Add SQLitePCLRaw.bundle_e_sqlite3 to address CVE-2025-6965 vulnerability

Author: HandyS11

Directory.Packages.props

@@ -15,6 +15,10 @@
     <PackageVersion Include="RustPlusApi.Fcm" Version="2.0.0-beta.1" />
     <PackageVersion Include="SixLabors.ImageSharp" Version="3.1.12" />
     <PackageVersion Include="SixLabors.ImageSharp.Drawing" Version="2.1.7" />
+    <!-- Pinned to override the transitive 2.1.11 pulled by Microsoft.EntityFrameworkCore.Sqlite,
+         whose bundled SQLite is vulnerable to CVE-2025-6965 (GHSA-2m69-gcr7-jv3q). 3.0.x bundles
+         SQLite >= 3.50.2. Drop once EF Core ships a build that depends on a patched SQLitePCLRaw. -->
+    <PackageVersion Include="SQLitePCLRaw.bundle_e_sqlite3" Version="3.0.3" />
   </ItemGroup>
   <ItemGroup>
     <!-- Test + sample -->

NOTICE

@@ -11,6 +11,9 @@
       <PrivateAssets>all</PrivateAssets>
     </PackageReference>
     <PackageReference Include="Microsoft.EntityFrameworkCore.Sqlite" />
+    <!-- Direct reference forces the patched SQLitePCLRaw 3.0.x graph over the transitive 2.1.11
+         from EF Core Sqlite (CVE-2025-6965). Flows to all DB-touching projects via this one. -->
+    <PackageReference Include="SQLitePCLRaw.bundle_e_sqlite3" />
     <PackageReference Include="Persistord.Core" />
   </ItemGroup>