fix: ci pr-checks failure by pinning incompatible dependency upgrades

[dependabot]

Description

Pins dependency versions that broke the CI / pr-checks (pull_request) build after the dependency bump.

Related Issue

N/A

Type of Change

• Bug fix (non-breaking change that fixes an issue)
• New feature (non-breaking change that adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• Documentation update
• Dependency update

Checklist

• My code follows the project's coding standards (.editorconfig)
• I have added/updated XML doc comments for public APIs
• I have added tests that cover my changes
• All new and existing tests pass (dotnet test)
• The solution builds with zero warnings (dotnet build)
• I have updated the documentation if needed
• For docs/README changes, I added or refreshed screenshots/GIFs where they improve clarity

Testing

• Ran dotnet restore JD.AI.slnx
• Ran dotnet build JD.AI.slnx --configuration Release --no-restore /p:ContinuousIntegrationBuild=true (passes)
• Ran dotnet format JD.AI.slnx --severity warn --verify-no-changes (passes)
• Ran filtered CI-equivalent tests:
  dotnet test JD.AI.slnx --configuration Release --no-build --filter "Category!=Integration&Category!=MlModel&Category!=FlakyEnvironment&Category!=E2E"

Screenshots / Logs

Root causes identified from Actions job 81173067784:

• MudBlazor upgrade to 9.5.0 caused compile-time API incompatibilities in dashboard Razor components.
• SixLabors.ImageSharp upgrade to 4.0.0 triggered license enforcement error in CI build.

Fix implemented:

• Pin MudBlazor to 8.5.1
• Pin SixLabors.ImageSharp to 3.1.12

[github-actions]

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 3 package(s) with unknown licenses.

See the Details below.

License Issues

src/JD.AI.Plugins.SDK/JD.AI.Plugins.SDK.csproj

Package	Version	License	Issue Type
Microsoft.Extensions.DependencyInjection	>= 0	Null	Unknown License
Microsoft.Extensions.Hosting.Abstractions	>= 0	Null	Unknown License

src/JD.AI.Telemetry/JD.AI.Telemetry.csproj

Package	Version	License	Issue Type
Microsoft.Extensions.DependencyInjection	>= 0	Null	Unknown License

Denied Licenses:

GPL-2.0, GPL-3.0, AGPL-3.0

OpenSSF Scorecard

Package	Version	Score	Details
nuget/Microsoft.Extensions.DependencyInjection	>= 0	Unknown	Unknown
nuget/Microsoft.Extensions.Hosting.Abstractions	>= 0	Unknown	Unknown
nuget/Microsoft.Extensions.DependencyInjection	>= 0	Unknown	Unknown

Scanned Files

• src/JD.AI.Plugins.SDK/JD.AI.Plugins.SDK.csproj
• src/JD.AI.Telemetry/JD.AI.Telemetry.csproj

[github-actions]

Test Results

7 641 tests   7 622 ✅  2m 20s ⏱️
    7 suites     19 💤
    7 files        0 ❌

Results for commit 79836a2.

♻️ This comment has been updated with latest results.

[github-actions]

Code Coverage

Summary
  Generated on: 06/13/2026 - 16:15:55
  Coverage date: 06/13/2026 - 16:13:43 - 06/13/2026 - 16:15:46
  Parser: MultiReport (7x Cobertura)
  Assemblies: 23
  Classes: 1067
  Files: 591
  Line coverage: 74.7%
  Covered lines: 36879
  Uncovered lines: 12433
  Coverable lines: 49312
  Total lines: 97270
  Branch coverage: 61.9% (13936 of 22510)
  Covered branches: 13936
  Total branches: 22510
  Method coverage: 86.4% (6320 of 7308)
  Full method coverage: 74.2% (5428 of 7308)
  Covered methods: 6320
  Fully covered methods: 5428
  Total methods: 7308