From d51a2d1c3c4798c819be4a0eaf6d9df5a453a91e Mon Sep 17 00:00:00 2001
From: Elin Fokine <elin.fokine@activesolution.se>
Date: Fri, 9 Oct 2026 17:11:34 +0200
Subject: [PATCH] Remove unused AutoFixture reference from AspNetCore.Test

AutoFixture was not used in ActiveLogin.Authentication.BankId.AspNetCore.Test.
It pulled in Fare -> NETStandard.Library 1.6.1 -> System.Net.Http 4.3.0,
which is flagged as a high severity vulnerability.

Removing the reference clears the transitive dependency from all projects
in the solution. AutoFixture is still used in
ActiveLogin.Authentication.BankId.Api.Test.
---
 .../ActiveLogin.Authentication.BankId.AspNetCore.Test.csproj     | 1 -
 1 file changed, 1 deletion(-)

diff --git a/test/ActiveLogin.Authentication.BankId.AspNetCore.Test/ActiveLogin.Authentication.BankId.AspNetCore.Test.csproj b/test/ActiveLogin.Authentication.BankId.AspNetCore.Test/ActiveLogin.Authentication.BankId.AspNetCore.Test.csproj
index 60216cdf..4cda77ef 100644
--- a/test/ActiveLogin.Authentication.BankId.AspNetCore.Test/ActiveLogin.Authentication.BankId.AspNetCore.Test.csproj
+++ b/test/ActiveLogin.Authentication.BankId.AspNetCore.Test/ActiveLogin.Authentication.BankId.AspNetCore.Test.csproj
@@ -6,7 +6,6 @@
 
     <ItemGroup>
         <PackageReference Include="AngleSharp" Version="1.8.4" />
-        <PackageReference Include="AutoFixture" Version="4.18.1" />
         <PackageReference Include="Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation" Version="10.0.12" />
         <PackageReference Include="Microsoft.AspNetCore.Mvc.Testing" Version="10.0.12" />
         <PackageReference Include="Microsoft.AspNetCore.TestHost" Version="10.0.12" />