From 4fc9b6c2f1694f78deedbf5743273230efcbd742 Mon Sep 17 00:00:00 2001
From: Beka Arevadze <bekaarevadze@microsoft.com>
Date: Tue, 4 Aug 2026 17:12:39 +0100
Subject: [PATCH 1/2] fix: update Kiota Abstractions for CVE-2026-44503

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 0faa6ce9-9ec5-4281-a3f2-dc1f9c9f7c0a
---
 src/Directory.Packages.props | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/Directory.Packages.props b/src/Directory.Packages.props
index f3fccf3a..2265f6a1 100644
--- a/src/Directory.Packages.props
+++ b/src/Directory.Packages.props
@@ -34,9 +34,9 @@
     <PackageVersion Include="Azure.ResourceManager.AppService" Version="1.2.0" />
     <!-- Microsoft Graph -->
     <PackageVersion Include="Microsoft.Graph" Version="5.36.0" />
-    <!-- Transitive pin: resolves NU1107 conflict between Microsoft.Extensions.Http 9.x (needs >= 9.0.8)
-         and Microsoft.Kiota.Abstractions 1.7.2 (needs < 9.0.0). CentralPackageTransitivePinningEnabled
-         allows this pin to override the Kiota upper bound. -->
+    <!-- Pin the transitive dependency to the version that fixes CVE-2026-44503. -->
+    <PackageVersion Include="Microsoft.Kiota.Abstractions" Version="1.22.0" />
+    <!-- Microsoft.Extensions.Http 9.x requires DiagnosticSource >= 9.0.8. -->
     <PackageVersion Include="System.Diagnostics.DiagnosticSource" Version="9.0.8" />
     <!-- Testing packages -->
     <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="17.12.0" />

From c7bef2ace102016feb09955794628e46c37335ab Mon Sep 17 00:00:00 2001
From: Beka Arevadze <bekaarevadze@microsoft.com>
Date: Wed, 5 Aug 2026 10:17:00 +0100
Subject: [PATCH 2/2] fix: update Kiota Abstractions to 1.22.2

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 0faa6ce9-9ec5-4281-a3f2-dc1f9c9f7c0a
---
 src/Directory.Packages.props | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/Directory.Packages.props b/src/Directory.Packages.props
index 2265f6a1..f5c8d92c 100644
--- a/src/Directory.Packages.props
+++ b/src/Directory.Packages.props
@@ -35,7 +35,7 @@
     <!-- Microsoft Graph -->
     <PackageVersion Include="Microsoft.Graph" Version="5.36.0" />
     <!-- Pin the transitive dependency to the version that fixes CVE-2026-44503. -->
-    <PackageVersion Include="Microsoft.Kiota.Abstractions" Version="1.22.0" />
+    <PackageVersion Include="Microsoft.Kiota.Abstractions" Version="1.22.2" />
     <!-- Microsoft.Extensions.Http 9.x requires DiagnosticSource >= 9.0.8. -->
     <PackageVersion Include="System.Diagnostics.DiagnosticSource" Version="9.0.8" />
     <!-- Testing packages -->