Pin SQLitePCLRaw.lib.e_sqlite3 to fix GHSA-2m69-gcr7-jv3q

[jas88]

Summary

Microsoft.Data.Sqlite transitively pulls in SQLitePCLRaw.lib.e_sqlite3 2.1.11, which carries a known high-severity SQLite vulnerability (GHSA-2m69-gcr7-jv3q). With TreatWarningsAsErrors, this fails CI via NU1903.

Fix

• Pin SQLitePCLRaw.lib.e_sqlite3 to 3.50.3 (first non-vulnerable native build) in Directory.Packages.props.
• Add a direct, versionless PackageReference in SharpDicom.csproj so the CPM pin actually applies to the transitive dependency — matching the existing SharpCompress/Snappier pinning pattern in SharpDicom.MongoDB.

Notes

• The bundle's dependency range on the native lib is open-ended [2.1.11, ), so the bump introduces no NU1605/NU1608 downgrade or conflict warnings.
• The native SQLite ABI is stable, so the 3.50.3 native binary works with the existing 2.1.11 managed core/provider.
• Verified dotnet restore is clean with no NU1903.

---

Summary by cubic

Pins the native SQLite package to a safe version to address GHSA-2m69-gcr7-jv3q and fix CI failures from NU1903. Ensures the pin applies to the transitive dependency pulled by Microsoft.Data.Sqlite.

• Dependencies
  • Pin SQLitePCLRaw.lib.e_sqlite3 to 3.50.3 in Directory.Packages.props.
  • Add a versionless PackageReference to SQLitePCLRaw.lib.e_sqlite3 in SharpDicom.csproj so the pin applies to the transitive dep from Microsoft.Data.Sqlite.

^{Written for commit 388c7b8. Summary will update on new commits.}

[cubic-dev-ai]

No issues found across 2 files

_{Re-trigger cubic}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 65.64%. Comparing base (5d91057) to head (388c7b8).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #116      +/-   ##
==========================================
- Coverage   65.65%   65.64%   -0.01%     
==========================================
  Files         337      337              
  Lines       30420    30420              
  Branches     5710     5710              
==========================================
- Hits        19971    19970       -1     
- Misses       9031     9033       +2     
+ Partials     1418     1417       -1     

Flag	Coverage Δ
unittests	65.64% <ø> (-0.01%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.