Skip to content

chore(deps): Bump the nuget-dependencies group with 18 updates#77

Merged
JerrettDavis merged 1 commit into
mainfrom
dependabot/nuget/src/StableDiffusionStudio.Application/nuget-dependencies-5a57360b74
Jul 21, 2026
Merged

chore(deps): Bump the nuget-dependencies group with 18 updates#77
JerrettDavis merged 1 commit into
mainfrom
dependabot/nuget/src/StableDiffusionStudio.Application/nuget-dependencies-5a57360b74

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Updated Magick.NET-Q16-AnyCPU from 14.14.0 to 14.15.0.

Release notes

Sourced from Magick.NET-Q16-AnyCPU's releases.

14.15.0

What's Changed

  • Add PingAsync to MagickImage and MagickImageCollection (#​2032).
  • Added ImportIndexedPixels to MagickImage (#​2040)

Related changes in ImageMagick since the last release of Magick.NET:

  • Stack Overflow in MVG decoder due to missing depth check (GHSA-mx48-2qq3-23hf)
  • Heap Buffer Overflow in ImageMagick MVG decoder (GHSA-wx47-rm3x-jx6p)
  • Policy Bypass due to an incomplete fix of CVE-2026-49219 (GHSA-56m6-8q75-f2rw)
  • Infinite Loop in connected-components when providing invalid arguments (GHSA-qhmf-7fc4-8q3h)
  • Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments (GHSA-c4v7-w88g-m6c4)
  • Policy Bypass in concatenate operation due to missing checks (GHSA-82mp-vp5c-9pf7)
  • Use-After-Free in crafted 8BIM when identifying an image (GHSA-ff5c-8x9r-8qcw)
  • Information Disclosure in MNG decoder because allocated memory is left unchanged (GHSA-8g53-9m3c-69xg)
  • Heap Buffer Over-Read in XCF decoder due to integer conversion overflow (GHSA-pjxj-pchx-4c3m)
  • Heap Buffer Over-Write in morphology operation when an invalid kernel is provided (GHSA-7rgw-xg25-prjm)
  • Heap Buffer Over-Read in BGR decoder due to mising end-of-file check (GHSA-7rgw-xg25-prjm)
  • Heap Buffer Over-Write in fx operation (GHSA-422r-8c97-xcg4)
  • Integer Overflow in JNX decoder causes heap buffer over-write when processing extremely large files on 32-bit builds (GHSA-h22j-f9xw-xjjm)

Library updates:

  • ImageMagick 7.1.2-27 (2026-07-05)
  • libde265 1.1.1 (2026-06-03)
  • openexr 3.4.13 (2026-06-19)
  • libffi 3.6.0 (2026-06-20)
  • fontconfig 2.18.1 (2026-06-02)
  • gdk-pixbuf 2.44.7 (2026-06-27)
  • harfbuzz 14.2.1 (2026-06-02)
  • libheif 1.23.1 (2026-06-26)
  • libjxl 0.12.0 (2026-07-01)
  • openjph 0.30.1 (2026-06-22)
  • libtiff 4.7.2 (2026-06-26)

Full Changelog: dlemstra/Magick.NET@14.14.0...14.15.0

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.SignalR.Client from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.AspNetCore.SignalR.Client's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Data.Sqlite from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Data.Sqlite's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Sqlite from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Sqlite's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Hosting.Abstractions from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Hosting.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Http.Resilience from 10.7.0 to 10.8.0.

Release notes

Sourced from Microsoft.Extensions.Http.Resilience's releases.

10.8.0

This release adds new experimental APIs to Microsoft.Extensions.AI.Abstractions and updates the OpenAI dependency to 2.12.0, alongside documentation, test, and repository maintenance.

Experimental API Changes

New Experimental APIs

  • New experimental API: AIFunctionNameAttribute and AIParameterNameAttribute #​7610 by @​jozkee (co-authored by @​jeffhandley @​Copilot)
  • New experimental API: ToolApprovalRequestContent.RequiresConfirmation (MEAI001) #​7549 by @​javiercn (co-authored by @​Copilot)

What's Changed

AI

  • Upgrade OpenAI dependency to 2.12.0 #​7608 by @​jozkee (co-authored by @​Copilot)
  • Auto-detect audio format in OpenAISpeechToTextClient #​7575 by @​jozkee (co-authored by @​Copilot)
  • Fix ImageGeneratingChatClient duplicating preceding content and dropping following content #​7624 by @​jozkee (co-authored by @​Copilot)

Vector Data

  • Make all test methods virtual in VectorData.ConformanceTests #​7606 by @​adamsitnik (co-authored by @​Copilot)

Documentation Updates

  • Remove links to ai-samples repo #​7574 by @​gewarren
  • Fix up docs with Copilot (MEVD) #​7597 by @​gewarren
  • Fix up docs with Copilot (M.E.ServiceDiscovery) #​7598 by @​gewarren (co-authored by @​Copilot)
  • Fix up docs with Copilot (MEAI) #​7600 by @​gewarren
  • Fix up docs with Copilot #​7601 by @​gewarren

Test Improvements

  • Fix flaky StampedeTests and harden related test waits #​7572 by @​jeffhandley (co-authored by @​Copilot)
  • Fix SQLitePCLRaw.lib.e_sqlite3 vulnerability by replacing SemanticKernel connectors with CommunityToolkit #​7579 by @​adamsitnik (co-authored by @​Copilot)
  • Removing SemanticKernel Connectors dependency and replacing it #​7584 by @​adamsitnik (co-authored by @​Copilot)
  • Migrate to xUnit v3 #​7607 by @​adamsitnik (co-authored by @​shyamnamboodiripad @​Copilot)

Repository Infrastructure Updates

  • Update OTel GenAI conventions skill for standalone semconv-genai repo #​7519 by @​jeffhandley (co-authored by @​Copilot)
  • Bump dotnet-coverage from 18.7.0 to 18.8.0 #​7552
  • [main] Update dependencies from dotnet/arcade #​7559
  • Fix transitive MessagePack vulnerability in AI template AppHost projects #​7561 by @​adamsitnik (co-authored by @​Copilot)
  • Bump esbuild, @​vitejs/plugin-react and vite in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7564
  • Bump tmp from 0.2.6 to 0.2.7 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7569
  • Bump js-yaml from 4.1.1 to 4.2.0 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7570
  • Bump PowerShell from 7.6.2 to 7.6.3 #​7576
  • Remove duplicate 'WebAPI' classification from template #​7577 by @​danroth27
  • [main] Update dependencies from dotnet/arcade #​7590
  • Eliminate redundant Correctness CI stage by merging into Build #​7594 by @​adamsitnik (co-authored by @​Copilot)
  • Update Agent Framework to 1.13.0 #​7613 by @​jeffhandley (co-authored by @​Copilot)
    ... (truncated)

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Abstractions from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.ServiceDiscovery from 10.7.0 to 10.8.0.

Release notes

Sourced from Microsoft.Extensions.ServiceDiscovery's releases.

10.8.0

This release adds new experimental APIs to Microsoft.Extensions.AI.Abstractions and updates the OpenAI dependency to 2.12.0, alongside documentation, test, and repository maintenance.

Experimental API Changes

New Experimental APIs

  • New experimental API: AIFunctionNameAttribute and AIParameterNameAttribute #​7610 by @​jozkee (co-authored by @​jeffhandley @​Copilot)
  • New experimental API: ToolApprovalRequestContent.RequiresConfirmation (MEAI001) #​7549 by @​javiercn (co-authored by @​Copilot)

What's Changed

AI

  • Upgrade OpenAI dependency to 2.12.0 #​7608 by @​jozkee (co-authored by @​Copilot)
  • Auto-detect audio format in OpenAISpeechToTextClient #​7575 by @​jozkee (co-authored by @​Copilot)
  • Fix ImageGeneratingChatClient duplicating preceding content and dropping following content #​7624 by @​jozkee (co-authored by @​Copilot)

Vector Data

  • Make all test methods virtual in VectorData.ConformanceTests #​7606 by @​adamsitnik (co-authored by @​Copilot)

Documentation Updates

  • Remove links to ai-samples repo #​7574 by @​gewarren
  • Fix up docs with Copilot (MEVD) #​7597 by @​gewarren
  • Fix up docs with Copilot (M.E.ServiceDiscovery) #​7598 by @​gewarren (co-authored by @​Copilot)
  • Fix up docs with Copilot (MEAI) #​7600 by @​gewarren
  • Fix up docs with Copilot #​7601 by @​gewarren

Test Improvements

  • Fix flaky StampedeTests and harden related test waits #​7572 by @​jeffhandley (co-authored by @​Copilot)
  • Fix SQLitePCLRaw.lib.e_sqlite3 vulnerability by replacing SemanticKernel connectors with CommunityToolkit #​7579 by @​adamsitnik (co-authored by @​Copilot)
  • Removing SemanticKernel Connectors dependency and replacing it #​7584 by @​adamsitnik (co-authored by @​Copilot)
  • Migrate to xUnit v3 #​7607 by @​adamsitnik (co-authored by @​shyamnamboodiripad @​Copilot)

Repository Infrastructure Updates

  • Update OTel GenAI conventions skill for standalone semconv-genai repo #​7519 by @​jeffhandley (co-authored by @​Copilot)
  • Bump dotnet-coverage from 18.7.0 to 18.8.0 #​7552
  • [main] Update dependencies from dotnet/arcade #​7559
  • Fix transitive MessagePack vulnerability in AI template AppHost projects #​7561 by @​adamsitnik (co-authored by @​Copilot)
  • Bump esbuild, @​vitejs/plugin-react and vite in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7564
  • Bump tmp from 0.2.6 to 0.2.7 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7569
  • Bump js-yaml from 4.1.1 to 4.2.0 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7570
  • Bump PowerShell from 7.6.2 to 7.6.3 #​7576
  • Remove duplicate 'WebAPI' classification from template #​7577 by @​danroth27
  • [main] Update dependencies from dotnet/arcade #​7590
  • Eliminate redundant Correctness CI stage by merging into Build #​7594 by @​adamsitnik (co-authored by @​Copilot)
  • Update Agent Framework to 1.13.0 #​7613 by @​jeffhandley (co-authored by @​Copilot)
    ... (truncated)

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.7.0 to 18.8.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.8.1

What's Changed

Full Changelog: microsoft/vstest@v18.8.0...v18.8.1

18.8.0

What's Changed

Full Changelog: microsoft/vstest@v18.7.0...v18.8.0

Commits viewable in compare view.

Updated NSubstitute from 5.3.0 to 6.0.0.

Release notes

Sourced from NSubstitute's releases.

6.0.0

ℹ️ No changes from Release Candidate 1.

NSubstitute v6.0.0

From RC1 notes:

  • [NEW] ArgMatchers.Matching predicate matcher as an alternative to Is(Expression<Predicate<T>>. (.NET6 and above.)
  • [UPDATE] Improved support for custom argument matchers. Arg.Is now accepts arg matchers.
  • [UPDATE][BREAKING] Update target frameworks: .NET8, .NET Standard 2.0
  • [UPDATE][BREAKING] Remove legacy obsolete API
  • [UPDATE][BREAKING] Mark as obsolete api CompatArg with pre c# 7.0 support
  • [UPDATE][BREAKING] Nullability is enabled for public api for .NET 8+ TFMs
  • [UPDATE] Migrate documentation to docfx platform and update samples to NUnit 4
  • [NEW] Added NuGet Package README file.

Full change list

6.0.0-rc.1

NSubstitute v6.0.0 Release Candidate 1

Due to the large number of changes in this release, we wanted to start with a release candidate to ensure we've correctly captured breaking changes.

  • [NEW] ArgMatchers.Matching predicate matcher as an alternative to Is(Expression<Predicate<T>>. (.NET6 and above.)
  • [UPDATE] Improved support for custom argument matchers. Arg.Is now accepts arg matchers.
  • [UPDATE][BREAKING] Update target frameworks: .NET8, .NET Standard 2.0
  • [UPDATE][BREAKING] Remove legacy obsolete API
  • [UPDATE][BREAKING] Mark as obsolete api CompatArg with pre c# 7.0 support
  • [UPDATE][BREAKING] Nullability is enabled for public api for .NET 8+ TFMs
  • [UPDATE] Migrate documentation to docfx platform and update samples to NUnit 4
  • [NEW] Added NuGet Package README file.

Full change list

Commits viewable in compare view.

Updated OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.16.0 to 1.17.0.

Release notes

Sourced from OpenTelemetry.Exporter.OpenTelemetryProtocol's releases.

1.17.0

For highlights and announcements pertaining to this release see: Release Notes > 1.17.0.

The following changes are from the previous release 1.17.0-rc.1.

... (truncated)

1.17.0-rc.1

The following changes are from the previous release 1.16.0.

  • NuGet: OpenTelemetry v1.17.0-rc.1

    • Fixed a metric point reclaim data race on CPU ARM architectures.
      (#​7401)

    • The library is now marked as trim and AOT compatible.
      (#​7441)

    • Replaced the vendored copy of
      EnvironmentVariablesConfigurationProvider with a direct
      Microsoft.Extensions.Configuration.EnvironmentVariables package dependency.
      Consumers gain automatic pickup of upstream bug fixes and security patches;
      no public API or behavioural change.
      (#​7146)

    • Added a verbose OpenTelemetry-Sdk self-diagnostics event that is emitted
      when an activity is dropped because its local (in-process) parent is not
      recorded.
      (#​7427)

    • Added support for a Schema URL on Resource instances.
      (#​7472)

    • Fixed a metric storage leak that occurred when meters and instruments were
      repeatedly created and disposed.
      (#​7466)

    • Added ExcludedTagKeys property to MetricStreamConfiguration to support
      excluding specific tag keys from metric streams.
      (#​7373)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api v1.17.0-rc.1

    • Fixed TraceContextPropagator to normalize empty tracestate header values
      to null when extracting trace context.
      (#​7407,
      #​7433)

    • The library is now marked as trim and AOT compatible.
      (#​7441)

    • Experimental (pre-release builds only): Updated EnvironmentVariableCarrier.Get
      to read only the normalized environment variable name, following the updated
      environment variable carrier specification.
      Non-normalized carrier keys are no longer matched, even when they would
      normalize to the requested key.
      ... (truncated)

1.17.0-beta.1

The following changes are from the previous release 1.16.0-beta.1.

  • NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.17.0-beta.1

    • Added a verbose-level diagnostic event for ignored metrics.
      (#​7429)

    • The library is now marked as trim and AOT compatible.
      (#​7441)

    • Fix double unit suffixes in metric names when using OpenMetrics.
      (#​7454)

    • Fix incorrect handling of leading digits in metric names for OpenMetrics.
      (#​7454)

    • Add PrometheusAspNetCoreOptions.ScopeInfoEnabled property to enable or
      disable scope labels in Prometheus metrics. Defaults to true.
      (#​7436)

    • Added support for the dots and values Prometheus UTF-8 name escaping
      schemes when negotiated via the Accept header.
      (#​7439)

    • Add PrometheusAspNetCoreOptions.TargetInfoEnabled property to enable or
      disable the target_info metric in Prometheus metrics. Defaults to true.
      (#​7438)

    • Added support for the allow-utf-8 Prometheus UTF-8 name escaping scheme
      when negotiated via the Accept header.
      (#​7440)

    • Add PrometheusAspNetCoreOptions.ResourceConstantLabels property to select
      resource attributes to add to each metric as constant labels. Defaults to
      null (no resource attributes are added as metric labels).
      (#​7471)

    • Add PrometheusAspNetCoreOptions.MaxScrapeResponseSizeBytes to configure
      the maximum size of a scrape response. The default is now ~166 MiB.
      (#​7487)

    • A scrape whose serialized output exceeds the maximum scrape response size
      limit now responds with HTTP 500.
      (#​7487)

    • Fixed the Prometheus text exposition format emitting redundant comments.
      (#​7491)

    • Made Accept header content negotiation consistent with the
      PrometheusHttpListener endpoint.
      ... (truncated)

Commits viewable in compare view.

Updated OpenTelemetry.Extensions.Hosting from 1.16.0 to 1.17.0.

Release notes

Sourced from OpenTelemetry.Extensions.Hosting's releases.

1.17.0

For highlights and announcements pertaining to this release see: Release Notes > 1.17.0.

The following changes are from the previous release 1.17.0-rc.1.

... (truncated)

1.17.0-rc.1

The following changes are from the previous release 1.16.0.

  • NuGet: OpenTelemetry v1.17.0-rc.1

    • Fixed a metric point reclaim data race on CPU ARM architectures.
      (#​7401)

    • The library is now marked as trim and AOT compatible.
      (#​7441)

    • Replaced the vendored copy of
      EnvironmentVariablesConfigurationProvider with a direct
      Microsoft.Extensions.Configuration.EnvironmentVariables package dependency.
      Consumers gain automatic pickup of upstream bug fixes and security patches;
      no public API or behavioural change.
      (#​7146)

    • Added a verbose OpenTelemetry-Sdk self-diagnostics event that is emitted
      when an activity is dropped because its local (in-process) parent is not
      recorded.
      (#​7427)

    • Added support for a Schema URL on Resource instances.
      (#​7472)

    • Fixed a metric storage leak that occurred when meters and instruments were
      repeatedly created and disposed.
      (#​7466)

    • Added ExcludedTagKeys property to MetricStreamConfiguration to support
      excluding specific tag keys from metric streams.
      (#​7373)

    See CHANGELOG for details.

  • NuGet: OpenTelemetry.Api v1.17.0-rc.1

    • Fixed TraceContextPropagator to normalize empty tracestate header values
      to null when extracting trace context.
      (#​7407,
      #​7433)

    • The library is now marked as trim and AOT compatible.
      (#​7441)

    • Experimental (pre-release builds only): Updated EnvironmentVariableCarrier.Get
      to read only the normalized environment variable name, following the updated
      environment variable carrier specification.
      Non-normalized carrier keys are no longer matched, even when they would
      normalize to the requested key.
      ... (truncated)

1.17.0-beta.1

The following changes are from the previous release 1.16.0-beta.1.

  • NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.17.0-beta.1

    • Added a verbose-level diagnostic event for ignored metrics.
      (#​7429)

    • The library is now marked as trim and AOT compatible.
      (#​7441)

    • Fix double unit suffixes in metric names when using OpenMetrics.
      (#​7454)

    • Fix incorrect handling of leading digits in metric names for OpenMetrics.
      (#​7454)

    • Add PrometheusAspNetCoreOptions.ScopeInfoEnabled property to enable or
      disable scope labels in Prometheus metrics. Defaults to true.
      (#​7436)

    • Added support for the dots and values Prometheus UTF-8 name escaping
      schemes when negotiated via the Accept header.
      (#​7439)

    • Add PrometheusAspNetCoreOptions.TargetInfoEnabled property to enable or
      disable the target_info metric in Prometheus metrics. Defaults to true.
      (#​7438)

    • Added support for the allow-utf-8 Prometheus UTF-8 name escaping scheme
      when negotiated via the Accept header.
      (#​7440)

    • Add PrometheusAspNetCoreOptions.ResourceConstantLabels property to select
      resource attributes to add to each metric as constant labels. Defaults to
      null (no resource attributes are added as metric labels).
      (#​7471)

    • Add PrometheusAspNetCoreOptions.MaxScrapeResponseSizeBytes to configure
      the maximum size of a scrape response. The default is now ~166 MiB.
      (#​7487)

    • A scrape whose serialized output exceeds the maximum scrape response size
      limit now responds with HTTP 500.
      (#​7487)

    • Fixed the Prometheus text exposition format emitting redundant comments.
      (#​7491)

    • Made Accept header content negotiation consistent with the
      PrometheusHttpListener endpoint.
      ... (truncated)

Commits viewable in compare view.

Updated OpenTelemetry.Instrumentation.AspNetCore from 1.16.0 to 1.17.0.

Release notes

Sourced from OpenTelemetry.Instrumentation.AspNetCore's releases.

1.17.0

1.17.0-rc.1

1.17.0-beta.1

1.17.0-alpha.1

Commits viewable in compare view.

Updated OpenTelemetry.Instrumentation.Http from 1.16.0 to 1.17.0.

Release notes

Sourced from OpenTelemetry.Instrumentation.Http's releases.

1.17.0

1.17.0-rc.1

1.17.0-beta.1

1.17.0-alpha.1

Commits viewable in compare view.

Updated OpenTelemetry.Instrumentation.Runtime from 1.16.0 to 1.17.0.

Release notes

Sourced from OpenTelemetry.Instrumentation.Runtime's releases.

1.17.0

1.17.0-rc.1

1.17.0-beta.1

1.17.0-alpha.1

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): Bump the nuget-dependencies group with 18 updates
615a072 
Bumps Magick.NET-Q16-AnyCPU from 14.14.0 to 14.15.0
Bumps Microsoft.AspNetCore.Mvc.Testing from 10.0.9 to 10.0.10
Bumps Microsoft.AspNetCore.SignalR.Client from 10.0.9 to 10.0.10
Bumps Microsoft.Data.Sqlite from 10.0.9 to 10.0.10
Bumps Microsoft.EntityFrameworkCore.Design from 10.0.9 to 10.0.10
Bumps Microsoft.EntityFrameworkCore.Sqlite from 10.0.9 to 10.0.10
Bumps Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions from 10.0.9 to 10.0.10
Bumps Microsoft.Extensions.Hosting.Abstractions from 10.0.9 to 10.0.10
Bumps Microsoft.Extensions.Http.Resilience from 10.7.0 to 10.8.0
Bumps Microsoft.Extensions.Logging.Abstractions from 10.0.9 to 10.0.10
Bumps Microsoft.Extensions.ServiceDiscovery from 10.7.0 to 10.8.0
Bumps Microsoft.NET.Test.Sdk from 18.7.0 to 18.8.1
Bumps NSubstitute from 5.3.0 to 6.0.0
Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.16.0 to 1.17.0
Bumps OpenTelemetry.Extensions.Hosting from 1.16.0 to 1.17.0
Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.16.0 to 1.17.0
Bumps OpenTelemetry.Instrumentation.Http from 1.16.0 to 1.17.0
Bumps OpenTelemetry.Instrumentation.Runtime from 1.16.0 to 1.17.0

---
updated-dependencies:
- dependency-name: Magick.NET-Q16-AnyCPU
  dependency-version: 14.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.AspNetCore.Mvc.Testing
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.AspNetCore.SignalR.Client
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.Data.Sqlite
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.EntityFrameworkCore.Design
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.EntityFrameworkCore.Design
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.EntityFrameworkCore.Sqlite
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.EntityFrameworkCore.Sqlite
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.EntityFrameworkCore.Sqlite
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.Extensions.Hosting.Abstractions
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.Extensions.Http.Resilience
  dependency-version: 10.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.Extensions.ServiceDiscovery
  dependency-version: 10.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: NSubstitute
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
- dependency-name: NSubstitute
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
- dependency-name: NSubstitute
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
- dependency-name: NSubstitute
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-dependencies
- dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: OpenTelemetry.Extensions.Hosting
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: OpenTelemetry.Instrumentation.AspNetCore
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: OpenTelemetry.Instrumentation.Http
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
- dependency-name: OpenTelemetry.Instrumentation.Runtime
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from JerrettDavis as a code owner July 20, 2026 11:21
@github-actions

github-actions Bot commented Jul 20, 2026

Copy link
Copy Markdown
Contributor

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 28 package(s) with unknown licenses.
See the Details below.

License Issues

src/StableDiffusionStudio.Application/StableDiffusionStudio.Application.csproj

PackageVersionLicenseIssue Type
Microsoft.Extensions.Logging.Abstractions10.0.10NullUnknown License

src/StableDiffusionStudio.Infrastructure/StableDiffusionStudio.Infrastructure.csproj

PackageVersionLicenseIssue Type
Magick.NET-Q16-AnyCPU14.15.0NullUnknown License
Microsoft.EntityFrameworkCore.Design10.0.10NullUnknown License
Microsoft.EntityFrameworkCore.Sqlite10.0.10NullUnknown License
Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions10.0.10NullUnknown License
Microsoft.Extensions.Hosting.Abstractions10.0.10NullUnknown License

src/StableDiffusionStudio.ServiceDefaults/StableDiffusionStudio.ServiceDefaults.csproj

PackageVersionLicenseIssue Type
Microsoft.Extensions.Http.Resilience10.8.0NullUnknown License
Microsoft.Extensions.ServiceDiscovery10.8.0NullUnknown License
OpenTelemetry.Exporter.OpenTelemetryProtocol1.17.0NullUnknown License
OpenTelemetry.Extensions.Hosting1.17.0NullUnknown License
OpenTelemetry.Instrumentation.AspNetCore1.17.0NullUnknown License
OpenTelemetry.Instrumentation.Http1.17.0NullUnknown License
OpenTelemetry.Instrumentation.Runtime1.17.0NullUnknown License

src/StableDiffusionStudio.Web/StableDiffusionStudio.Web.csproj

PackageVersionLicenseIssue Type
Microsoft.AspNetCore.SignalR.Client10.0.10NullUnknown License
Microsoft.EntityFrameworkCore.Design10.0.10NullUnknown License

tests/StableDiffusionStudio.Application.Tests/StableDiffusionStudio.Application.Tests.csproj

PackageVersionLicenseIssue Type
Microsoft.Data.Sqlite10.0.10NullUnknown License
Microsoft.EntityFrameworkCore.Sqlite10.0.10NullUnknown License
Microsoft.NET.Test.Sdk18.8.1NullUnknown License
NSubstitute6.0.0NullUnknown License

tests/StableDiffusionStudio.Domain.Tests/StableDiffusionStudio.Domain.Tests.csproj

PackageVersionLicenseIssue Type
Microsoft.NET.Test.Sdk18.8.1NullUnknown License
NSubstitute6.0.0NullUnknown License

tests/StableDiffusionStudio.E2E.Tests/StableDiffusionStudio.E2E.Tests.csproj

PackageVersionLicenseIssue Type
Microsoft.AspNetCore.Mvc.Testing10.0.10NullUnknown License
Microsoft.NET.Test.Sdk18.8.1NullUnknown License

tests/StableDiffusionStudio.Infrastructure.Tests/StableDiffusionStudio.Infrastructure.Tests.csproj

PackageVersionLicenseIssue Type
Microsoft.EntityFrameworkCore.Sqlite10.0.10NullUnknown License
Microsoft.NET.Test.Sdk18.8.1NullUnknown License
NSubstitute6.0.0NullUnknown License

tests/StableDiffusionStudio.Web.Tests/StableDiffusionStudio.Web.Tests.csproj

PackageVersionLicenseIssue Type
Microsoft.NET.Test.Sdk18.8.1NullUnknown License
NSubstitute6.0.0NullUnknown License
Denied Licenses: GPL-2.0, GPL-3.0, AGPL-3.0

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
nuget/Microsoft.Extensions.Logging.Abstractions 10.0.10 UnknownUnknown
nuget/Magick.NET-Q16-AnyCPU 14.15.0 UnknownUnknown
nuget/Microsoft.EntityFrameworkCore.Design 10.0.10 UnknownUnknown
nuget/Microsoft.EntityFrameworkCore.Sqlite 10.0.10 UnknownUnknown
nuget/Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions 10.0.10 UnknownUnknown
nuget/Microsoft.Extensions.Hosting.Abstractions 10.0.10 UnknownUnknown
nuget/Microsoft.Extensions.Http.Resilience 10.8.0 🟢 7
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Security-Policy🟢 10security policy file detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Binary-Artifacts🟢 10no binaries found in the repo
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
nuget/Microsoft.Extensions.ServiceDiscovery 10.8.0 🟢 7
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Security-Policy🟢 10security policy file detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Binary-Artifacts🟢 10no binaries found in the repo
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
nuget/OpenTelemetry.Exporter.OpenTelemetryProtocol 1.17.0 🟢 8.3
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 22 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Dependency-Update-Tool🟢 10update tool detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
License🟢 10license file detected
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices🟢 5badge detected: Passing
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST🟢 10SAST tool is run on all commits
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Packaging🟢 10packaging workflow detected
Security-Policy🟢 10security policy file detected
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 38 contributing companies or organizations
nuget/OpenTelemetry.Extensions.Hosting 1.17.0 🟢 8.3
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 22 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Dependency-Update-Tool🟢 10update tool detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
License🟢 10license file detected
Pinned-Dependencies🟢 10all dependencies are pinned
CII-Best-Practices🟢 5badge detected: Passing
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST🟢 10SAST tool is run on all commits
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Packaging🟢 10packaging workflow detected
Security-Policy🟢 10security policy file detected
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 38 contributing companies or organizations
nuget/OpenTelemetry.Instrumentation.AspNetCore 1.17.0 🟢 8.2
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 29 issue activity found in the last 90 days -- score normalized to 10
Dependency-Update-Tool🟢 10update tool detected
Code-Review⚠️ -1Found no human activity in the last 30 changesets
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
CII-Best-Practices🟢 5badge detected: Passing
Vulnerabilities🟢 100 existing vulnerabilities detected
Packaging🟢 10packaging workflow detected
License🟢 10license file detected
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
SAST🟢 10SAST tool is run on all commits
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Fuzzing⚠️ 0project is not fuzzed
Security-Policy🟢 10security policy file detected
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 22 contributing companies or organizations
nuget/OpenTelemetry.Instrumentation.Http 1.17.0 🟢 8.2
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 29 issue activity found in the last 90 days -- score normalized to 10
Dependency-Update-Tool🟢 10update tool detected
Code-Review⚠️ -1Found no human activity in the last 30 changesets
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
CII-Best-Practices🟢 5badge detected: Passing
Vulnerabilities🟢 100 existing vulnerabilities detected
Packaging🟢 10packaging workflow detected
License🟢 10license file detected
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
SAST🟢 10SAST tool is run on all commits
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Fuzzing⚠️ 0project is not fuzzed
Security-Policy🟢 10security policy file detected
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 22 contributing companies or organizations
nuget/OpenTelemetry.Instrumentation.Runtime 1.17.0 🟢 8.2
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 29 issue activity found in the last 90 days -- score normalized to 10
Dependency-Update-Tool🟢 10update tool detected
Code-Review⚠️ -1Found no human activity in the last 30 changesets
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
CII-Best-Practices🟢 5badge detected: Passing
Vulnerabilities🟢 100 existing vulnerabilities detected
Packaging🟢 10packaging workflow detected
License🟢 10license file detected
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
SAST🟢 10SAST tool is run on all commits
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Fuzzing⚠️ 0project is not fuzzed
Security-Policy🟢 10security policy file detected
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 22 contributing companies or organizations
nuget/Microsoft.AspNetCore.SignalR.Client 10.0.10 UnknownUnknown
nuget/Microsoft.EntityFrameworkCore.Design 10.0.10 UnknownUnknown
nuget/Microsoft.Data.Sqlite 10.0.10 UnknownUnknown
nuget/Microsoft.EntityFrameworkCore.Sqlite 10.0.10 UnknownUnknown
nuget/Microsoft.NET.Test.Sdk 18.8.1 🟢 5.4
Details
CheckScoreReason
Code-Review⚠️ 2Found 6/27 approved changesets -- score normalized to 2
Maintained🟢 1030 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Binary-Artifacts⚠️ 0binaries present in source code
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Branch-Protection⚠️ 2branch protection is not maximal on development and all release branches
Packaging⚠️ -1packaging workflow not detected
Fuzzing⚠️ 0project is not fuzzed
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
nuget/NSubstitute 6.0.0 UnknownUnknown
nuget/Microsoft.NET.Test.Sdk 18.8.1 🟢 5.4
Details
CheckScoreReason
Code-Review⚠️ 2Found 6/27 approved changesets -- score normalized to 2
Maintained🟢 1030 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Binary-Artifacts⚠️ 0binaries present in source code
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Branch-Protection⚠️ 2branch protection is not maximal on development and all release branches
Packaging⚠️ -1packaging workflow not detected
Fuzzing⚠️ 0project is not fuzzed
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
nuget/NSubstitute 6.0.0 UnknownUnknown
nuget/Microsoft.AspNetCore.Mvc.Testing 10.0.10 UnknownUnknown
nuget/Microsoft.NET.Test.Sdk 18.8.1 🟢 5.4
Details
CheckScoreReason
Code-Review⚠️ 2Found 6/27 approved changesets -- score normalized to 2
Maintained🟢 1030 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Binary-Artifacts⚠️ 0binaries present in source code
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Branch-Protection⚠️ 2branch protection is not maximal on development and all release branches
Packaging⚠️ -1packaging workflow not detected
Fuzzing⚠️ 0project is not fuzzed
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
nuget/Microsoft.EntityFrameworkCore.Sqlite 10.0.10 UnknownUnknown
nuget/Microsoft.NET.Test.Sdk 18.8.1 🟢 5.4
Details
CheckScoreReason
Code-Review⚠️ 2Found 6/27 approved changesets -- score normalized to 2
Maintained🟢 1030 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Binary-Artifacts⚠️ 0binaries present in source code
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Branch-Protection⚠️ 2branch protection is not maximal on development and all release branches
Packaging⚠️ -1packaging workflow not detected
Fuzzing⚠️ 0project is not fuzzed
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
nuget/NSubstitute 6.0.0 UnknownUnknown
nuget/Microsoft.NET.Test.Sdk 18.8.1 🟢 5.4
Details
CheckScoreReason
Code-Review⚠️ 2Found 6/27 approved changesets -- score normalized to 2
Maintained🟢 1030 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Binary-Artifacts⚠️ 0binaries present in source code
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Branch-Protection⚠️ 2branch protection is not maximal on development and all release branches
Packaging⚠️ -1packaging workflow not detected
Fuzzing⚠️ 0project is not fuzzed
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
nuget/NSubstitute 6.0.0 UnknownUnknown

Scanned Files

  • src/StableDiffusionStudio.Application/StableDiffusionStudio.Application.csproj
  • src/StableDiffusionStudio.Infrastructure/StableDiffusionStudio.Infrastructure.csproj
  • src/StableDiffusionStudio.ServiceDefaults/StableDiffusionStudio.ServiceDefaults.csproj
  • src/StableDiffusionStudio.Web/StableDiffusionStudio.Web.csproj
  • tests/StableDiffusionStudio.Application.Tests/StableDiffusionStudio.Application.Tests.csproj
  • tests/StableDiffusionStudio.Domain.Tests/StableDiffusionStudio.Domain.Tests.csproj
  • tests/StableDiffusionStudio.E2E.Tests/StableDiffusionStudio.E2E.Tests.csproj
  • tests/StableDiffusionStudio.Infrastructure.Tests/StableDiffusionStudio.Infrastructure.Tests.csproj
  • tests/StableDiffusionStudio.Web.Tests/StableDiffusionStudio.Web.Tests.csproj

@github-actions

github-actions Bot commented Jul 20, 2026

Copy link
Copy Markdown
Contributor

Test Results

417 tests   417 ✅  30s ⏱️
  1 suites    0 💤
  1 files      0 ❌

Results for commit 615a072.

@github-actions

github-actions Bot commented Jul 20, 2026

Copy link
Copy Markdown
Contributor

PR Validation Results

Version: 0.36.32

Validation Steps

  • Build solution
  • Run tests
  • Build documentation

This comment was automatically generated by the PR validation workflow.

@github-actions

github-actions Bot commented Jul 20, 2026

Copy link
Copy Markdown
Contributor

Code Coverage

Summary
  Generated on: 07/20/2026 - 11:52:51
  Coverage date: 07/20/2026 - 11:52:35 - 07/20/2026 - 11:52:48
  Parser: MultiReport (5x Cobertura)
  Assemblies: 3
  Classes: 181
  Files: 161
  Line coverage: 48.5%
  Covered lines: 2930
  Uncovered lines: 3107
  Coverable lines: 6037
  Total lines: 11344
  Branch coverage: 40.3% (893 of 2213)
  Covered branches: 893
  Total branches: 2213
  Method coverage: 56.8% (703 of 1236)
  Full method coverage: 54.3% (672 of 1236)
  Covered methods: 703
  Fully covered methods: 672
  Total methods: 1236

StableDiffusionStudio.Application                                                                       47.5%
  StableDiffusionStudio.Application.Commands.CreateGenerationCommand                                     100%
  StableDiffusionStudio.Application.Commands.CreateProjectCommand                                        100%
  StableDiffusionStudio.Application.Commands.RenameProjectCommand                                        100%
  StableDiffusionStudio.Application.Commands.SavePresetCommand                                           100%
  StableDiffusionStudio.Application.Commands.ScanModelsCommand                                           100%
  StableDiffusionStudio.Application.DTOs.DiscoveredModel                                                 100%
  StableDiffusionStudio.Application.DTOs.DownloadProgress                                                100%
  StableDiffusionStudio.Application.DTOs.DownloadRequest                                                 100%
  StableDiffusionStudio.Application.DTOs.DownloadResult                                                  100%
  StableDiffusionStudio.Application.DTOs.ExperimentDto                                                     0%
  StableDiffusionStudio.Application.DTOs.ExperimentRunDto                                                  0%
  StableDiffusionStudio.Application.DTOs.ExperimentRunImageDto                                             0%
  StableDiffusionStudio.Application.DTOs.ExportedEdge                                                      0%
  StableDiffusionStudio.Application.DTOs.ExportedNode                                                      0%
  StableDiffusionStudio.Application.DTOs.GeneratedImageData                                              100%
  StableDiffusionStudio.Application.DTOs.GeneratedImageDto                                                50%
  StableDiffusionStudio.Application.DTOs.GenerationJobDto                                                 70%
  StableDiffusionStudio.Application.DTOs.GenerationPresetDto                                              50%
  StableDiffusionStudio.Application.DTOs.GenerationStatusDto                                            85.7%
  StableDiffusionStudio.Application.DTOs.InferenceCapabilities                                           100%
  StableDiffusionStudio.Application.DTOs.InferenceProgress                                               100%
  StableDiffusionStudio.Application.DTOs.InferenceRequest                                               88.2%
  StableDiffusionStudio.Application.DTOs.InferenceResult                                                 100%
  StableDiffusionStudio.Application.DTOs.JobRecordDto                                                     75%
  StableDiffusionStudio.Application.DTOs.LoraLoadInfo                                                    100%
  StableDiffusionStudio.Application.DTOs.ModelCardViewModel                                                0%
  StableDiffusionStudio.Application.DTOs.ModelFileVariant                                                100%
  StableDiffusionStudio.Application.DTOs.ModelFilter                                                     100%
  StableDiffusionStudio.Application.DTOs.ModelLoadRequest                                               83.3%
  StableDiffusionStudio.Application.DTOs.ModelProviderCapabilities                                       100%
  StableDiffusionStudio.Application.DTOs.ModelProviderInfo                                               100%
  StableDiffusionStudio.Application.DTOs.ModelRecordDto                                                   80%
  StableDiffusionStudio.Application.DTOs.ModelSearchQuery                                                100%
  StableDiffusionStudio.Application.DTOs.ProjectDto                                                      100%
  StableDiffusionStudio.Application.DTOs.ProjectFilter                                                   100%
  StableDiffusionStudio.Application.DTOs.PromptAssistantContext                                            0%
  StableDiffusionStudio.Application.DTOs.RemoteModelInfo                                                 100%
  StableDiffusionStudio.Application.DTOs.ScanResult                                                      100%
  StableDiffusionStudio.Application.DTOs.SearchResult                                                    100%
  StableDiffusionStudio.Application.DTOs.WorkflowDto                                                       0%
  StableDiffusionStudio.Application.DTOs.WorkflowEdgeDto                                                   0%
  StableDiffusionStudio.Application.DTOs.WorkflowExportFormat                                              0%
  StableDiffusionStudio.Application.DTOs.WorkflowListItemDto                                               0%
  StableDiffusionStudio.Application.DTOs.WorkflowNodeDto                                                   0%
  StableDiffusionStudio.Application.DTOs.WorkflowNodePluginDto                                             0%
  StableDiffusionStudio.Application.DTOs.WorkflowRunDto                                                    0%
  StableDiffusionStudio.Application.DTOs.WorkflowRunStepDto                                                0%
  StableDiffusionStudio.Application.Interfaces.ContentClassification                                    57.1%
  StableDiffusionStudio.Application.Interfaces.ContentSafetyThresholds                                     0%
  StableDiffusionStudio.Application.Interfaces.DataUsageSummary                                          100%
  StableDiffusionStudio.Application.Interfaces.FluxComponents                                            100%
  StableDiffusionStudio.Application.Interfaces.ModelEnrichmentResult                                       0%
  StableDiffusionStudio.Application.Interfaces.WorkflowData                                                0%
  StableDiffusionStudio.Application.Interfaces.WorkflowExecutionContext                                    0%
  StableDiffusionStudio.Application.Interfaces.WorkflowPortDefinition                                      0%
  StableDiffusionStudio.Application.Interfaces.WorkflowStepProgress                                        0%
  StableDiffusionStudio.Application.Services.ExperimentJobData                                             0%
  StableDiffusionStudio.Application.Services.ExperimentService                                             0%
  StableDiffusionStudio.Application.Services.GenerationService                                          64.4%
  StableDiffusionStudio.Application.Services.ModelCatalogService                                          75%
  StableDiffusionStudio.Application.Services.PresetService                                               100%
  StableDiffusionStudio.Application.Services.ProjectService                                              100%
  StableDiffusionStudio.Application.Services.PromptHistoryService                                        100%
  StableDiffusionStudio.Application.Services.WorkflowService                                               0%
  StableDiffusionStudio.Application.Validation.CreateProjectCommandValidator                             100%
  StableDiffusionStudio.Application.Validation.RenameProjectCommandValidator                             100%

StableDiffusionStudio.Domain                                                                            67.8%
  StableDiffusionStudio.Domain.Entities.Experiment                                                       100%
  StableDiffusionStudio.Domain.Entities.ExperimentRun                                                    100%
  StableDiffusionStudio.Domain.Entities.ExperimentRunImage                                               100%
  StableDiffusionStudio.Domain.Entities.GeneratedImage                                                   100%
  StableDiffusionStudio.Domain.Entities.GenerationJob                                                    100%
  StableDiffusionStudio.Domain.Entities.GenerationPresetEntity                                           100%
  StableDiffusionStudio.Domain.Entities.JobRecord                                                        100%
  StableDiffusionStudio.Domain.Entities.ModelRecord                                                       77%
  StableDiffusionStudio.Domain.Entities.Project                                                          100%
  StableDiffusionStudio.Domain.Entities.PromptHistory                                                    100%
  StableDiffusionStudio.Domain.Entities.Setting                                                         93.3%
  StableDiffusionStudio.Domain.Entities.Workflow                                                           0%
  StableDiffusionStudio.Domain.Entities.WorkflowEdge                                                       0%
  StableDiffusionStudio.Domain.Entities.WorkflowNode                                                       0%
  StableDiffusionStudio.Domain.Entities.WorkflowRun                                                        0%
  StableDiffusionStudio.Domain.Entities.WorkflowRunStep                                                    0%
  StableDiffusionStudio.Domain.Services.GenerationPreset                                                  90%
  StableDiffusionStudio.Domain.Services.ModelFamilyPresets                                               100%
  StableDiffusionStudio.Domain.Services.ModelFileAnalyzer                                               95.2%
  StableDiffusionStudio.Domain.Services.ModelFileInfo                                                    100%
  StableDiffusionStudio.Domain.Services.PromptMatrixParser                                               100%
  StableDiffusionStudio.Domain.Services.PromptTokenEstimator                                             100%
  StableDiffusionStudio.Domain.Services.SweepCombination                                                 100%
  StableDiffusionStudio.Domain.Services.SweepExpander                                                   87.5%
  StableDiffusionStudio.Domain.ValueObjects.ContentSafetySettings                                        100%
  StableDiffusionStudio.Domain.ValueObjects.DownloadLocationSettings                                     100%
  StableDiffusionStudio.Domain.ValueObjects.FileLocation                                                   0%
  StableDiffusionStudio.Domain.ValueObjects.GenerationParameters                                         100%
  StableDiffusionStudio.Domain.ValueObjects.InferenceSettings                                            100%
  StableDiffusionStudio.Domain.ValueObjects.InterrogationSettings                                          0%
  StableDiffusionStudio.Domain.ValueObjects.LoraReference                                                100%
  StableDiffusionStudio.Domain.ValueObjects.ModelEnrichmentSettings                                        0%
  StableDiffusionStudio.Domain.ValueObjects.ModelIdentifier                                              100%
  StableDiffusionStudio.Domain.ValueObjects.ModelRuleSet                                                   0%
  StableDiffusionStudio.Domain.ValueObjects.NsfwClassification                                             0%
  StableDiffusionStudio.Domain.ValueObjects.OutputSettings                                               100%
  StableDiffusionStudio.Domain.ValueObjects.PromptAssistantSettings                                        0%
  StableDiffusionStudio.Domain.ValueObjects.StorageRoot                                                  100%
  StableDiffusionStudio.Domain.ValueObjects.SweepAxis                                                    100%

StableDiffusionStudio.Infrastructure                                                                    43.5%
  StableDiffusionStudio.Infrastructure.Inference.LazyInferenceBackend                                      0%
  StableDiffusionStudio.Infrastructure.Inference.StableDiffusionCppBackend                              35.2%
  StableDiffusionStudio.Infrastructure.Jobs.BackgroundJobProcessor                                      89.7%
  StableDiffusionStudio.Infrastructure.Jobs.ChannelJobQueue                                             81.4%
  StableDiffusionStudio.Infrastructure.Jobs.DirectProgress<T>                                            100%
  StableDiffusionStudio.Infrastructure.Jobs.ExperimentJobHandler                                           0%
  StableDiffusionStudio.Infrastructure.Jobs.GenerationJobHandler                                        76.9%
  StableDiffusionStudio.Infrastructure.Jobs.JobChannel                                                   100%
  StableDiffusionStudio.Infrastructure.Jobs.MockInferenceBackend                                         100%
  StableDiffusionStudio.Infrastructure.Jobs.ModelDownloadJobHandler                                     94.8%
  StableDiffusionStudio.Infrastructure.Jobs.ModelScanJobHandler                                          100%
  StableDiffusionStudio.Infrastructure.ModelSources.CivitAIProvider                                     98.6%
  StableDiffusionStudio.Infrastructure.ModelSources.HttpDownloadClient                                  95.4%
  StableDiffusionStudio.Infrastructure.ModelSources.HuggingFaceProvider                                 96.9%
  StableDiffusionStudio.Infrastructure.ModelSources.LocalFolderProvider                                 90.1%
  StableDiffusionStudio.Infrastructure.Persistence.AppDbContext                                         57.8%
  StableDiffusionStudio.Infrastructure.Persistence.Configurations.ExperimentConfiguration                100%
  StableDiffusionStudio.Infrastructure.Persistence.Configurations.ExperimentRunConfiguration             100%
  StableDiffusionStudio.Infrastructure.Persistence.Configurations.ExperimentRunImageConfiguration        100%
  StableDiffusionStudio.Infrastructure.Persistence.Configurations.GeneratedImageConfiguration            100%
  StableDiffusionStudio.Infrastructure.Persistence.Configurations.GenerationJobConfiguration             100%
  StableDiffusionStudio.Infrastructure.Persistence.Configurations.GenerationPresetEntityConfiguration    100%
  StableDiffusionStudio.Infrastructure.Persistence.Configurations.JobRecordConfiguration                 100%
  StableDiffusionStudio.Infrastructure.Persistence.Configurations.ModelRecordConfiguration               100%
  StableDiffusionStudio.Infrastructure.Persistence.Configurations.ProjectConfiguration                   100%
  StableDiffusionStudio.Infrastructure.Persistence.Configurations.PromptHistoryConfiguration             100%
  StableDiffusionStudio.Infrastructure.Persistence.Configurations.SettingConfiguration                   100%
  StableDiffusionStudio.Infrastructure.Persistence.Configurations.WorkflowConfiguration                  100%
  StableDiffusionStudio.Infrastructure.Persistence.Configurations.WorkflowEdgeConfiguration              100%
  StableDiffusionStudio.Infrastructure.Persistence.Configurations.WorkflowNodeConfiguration              100%
  StableDiffusionStudio.Infrastructure.Persistence.Configurations.WorkflowRunConfiguration               100%
  StableDiffusionStudio.Infrastructure.Persistence.Configurations.WorkflowRunStepConfiguration           100%
  StableDiffusionStudio.Infrastructure.Persistence.DesignTimeDbContextFactory                              0%
  StableDiffusionStudio.Infrastructure.Persistence.Repositories.ExperimentRepository                       0%
  StableDiffusionStudio.Infrastructure.Persistence.Repositories.GenerationJobRepository                 95.4%
  StableDiffusionStudio.Infrastructure.Persistence.Repositories.ModelCatalogRepository                  93.9%
  StableDiffusionStudio.Infrastructure.Persistence.Repositories.PresetRepository                         100%
  StableDiffusionStudio.Infrastructure.Persistence.Repositories.ProjectRepository                        100%
  StableDiffusionStudio.Infrastructure.Persistence.Repositories.PromptHistoryRepository                 93.9%
  StableDiffusionStudio.Infrastructure.Persistence.Repositories.WorkflowRepository                         0%
  StableDiffusionStudio.Infrastructure.Plugins.PluginManager                                              65%
  StableDiffusionStudio.Infrastructure.Services.A1111ParameterParser                                      98%
  StableDiffusionStudio.Infrastructure.Services.AppPaths                                                 100%
  StableDiffusionStudio.Infrastructure.Services.CivitAIEnrichmentProvider                                  0%
  StableDiffusionStudio.Infrastructure.Services.DatabaseHealthCheck                                        0%
  StableDiffusionStudio.Infrastructure.Services.DataManagementService                                     94%
  StableDiffusionStudio.Infrastructure.Services.FluxComponentResolver                                   91.6%
  StableDiffusionStudio.Infrastructure.Services.GridCompositor                                             0%
  StableDiffusionStudio.Infrastructure.Services.HuggingFaceEnrichmentProvider                              0%
  StableDiffusionStudio.Infrastructure.Services.ImageBlurService                                           0%
  StableDiffusionStudio.Infrastructure.Services.ModelMetadataEnrichmentService                             0%
  StableDiffusionStudio.Infrastructure.Services.ModelPreloadService                                        0%
  StableDiffusionStudio.Infrastructure.Services.ModelRuleService                                           0%
  StableDiffusionStudio.Infrastructure.Services.NsfwImageScannerService                                    0%
  StableDiffusionStudio.Infrastructure.Services.NsfwScanQueue                                              0%
  StableDiffusionStudio.Infrastructure.Services.NsfwSpyContentSafetyService                                0%
  StableDiffusionStudio.Infrastructure.Services.OllamaImageInterrogator                                    0%
  StableDiffusionStudio.Infrastructure.Services.OllamaPromptAssistantService                               0%
  StableDiffusionStudio.Infrastructure.Services.PngMetadataService                                      60.9%
  StableDiffusionStudio.Infrastructure.Services.WorkflowTemplateSeeder                                     0%
  StableDiffusionStudio.Infrastructure.Settings.DbInferenceSettingsProvider                              100%
  StableDiffusionStudio.Infrastructure.Settings.DbOutputSettingsProvider                                   0%
  StableDiffusionStudio.Infrastructure.Settings.DbSettingsProvider                                       100%
  StableDiffusionStudio.Infrastructure.Settings.ProviderCredentialStore                                  100%
  StableDiffusionStudio.Infrastructure.Settings.SettingsExportService                                    100%
  StableDiffusionStudio.Infrastructure.Storage.DbStorageRootProvider                                     100%
  StableDiffusionStudio.Infrastructure.Storage.InMemoryStorageRootProvider                                 0%
  StableDiffusionStudio.Infrastructure.Telemetry.StudioMetrics                                             0%
  StableDiffusionStudio.Infrastructure.Workflows.ConditionalNodePlugin                                     0%
  StableDiffusionStudio.Infrastructure.Workflows.GenerateNodePlugin                                        0%
  StableDiffusionStudio.Infrastructure.Workflows.Img2ImgNodePlugin                                         0%
  StableDiffusionStudio.Infrastructure.Workflows.InpaintNodePlugin                                         0%
  StableDiffusionStudio.Infrastructure.Workflows.OutputNodePlugin                                          0%
  StableDiffusionStudio.Infrastructure.Workflows.ScriptNodePlugin                                          0%
  StableDiffusionStudio.Infrastructure.Workflows.UpscaleNodePlugin                                         0%
  StableDiffusionStudio.Infrastructure.Workflows.WorkflowExecutionHandler                                  0%

@JerrettDavis
JerrettDavis merged commit 303cbc6 into main Jul 21, 2026
13 checks passed
@JerrettDavis
JerrettDavis deleted the dependabot/nuget/src/StableDiffusionStudio.Application/nuget-dependencies-5a57360b74 branch July 21, 2026 17:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@JerrettDavis JerrettDavis Awaiting requested review from JerrettDavis JerrettDavis is a code owner

Assignees

No one assigned

Labels

area: application area: infrastructure area: tests area: web dependencies size/s

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@JerrettDavis