Bump the nuget-dependencies group with 7 updates by dependabot[bot] · Pull Request #18 · edwardlthompson/QuickMediaIngest

dependabot · 2026-08-15T06:06:38Z

Updated Magick.NET-Q16-AnyCPU from 14.14.0 to 14.16.0.

Release notes

Sourced from Magick.NET-Q16-AnyCPU's releases.

14.16.0

What's Changed

Fixed stackoverflow when using the library in IIS (#2049)
Added support for reading the XMP profile when pinging a raw image (#2052)
Added Version to MagickFormatInfo.
Fixed thread pool starvation in AsyncStreamWrapper causing concurrent ReadAsync/WriteAsync to stall (#2056)
Fixed issue where ImportIndexedPixels would always use a GrayScale colorspace (#2057)

Related changes in ImageMagick since the last release of Magick.NET:

Corrected IsPaletteImage check.
Fix memory leak in ASHLAR coder when action fails (Fix memory leak in ASHLAR coder when action fails ImageMagick/ImageMagick#8865)
Changed spatial PHASE algorithm
Fixes for PTIF writer to re-enable default creation of pyramid levels (Fixes for PTIF writer to re-enable default creation of pyramid levels ImageMagick/ImageMagick#8884)
Set the page values when reading the x and y offset in a tga file (Round-trip PCX and TGA (X,Y) offsets. ImageMagick/ImageMagick#8847)

Library updates:

ImageMagick 7.1.2-29 (2026-07-27)
libffi 3.7.1 (2026-07-10)
fontconfig 2.18.2 (2026-07-09)
libjpeg-turbo 3.2.0 (2025-06-30)
libraqm 0.11.0 (2026-07-23)
libraw 0.22.2 (2026-07-16)

Full Changelog: dlemstra/Magick.NET@14.15.0...14.16.0

14.15.0

What's Changed

Add PingAsync to MagickImage and MagickImageCollection (#2032).
Added ImportIndexedPixels to MagickImage (#2040)

Related changes in ImageMagick since the last release of Magick.NET:

Stack Overflow in MVG decoder due to missing depth check (GHSA-mx48-2qq3-23hf)
Heap Buffer Overflow in ImageMagick MVG decoder (GHSA-wx47-rm3x-jx6p)
Policy Bypass due to an incomplete fix of CVE-2026-49219 (GHSA-56m6-8q75-f2rw)
Infinite Loop in connected-components when providing invalid arguments (GHSA-qhmf-7fc4-8q3h)
Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments (GHSA-c4v7-w88g-m6c4)
Policy Bypass in concatenate operation due to missing checks (GHSA-82mp-vp5c-9pf7)
Use-After-Free in crafted 8BIM when identifying an image (GHSA-ff5c-8x9r-8qcw)
Information Disclosure in MNG decoder because allocated memory is left unchanged (GHSA-8g53-9m3c-69xg)
Heap Buffer Over-Read in XCF decoder due to integer conversion overflow (GHSA-pjxj-pchx-4c3m)
Heap Buffer Over-Write in morphology operation when an invalid kernel is provided (GHSA-f5m7-cqgw-8hm7)
Heap Buffer Over-Read in BGR decoder due to mising end-of-file check (GHSA-7rgw-xg25-prjm)
Heap Buffer Over-Write in fx operation (GHSA-422r-8c97-xcg4)
Integer Overflow in JNX decoder causes heap buffer over-write when processing extremely large files on 32-bit builds (GHSA-h22j-f9xw-xjjm)

Library updates:

ImageMagick 7.1.2-27 (2026-07-05)
libde265 1.1.1 (2026-06-03)
openexr 3.4.13 (2026-06-19)
libffi 3.6.0 (2026-06-20)
fontconfig 2.18.1 (2026-06-02)
gdk-pixbuf 2.44.7 (2026-06-27)
harfbuzz 14.2.1 (2026-06-02)
libheif 1.23.1 (2026-06-26)
libjxl 0.12.0 (2026-07-01)
openjph 0.30.1 (2026-06-22)
libtiff 4.7.2 (2026-06-26)

Full Changelog: dlemstra/Magick.NET@14.14.0...14.15.0

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection from 10.0.9 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging from 10.0.9 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Logging's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.7.0 to 18.9.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.9.0 What's Changed

Fix tilde/exclamation characters corrupted in TerminalLogger test output by @nohwnd in [fix] Fix tilde/exclamation characters corrupted in TerminalLogger test output microsoft/vstest#16046
Make TranslationLayer Native AOT-compatible by @drewnoakes in Make TranslationLayer Native AOT-compatible microsoft/vstest#16045
Guard GenerateProgramFile target against UseWinUI/UseUwpTools evaluation order by @nohwnd in [fix] fix: guard GenerateProgramFile target against UseWinUI/UseUwpTools evaluation order microsoft/vstest#16072
Add RequestingAssembly to AssemblyResolveEventArgs for binary compat by @nohwnd in [fix] fix: add RequestingAssembly to AssemblyResolveEventArgs for binary compat microsoft/vstest#16076
Remove stale Microsoft.Extensions.FileSystemGlobbing binding redirect from testhost.x86 and datacollector by @Evangelink in Remove stale Microsoft.Extensions.FileSystemGlobbing binding redirect from testhost.x86 and datacollector microsoft/vstest#16082
Fix TRX attachment paths when LogFileName contains a subdirectory by @nohwnd in [fix] Fix TRX attachment paths when LogFileName contains a subdirectory microsoft/vstest#15791
Fix missing dumps for .NET Framework child processes in NetClientHangDumper by @nohwnd in [fix] Fix missing dumps for .NET Framework child processes in NetClientHangDumper microsoft/vstest#16098
Fix data collection channels to use negotiated protocol version instead of V1 by @nohwnd in [fix] Fix data collection channels to use negotiated protocol version instead of V1 microsoft/vstest#16096
Fix race condition in BlameCollector: skip hang dump when testhost hasn't launched yet by @nohwnd in [fix] Fix race condition in BlameCollector: skip hang dump when testhost hasn't launched yet microsoft/vstest#16065
Replace TestSDKAutoGeneratedCode with ExcludeFromCodeCoverage in auto-generated Program files by @nohwnd in [fix] Replace TestSDKAutoGeneratedCode with ExcludeFromCodeCoverage in auto-generated Program files microsoft/vstest#16101
Include testhost process path in crash error messages by @nohwnd in [fix] Include testhost process path in crash error messages microsoft/vstest#16108
Fix DataDriven test results being double-counted in TRX logger totals by @nohwnd in [fix] Fix DataDriven test results being double-counted in TRX logger totals microsoft/vstest#15766
Fix datacollector crash visibility: replace Assert with throwable exceptions by @nohwnd in [fix] Fix datacollector crash visibility: replace Assert with throwable exceptions microsoft/vstest#16048
Add TreatErrorMessagesAsWarnings parameter to TRX logger by @nohwnd in [fix] Add TreatErrorMessagesAsWarnings parameter to TRX logger microsoft/vstest#16106
Wait for testhost stderr to drain before reading its crash output by @nohwnd in Wait for testhost stderr to drain before reading its crash output microsoft/vstest#16128
Handle runtimeconfig.dev.json without additionalProbingPaths by @tmat in Handle runtimeconfig.dev.json without additionalProbingPaths microsoft/vstest#16166
Suggest Microsoft.NET.Test.Sdk when a managed test project brings no testhost by @nohwnd in Suggest Microsoft.NET.Test.Sdk when a managed test project brings no testhost microsoft/vstest#16169
Fix x86 testhost loading mismatched x64 hostfxr (0x800700C1) when run via vstest.console.exe directly (#16151) by @azat-msft in Fix x86 testhost loading mismatched x64 hostfxr (0x800700C1) when run via vstest.console.exe directly (#16151) microsoft/vstest#16156
Preserve the real exception (type + stack trace) when a test run aborts in BaseRunTests by @nohwnd in [fix] Preserve the real exception (type + stack trace) when a test run aborts in BaseRunTests microsoft/vstest#16167

New Contributors

@drewnoakes made their first contribution in Make TranslationLayer Native AOT-compatible microsoft/vstest#16045

Full Changelog: microsoft/vstest@v18.8.0...v18.9.0

18.8.1 What's Changed

Fix protocol negotiation timeout when STJ reflection is disabled (18.8.1) by @nohwnd in Fix protocol negotiation timeout when STJ reflection is disabled (18.8.1) microsoft/vstest#16281

Full Changelog: microsoft/vstest@v18.8.0...v18.8.1

18.8.0 What's Changed

Migrate from Newtonsoft.Json to System.Text.Json / Jsonite (merge to main) by @nohwnd in feat: migrate from Newtonsoft.Json to System.Text.Json / Jsonite (merge to main) microsoft/vstest#15687
- For more detail refer to https://devblogs.microsoft.com/dotnet/vs-test-is-removing-its-newtonsoft-json-dependency/
Create source-only filter package by @Youssef1313 in Create source-only filter package microsoft/vstest#15638
Add ARM64 msdia140.dll support to test platform packages by @nohwnd in Cherry-pick: Add ARM64 msdia140.dll support to test platform packages microsoft/vstest#15692
Fix mutex cleanup crash on macOS/Linux by @nohwnd in Fix mutex cleanup crash on macOS/Linux microsoft/vstest#15684
Restrict artifact temp directory permissions on Unix by @nohwnd in Restrict artifact temp directory permissions on Unix microsoft/vstest#15729
Add support for filtering uncategorized tests with TestCategory=None by @Evangelink in Add support for filtering uncategorized tests with TestCategory=None microsoft/vstest#15727
Fix SCI binding failure in DTA hosts (main) by @nohwnd in Fix SCI binding failure in DTA hosts (main) microsoft/vstest#15724
Fix HTML logger parallel file collision by @nohwnd in [fix] Fix HTML logger parallel file collision microsoft/vstest#15435
Improve error message when testhost cannot be found by @nohwnd in [fix] Improve error message when testhost cannot be found microsoft/vstest#16053
Fix HTML logger exception on invalid XML chars in test display names by @nohwnd in [fix] Fix HTML logger exception on invalid XML chars in test display names microsoft/vstest#16051

Full Changelog: microsoft/vstest@v18.7.0...v18.8.0

Commits viewable in compare view.

Updated NetVips.Native.win-x64 from 8.18.4 to 8.18.5.

Release notes

Sourced from NetVips.Native.win-x64's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated System.Management from 10.0.9 to 10.0.11.

Release notes

Sourced from System.Management's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated xunit.runner.visualstudio from 3.1.5 to 4.0.0.

Release notes

Sourced from xunit.runner.visualstudio's releases.

4.0.0

Release notes: https://xunit.net/releases/visualstudio/4.0.0

4.0.0-pre.5

Release notes: https://xunit.net/releases/visualstudio/4.0.0-pre.5

4.0.0-pre.4

Release notes: https://xunit.net/releases/visualstudio/4.0.0-pre.4

4.0.0-pre.3

Release notes: https://xunit.net/releases/visualstudio/4.0.0-pre.3

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Magick.NET-Q16-AnyCPU from 14.14.0 to 14.16.0 Bumps Microsoft.Extensions.DependencyInjection from 10.0.9 to 10.0.11 Bumps Microsoft.Extensions.Logging from 10.0.9 to 10.0.11 Bumps Microsoft.NET.Test.Sdk from 18.7.0 to 18.9.0 Bumps NetVips.Native.win-x64 from 8.18.4 to 8.18.5 Bumps System.Management from 10.0.9 to 10.0.11 Bumps xunit.runner.visualstudio from 3.1.5 to 4.0.0 --- updated-dependencies: - dependency-name: Magick.NET-Q16-AnyCPU dependency-version: 14.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: Microsoft.Extensions.DependencyInjection dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: Microsoft.Extensions.Logging dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-dependencies - dependency-name: NetVips.Native.win-x64 dependency-version: 8.18.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: System.Management dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-dependencies - dependency-name: xunit.runner.visualstudio dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Aug 15, 2026

dependabot Bot requested a review from edwardlthompson as a code owner August 15, 2026 06:06

dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Aug 15, 2026

Navigation Menu

Bump the nuget-dependencies group with 7 updates - #18

Bump the nuget-dependencies group with 7 updates#18
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/QuickMediaIngest.Tests/nuget-dependencies-0085092cda

dependabot Bot commented on behalf of github Aug 15, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Aug 15, 2026

14.16.0

What's Changed

Related changes in ImageMagick since the last release of Magick.NET:

Library updates:

14.15.0

What's Changed

Related changes in ImageMagick since the last release of Magick.NET:

Library updates:

18.9.0

What's Changed

New Contributors

18.8.1

What's Changed

18.8.0

What's Changed

4.0.0

4.0.0-pre.5

4.0.0-pre.4

4.0.0-pre.3

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants