Bump the system group across 1 directory with 3 updates

Bumps the system group with 3 updates in the / directory: [System.Diagnostics.DiagnosticSource](https://github.com/dotnet/runtime), [Microsoft.NETFramework.ReferenceAssemblies](https://github.com/Microsoft/dotnet) and [System.ComponentModel.Composition](https://github.com/dotnet/runtime).


Updates `System.Diagnostics.DiagnosticSource` from 6.0.0 to 9.0.1
- [Release notes](https://github.com/dotnet/runtime/releases)
- [Commits](dotnet/runtime@v6.0.0...v9.0.1)

Updates `Microsoft.NETFramework.ReferenceAssemblies` from 1.0.3 to 1.0.3
- [Commits](https://github.com/Microsoft/dotnet/commits)

Updates `System.ComponentModel.Composition` from 6.0.0 to 9.0.1
- [Release notes](https://github.com/dotnet/runtime/releases)
- [Commits](dotnet/runtime@v6.0.0...v9.0.1)

Updates `Microsoft.NETFramework.ReferenceAssemblies` from 1.0.3 to 1.0.3
- [Commits](https://github.com/Microsoft/dotnet/commits)

---
updated-dependencies:
- dependency-name: System.Diagnostics.DiagnosticSource
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: system
- dependency-name: Microsoft.NETFramework.ReferenceAssemblies
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: system
- dependency-name: System.ComponentModel.Composition
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: system
- dependency-name: Microsoft.NETFramework.ReferenceAssemblies
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: system
...

Signed-off-by: dependabot[bot] <[email protected]>

Author: dependabot[bot]

src/Directory.Packages.props

@@ -15,18 +15,18 @@
     <PackageVersion Include="OpenTelemetry.Exporter.Zipkin" Version="1.3.1" />
     <PackageVersion Include="Spectre.Console" Version="0.45.0" />
     <PackageVersion Include="System.Composition.AttributedModel" Version="6.0.0" />
-    <PackageVersion Include="System.Diagnostics.DiagnosticSource" Version="6.0.0" />
+    <PackageVersion Include="System.Diagnostics.DiagnosticSource" Version="9.0.1" />
     <PackageVersion Include="ThisAssembly.Project" Version="1.3.0" />
     <PackageVersion Include="Microsoft.CSharp" Version="4.7.0" />
     <PackageVersion Include="Microsoft.CodeAnalysis.CSharp" Version="4.2.0" />
     <PackageVersion Include="Microsoft.CodeAnalysis.Workspaces.Common" Version="4.2.0" />
     <PackageVersion Include="Microsoft.CodeAnalysis.PublicApiAnalyzers" Version="3.3.4" />
     <PackageVersion Include="Microsoft.Extensions.DependencyInjection" Version="8.0.0" />
     <PackageVersion Include="Microsoft.Extensions.DependencyInjection.Abstractions" Version="6.0.0" />
-    <PackageVersion Include="Microsoft.VisualStudio.Composition" Version="17.2.41" />
+    <PackageVersion Include="Microsoft.VisualStudio.Composition" Version="17.11.13" />
     <PackageVersion Include="Microsoft.VisualStudio.Shell.Framework" Version="17.3.32804.24" />
     <PackageVersion Include="Microsoft.VisualStudio.ComponentModelHost" Version="17.3.198" />
-    <PackageVersion Include="System.ComponentModel.Composition" Version="6.0.0" />
+    <PackageVersion Include="System.ComponentModel.Composition" Version="9.0.1" />
     <PackageVersion Include="PolySharp" Version="1.13.2" />
     <PackageVersion Include="SharpYaml" Version="2.1.0" />
     <PackageVersion Include="Scriban" Version="5.5.0" />