Bump SixLabors.ImageSharp from 3.1.12 to 3.2.0

[dependabot]

Updated SixLabors.ImageSharp from 3.1.12 to 3.2.0.

Release notes

Sourced from SixLabors.ImageSharp's releases.

3.2.0

What's Changed

• [3.1] Use macos-26-intel on CI by @​antonfirsov in [3.1] Use macos-26-intel on CI SixLabors/ImageSharp#3087
• Backport: V3 - Throw explicit InvalidImageContentException when BMP BPP is invalid. by @​JimBobSquarePants in Backport: V3 - Throw explicit InvalidImageContentException when BMP BPP is invalid. SixLabors/ImageSharp#3068
• [3.1] Backport #​3075 - Add check, if Offset is greater then stream length when reading bitmap colorMapSize by @​antonfirsov in [3.1] Backport #3075 - Add check, if Offset is greater then stream length when reading bitmap colorMapSize SixLabors/ImageSharp#3091
• v3: Backport. Fix JPEG SIMD slicing and padding length handling by @​JimBobSquarePants in v3: Backport. Fix JPEG SIMD slicing and padding length handling SixLabors/ImageSharp#3106
• Backport v3 security fixes and license enforcement by @​JimBobSquarePants in Backport v3 security fixes and license enforcement SixLabors/ImageSharp#3208

Full Changelog: SixLabors/ImageSharp@v3.1.12...v3.2.0

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

The following issues were found:

• ❌ 1 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ✅ 0 package(s) with unknown licenses.

See the Details below.

Vulnerabilities

src/OpenRebar.Infrastructure/OpenRebar.Infrastructure.csproj

Name	Version	Vulnerability	Severity
SixLabors.ImageSharp	3.2.0	ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked histogram index	high
		ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer	high
		ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output buffer	high
		ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions	moderate
		ImageSharp: BigTIFF IFD count can keep a decoder thread in a non-progressing loop	moderate

Only included vulnerabilities with severity moderate or higher.

OpenSSF Scorecard

Package	Version	Score	Details
nuget/SixLabors.ImageSharp	3.2.0	Unknown	Unknown

Scanned Files

• src/OpenRebar.Infrastructure/OpenRebar.Infrastructure.csproj