From 033aa2d7e0a09c11c28c284bc9b59ca3019a039d Mon Sep 17 00:00:00 2001
From: PowerShell GitHub Bot <pwshbot@microsoft.com>
Date: Wed, 15 Apr 2026 22:13:42 +0000
Subject: [PATCH 1/3] Update .NET SDK to latest version

---
 DotnetRuntimeMetadata.json | 2 +-
 global.json                | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/DotnetRuntimeMetadata.json b/DotnetRuntimeMetadata.json
index 89ea4c44790..8b1ed423288 100644
--- a/DotnetRuntimeMetadata.json
+++ b/DotnetRuntimeMetadata.json
@@ -4,7 +4,7 @@
     "quality": "daily",
     "qualityFallback": "preview",
     "packageVersionPattern": "9.0.0-preview.6",
-    "sdkImageVersion": "10.0.201",
+    "sdkImageVersion": "10.0.202",
     "nextChannel": "9.0.0-preview.7",
     "azureFeed": "",
     "sdkImageOverride": ""
diff --git a/global.json b/global.json
index ce67766bbb5..5ee7b7cb062 100644
--- a/global.json
+++ b/global.json
@@ -1,5 +1,5 @@
 {
   "sdk": {
-    "version": "10.0.201"
+    "version": "10.0.202"
   }
 }

From 210c97ff76eff738bf55f9515cb7685e20339b01 Mon Sep 17 00:00:00 2001
From: PowerShell GitHub Bot <pwshbot@microsoft.com>
Date: Wed, 15 Apr 2026 22:17:31 +0000
Subject: [PATCH 2/3] Update packages to fix known vulnerabilities

---
 CHANGELOG/v7.6/dependencychanges.json         | 27 +++++++++++++++++++
 .../Microsoft.PowerShell.SDK.csproj           |  7 +++--
 2 files changed, 30 insertions(+), 4 deletions(-)
 create mode 100644 CHANGELOG/v7.6/dependencychanges.json

diff --git a/CHANGELOG/v7.6/dependencychanges.json b/CHANGELOG/v7.6/dependencychanges.json
new file mode 100644
index 00000000000..2721a85dee8
--- /dev/null
+++ b/CHANGELOG/v7.6/dependencychanges.json
@@ -0,0 +1,27 @@
+[
+  {
+    "ChangeType": "Security",
+    "Branch": "release/v7.6.1",
+    "PackageId": "System.Security.Cryptography.Xml",
+    "FromVersion": "10.0.5",
+    "ToVersion": "10.0.6",
+    "VulnerabilityId": [
+      "GHSA-37GX-XXP4-5RGX",
+      "CVE-2026-33116",
+      "GHSA-W3X6-4M5H-CXQF",
+      "CVE-2026-26171"
+    ],
+    "Severity": [
+      "high"
+    ],
+    "VulnerableRanges": [
+      "[10.0.0, 10.0.5]"
+    ],
+    "AdvisoryUrls": [
+      "https://github.com/advisories/GHSA-37gx-xxp4-5rgx",
+      "https://github.com/advisories/GHSA-w3x6-4m5h-cxqf"
+    ],
+    "Justification": null,
+    "TimestampUtc": "2026-04-15T22:17:31.3488963Z"
+  }
+]
diff --git a/src/Microsoft.PowerShell.SDK/Microsoft.PowerShell.SDK.csproj b/src/Microsoft.PowerShell.SDK/Microsoft.PowerShell.SDK.csproj
index 290786be1e1..b2c8fef7079 100644
--- a/src/Microsoft.PowerShell.SDK/Microsoft.PowerShell.SDK.csproj
+++ b/src/Microsoft.PowerShell.SDK/Microsoft.PowerShell.SDK.csproj
@@ -60,7 +60,7 @@
     <PackageReference Include="System.Runtime.Caching" Version="10.0.5" />
     <PackageReference Include="System.Security.Cryptography.Pkcs" Version="10.0.5" />
     <PackageReference Include="System.Security.Cryptography.ProtectedData" Version="10.0.5" />
-    <PackageReference Include="System.Security.Cryptography.Xml" Version="10.0.5" />
+    <PackageReference Include="System.Security.Cryptography.Xml" Version="10.0.6" />
     <PackageReference Include="System.Security.Permissions" Version="10.0.5" />
     <!-- the following package(s) are from https://github.com/dotnet/wcf -->
     <PackageReference Include="System.ServiceModel.Http" Version="10.0.652802" />
@@ -85,14 +85,13 @@
          dotnet msbuild ./dummy.csproj /t:ResolveAssemblyReferencesDesignTime /fileLogger /noconsolelogger /v:diag
       3. Search '_ReferencesFromRAR' in the produced 'msbuild.log' file.
   -->
-  <Target Name="_GetDependencies"
-          DependsOnTargets="ResolveAssemblyReferencesDesignTime">
+  <Target Name="_GetDependencies" DependsOnTargets="ResolveAssemblyReferencesDesignTime">
     <ItemGroup>
       <!--
         Excludes 'Microsoft.Management.Infrastructure' from the type catalog reference list,
         as it is provided separately at runtime and must not be included in the generated catalog.
       -->
-      <_RefAssemblyPath Include="%(_ReferencesFromRAR.OriginalItemSpec)%3B" Condition=" '%(_ReferencesFromRAR.NuGetPackageId)' != 'Microsoft.Management.Infrastructure' "/>
+      <_RefAssemblyPath Include="%(_ReferencesFromRAR.OriginalItemSpec)%3B" Condition=" '%(_ReferencesFromRAR.NuGetPackageId)' != 'Microsoft.Management.Infrastructure' " />
     </ItemGroup>
     <WriteLinesToFile File="$(_DependencyFile)" Lines="@(_RefAssemblyPath)" Overwrite="true" />
   </Target>

From 7d60131e0c1aee5b3d1a659f72061fe55b37a4e6 Mon Sep 17 00:00:00 2001
From: PowerShell GitHub Bot <pwshbot@microsoft.com>
Date: Wed, 15 Apr 2026 22:21:07 +0000
Subject: [PATCH 3/3] Update cgmanifest

---
 CHANGELOG/v7.6/dependencychanges.json | 13 +++++++++++++
 tools/cgmanifest/main/cgmanifest.json |  6 +++---
 2 files changed, 16 insertions(+), 3 deletions(-)

diff --git a/CHANGELOG/v7.6/dependencychanges.json b/CHANGELOG/v7.6/dependencychanges.json
index 2721a85dee8..f23e73cd94b 100644
--- a/CHANGELOG/v7.6/dependencychanges.json
+++ b/CHANGELOG/v7.6/dependencychanges.json
@@ -23,5 +23,18 @@
     ],
     "Justification": null,
     "TimestampUtc": "2026-04-15T22:17:31.3488963Z"
+  },
+  {
+    "ChangeType": "NonSecurity",
+    "Branch": "release/v7.6.1",
+    "PackageId": ".NET SDK",
+    "FromVersion": "10.0.201",
+    "ToVersion": "10.0.202",
+    "VulnerabilityId": [],
+    "Severity": [],
+    "VulnerableRanges": [],
+    "AdvisoryUrls": [],
+    "Justification": "Updated .NET SDK. Building with the latest SDK is required.",
+    "TimestampUtc": "2026-04-15T22:17:33.1100397Z"
   }
 ]
diff --git a/tools/cgmanifest/main/cgmanifest.json b/tools/cgmanifest/main/cgmanifest.json
index 4004daffd93..fd645029d33 100644
--- a/tools/cgmanifest/main/cgmanifest.json
+++ b/tools/cgmanifest/main/cgmanifest.json
@@ -1,4 +1,5 @@
 {
+  "$schema": "https://json.schemastore.org/component-detection-manifest.json",
   "Registrations": [
     {
       "Component": {
@@ -645,7 +646,7 @@
         "Type": "nuget",
         "Nuget": {
           "Name": "System.Security.Cryptography.Xml",
-          "Version": "10.0.5"
+          "Version": "10.0.6"
         }
       },
       "DevelopmentDependency": false
@@ -750,6 +751,5 @@
       },
       "DevelopmentDependency": false
     }
-  ],
-  "$schema": "https://json.schemastore.org/component-detection-manifest.json"
+  ]
 }