Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Oct 27, 2025

Updated Magick.NET-Q8-AnyCPU from 14.6.0 to 14.9.0.

Release notes

Sourced from Magick.NET-Q8-AnyCPU's releases.

14.9.0

What's Changed

  • Converting Tif file with 2 alpha channels yields scrambled result. #​1523
  • Embedded base64 image not rendered when converting SVG on Linux RHEL (regression since 14.7.1) #​1917
  • Allow setting the StrokeDashArray of the DrawingSettings to null.
  • Moved static properties in ColorProfile to a new ColorProfiles class and mark them obsolete.

Related changes in ImageMagick since the last release of Magick.NET:

  • Fix issue where the size of a line is extended to 70 characters when writing a PBM image (Restore previous PBM raster line format ImageMagick/ImageMagick#8346).
  • Extra images will be added as meta channels when combining images.
  • Added support for reading and writing meta channels in a TIFF images with separate planes of data.
  • Promote photometric tiff tag to required
  • Added extra check to resolve issue on 32-bit systems (GHSA-9pp9-cfwx-54rm)

Library updates:

  • ImageMagick 7.1.2-7 (2025-10-15)
  • aom 3.13.1 (2025-09-05)
  • openexr 3.4.0 (2025-09-05)
  • freetype 2.14.1 (2024-09-11)
  • gdk-pixbuf 2.44.3 (2025-09-30)
  • harfbuzz 12.1.0 (2025-10-01)
  • libjpeg-turbo 3.1.2 (2025-09-03)
  • openjpeg 2.5.4 (2025-09-20)
  • libtiff 4.7.1 (2025-09-12)
  • libxml2 2.15.0 (2025-09-15)

Full Changelog: dlemstra/Magick.NET@14.8.2...14.9.0

14.8.2

What's Changed

  • Corrected the generated version and added a unit test for it (#​1894).
  • Fixed missing embedded resources in the native library (#​1896 and #​1898).

Related changes in ImageMagick since the last release of Magick.NET:

Library updates:

  • ImageMagick 7.1.2-3 (2025-08-31)
  • harfbuzz 11.4.4 (2025-08-26)

Full Changelog: dlemstra/Magick.NET@14.8.1...14.8.2

14.8.1

What's Changed

  • Corrected Gravity overload of the Splice method (#​1881).

Related changes in ImageMagick since the last release of Magick.NET:

Library updates:

  • ImageMagick 7.1.2-2 (2025-08-24)
  • ffi 3.5.2 (2025-08-02)
  • harfbuzz 11.4.1 (2025-08-13)
  • heif 1.20.2 (2025-08-05)
  • highway 1.3.0 (2025-08-14)
  • imath 3.2.1 (2025-08-15)
  • raqm 0.10.3 (2025-08-05)

Full Changelog: dlemstra/Magick.NET@14.8.0...14.8.1

14.8.0

What's Changed

  • Added Sf3 to MagickFormat.
  • Added Gravity overload to the Splice method (#​1881).
  • Added TrimMemory to the ResourceLimits (#​1854).

Library updates:

  • ImageMagick 7.1.2-1 (2025-08-12)
  • exr 3.3.5 (2025-07-26)
  • ffi 3.5.1 (2025-06-10)
  • fontconfig 2.17.1 (2025-07-02)
  • gdk-pixbuf 2.43.3 (2025-06-29)
  • jpeg-turbo 3.1.1 (2025-06-10)
  • pixman 0.46.4 (2025-07-20)
  • png 1.6.50 (2025-07-02)
  • webp 1.6.0 (2025-07-09)
  • xml 2.14.5 (2025-07-10)
  • zip 1.11.4 (2025-05-23)

Full Changelog: dlemstra/Magick.NET@14.7.0...14.8.0

14.7.0

What's Changed

  • Added extra overload to the Resize method that allows specifying the filter (#​1819).
  • Allow reading of clip paths without a name and give them a numeric name that can be used by ImageMagick (#​1814).
  • Use the ArrayPool API in .NET Standard 2.1 or later to reduce the creation of LOH objects (#​1812).
  • Allow modification of X and Y in the PointD struct (#​1856).
  • Improved parsing of a geometry in the MagickGeometry class (#​1855).
  • Added Icn to MagickFormat.

Related changes in ImageMagick since the last release of Magick.NET:

Library updates:

  • ImageMagick 7.1.2-0 (2025-07-13)
  • aom 3.12.1 (2025-04-11)
  • de265 1.0.16 (2025-05-04)
  • deflate 1.24.0 (2025-05-11)
  • ffi 3.4.8 (2025-04-10)
  • harfbuzz 11.2.1 (2025-05-15)
  • heif 1.20.1 (2025-07-02)
  • lzma 5.8.1 (2025-04-03)
  • openexr 3.3.3 (2025-03-24)
  • pixman 0.46.0 (2025-04-30)
  • png 1.6.48 (2025-04-30)
  • raw 0.22.0-Devel202502 (2024-02-24)
  • xml 2.14.3 (2025-05-13)

Full Changelog: dlemstra/Magick.NET@14.6.0...14.7.0

Commits viewable in compare view.

Updated Microsoft.CodeAnalysis.Metrics from 3.3.4 to 4.14.0.

Release notes

Sourced from Microsoft.CodeAnalysis.Metrics's releases.

4.2.0-4.22266.5

Release

4.2.0-3.22151.16

Release

4.2.0-1.22108.11

Release

4.0.0-2.21354.7

Release

4.0.0-2.21254.26

Release

4.0.0-1.21277.15

Release

3.10.0-3.21201.20

Release

3.10.0-2.21153.36

Release

3.10.0-1.21102.26

Release

3.7.0-3.20312.3

Release Notes
Install Instructions

Repos

3.7.0-3.20269.11

Release Notes
Install Instructions

Repos

3.7.0-2.20277.1

Release Notes
Install Instructions

Repos

3.6.0

Release Notes
Install Instructions

Commits viewable in compare view.

Updated Microsoft.Data.Sqlite from 9.0.5 to 9.0.10.

Release notes

Sourced from Microsoft.Data.Sqlite's releases.

9.0.10

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.9...v9.0.10

9.0.9

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.8...v9.0.9

9.0.7

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.6...v9.0.7

9.0.6

Bug Fixes

  • Cosmos/FTS: Improved FullTextScore Translation for Multiple Keywords
    The translation of FullTextScore in Cosmos Full-Text Search has been updated to use multiple keywords instead of a keyword array, addressing issues with search accuracy and query compatibility. This resolves #​35983 and ensures more reliable full-text search results.
    #​36000 by @​maumar

Dependency Updates

  • [release/8.0] Update dependencies from dotnet/arcade
    Updated the Arcade build infrastructure dependencies for the 8.0 release branch, bringing in the latest improvements and security fixes from the Arcade ecosystem.
    #​35930 by @​dotnet-maestro
  • [release/9.0] Update dependencies from dotnet/arcade
    Updated Arcade dependencies for the 9.0 release branch, ensuring the build system benefits from the latest tooling and reliability enhancements.
    #​36006 by @​dotnet-maestro
  • [release/8.0] Update dependencies from dotnet/arcade
    Another update to Arcade dependencies for the 8.0 branch, further aligning with upstream improvements and fixes.
    #​36085 by @​dotnet-maestro
  • [release/9.0] Update dependencies from dotnet/arcade
    Additional update to Arcade dependencies for the 9.0 branch, maintaining up-to-date build tooling and infrastructure.
    #​36065 by @​dotnet-maestro

Technical Improvements

  • Merging Internal Commits for release/8.0
    Integrated various internal commits into the 8.0 release branch, improving code quality, maintainability, and aligning with internal standards.
    #​35926 by @​vseanreesermsft
  • Merging Internal Commits for release/8.0
    Additional internal commits merged into the 8.0 branch, further enhancing stability and maintainability.
    #​36080 by @​vseanreesermsft
  • Merging Internal Commits for release/9.0
    Integrated internal improvements into the 9.0 branch, ensuring consistency and codebase health.
    #​36081 by @​vseanreesermsft

Infrastructure

  • Update Branding to 9.0.6
    Updated the product branding and version numbers to 9.0.6, ensuring that all assemblies and packages reflect the correct release version.
    #​36044 by @​vseanreesermsft
  • Update Branding to 8.0.17
    Updated branding for the 8.0 release line to version 8.0.17, keeping versioning consistent across all release artifacts.
    #​36043 by @​vseanreesermsft

Miscellaneous

  • [automated] Merge branch 'release/8.0' => 'release/9.0'
    Automated merge of changes from the 8.0 branch into the 9.0 branch, ensuring that all relevant fixes and improvements are carried forward.
    #​35927 by @​github-actions
  • Merge release/9.0 to release/9.0-staging
    Merged the 9.0 branch into the 9.0-staging branch, preparing for further testing and validation before final release.
    #​36051 by @​AndriySvyryd
    ... (truncated)

Commits viewable in compare view.

Updated Microsoft.Extensions.TimeProvider.Testing from 9.5.0 to 9.10.0.

Release notes

Sourced from Microsoft.Extensions.TimeProvider.Testing's releases.

9.10.0

What's Changed

New Contributors

9.9.0

Highlights

AI

  • Abstractions for remote MCP servers; response/approval flow support via new experimental types
  • Function approvals via new experimental types (e.g., ApprovalRequiredAIFunction, user input/approval request & response content).
  • Reasoning text streaming for OpenAI Responses ChatClient streaming.
  • AIFunction split into a base class to improve extensibility.
  • IChatReducer moved to Microsoft.Extensions.AI.Abstractions.
  • Updated to OpenAI 2.4.0 and genai standard convention 1.37.
  • Coalescing logic now treats ChatMessage.Role changes as new messages.
  • GetResponseAsync<T> now reads only the last message (bug fix).
  • OpenTelemetry ChatClient/EmbeddingGenerator logs raw additional properties (no key mangling).
  • Fixed empty annotated text chunk handling in streaming with OpenAI Assistants.

Telemetry & Diagnostics

  • HTTP diagnostics log query string params with proper redaction (emitted on url.query).
  • server.address telemetry emits host only (per OpenTelemetry semantic conventions).
  • Heuristics added to detect well-known model hosts.
  • Resource monitoring can consider Environment.CpuUsage.

New Contributors

Full Changelog: dotnet/extensions@v9.8.0...v9.9.0

9.8.0

What's Changed

9.7.2

Packages Released

What's Changed

  • Target .NET 8 for more stable runtime requirement by @​joelverhagen in #​6617

Full Changelog: dotnet/extensions@v9.7.1...v9.7.2

9.7.1

Packages Released

What's Changed

Full Changelog: dotnet/extensions@v9.7.0...v9.7.1

9.7.0

What's Changed

New Contributors

Full Changelog: dotnet/extensions@v9.6.0...v9.7.0

9.6.0

What's Changed

New Contributors

Full Changelog: dotnet/extensions@v9.5.0...v9.6.0

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 17.13.0 to 18.0.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.0.0

What's Changed

Internal fixes and updates

17.14.1

What's Changed

Full Changelog: microsoft/vstest@v17.14.0...v17.14.1

17.14.0

What's Changed

.NET versions updated

This version of VS Test upgraded .NET to net8 and net9. All projects targeting net6.0 (or other end-of-life .NET target frameworks) should pin their version of Microsoft.NET.Test.SDK to 17.13.0, or update the projects to net8 or newer. We remain backwards compatible with previous versions of Microsoft.NET.Test.SDK. This change does NOT prevent you from:

  • Updating to the latest VS, and running tests from net6.0 test projects.
  • Updating to the latest .NET SDK, and running tests from net6.0 test projects.

It also has no impact on .NET Framework projects, where we continue targeting .NET Framework 4.6.2.

Changes

Internal version updates and fixes

New Contributors

17.14.0-preview-25107-01

What's Changed

.NET versions updated

This version of VS Test upgraded .NET to net8 and net9. All projects targeting net6.0 (or other end-of-life .NET target frameworks) should pin their version of Microsoft.NET.Test.SDK to 17.13.0, or update the projects to net8 or newer. We remain backwards compatible with previous versions of Microsoft.NET.Test.SDK. This change does NOT prevent you from:

  • Updating to the latest VS, and running tests from net6.0 test projects.
  • Updating to the latest .NET SDK, and running tests from net6.0 test projects.

It also has no impact on .NET Framework projects, where we continue targeting .NET Framework 4.6.2.

Changes

Internal version updates and fixes

Will probably revert before release:

New Contributors

Full Changelog: microsoft/vstest@v17.13.0...v17.14.0-preview-25107-01

Commits viewable in compare view.

Updated NetEscapades.AspNetCore.SecurityHeaders from 1.1.0 to 1.2.0.

Release notes

Sourced from NetEscapades.AspNetCore.SecurityHeaders's releases.

1.2.0

Changes in 1.2.0:

Features:

  • Add support for child-src to Content-Security-Policy #​259
  • Allow multiple calls to AddSecurityHeadersPolicies() for registering named polices #​250

Fixes:

Changes in 1.1.0

Features:

  • Add AddRange() to SourceCollection #​240, #​242 (Thanks @​rankobp)
  • Improve CSP documentation #​241 (Thanks @​Meir017)
  • Add X-Frame-Options ALLOW-FROM with correct method name AddFrameOptionsAllowFrom() #​244

Changes in 1.0.0

This marks the first major release of the NetEscapades.AspNetCore.SecurityHeaders. For simplicity, all the changes since 0.24.0 are included below.

Breaking Changes:

  • Drop support for .NET Standard 2.0, raises minimum framework to .NET Core 3.1 #​167, #​171
  • Removed "document header" functionality, in favour of always adding all headers #​186
  • Remove X-XSS-Protection from default headers and mark obsolete #​168
  • Add cross-origin-opener-policy: same-origin to default headers #​184
  • Mark Feature-Policy as obsolete #​187
  • Mark Expect-CT as obsolete #​197
  • Make nonce generation lazy on call to HttpContext.GetNonce() #​198
  • Remove ambient-light-sensor=() from DefaultSecureDirectives() for permissions policy #​203 (Thanks damienbod!)
  • Update COOP, COEP, and CORP for AddDefaultSecurityHeaders() and AddDefaultApiSecurityHeaders() #​204 (Thanks damienbod!)
  • Removes obsolete APIs (#​217)

Features:

  • Allow configuring "named" policies, and applying different policies to different endpoints #​172, #​173, #​185
  • Allow customizing the HeaderPolicyCollection just before it is applied, customizing per request #​174, #​185
  • Make adding directives to Content-Security-Policy idempotent to avoid duplicates #​169
  • Add AddDefaultApiSecurityHeaders() for adding default headers to APIs #​183, #​184
  • Add AddPermissionsPolicyWithRecommendedDirectives() and PermissionsPolicyBuilder.AddDefaultSecureDirectives() for adding secure Permissions-Policy directives in bulk #​183, #​184
  • NetEscapades.AspNetCore.SecurityHeaders now has an icon, thanks @​khalidabuhakmeh! #​195
  • Allow accessing an IServiceProvider when configuring a SecurityHeaderPolicyBuilder #​200
  • Adds support for Trusted Types to Content-Security-Policy (#​216, #​218)

Build updates:

  • Allow building from forks #​232
  • Fix release generation #​231, #​235, #​236
  • Fix recording test results #​221
  • Define version in the build project instead #​223
    ... (truncated)

Commits viewable in compare view.

Updated NLog.Web.AspNetCore from 5.4.0 to 6.0.5.

Release notes

Sourced from NLog.Web.AspNetCore's releases.

6.0.5

  • #​1108 Updated to NLog v6.0.5

6.0.4

  • #​1107 Updated to NLog v6.0.4

6.0.3

  • NLog.Web.AspNetCore

    • #​1101 Added ${aspnet-request-endpoint-group} (@​snakefoot)
    • #​1102 Added ${aspnet-request-endpoint-name} (@​snakefoot)
    • #​1103 Updated dependency NLog v6.0.3 (@​snakefoot)
  • NLog.Web

    • #​1103 Updated dependency NLog v6.0.3 (@​snakefoot)

6.0.2

  • #​1099 Updated to NLog v6.0.2

6.0.1

  • #​1097 Updated to NLog v6.0.1

6.0

  • NLog.Web.AspNetCore

    • Updated dependency NLog v6.0
    • Enabled nullable references
    • Enabled <IsAotCompatible>
    • Removed support for .NET Core 3.1 + .NET v5
    • Updated .NET Framework 4.6.2 to use NET8-nuget-dependencies
    • Added ${host-environment} as alias for ${aspnet-environment}
    • Added ${host-rootdir} as alias for ${aspnet-appbasepath}
    • Added ${host-appname} as alias for ${iis-site-name}
    • Removed obsolete extension-methods to register NLog as Logging Provider.
    • Removed support for EvaluateAsNestedProperties, instead use ObjectPath.
    • Renamed class-names for old LayoutRenderers to follow standards (@​bakgerman)
    • Marked AspNetLayoutRendererBase DoAppend-method as obsolete (@​bakgerman)
  • NLog.Web

    • Updated dependency NLog v6.0
    • Enabled nullable references
    • Added ${host-rootdir} as alias for ${aspnet-appbasepath}
    • Added ${host-appname} as alias for ${iis-site-name}
    • Removed support for EvaluateAsNestedProperties, instead use ObjectPath.
    • Renamed class-names for old LayoutRenderers to follow standards (@​bakgerman)
    • Marked AspNetLayoutRendererBase DoAppend-method as obsolete (@​bakgerman)
    • Introduced NLogBufferingTargetWrapperModule t...

Description has been truncated

Bumps Magick.NET-Q8-AnyCPU from 14.6.0 to 14.9.0
Bumps Microsoft.CodeAnalysis.Metrics from 3.3.4 to 4.14.0
Bumps Microsoft.Data.Sqlite from 9.0.5 to 9.0.10
Bumps Microsoft.Extensions.TimeProvider.Testing from 9.5.0 to 9.10.0
Bumps Microsoft.NET.Test.Sdk from 17.13.0 to 18.0.0
Bumps NetEscapades.AspNetCore.SecurityHeaders from 1.1.0 to 1.2.0
Bumps NLog.Web.AspNetCore from 5.4.0 to 6.0.5
Bumps Ulid from 1.3.4 to 1.4.1
Bumps Verify.Http from 6.5.0 to 7.2.0
Bumps Verify.Xunit from 30.1.0 to 31.0.5
Bumps xunit.runner.visualstudio from 3.1.0 to 3.1.5

---
updated-dependencies:
- dependency-name: Magick.NET-Q8-AnyCPU
  dependency-version: 14.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: main
- dependency-name: Microsoft.CodeAnalysis.Metrics
  dependency-version: 4.14.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: main
- dependency-name: Microsoft.Data.Sqlite
  dependency-version: 9.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: main
- dependency-name: Microsoft.Extensions.TimeProvider.Testing
  dependency-version: 9.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: main
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: main
- dependency-name: NetEscapades.AspNetCore.SecurityHeaders
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: main
- dependency-name: NLog.Web.AspNetCore
  dependency-version: 6.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: main
- dependency-name: Ulid
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: main
- dependency-name: Verify.Http
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: main
- dependency-name: Verify.Xunit
  dependency-version: 31.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: main
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: main
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Oct 27, 2025
@github-actions github-actions bot changed the title Bump the main group with 11 updates Updated dependencies Oct 27, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Cosmos/FTS: update translation of FullTextScore to use multiple keywords rather than keyword array

2 participants