From 0658037275f394f9b6b17b8b5ba77dbe355569a5 Mon Sep 17 00:00:00 2001
From: Sipke Schoorstra <sipkeschoorstra@outlook.com>
Date: Mon, 22 Jun 2026 00:45:06 +0200
Subject: [PATCH] Resolve vulnerable transitive persistence packages

---
 Directory.Packages.props                                       | 3 ++-
 .../Elsa.Diagnostics.StructuredLogs.Persistence.Sqlite.csproj  | 1 +
 .../Elsa.Persistence.EFCore.Sqlite.csproj                      | 3 ++-
 .../Elsa.Persistence.VNext.Sqlite.csproj                       | 1 +
 .../Elsa.AI.IntegrationTests/Elsa.AI.IntegrationTests.csproj   | 1 +
 .../Elsa.AI.Persistence.EFCore.UnitTests.csproj                | 1 +
 .../Elsa.Persistence.VNext.UnitTests.csproj                    | 1 +
 7 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/Directory.Packages.props b/Directory.Packages.props
index 341f58326..4341f9f6f 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -145,7 +145,7 @@
         <PackageVersion Include="Microsoft.Identity.Client" Version="4.79.2"/>
         <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="18.0.1"/>
         <PackageVersion Include="Moq" Version="4.20.72"/>
-        <PackageVersion Include="MongoDB.Driver" Version="3.8.1"/>
+        <PackageVersion Include="MongoDB.Driver" Version="3.9.0"/>
         <PackageVersion Include="MySql.Data" Version="9.5.0"/>
         <PackageVersion Include="Newtonsoft.Json" Version="13.0.4"/>
 		<PackageVersion Include="Npgsql" Version="10.0.3"/>
@@ -183,6 +183,7 @@
         <PackageVersion Include="Serilog.Sinks.File" Version="7.0.0"/>
         <PackageVersion Include="Serilog.Formatting.Compact" Version="3.0.0"/>
         <PackageVersion Include="ShortGuid" Version="2.0.1"/>
+        <PackageVersion Include="SQLitePCLRaw.bundle_e_sqlite3" Version="3.0.3"/>
         <PackageVersion Include="Snappier" Version="1.3.1"/>
         <PackageVersion Include="StackExchange.Redis" Version="2.10.1"/>
         <PackageVersion Include="System.CommandLine" Version="2.0.9"/>
diff --git a/src/modules/Elsa.Diagnostics.StructuredLogs.Persistence.Sqlite/Elsa.Diagnostics.StructuredLogs.Persistence.Sqlite.csproj b/src/modules/Elsa.Diagnostics.StructuredLogs.Persistence.Sqlite/Elsa.Diagnostics.StructuredLogs.Persistence.Sqlite.csproj
index 37d593bbc..6bf860137 100644
--- a/src/modules/Elsa.Diagnostics.StructuredLogs.Persistence.Sqlite/Elsa.Diagnostics.StructuredLogs.Persistence.Sqlite.csproj
+++ b/src/modules/Elsa.Diagnostics.StructuredLogs.Persistence.Sqlite/Elsa.Diagnostics.StructuredLogs.Persistence.Sqlite.csproj
@@ -13,6 +13,7 @@
         <PackageReference Include="Microsoft.Data.Sqlite" />
         <PackageReference Include="Microsoft.Extensions.Hosting.Abstractions" />
         <PackageReference Include="Microsoft.Extensions.Options" />
+        <PackageReference Include="SQLitePCLRaw.bundle_e_sqlite3" />
     </ItemGroup>
 
     <ItemGroup>
diff --git a/src/modules/Elsa.Persistence.EFCore.Sqlite/Elsa.Persistence.EFCore.Sqlite.csproj b/src/modules/Elsa.Persistence.EFCore.Sqlite/Elsa.Persistence.EFCore.Sqlite.csproj
index 6ae2259c6..eed68ce2a 100644
--- a/src/modules/Elsa.Persistence.EFCore.Sqlite/Elsa.Persistence.EFCore.Sqlite.csproj
+++ b/src/modules/Elsa.Persistence.EFCore.Sqlite/Elsa.Persistence.EFCore.Sqlite.csproj
@@ -11,10 +11,11 @@
         <PackageReference Include="Microsoft.Data.Sqlite" />
         <PackageReference Include="Microsoft.EntityFrameworkCore.Sqlite" />
         <PackageReference Include="Microsoft.EntityFrameworkCore.Design" PrivateAssets="all" />
+        <PackageReference Include="SQLitePCLRaw.bundle_e_sqlite3" />
     </ItemGroup>
 
     <ItemGroup>
         <ProjectReference Include="..\Elsa.Persistence.EFCore\Elsa.Persistence.EFCore.csproj" />
     </ItemGroup>
 
-</Project>
\ No newline at end of file
+</Project>
diff --git a/src/modules/Elsa.Persistence.VNext.Sqlite/Elsa.Persistence.VNext.Sqlite.csproj b/src/modules/Elsa.Persistence.VNext.Sqlite/Elsa.Persistence.VNext.Sqlite.csproj
index a2790c882..ea86bfe60 100644
--- a/src/modules/Elsa.Persistence.VNext.Sqlite/Elsa.Persistence.VNext.Sqlite.csproj
+++ b/src/modules/Elsa.Persistence.VNext.Sqlite/Elsa.Persistence.VNext.Sqlite.csproj
@@ -9,6 +9,7 @@
 
     <ItemGroup>
         <PackageReference Include="Microsoft.Data.Sqlite" />
+        <PackageReference Include="SQLitePCLRaw.bundle_e_sqlite3" />
     </ItemGroup>
 
     <ItemGroup>
diff --git a/test/integration/Elsa.AI.IntegrationTests/Elsa.AI.IntegrationTests.csproj b/test/integration/Elsa.AI.IntegrationTests/Elsa.AI.IntegrationTests.csproj
index f1c81a4f0..c4581273e 100644
--- a/test/integration/Elsa.AI.IntegrationTests/Elsa.AI.IntegrationTests.csproj
+++ b/test/integration/Elsa.AI.IntegrationTests/Elsa.AI.IntegrationTests.csproj
@@ -6,6 +6,7 @@
 
     <ItemGroup>
         <PackageReference Include="Microsoft.EntityFrameworkCore.Sqlite" />
+        <PackageReference Include="SQLitePCLRaw.bundle_e_sqlite3" />
         <ProjectReference Include="..\..\..\src\modules\Elsa.AI.Abstractions\Elsa.AI.Abstractions.csproj" />
         <ProjectReference Include="..\..\..\src\modules\Elsa.AI.Host\Elsa.AI.Host.csproj" />
         <ProjectReference Include="..\..\..\src\modules\Elsa.AI.Copilot\Elsa.AI.Copilot.csproj" />
diff --git a/test/unit/Elsa.AI.Persistence.EFCore.UnitTests/Elsa.AI.Persistence.EFCore.UnitTests.csproj b/test/unit/Elsa.AI.Persistence.EFCore.UnitTests/Elsa.AI.Persistence.EFCore.UnitTests.csproj
index bc1932677..a506b23aa 100644
--- a/test/unit/Elsa.AI.Persistence.EFCore.UnitTests/Elsa.AI.Persistence.EFCore.UnitTests.csproj
+++ b/test/unit/Elsa.AI.Persistence.EFCore.UnitTests/Elsa.AI.Persistence.EFCore.UnitTests.csproj
@@ -7,6 +7,7 @@
 
     <ItemGroup>
         <PackageReference Include="Microsoft.EntityFrameworkCore.Sqlite" />
+        <PackageReference Include="SQLitePCLRaw.bundle_e_sqlite3" />
         <ProjectReference Include="..\..\..\src\modules\Elsa.AI.Persistence.EFCore.Sqlite\Elsa.AI.Persistence.EFCore.Sqlite.csproj" />
         <ProjectReference Include="..\..\..\src\modules\Elsa.AI.Persistence.EFCore\Elsa.AI.Persistence.EFCore.csproj" />
         <ProjectReference Include="..\..\..\src\common\Elsa.Testing.Shared\Elsa.Testing.Shared.csproj" />
diff --git a/test/unit/Elsa.Persistence.VNext.UnitTests/Elsa.Persistence.VNext.UnitTests.csproj b/test/unit/Elsa.Persistence.VNext.UnitTests/Elsa.Persistence.VNext.UnitTests.csproj
index aec7f67f4..83bbf58ce 100644
--- a/test/unit/Elsa.Persistence.VNext.UnitTests/Elsa.Persistence.VNext.UnitTests.csproj
+++ b/test/unit/Elsa.Persistence.VNext.UnitTests/Elsa.Persistence.VNext.UnitTests.csproj
@@ -7,6 +7,7 @@
 
     <ItemGroup>
         <PackageReference Include="Microsoft.Data.Sqlite" />
+        <PackageReference Include="SQLitePCLRaw.bundle_e_sqlite3" />
     </ItemGroup>
 
     <ItemGroup>