Merge pull request #9 from yetanalytics/cve_check

- updated .NET dependencies from 6.0.0 to 10.0.x with latest security patches
- fixed semantics related to the 10.0.x bump
- added dependabot config for CVE scans
- Bumped the version from 1.1.0 to 1.1.1

Author: deathtenk

.github/workflows/dependabot.yml

@@ -0,0 +1,9 @@
+version: 2
+updates:
+  - package-ecosystem: "nuget"
+    directory: "/"
+    schedule:
+      interval: "daily"
+      time: "03:00"
+      timezone: "UTC"
+    open-pull-requests-limit: 5

.gitignore

@@ -1,2 +1,7 @@
 /Assets/Plugins/.signature.p7s
 /Assets/UnityXapiPublisher/Runtime/.vscode
+reports
+reports.meta
+.clj-kondo
+.lsp
+.vscode

Assemblies/Microsoft.Bcl.AsyncInterfaces.dll

@@ -2,14 +2,14 @@
 <configuration>
     <packageSources>
        <clear/>
-       <add key="NuGet" value="http://www.nuget.org/api/v2/" />
+       <add key="NuGet" value="https://api.nuget.org/v3/index.json" />
     </packageSources>
     <disabledPackageSources />
     <activePackageSource>
        <add key="All" value="(Aggregate source)" />
     </activePackageSource>
     <config>
        <add key="repositoryPath" value="./Packages" />
-       <add key="DefaultPushSource" value="http://www.nuget.org/api/v2/" />
+       <add key="DefaultPushSource" value="https://www.nuget.org/api/v2/package" />
     </config>
 </configuration>