From 54b6973e88188edc71ce4ade25f65478af67d2a5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 22 Sep 2025 17:49:17 +0000
Subject: [PATCH] Bump Newtonsoft.Json from 9.0.1 to 13.0.4

---
updated-dependencies:
- dependency-name: Newtonsoft.Json
  dependency-version: 13.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 WebGoat/Web.config         |  4 ++++
 WebGoat/WebGoat.NET.csproj | 10 ++++++----
 WebGoat/packages.config    |  2 +-
 3 files changed, 11 insertions(+), 5 deletions(-)

diff --git a/WebGoat/Web.config b/WebGoat/Web.config
index 17b5d14..64c2397 100644
--- a/WebGoat/Web.config
+++ b/WebGoat/Web.config
@@ -136,6 +136,10 @@ http://msdn2.microsoft.com/en-us/library/b5ysx397.aspx
         <assemblyIdentity name="System.Web.Extensions.Design" publicKeyToken="31bf3856ad364e35" />
         <bindingRedirect oldVersion="1.0.0.0-1.1.0.0" newVersion="3.5.0.0" />
       </dependentAssembly>
+      <dependentAssembly>
+        <assemblyIdentity name="Newtonsoft.Json" publicKeyToken="30ad4fe6b2a6aeed" culture="neutral" />
+        <bindingRedirect oldVersion="0.0.0.0-13.0.0.0" newVersion="13.0.0.0" />
+      </dependentAssembly>
     </assemblyBinding>
   </runtime>
   <!--
diff --git a/WebGoat/WebGoat.NET.csproj b/WebGoat/WebGoat.NET.csproj
index 8db8356..5d52fb1 100644
--- a/WebGoat/WebGoat.NET.csproj
+++ b/WebGoat/WebGoat.NET.csproj
@@ -55,11 +55,13 @@
     <AllowUnsafeBlocks>true</AllowUnsafeBlocks>
   </PropertyGroup>
   <ItemGroup>
-    <Reference Include="log4net, Version=2.0.6.0, Culture=neutral, PublicKeyToken=669e0ddf0bb1aa2a, processorArchitecture=MSIL">
-      <HintPath>..\packages\log4net.2.0.6\lib\net35-full\log4net.dll</HintPath>
+    <Reference Include="log4net, Version=2.0.17.0, Culture=neutral, PublicKeyToken=669e0ddf0bb1aa2a">
+      <HintPath>..\packages\log4net.2.0.17\lib\net35\log4net.dll</HintPath>
+      <Private>True</Private>
     </Reference>
-    <Reference Include="Newtonsoft.Json, Version=9.0.0.0, Culture=neutral, PublicKeyToken=30ad4fe6b2a6aeed, processorArchitecture=MSIL">
-      <HintPath>..\packages\Newtonsoft.Json.9.0.1\lib\net35\Newtonsoft.Json.dll</HintPath>
+    <Reference Include="Newtonsoft.Json, Version=13.0.0.0, Culture=neutral, PublicKeyToken=30ad4fe6b2a6aeed">
+      <HintPath>..\packages\Newtonsoft.Json.13.0.4\lib\net35\Newtonsoft.Json.dll</HintPath>
+      <Private>True</Private>
     </Reference>
     <Reference Include="System" />
     <Reference Include="System.ComponentModel.DataAnnotations" />
diff --git a/WebGoat/packages.config b/WebGoat/packages.config
index 5684ea8..db05891 100644
--- a/WebGoat/packages.config
+++ b/WebGoat/packages.config
@@ -2,5 +2,5 @@
 <packages>
   <package id="EntityFramework" version="6.1.0" targetFramework="net35" />
   <package id="log4net" version="2.0.6" targetFramework="net35" />
-  <package id="Newtonsoft.Json" version="9.0.1" targetFramework="net35" />
+  <package id="Newtonsoft.Json" version="13.0.4" targetFramework="net35" />
 </packages>
\ No newline at end of file