Skip to content

Bump SkiaSharp and Svg.Skia#4482

Closed
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/nuget/Plugins/Flow.Launcher.Plugin.BrowserBookmark/multi-1267e7a02e
Closed

Bump SkiaSharp and Svg.Skia#4482
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/nuget/Plugins/Flow.Launcher.Plugin.BrowserBookmark/multi-1267e7a02e

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 21, 2026

Updated SkiaSharp from 3.119.1 to 3.119.2.

Updated Svg.Skia from 4.6.0 to 4.9.1.

Release notes

Sourced from Svg.Skia's releases.

4.9.1

What's Changed

Full Changelog: wieslawsoltes/Svg.Skia@v4.9.0...v4.9.1

4.9.0

What's Changed

Full Changelog: wieslawsoltes/Svg.Skia@v4.8.0...v4.9.0

4.8.0

What's Changed

Full Changelog: wieslawsoltes/Svg.Skia@v4.7.0...v4.8.0

4.7.0

What's Changed

Full Changelog: wieslawsoltes/Svg.Skia@v4.6.0...v4.7.0

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by cubic

Upgrades the BrowserBookmark plugin to use newer graphics libraries for better SVG rendering stability and minor performance gains.
Bumps SkiaSharp to 3.119.2 and Svg.Skia to 4.9.1.

Summary of changes

  • Existing logic changed: Project now builds against SkiaSharp 3.119.2 and Svg.Skia 4.9.1; SVG rendering benefits from upstream fixes (e.g., deferred font manager init, gradient/filter tweaks) without app code changes.
  • New logic added: None in our code. Upstream adds SVG/CSS features (e.g., CSS var(), mix-blend-mode) available if used.
  • Existing logic removed: None.
  • Memory usage impacts: Likely lower peaks during font handling due to deferred font manager initialization; no expected increases.
  • Security risks: Low risk. Depends on patched, maintained versions; no new permissions or attack surface introduced.
  • Unit tests: No new tests. Existing tests should continue to pass; do a quick smoke test for SVG bookmark icons.

Release Note
Updated graphics libraries to improve reliability and performance of SVG bookmark icons.

Written for commit 15a6168. Summary will update on new commits. Review in cubic

Bumps SkiaSharp from 3.119.1 to 3.119.2
Bumps Svg.Skia from 4.6.0 to 4.9.1

---
updated-dependencies:
- dependency-name: SkiaSharp
  dependency-version: 3.119.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: Svg.Skia
  dependency-version: 4.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels May 21, 2026
@github-actions github-actions Bot added this to the 2.2.0 milestone May 21, 2026
Copy link
Copy Markdown
Contributor

@cubic-dev-ai cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 1 file

Re-trigger cubic

@Jack251970 Jack251970 closed this May 21, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 21, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/nuget/Plugins/Flow.Launcher.Plugin.BrowserBookmark/multi-1267e7a02e branch May 21, 2026 03:44
Copy link
Copy Markdown
Member

@Jack251970 Jack251970 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The size of the installation package seems to have increased significantly

@Jack251970 Jack251970 removed this from the 2.2.0 milestone May 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant