes the dependency-free
          `FluentIcons.Common` alone, so shared view models can name a symbol without pulling in a toolkit. -->
-    <PackageReference Include="FluentIcons.Avalonia" Version="2.1.333" />
+    <PackageReference Include="FluentIcons.Avalonia" Version="2.1.343" />
     <!-- Third-party VT/terminal control for the embedded terminal head (platform/03). Deliberately
          confined to the desktop head — never core or Agnes.Ui.Core. Maintainer-approved for this use;
          restores against Avalonia 12 (its dep is Avalonia 12.0.2). -->
diff --git a/src/Agnes.Client.Cache/Agnes.Client.Cache.csproj b/src/Agnes.Client.Cache/Agnes.Client.Cache.csproj
index 35300c3d..3c1f3725 100644
--- a/src/Agnes.Client.Cache/Agnes.Client.Cache.csproj
+++ b/src/Agnes.Client.Cache/Agnes.Client.Cache.csproj
@@ -8,8 +8,8 @@
        Kept out of Agnes.Client itself so heads that cannot carry a native SQLite (or do not want one) are
        untouched; a head opts in by referencing this project and handing the cache to its AgnesClient. -->
   <ItemGroup>
-    <PackageReference Include="Microsoft.Data.Sqlite" Version="10.0.10" />
-    <PackageReference Include="SQLitePCLRaw.bundle_e_sqlite3" Version="3.0.3" />
+    <PackageReference Include="Microsoft.Data.Sqlite" Version="10.0.12" />
+    <PackageReference Include="SQLitePCLRaw.bundle_e_sqlite3" Version="3.0.5" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/src/Agnes.Client/Agnes.Client.csproj b/src/Agnes.Client/Agnes.Client.csproj
index 2be2f973..7b1e757b 100644
--- a/src/Agnes.Client/Agnes.Client.csproj
+++ b/src/Agnes.Client/Agnes.Client.csproj
@@ -5,7 +5,7 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.AspNetCore.SignalR.Client" Version="10.0.10" />
+    <PackageReference Include="Microsoft.AspNetCore.SignalR.Client" Version="10.0.12" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/src/Agnes.Host/Agnes.Host.csproj b/src/Agnes.Host/Agnes.Host.csproj
index a11a7087..bc6d3d02 100644
--- a/src/Agnes.Host/Agnes.Host.csproj
+++ b/src/Agnes.Host/Agnes.Host.csproj
@@ -7,10 +7,10 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Data.Sqlite" Version="10.0.10" />
+    <PackageReference Include="Microsoft.Data.Sqlite" Version="10.0.12" />
     <!-- Pin the patched native SQLite bundle; overrides the vulnerable transitive
          SQLitePCLRaw.lib.e_sqlite3 2.1.11 (GHSA-2m69-gcr7-jv3q). -->
-    <PackageReference Include="SQLitePCLRaw.bundle_e_sqlite3" Version="3.0.3" />
+    <PackageReference Include="SQLitePCLRaw.bundle_e_sqlite3" Version="3.0.5" />
     <!-- Plugin distribution: a plugin is a NuGet package, discovered/installed/verified through
          NuGet's own protocol and tooling rather than a bespoke registry — see
          .ideas/00-plugin-architecture.md. All three are Microsoft, first-party. -->
@@ -53,8 +53,8 @@
          pointed at a local base URL — an OpenAI-compatible local one (Ollama/LM Studio). Both are config-gated:
          no embedding client is ever constructed unless Agnes:Search:Embeddings:Provider is openai|local, so the
          default (FTS5-only) host never loads them. See .ideas/ops/02-memory-search.md. -->
-    <PackageReference Include="Microsoft.Extensions.AI.Abstractions" Version="10.8.1" />
-    <PackageReference Include="Microsoft.Extensions.AI.OpenAI" Version="10.8.1" />
+    <PackageReference Include="Microsoft.Extensions.AI.Abstractions" Version="10.8.3" />
+    <PackageReference Include="Microsoft.Extensions.AI.OpenAI" Version="10.8.3" />
     <!-- Ed25519 verification of Discord interaction webhooks (extensibility/04). NSec.Cryptography (ektrah/nsec,
          MIT) is a thin, well-maintained managed wrapper over libsodium — the standalone Ed25519 verify primitive
          the .NET 10 BCL still lacks (it exposes only composite ML-DSA-with-Ed25519). Verification is constant-time
diff --git a/src/Agnes.Relay/Agnes.Relay.csproj b/src/Agnes.Relay/Agnes.Relay.csproj
index 85d096c9..ec7acc80 100644
--- a/src/Agnes.Relay/Agnes.Relay.csproj
+++ b/src/Agnes.Relay/Agnes.Relay.csproj
@@ -20,7 +20,7 @@
        client↔host TLS stays opaque regardless. See .ideas/connectivity/01-relay-and-tunneling.md. -->
   <ItemGroup>
     <FrameworkReference Include="Microsoft.AspNetCore.App" />
-    <PackageReference Include="LettuceEncrypt" Version="1.3.2" />
+    <PackageReference Include="LettuceEncrypt" Version="1.3.3" />
   </ItemGroup>
 
   <!-- The relay's connection-setup wire contract now lives in a shared project so the Agnes host/client
diff --git a/src/Agnes.Sandbox.Incus/Agnes.Sandbox.Incus.csproj b/src/Agnes.Sandbox.Incus/Agnes.Sandbox.Incus.csproj
index 18c8d1f3..7df1a1de 100644
--- a/src/Agnes.Sandbox.Incus/Agnes.Sandbox.Incus.csproj
+++ b/src/Agnes.Sandbox.Incus/Agnes.Sandbox.Incus.csproj
@@ -7,11 +7,11 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Extensions.Logging.Abstractions" Version="10.0.0" />
+    <PackageReference Include="Microsoft.Extensions.Logging.Abstractions" Version="10.0.12" />
     <!-- The D-Bus client for QEMU's display protocol. Already in the tree via Avalonia.FreeDesktop,
          first-party to the .NET Linux ecosystem (Tom Deseyn / Red Hat), and the low-level, allocation-
          light half of it — a 4 MB scanout should not become garbage. -->
-    <PackageReference Include="Tmds.DBus.Protocol" Version="0.94.1" />
+    <PackageReference Include="Tmds.DBus.Protocol" Version="0.94.2" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/src/Agnes.Sandbox/Agnes.Sandbox.csproj b/src/Agnes.Sandbox/Agnes.Sandbox.csproj
index 9c801df0..8b1989f8 100644
--- a/src/Agnes.Sandbox/Agnes.Sandbox.csproj
+++ b/src/Agnes.Sandbox/Agnes.Sandbox.csproj
@@ -7,7 +7,7 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Extensions.Logging.Abstractions" Version="10.0.0" />
+    <PackageReference Include="Microsoft.Extensions.Logging.Abstractions" Version="10.0.12" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/src/Agnes.Ui.Core/Agnes.Ui.Core.csproj b/src/Agnes.Ui.Core/Agnes.Ui.Core.csproj
index 90c5e5be..e6b785b8 100644
--- a/src/Agnes.Ui.Core/Agnes.Ui.Core.csproj
+++ b/src/Agnes.Ui.Core/Agnes.Ui.Core.csproj
@@ -16,12 +16,13 @@
     <PackageReference Include="CommunityToolkit.Mvvm" Version="8.4.2" />
     <!-- QR encoding for pairing/session codes. Pure managed, MIT, no native or System.Drawing
          dependency — it only ever produces a module matrix here, which each head draws itself. -->
+    <PackageReference Include="Microsoft.AspNetCore.SignalR.Client" Version="10.0.12" />
     <PackageReference Include="QRCoder" Version="1.6.0" />
     <!-- The `Symbol` enum only — netstandard2.0 with zero dependencies and no UI framework, so a shared
          view model can name an icon type-safely and each head renders it with its own control (Avalonia's
          SymbolIcon on desktop/mobile, the WinUI one on the Uno web head). Icons that never vary are left
          to the views; this is for the cases where *which* icon to show is view-model state. -->
-    <PackageReference Include="FluentIcons.Common" Version="2.1.333" />
+    <PackageReference Include="FluentIcons.Common" Version="2.1.343" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/tests/Agnes.Acp.Tests/Agnes.Acp.Tests.csproj b/tests/Agnes.Acp.Tests/Agnes.Acp.Tests.csproj
index ba8bfd00..631a2561 100644
--- a/tests/Agnes.Acp.Tests/Agnes.Acp.Tests.csproj
+++ b/tests/Agnes.Acp.Tests/Agnes.Acp.Tests.csproj
@@ -11,7 +11,7 @@
     <PackageReference Include="coverlet.collector" Version="10.0.1" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
     <PackageReference Include="xunit" Version="2.9.3" />
-    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.4" />
+    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.5" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/tests/Agnes.Agents.Antigravity.Tests/Agnes.Agents.Antigravity.Tests.csproj b/tests/Agnes.Agents.Antigravity.Tests/Agnes.Agents.Antigravity.Tests.csproj
index d3a5dd77..98222968 100644
--- a/tests/Agnes.Agents.Antigravity.Tests/Agnes.Agents.Antigravity.Tests.csproj
+++ b/tests/Agnes.Agents.Antigravity.Tests/Agnes.Agents.Antigravity.Tests.csproj
@@ -11,7 +11,7 @@
     <PackageReference Include="coverlet.collector" Version="6.0.4" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
     <PackageReference Include="xunit" Version="2.9.3" />
-    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.4" />
+    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.5" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/tests/Agnes.Agents.Codex.Tests/Agnes.Agents.Codex.Tests.csproj b/tests/Agnes.Agents.Codex.Tests/Agnes.Agents.Codex.Tests.csproj
index 79f79607..ba69c646 100644
--- a/tests/Agnes.Agents.Codex.Tests/Agnes.Agents.Codex.Tests.csproj
+++ b/tests/Agnes.Agents.Codex.Tests/Agnes.Agents.Codex.Tests.csproj
@@ -11,8 +11,8 @@
     <PackageReference Include="coverlet.collector" Version="6.0.4" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
     <PackageReference Include="xunit" Version="2.9.3" />
-    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.4" />
-    <PackageReference Include="Nerdbank.Streams" Version="2.13.16" />
+    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.5" />
+    <PackageReference Include="Nerdbank.Streams" Version="2.13.31" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/tests/Agnes.Agents.Native.Tests/Agnes.Agents.Native.Tests.csproj b/tests/Agnes.Agents.Native.Tests/Agnes.Agents.Native.Tests.csproj
index 7333f318..bef35904 100644
--- a/tests/Agnes.Agents.Native.Tests/Agnes.Agents.Native.Tests.csproj
+++ b/tests/Agnes.Agents.Native.Tests/Agnes.Agents.Native.Tests.csproj
@@ -11,7 +11,7 @@
     <PackageReference Include="coverlet.collector" Version="6.0.4" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
     <PackageReference Include="xunit" Version="2.9.3" />
-    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.4" />
+    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.5" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/tests/Agnes.Agents.Pi.Tests/Agnes.Agents.Pi.Tests.csproj b/tests/Agnes.Agents.Pi.Tests/Agnes.Agents.Pi.Tests.csproj
index 72660b34..c2973e1e 100644
--- a/tests/Agnes.Agents.Pi.Tests/Agnes.Agents.Pi.Tests.csproj
+++ b/tests/Agnes.Agents.Pi.Tests/Agnes.Agents.Pi.Tests.csproj
@@ -11,7 +11,7 @@
     <PackageReference Include="coverlet.collector" Version="6.0.4" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
     <PackageReference Include="xunit" Version="2.9.3" />
-    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.4" />
+    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.5" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/tests/Agnes.Cli.Tests/Agnes.Cli.Tests.csproj b/tests/Agnes.Cli.Tests/Agnes.Cli.Tests.csproj
index 1d3251bd..acd9d53c 100644
--- a/tests/Agnes.Cli.Tests/Agnes.Cli.Tests.csproj
+++ b/tests/Agnes.Cli.Tests/Agnes.Cli.Tests.csproj
@@ -11,7 +11,7 @@
     <PackageReference Include="coverlet.collector" Version="6.0.4" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
     <PackageReference Include="xunit" Version="2.9.3" />
-    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.4" />
+    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.5" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/tests/Agnes.Client.Tests/Agnes.Client.Tests.csproj b/tests/Agnes.Client.Tests/Agnes.Client.Tests.csproj
index 1a2aa862..3a582753 100644
--- a/tests/Agnes.Client.Tests/Agnes.Client.Tests.csproj
+++ b/tests/Agnes.Client.Tests/Agnes.Client.Tests.csproj
@@ -11,7 +11,7 @@
     <PackageReference Include="coverlet.collector" Version="6.0.4" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
     <PackageReference Include="xunit" Version="2.9.3" />
-    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.4" />
+    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.5" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/tests/Agnes.Desktop.Tests/Agnes.Desktop.Tests.csproj b/tests/Agnes.Desktop.Tests/Agnes.Desktop.Tests.csproj
index bee3fde8..205009b4 100644
--- a/tests/Agnes.Desktop.Tests/Agnes.Desktop.Tests.csproj
+++ b/tests/Agnes.Desktop.Tests/Agnes.Desktop.Tests.csproj
@@ -9,10 +9,10 @@
 
   <ItemGroup>
     <PackageReference Include="coverlet.collector" Version="6.0.4" />
-    <PackageReference Include="Avalonia.Headless" Version="12.1.0" />
+    <PackageReference Include="Avalonia.Headless" Version="12.1.3" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
     <PackageReference Include="xunit" Version="2.9.3" />
-    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.4" />
+    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.5" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/tests/Agnes.Host.Tests/Agnes.Host.Tests.csproj b/tests/Agnes.Host.Tests/Agnes.Host.Tests.csproj
index 125653db..ef55a296 100644
--- a/tests/Agnes.Host.Tests/Agnes.Host.Tests.csproj
+++ b/tests/Agnes.Host.Tests/Agnes.Host.Tests.csproj
@@ -11,7 +11,7 @@
     <PackageReference Include="coverlet.collector" Version="6.0.4" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
     <PackageReference Include="xunit" Version="2.9.3" />
-    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.4" />
+    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.5" />
     <!-- The official MCP SDK, for building the Agnes tool set's real schemas in the tools/list test. -->
     <PackageReference Include="ModelContextProtocol.AspNetCore" Version="1.4.1" />
   </ItemGroup>
diff --git a/tests/Agnes.Integration.Tests/Agnes.Integration.Tests.csproj b/tests/Agnes.Integration.Tests/Agnes.Integration.Tests.csproj
index d879f832..393428f4 100644
--- a/tests/Agnes.Integration.Tests/Agnes.Integration.Tests.csproj
+++ b/tests/Agnes.Integration.Tests/Agnes.Integration.Tests.csproj
@@ -11,7 +11,7 @@
     <PackageReference Include="coverlet.collector" Version="6.0.4" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
     <PackageReference Include="xunit" Version="2.9.3" />
-    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.4" />
+    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.5" />
   </ItemGroup>
 
   <ItemGroup>
@@ -19,7 +19,7 @@
   </ItemGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.AspNetCore.Mvc.Testing" Version="10.0.10" />
+    <PackageReference Include="Microsoft.AspNetCore.Mvc.Testing" Version="10.0.12" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/tests/Agnes.Relay.Tests/Agnes.Relay.Tests.csproj b/tests/Agnes.Relay.Tests/Agnes.Relay.Tests.csproj
index cb4cc8dc..ad4809ec 100644
--- a/tests/Agnes.Relay.Tests/Agnes.Relay.Tests.csproj
+++ b/tests/Agnes.Relay.Tests/Agnes.Relay.Tests.csproj
@@ -11,7 +11,7 @@
     <PackageReference Include="coverlet.collector" Version="6.0.4" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
     <PackageReference Include="xunit" Version="2.9.3" />
-    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.4" />
+    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.5" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/tests/Agnes.Sandbox.Tests/Agnes.Sandbox.Tests.csproj b/tests/Agnes.Sandbox.Tests/Agnes.Sandbox.Tests.csproj
index 2c731093..2673f625 100644
--- a/tests/Agnes.Sandbox.Tests/Agnes.Sandbox.Tests.csproj
+++ b/tests/Agnes.Sandbox.Tests/Agnes.Sandbox.Tests.csproj
@@ -11,7 +11,7 @@
     <PackageReference Include="coverlet.collector" Version="6.0.4" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
     <PackageReference Include="xunit" Version="2.9.3" />
-    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.4" />
+    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.5" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/tests/Agnes.TestKit/Agnes.TestKit.csproj b/tests/Agnes.TestKit/Agnes.TestKit.csproj
index 8efacd29..692f1d2f 100644
--- a/tests/Agnes.TestKit/Agnes.TestKit.csproj
+++ b/tests/Agnes.TestKit/Agnes.TestKit.csproj
@@ -9,7 +9,7 @@
 
   <ItemGroup>
     <PackageReference Include="StreamJsonRpc" Version="2.25.29" />
-    <PackageReference Include="Nerdbank.Streams" Version="2.13.16" />
+    <PackageReference Include="Nerdbank.Streams" Version="2.13.31" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/tests/Agnes.Ui.Core.Tests/Agnes.Ui.Core.Tests.csproj b/tests/Agnes.Ui.Core.Tests/Agnes.Ui.Core.Tests.csproj
index ecb1275d..b4177476 100644
--- a/tests/Agnes.Ui.Core.Tests/Agnes.Ui.Core.Tests.csproj
+++ b/tests/Agnes.Ui.Core.Tests/Agnes.Ui.Core.Tests.csproj
@@ -11,7 +11,7 @@
     <PackageReference Include="coverlet.collector" Version="6.0.4" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
     <PackageReference Include="xunit" Version="2.9.3" />
-    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.4" />
+    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.5" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/tools/Agnes.Record/Agnes.Record.csproj b/tools/Agnes.Record/Agnes.Record.csproj
index 9658925d..689486e9 100644
--- a/tools/Agnes.Record/Agnes.Record.csproj
+++ b/tools/Agnes.Record/Agnes.Record.csproj
@@ -8,7 +8,7 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Extensions.Logging.Console" Version="10.0.0" />
+    <PackageReference Include="Microsoft.Extensions.Logging.Console" Version="10.0.12" />
     <ProjectReference Include="..\..\src\Agnes.Agents.Antigravity\Agnes.Agents.Antigravity.csproj" />
   <ProjectReference Include="..\..\src\Agnes.Agents.Copilot\Agnes.Agents.Copilot.csproj" />
 </ItemGroup>
diff --git a/tools/Agnes.Screenshots/Agnes.Screenshots.csproj b/tools/Agnes.Screenshots/Agnes.Screenshots.csproj
index 8e5e9180..36069653 100644
--- a/tools/Agnes.Screenshots/Agnes.Screenshots.csproj
+++ b/tools/Agnes.Screenshots/Agnes.Screenshots.csproj
@@ -9,15 +9,15 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Avalonia.Headless" Version="12.1.0" />
-    <PackageReference Include="Avalonia.Skia" Version="12.1.0" />
-    <PackageReference Include="Avalonia.Fonts.Inter" Version="12.1.0" />
+    <PackageReference Include="Avalonia.Headless" Version="12.1.3" />
+    <PackageReference Include="Avalonia.Skia" Version="12.1.3" />
+    <PackageReference Include="Avalonia.Fonts.Inter" Version="12.1.3" />
   </ItemGroup>
 
   <ItemGroup>
     <ProjectReference Include="..\..\src\Agnes.App.Desktop\Agnes.App.Desktop.csproj" />
     <!-- Heap analysis for the timing harness (the roots mode): who still holds a slept session. Dev tool only. -->
-    <PackageReference Include="Microsoft.Diagnostics.Runtime" Version="2.2.332302" />
+    <PackageReference Include="Microsoft.Diagnostics.Runtime" Version="2.2.343001" />
     <ProjectReference Include="..\..\src\Agnes.Client.Simulation\Agnes.Client.Simulation.csproj" />
     <ProjectReference Include="..\..\src\Agnes.Ui.Core\Agnes.Ui.Core.csproj" />
   </ItemGroup>