From 262869f84611837b75137f3931aae092ea58a777 Mon Sep 17 00:00:00 2001
From: Nick Gallegos <nick.gallegos@particular.net>
Date: Thu, 15 Jan 2026 13:40:30 -0700
Subject: [PATCH] Fix CVE ghsa-9cvc-h2w8-phrp8-phrp on 6.8

---
 src/Directory.Packages.props                                 | 5 ++---
 .../ServiceControl.Transports.SQS.csproj                     | 1 -
 2 files changed, 2 insertions(+), 4 deletions(-)

diff --git a/src/Directory.Packages.props b/src/Directory.Packages.props
index c9fbb5ba00..9e3fae2bac 100644
--- a/src/Directory.Packages.props
+++ b/src/Directory.Packages.props
@@ -6,7 +6,6 @@
   <ItemGroup Label="Versions for direct package references">
     <PackageVersion Include="Autofac" Version="8.2.0" />
     <PackageVersion Include="AWSSDK.CloudWatch" Version="4.0.1" />
-    <PackageVersion Include="AWSSDK.SecurityToken" Version="4.0.0.4" />
     <PackageVersion Include="Azure.Identity" Version="1.13.2" />
     <PackageVersion Include="Azure.Monitor.Query.Metrics" Version="1.0.0" />
     <PackageVersion Include="Azure.ResourceManager.ServiceBus" Version="1.1.0" />
@@ -34,7 +33,7 @@
     <PackageVersion Include="NLog.Extensions.Logging" Version="5.4.0" />
     <PackageVersion Include="NServiceBus" Version="9.2.7" />
     <PackageVersion Include="NServiceBus.AcceptanceTesting" Version="9.2.7" />
-    <PackageVersion Include="NServiceBus.AmazonSQS" Version="8.0.0" />
+    <PackageVersion Include="NServiceBus.AmazonSQS" Version="8.0.1" />
     <PackageVersion Include="NServiceBus.CustomChecks" Version="5.0.1" />
     <PackageVersion Include="NServiceBus.Extensions.Hosting" Version="3.0.1" />
     <PackageVersion Include="NServiceBus.Extensions.Logging" Version="3.0.1" />
@@ -96,4 +95,4 @@
     <GlobalPackageReference Include="Microsoft.Build.CopyOnWrite" Version="1.0.334" />
     <GlobalPackageReference Include="Particular.Packaging" Version="4.5.0" />
   </ItemGroup>
-</Project>
+</Project>
\ No newline at end of file
diff --git a/src/ServiceControl.Transports.SQS/ServiceControl.Transports.SQS.csproj b/src/ServiceControl.Transports.SQS/ServiceControl.Transports.SQS.csproj
index 7b9de90780..1a61717882 100644
--- a/src/ServiceControl.Transports.SQS/ServiceControl.Transports.SQS.csproj
+++ b/src/ServiceControl.Transports.SQS/ServiceControl.Transports.SQS.csproj
@@ -13,7 +13,6 @@
   <ItemGroup>
     <PackageReference Include="AWSSDK.CloudWatch" />
     <!-- Required for IAM Roles for Service Accounts even though no API is added -->
-    <PackageReference Include="AWSSDK.SecurityToken" />
     <PackageReference Include="NServiceBus.AmazonSQS" />
   </ItemGroup>