From 9487f16b37c2a3e55b40da4e2813c7b4f721d1ed Mon Sep 17 00:00:00 2001
From: Peter Collins <pecolli@microsoft.com>
Date: Wed, 12 Feb 2025 15:23:26 -0500
Subject: [PATCH] [build] Address CVE-2024-43485

Context: https://github.com/advisories/GHSA-8g4q-xg66-9fp4

Address CVE-2024-43485 by updating NuGet.ProjectModel to v6.13.1, which
brings in System.Text.Json v8.0.5.
---
 .../Xamarin.Android.Build.Tasks.csproj                          | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/Xamarin.Android.Build.Tasks/Xamarin.Android.Build.Tasks.csproj b/src/Xamarin.Android.Build.Tasks/Xamarin.Android.Build.Tasks.csproj
index dd9b72972a8..98e552cdf44 100644
--- a/src/Xamarin.Android.Build.Tasks/Xamarin.Android.Build.Tasks.csproj
+++ b/src/Xamarin.Android.Build.Tasks/Xamarin.Android.Build.Tasks.csproj
@@ -28,7 +28,7 @@
   <ItemGroup>
     <PackageReference Include="Mono.Cecil" Version="$(MonoCecilVersion)" GeneratePathProperty="true" />
     <PackageReference Include="Irony" />
-    <PackageReference Include="NuGet.ProjectModel" Version="6.12.1" />
+    <PackageReference Include="NuGet.ProjectModel" Version="6.13.1" />
     <PackageReference Include="Newtonsoft.Json" Version="$(NewtonsoftJsonPackageVersion)" />
     <PackageReference Include="System.CodeDom" />
     <PackageReference Include="System.IO.Hashing" Version="$(SystemIOHashingPackageVersion)" />