From eb9152620adb2b93ab71bd8bc7c6344cd25c4b6c Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Mon, 12 Oct 2026 07:15:19 +0000
Subject: [PATCH 1/4] deps: bump NuGet packages missed by (Linux) Dependabot

---
 Directory.Packages.props | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/Directory.Packages.props b/Directory.Packages.props
index f10e2c680..9d16e0ff5 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -45,7 +45,7 @@
          YamlStaticContext for the doc pipeline's YAML DTOs (tools/Reactor.DocPipeline).
          Analyzer-only (PrivateAssets=all). Version tracks YamlDotNet's major (18.x). -->
     <PackageVersion Include="Vecc.YamlDotNet.Analyzers.StaticGenerator" Version="18.1.0" />
-    <PackageVersion Include="GitHub.Copilot.SDK" Version="1.0.14" />
+    <PackageVersion Include="GitHub.Copilot.SDK" Version="1.0.19" />
     <PackageVersion Include="MessagePack" Version="2.5.305" />
   </ItemGroup>
 
@@ -54,7 +54,7 @@
          `winapp ui`, used in-process. Its Windows Graphics Capture build needs a Windows 10
          19041+ TFM. The DI container is how the library hands out IWindowCapture. -->
     <PackageVersion Include="Microsoft.Windows.SDK.BuildTools.WinApp.UIAutomation" Version="0.7.1" />
-    <PackageVersion Include="Microsoft.Extensions.DependencyInjection" Version="10.0.10" />
+    <PackageVersion Include="Microsoft.Extensions.DependencyInjection" Version="10.0.12" />
   </ItemGroup>
 
   <ItemGroup>
@@ -69,19 +69,19 @@
 
   <ItemGroup>
     <!-- Test infrastructure -->
-    <PackageVersion Include="xunit.v3" Version="4.0.1" />
-    <PackageVersion Include="xunit.runner.visualstudio" Version="4.0.0" />
-    <PackageVersion Include="MSTest.TestAdapter" Version="4.4.1" />
-    <PackageVersion Include="MSTest.TestFramework" Version="4.4.1" />
+    <PackageVersion Include="xunit.v3" Version="4.0.2" />
+    <PackageVersion Include="xunit.runner.visualstudio" Version="4.0.1" />
+    <PackageVersion Include="MSTest.TestAdapter" Version="4.5.1" />
+    <PackageVersion Include="MSTest.TestFramework" Version="4.5.1" />
     <!-- Microsoft.Testing.Platform extensions. xunit.v3 v4 dropped the VSTest bridge, so
          the repo runs every suite under MTP (see global.json). MTP ships no TRX writer or
          hang detector in the box: these restore the VSTest "logger trx" and "blame hang"
          behaviours CI depended on, via the MTP report-trx / hangdump options. Version
          tracks the MTP that xunit.v3 4.x / MSTest 4.x resolve. -->
-    <PackageVersion Include="Microsoft.Testing.Extensions.TrxReport" Version="2.4.1" />
-    <PackageVersion Include="Microsoft.Testing.Extensions.HangDump" Version="2.4.1" />
+    <PackageVersion Include="Microsoft.Testing.Extensions.TrxReport" Version="2.5.1" />
+    <PackageVersion Include="Microsoft.Testing.Extensions.HangDump" Version="2.5.1" />
     <PackageVersion Include="SharpFuzz" Version="2.3.0" />
-    <PackageVersion Include="Microsoft.Diagnostics.Tracing.TraceEvent" Version="3.2.6" />
+    <PackageVersion Include="Microsoft.Diagnostics.Tracing.TraceEvent" Version="3.2.8" />
   </ItemGroup>
 
   <ItemGroup>

From 336e7d59a939ec0094e960d42db2850403acb84c Mon Sep 17 00:00:00 2001
From: Alexandre Zollinger Chohfi <alzollin@microsoft.com>
Date: Thu, 15 Oct 2026 15:08:40 -0700
Subject: [PATCH 2/4] deps: hold back NuGet bumps younger than 7 days

GitHub.Copilot.SDK 1.0.19 -> 1.0.18, xunit.v3 stays 4.0.1, xunit.runner.visualstudio stays 4.0.0 (4.0.2/4.0.1/1.0.19 were published 2026-10-09).

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 65d2da02-27b7-4d69-bc1e-b0f837773e21
---
 Directory.Packages.props | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/Directory.Packages.props b/Directory.Packages.props
index 52c612a08..59a0dabd4 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -47,7 +47,7 @@
          YamlStaticContext for the doc pipeline's YAML DTOs (tools/Reactor.DocPipeline).
          Analyzer-only (PrivateAssets=all). Version tracks YamlDotNet's major (18.x). -->
     <PackageVersion Include="Vecc.YamlDotNet.Analyzers.StaticGenerator" Version="18.1.0" />
-    <PackageVersion Include="GitHub.Copilot.SDK" Version="1.0.19" />
+    <PackageVersion Include="GitHub.Copilot.SDK" Version="1.0.18" />
     <PackageVersion Include="MessagePack" Version="2.5.307" />
   </ItemGroup>
 
@@ -71,8 +71,8 @@
 
   <ItemGroup>
     <!-- Test infrastructure -->
-    <PackageVersion Include="xunit.v3" Version="4.0.2" />
-    <PackageVersion Include="xunit.runner.visualstudio" Version="4.0.1" />
+    <PackageVersion Include="xunit.v3" Version="4.0.1" />
+    <PackageVersion Include="xunit.runner.visualstudio" Version="4.0.0" />
     <PackageVersion Include="MSTest.TestAdapter" Version="4.5.1" />
     <PackageVersion Include="MSTest.TestFramework" Version="4.5.1" />
     <!-- Microsoft.Testing.Platform extensions. xunit.v3 v4 dropped the VSTest bridge, so

From 19dd21730669d31f81d4b71a95368856086b6b4f Mon Sep 17 00:00:00 2001
From: Alexandre Zollinger Chohfi <alzollin@microsoft.com>
Date: Thu, 15 Oct 2026 15:10:05 -0700
Subject: [PATCH 3/4] Revert "deps: hold back NuGet bumps younger than 7 days"

Keep the intended versions; gate the merge on package age instead.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 65d2da02-27b7-4d69-bc1e-b0f837773e21
---
 Directory.Packages.props | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/Directory.Packages.props b/Directory.Packages.props
index 59a0dabd4..52c612a08 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -47,7 +47,7 @@
          YamlStaticContext for the doc pipeline's YAML DTOs (tools/Reactor.DocPipeline).
          Analyzer-only (PrivateAssets=all). Version tracks YamlDotNet's major (18.x). -->
     <PackageVersion Include="Vecc.YamlDotNet.Analyzers.StaticGenerator" Version="18.1.0" />
-    <PackageVersion Include="GitHub.Copilot.SDK" Version="1.0.18" />
+    <PackageVersion Include="GitHub.Copilot.SDK" Version="1.0.19" />
     <PackageVersion Include="MessagePack" Version="2.5.307" />
   </ItemGroup>
 
@@ -71,8 +71,8 @@
 
   <ItemGroup>
     <!-- Test infrastructure -->
-    <PackageVersion Include="xunit.v3" Version="4.0.1" />
-    <PackageVersion Include="xunit.runner.visualstudio" Version="4.0.0" />
+    <PackageVersion Include="xunit.v3" Version="4.0.2" />
+    <PackageVersion Include="xunit.runner.visualstudio" Version="4.0.1" />
     <PackageVersion Include="MSTest.TestAdapter" Version="4.5.1" />
     <PackageVersion Include="MSTest.TestFramework" Version="4.5.1" />
     <!-- Microsoft.Testing.Platform extensions. xunit.v3 v4 dropped the VSTest bridge, so

From 198fa593488f1f57fbc623a630be8ef826b07172 Mon Sep 17 00:00:00 2001
From: Alexandre Zollinger Chohfi <alzollin@microsoft.com>
Date: Thu, 15 Oct 2026 15:12:59 -0700
Subject: [PATCH 4/4] Review GitHub.Copilot.SDK 1.0.19 MSBuild contract

v1.0.14...v1.0.19 targets diff: CopilotSkipCliDownload and CopilotCliBinaryPath gates unchanged; COPILOT_CLI_DOWNLOAD_BASE_URL still honored. The CopilotCliReleaseBaseUrl default moved from evaluation into _DownloadCopilotCli and only differs for -unstable runtimes; the repo never reads that property, so behaviour is unchanged.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 65d2da02-27b7-4d69-bc1e-b0f837773e21
---
 docs/security/threat-model.md                     | 2 +-
 tests/build_props/ci/CopilotSdkContract.Tests.ps1 | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/security/threat-model.md b/docs/security/threat-model.md
index 214592e10..4a3e958bb 100644
--- a/docs/security/threat-model.md
+++ b/docs/security/threat-model.md
@@ -284,7 +284,7 @@ Microsoft's internal Security Assessment policy lists six trust-boundary trigger
 | `nuget.org` for direct & transitive deps | Compromise of upstream feed → poisoned dep gets pulled at restore | `nuget.config` clears inherited feeds and pins to `nuget.org` + `local-nupkgs/`. Dependabot enabled (`.github/dependabot.yml`). CI `vulnerable-packages` job runs [`dotnet list package --vulnerable`](https://learn.microsoft.com/dotnet/core/tools/dotnet-list-package) on every PR and fails on High/Critical findings. |
 | Source-ported OSS (Yoga / md4c / D3) | Upstream defect ported in by hand without notice | `ThirdPartyNoticeText.txt` lists each; `cgmanifest.json` registers them with Component Governance so upstream advisories surface internally. |
 | GitHub repo → NuGet publish | Compromised CI builds malicious package | `.github/workflows/release.yml` builds in `windows-latest` runner; BinSkim (PR #365) and CodeQL provide additional verification before publish. |
-| `GitHub.Copilot.SDK 1.0.14` transitive | Ships a third-party native `copilot.exe` runtime bundle (`runtimes/<rid>/native/`), downloaded at build time from the github/copilot-cli GitHub releases and SHA-256-verified against the release's `SHA256SUMS.txt`, without Control Flow Guard | Known; tracked under the BinSkim follow-up. Not Reactor-authored. The binary is only present in the `mur` CLI publish artifact, not in the framework NuGet. |
+| `GitHub.Copilot.SDK 1.0.19` transitive | Ships a third-party native `copilot.exe` runtime bundle (`runtimes/<rid>/native/`), downloaded at build time from the github/copilot-cli GitHub releases and SHA-256-verified against the release's `SHA256SUMS.txt`, without Control Flow Guard | Known; tracked under the BinSkim follow-up. Not Reactor-authored. The binary is only present in the `mur` CLI publish artifact, not in the framework NuGet. |
 | Developer-downloaded skill-kit zip | Tampering between Microsoft and developer | Authenticode signing of the zip is a known compliance gap; tracked under the SDL signing workstream. |
 
 ## 11. Known open items / questions for internal security review
diff --git a/tests/build_props/ci/CopilotSdkContract.Tests.ps1 b/tests/build_props/ci/CopilotSdkContract.Tests.ps1
index cdfaebb93..41d4bf878 100644
--- a/tests/build_props/ci/CopilotSdkContract.Tests.ps1
+++ b/tests/build_props/ci/CopilotSdkContract.Tests.ps1
@@ -43,7 +43,7 @@ $packagesProps = Join-Path $repoRoot 'Directory.Packages.props'
 # CopilotSkipCliDownload still gates the native CLI download, and that
 # CopilotCliReleaseBaseUrl / COPILOT_CLI_DOWNLOAD_BASE_URL / CopilotCliBinaryPath
 # still behave as Directory.Build.props and README.md describe. Then bump this.
-$reviewedSdkVersion = '1.0.14'
+$reviewedSdkVersion = '1.0.19'
 $sdkPinned = [regex]::Match(
     [IO.File]::ReadAllText($packagesProps),
     '<PackageVersion\s+Include="GitHub\.Copilot\.SDK"\s+Version="(?<v>[^"]+)"').Groups['v'].Value