From 0d0186187f02946df15d77d1f66db1716df4f31c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 20 Oct 2026 02:07:03 +0000
Subject: [PATCH] Bump HtmlAgilityPack from 1.11.46 to 1.13.1

---
updated-dependencies:
- dependency-name: HtmlAgilityPack
  dependency-version: 1.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Directory.Packages.props                           | 2 +-
 WebApplicationTestWeb/WebApplicationTestWeb.csproj | 3 ++-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/Directory.Packages.props b/Directory.Packages.props
index 0fc0762..22f630b 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -6,7 +6,7 @@
     <!-- ⚠️ 安全实验室专用: 以下 NuGet 版本是"已知含漏洞"的旧版本, 专门用于测试 Dependabot 告警。
          每个包都有对应的 GHSA 安全公告, 推送到 GitHub 后 Dependabot 会生成告警。
          同时 dotnet build 时 NuGetAudit 也会直接给出 NU19xx 警告。生产项目切勿复制这些版本! -->
-    <PackageVersion Include="HtmlAgilityPack" Version="1.11.46" />
+    <PackageVersion Include="HtmlAgilityPack" Version="1.13.1" />
     <PackageVersion Include="Microsoft.Data.SqlClient" Version="2.1.4" />
     <!-- Newtonsoft.Json < 13.0.2 存在漏洞 (GHSA-5crp-9r3c-p9vr), 修复版本 13.0.2+ -->
     <PackageVersion Include="Newtonsoft.Json" Version="12.0.3" />
diff --git a/WebApplicationTestWeb/WebApplicationTestWeb.csproj b/WebApplicationTestWeb/WebApplicationTestWeb.csproj
index b734ed5..e8c548e 100644
--- a/WebApplicationTestWeb/WebApplicationTestWeb.csproj
+++ b/WebApplicationTestWeb/WebApplicationTestWeb.csproj
@@ -5,7 +5,8 @@
     <Nullable>enable</Nullable>
     <ImplicitUsings>enable</ImplicitUsings>
   </PropertyGroup>
-
  <ItemGroup>
+
+  <ItemGroup>
     <!-- ⚠️ 安全实验室专用: 故意引用含已知漏洞的旧版本, 用于触发 Dependabot 告警 (版本集中在 Directory.Packages.props) -->
     <PackageReference Include="HtmlAgilityPack" />
     <PackageReference Include="Microsoft.Data.SqlClient" />