From 26c07c9d88090122d2da74a77469d57822c91b86 Mon Sep 17 00:00:00 2001
From: Keith Cully <2370032+K-Cully@users.noreply.github.com>
Date: Mon, 14 Aug 2023 15:27:40 +0100
Subject: [PATCH] Pin Moq to trustworthy version

---
 Directory.Packages.props | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/Directory.Packages.props b/Directory.Packages.props
index 8e576ea9..0da75852 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -29,7 +29,6 @@
     <PackageVersion Include="Microsoft.Net.Test.Sdk" Version="17.7.0" />
     <PackageVersion Include="Microsoft.SourceLink.AzureRepos.Git" Version="1.1.1" />
     <PackageVersion Include="Microsoft.SourceLink.GitHub" Version="1.1.1" />
-    <PackageVersion Include="Moq" Version="4.20.69" />
     <PackageVersion Include="Newtonsoft.Json" Version="13.0.3" />
     <PackageVersion Include="System.ComponentModel.Annotations" Version="5.0.0" />
     <PackageVersion Include="System.Diagnostics.DiagnosticSource" Version="7.0.2" />
@@ -46,4 +45,7 @@
     <PackageVersion Include="Microsoft.ServiceFabric.Services.Remoting" Version="6.1.1833" />
     <PackageVersion Include="ServiceFabric.Mocks" Version="6.2.4" />
   </ItemGroup>
+  <ItemGroup Label="Moq pinned to 4.18.4 until SponsorLink is fully removed and new versions are deemed trustworty">
+    <PackageVersion Include="Moq" Version="4.18.4" />
+  </ItemGroup>
 </Project>