From 0e7fdcd6844565637b93b4c2935be45617b5a64c Mon Sep 17 00:00:00 2001
From: Yordis Prieto <yordis.prieto@gmail.com>
Date: Sun, 8 Nov 2026 02:26:17 -0500
Subject: [PATCH 1/2] fix(deps): patch System.Security.Cryptography advisories

New Pkcs and Xml advisories fail restore under warnings-as-errors, blocking every pull request.

Signed-off-by: Yordis Prieto <yordis.prieto@gmail.com>
---
 src/Directory.Packages.props                                  | 4 ++--
 .../EventStore.SourceGenerators.Tests.csproj                  | 1 +
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/src/Directory.Packages.props b/src/Directory.Packages.props
index 9eb964ba0..1db3a626e 100644
--- a/src/Directory.Packages.props
+++ b/src/Directory.Packages.props
@@ -78,8 +78,8 @@
     <PackageVersion Include="System.CommandLine.DragonFruit" Version="0.4.0-alpha.25306.1" />
     <PackageVersion Include="System.ComponentModel.Composition" Version="10.0.10" />
     <PackageVersion Include="System.Diagnostics.PerformanceCounter" Version="10.0.10" />
-    <PackageVersion Include="System.Security.Cryptography.Pkcs" Version="10.0.10" />
-    <PackageVersion Include="System.Security.Cryptography.Xml" Version="10.0.10" />
+    <PackageVersion Include="System.Security.Cryptography.Pkcs" Version="10.0.14" />
+    <PackageVersion Include="System.Security.Cryptography.Xml" Version="10.0.14" />
     <PackageVersion Include="System.ServiceModel.Http" Version="10.0.652802" />
     <PackageVersion Include="TrogonEventStore.Plugins" Version="24.10.10" />
     <PackageVersion Include="xunit" Version="2.9.3" />
diff --git a/src/EventStore.SourceGenerators.Tests/EventStore.SourceGenerators.Tests.csproj b/src/EventStore.SourceGenerators.Tests/EventStore.SourceGenerators.Tests.csproj
index 9677b5fab..a8beea26a 100644
--- a/src/EventStore.SourceGenerators.Tests/EventStore.SourceGenerators.Tests.csproj
+++ b/src/EventStore.SourceGenerators.Tests/EventStore.SourceGenerators.Tests.csproj
@@ -31,6 +31,7 @@
 		<PackageReference Include="Microsoft.NET.Test.Sdk" />
 		<PackageReference Include="Newtonsoft.Json" />
 		<PackageReference Include="NuGet.Protocol" />
+		<PackageReference Include="System.Security.Cryptography.Pkcs" />
 		<PackageReference Include="xunit" />
 		<PackageReference Include="xunit.runner.visualstudio">
 			<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>

From 53b231be4e7b829fa259355dae1ea31bb94f7c86 Mon Sep 17 00:00:00 2001
From: Yordis Prieto <yordis.prieto@gmail.com>
Date: Sun, 8 Nov 2026 09:11:11 -0500
Subject: [PATCH 2/2] fix(container): give the node user a home so named
 mutexes can be created

The .NET 10 runtime keeps named mutex state under the user's home
directory. The image created the eventstore user without one, so every
node exited at startup with an IOException from the database lock.
Creating the home directory lets the lock be acquired again.

Signed-off-by: Yordis Prieto <yordis.prieto@gmail.com>
---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index edbfe3228..87fcc78bd 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -69,7 +69,7 @@ WORKDIR /opt/eventstore
 
 RUN groupadd -g ${GID} "eventstore" && \
     useradd \
-    --no-create-home \
+    --create-home \
     --uid ${UID} \
     --gid "eventstore" \
     "eventstore"