Bump the dotnet-dependencies group with 11 updates

.github/dependabot.yml

@@ -0,0 +1,20 @@
+version: 2
+
+updates:
+  - package-ecosystem: "nuget"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+
+    # Optional but recommended
+    open-pull-requests-limit: 5
+
+    # Only care about real issues (keeps noise down)
+    allow:
+      - dependency-type: "direct"
+
+    # Group updates (prevents PR spam)
+    groups:
+      dotnet-dependencies:
+        patterns:
+          - "*"

CONTRIBUTING.md

@@ -0,0 +1,23 @@
+# Contributing
+
+Thanks for your interest in contributing to M3Undle.
+
+## Before submitting
+
+* Open an issue to discuss significant changes
+* Keep changes focused and minimal
+
+## Guidelines
+
+* Follow existing code style and patterns
+* Avoid large refactors unless discussed first
+* Prefer stability and readability over clever solutions
+
+## Testing
+
+* Ensure the application builds and runs
+* Do not introduce breaking changes without discussion
+
+## Notes
+
+This project is currently evolving quickly. Not all contributions may be accepted, especially large or architectural changes.

SECURITY.md

@@ -0,0 +1,48 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+If you discover a security vulnerability in M3Undle, please report it privately.
+
+* Open a **private vulnerability report** via GitHub (preferred), or
+* Email: <your-email-here>
+
+Please include:
+
+* Description of the issue
+* Steps to reproduce
+* Affected endpoints (e.g. M3U, XMLTV, HDHR)
+* Any relevant logs or requests
+
+---
+
+## What to Expect
+
+* I will acknowledge receipt within **48 hours**
+* I will work to validate and address the issue as quickly as possible
+* You may be asked for additional details during investigation
+
+---
+
+## Disclosure Policy
+
+Please do **not publicly disclose** the issue until:
+
+* A fix has been released, or
+* We agree on a disclosure timeline
+
+---
+
+## Scope
+
+This project includes:
+
+* IPTV proxy endpoints (M3U, XMLTV, HDHR)
+* Web UI and API endpoints
+* Authentication and access control
+
+---
+
+## Notes
+
+This is an early-stage project. Security improvements are ongoing, and responsible disclosure is appreciated.

src/M3Undle.Cli/M3Undle.Cli.csproj

@@ -24,7 +24,7 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Spectre.Console" Version="0.54.0" />
+    <PackageReference Include="Spectre.Console" Version="0.55.0" />
   </ItemGroup>
 
   <ItemGroup>

src/M3Undle.Core/M3Undle.Core.csproj

@@ -8,8 +8,8 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Spectre.Console" Version="0.54.0" />
-    <PackageReference Include="YamlDotNet" Version="16.3.0" />
+    <PackageReference Include="Spectre.Console" Version="0.55.0" />
+    <PackageReference Include="YamlDotNet" Version="17.0.1" />
   </ItemGroup>
 
   <ItemGroup>

src/M3Undle.Web/M3Undle.Web.csproj

@@ -21,19 +21,19 @@
   </ItemGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.AspNetCore.App.Internal.Assets" Version="10.0.3" PrivateAssets="all" />
-    <PackageReference Include="Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore" Version="10.0.0" />
-    <PackageReference Include="Microsoft.AspNetCore.Identity.EntityFrameworkCore" Version="10.0.0" />
-    <PackageReference Include="Microsoft.EntityFrameworkCore.Sqlite" Version="10.0.0" />
-    <PackageReference Include="Microsoft.EntityFrameworkCore.Tools" Version="10.0.0">
+    <PackageReference Include="Microsoft.AspNetCore.App.Internal.Assets" Version="10.0.6" PrivateAssets="all" />
+    <PackageReference Include="Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore" Version="10.0.6" />
+    <PackageReference Include="Microsoft.AspNetCore.Identity.EntityFrameworkCore" Version="10.0.6" />
+    <PackageReference Include="Microsoft.EntityFrameworkCore.Sqlite" Version="10.0.6" />
+    <PackageReference Include="Microsoft.EntityFrameworkCore.Tools" Version="10.0.6">
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
     </PackageReference>
-    <PackageReference Include="MudBlazor" Version="8.14.0" />
+    <PackageReference Include="MudBlazor" Version="9.3.0" />
     <PackageReference Include="Serilog.AspNetCore" Version="10.0.0" />
     <PackageReference Include="Serilog.Formatting.Compact" Version="3.0.0" />
     <PackageReference Include="Serilog.Sinks.File" Version="7.0.0" />
-    <PackageReference Include="YamlDotNet" Version="16.3.0" />
+    <PackageReference Include="YamlDotNet" Version="17.0.1" />
   </ItemGroup>
 
   <ItemGroup>

tests/M3Undle.Cli.Tests/M3Undle.Cli.Tests.csproj

@@ -7,7 +7,7 @@
     <ImplicitUsings>enable</ImplicitUsings>
   </PropertyGroup>
   <ItemGroup>
-    <PackageReference Include="MSTest" Version="4.0.2" />
+    <PackageReference Include="MSTest" Version="4.2.1" />
   </ItemGroup>
   <ItemGroup>
     <ProjectReference Include="..\..\src\M3Undle.Cli\M3Undle.Cli.csproj" />

tests/M3Undle.Web.Tests/M3Undle.Web.Tests.csproj

@@ -7,10 +7,10 @@
     <ImplicitUsings>enable</ImplicitUsings>
   </PropertyGroup>
   <ItemGroup>
-    <PackageReference Include="MSTest" Version="4.0.2" />
-    <PackageReference Include="Microsoft.AspNetCore.Mvc.Testing" Version="10.0.0" />
-    <PackageReference Include="Microsoft.Data.Sqlite" Version="10.0.0" />
-    <PackageReference Include="Microsoft.EntityFrameworkCore.Sqlite" Version="10.0.0" />
+    <PackageReference Include="MSTest" Version="4.2.1" />
+    <PackageReference Include="Microsoft.AspNetCore.Mvc.Testing" Version="10.0.6" />
+    <PackageReference Include="Microsoft.Data.Sqlite" Version="10.0.6" />
+    <PackageReference Include="Microsoft.EntityFrameworkCore.Sqlite" Version="10.0.6" />
   </ItemGroup>
   <ItemGroup>
     <ProjectReference Include="..\..\src\M3Undle.Web\M3Undle.Web.csproj" />