Skip to content

Bump the nuget group with 4 updates #5

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: develop
Choose a base branch
from
Open

Bump the nuget group with 4 updates #5

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Jul 30, 2025

Updated Newtonsoft.Json from 12.0.3 to 13.0.1.

Release notes

Sourced from Newtonsoft.Json's releases.

13.0.1

  • New feature - Add JsonSelectSettings with configuration for a regex timeout
  • Change - Remove portable assemblies from NuGet package
  • Change - JsonReader and JsonSerializer MaxDepth defaults to 64
  • Change - Change InvalidCastException to JsonSerializationException on mismatched JToken
  • Fix - Fixed throwing missing member error on ignored fields
  • Fix - Fixed various nullable annotations
  • Fix - Fixed annotations not being copied when tokens are cloned
  • Fix - Fixed naming strategy not being used when deserializing dictionary enum keys
  • Fix - Fixed serializing nullable struct dictionaries
  • Fix - Fixed JsonWriter.WriteToken to allow null with string token
  • Fix - Fixed missing error when deserializing JToken with a contract type mismatch
  • Fix - Fixed JTokenWriter when writing comment to an object

Commits viewable in compare view.

Updated RestSharp from 106.10.1 to 106.12.0.

Release notes

Sourced from RestSharp's releases.

106.12.0

What's Changed

New Contributors

... (truncated)

106.11.7

Fixed the assembly version

106.11.5

  • Closed OAuth encoding issue
  • Closed several culture-related issues

106.11.4

  • Regression fixes
  • Assembly versioning reversal
  • Fixed Xamarin encoding lookup issue

106.11.3

Fixing the url parameter encoding replace

106.11.0

  • Assembly version to match the file version

Commits viewable in compare view.

Pinned SharpZipLib at 1.3.3.

Release notes

Sourced from SharpZipLib's releases.

1.3.3

Another minor release, containing security fixes and smaller bugfixes.

Fixes:

Smaller changes:

Other changes (not related to library code):

1.3.2

Another minor release, containing security fixes and smaller bugfixes.
Additionally, this version will have an additional target framework, .NET Standard 2.1, which will see some speed improvements when
used in newer versions of .NET (Core), mainly in Bzip2.

Features

Smaller fixes and optimizations

Other changes (not related to library code)

1.3.1

Minor release, mainly to address the incorrect file version of v1.3.0, but also contains some security fixes and performance improvements.

Highlights

  • Correct FileVersion and AssemblyVersion
  • Security fixes for ZipFile and Zip*Streams
  • Improved CRC32 performance
  • BZip2 compression support for Zip files

Features

Fixes

Other changes (not related to library code)

1.3.0

Highlights

  • AES encryption fixes and support in FastZip
  • File name encoding support for Tar
  • Improved Unix timestamp support
  • Better handling of entry file names
  • Fix errors with entries using Stored compression method

Changes

  • TarArchive.ExtractContents() now needs another parameter set to true to allow the extraction to traverse outside of the target directory.
  • TarArchive constructors now includes an Encoding parameter. Omitting it will discard any non-ASCII bytes in file names.

Fixes

  • [#​503] Consider AES overhead when testing encrypted folder entries by Richard Webb
  • [#​452] Ensure crypto streams are disposed in ZipFile.GetOutputStream by Richard Webb
  • [#​333] Handle unsupported compression methods in ZipInputStream better by Richard Webb
  • [#​402] Only convert entry.Name once when accessing updateIndex by Vladyslav Taranov
  • [#​353] Fix ZipFile.TestLocalHeader CompressionMethod resolving for AES entries by Richard Webb
  • [#​460] Account for AES overhead in compressed entry size by Richard Webb
  • [#​422] Change ZipOutputStream.PutNextEntry to explicity validate the requested compression method by Richard Webb
  • [#​467] Allow seeking a PartialInputStream to the very end by Víctor M. González
  • [#​440] Use CompressionMethodForHeader for header entries by Richard Webb
  • [#​420] Throw NotSupportedException in ZipFile.Add when trying to add AES entry by Richard Webb
  • [#​421] Have ZipFile.Add validate compression compability internally by Richard Webb
  • [#​387] Better handle baseStreams closing themselves unexpectedly by Richard Webb
  • [#​408] When searching for the Zip64 end of central directory locator, pay attention to its fixed size by Richard Webb
  • [#​406] Skip forced Deflate flush when using Stored compression by nils måsén
  • [#​362] Don&#​39;t call CleanName from the ZipEntry constructor by Richard Webb
  • [#​465] Use correct count in ZipAESStream.ReadBufferedData by Víctor M. González
  • [#​390] Ensure GZipOutputStream headers are written before flush by Richard Webb
  • [#​498] Use string.Trim to trim strings by Richard Webb
  • [#​432] Throw ArgumentNullException in BZip2 by Richard Webb
  • [#​519] Restrict path traversal on TarArchive extraction by nils måsén

Features

  • [#​201] Raise ProcessDirectory event for FastZip extract by Stevie-O
  • [#​380] Add support for AES encryption in FastZip.CreateZip by Richard Webb
  • [#​497] Transform new entry names using an INameTranform in ZipOutputStream by Richard Webb
  • [#​482] Add variants of FastZip.CreateZip taking IScanFilter instead of strings by Richard Webb
  • [#​455] Add FastZip.CreateZip with a leaveOpen parameter by Richard Webb
  • [#​433] Restore directory timestamps when extracting with FastZip by Richard Webb
  • [#​472] Allow ZipFile to accept empty strings as passwords when decrypting AES entries by Richard Webb
  • [#​364] Add nameEncoding parameter to Tar entries by Yusuke Ito
  • [#​463] Improve support for Unix timestamps in ZIP archives by Bastian Eicher

Other changes (not related to library code)

  • [#​346] Add a Security Policy by nils måsén
    ... (truncated)

Commits viewable in compare view.

Pinned SixLabors.ImageSharp at 2.1.11.

Release notes

Sourced from SixLabors.ImageSharp's releases.

2.1.11

What's Changed

Full Changelog: SixLabors/ImageSharp@v2.1.10...v2.1.11

2.1.10

What's Changed

Full Changelog: SixLabors/ImageSharp@v2.1.9...v2.1.10

2.1.9

What's Changed

Full Changelog: SixLabors/ImageSharp@v2.1.8...v2.1.9

2.1.8

What's Changed

Full Changelog: SixLabors/ImageSharp@v2.1.7...v2.1.8

2.1.7

What's Changed

Full Changelog: SixLabors/ImageSharp@v2.1.6...v2.1.7

2.1.6

What's Changed

Full Changelog: SixLabors/ImageSharp@v2.1.5...v2.1.6

2.1.5

What's Changed

Full Changelog: SixLabors/ImageSharp@v2.1.4...v2.1.5

2.1.4

What's Changed

Full Changelog: SixLabors/ImageSharp@v2.1.3...v2.1.4

2.1.3

What's Changed

Full Changelog: SixLabors/ImageSharp@v2.1.2...v2.1.3

2.1.2

What's Changed

Full Changelog: SixLabors/ImageSharp@v2.1.1...v2.1.2

2.1.1

What's Changed

Full Changelog: SixLabors/ImageSharp@v2.1.0...v2.1.1

2.1.0

Advisories and Breaking Changes

Release Notes

Area:Performance

Bug

Codequality

Documentation

  • Fix documentation of HorizontalResolution and VerticalResolution properties - #​1981 via @​0xced

Enhancement

Formats:Jpeg

Formats:Png

Formats:Tiff

2.0.0

Advisories and Breaking Changes

Major breaking changes

  • Due to the new unmanaged memory engine, we had to redesign our pixel processing and low level memory management API-s. The most visible change is that the GetPixelRowSpan() methods have been replaced with ProcessPixelRows() variants. This was done to guarantee memory safety. For more details see:
  • Png and Jpeg now decode to pixels formats closer to the encoded format when using the non-generic API. (For example Jpeg now decodes to Image<Rgb24> instead of Image<Rgba32>.) This was done to reduce memory usage and remove some surprises for users.
  • We've dropped the old NetStandard 1.3 target. This targeted frameworks not supported by Microsoft and was adding overhead to development.

Complete list of breaking PR-s

Release Notes

API

Area:Build

Area:Formats

Area:Performance

1.0.4

Advisories and Breaking Changes

  • None

Release Notes

Bug Fixes

1.0.3

Advisories and Breaking Changes

  • None

Release Notes

API Enhancements

Performance

Bug Fixes

Other

1.0.2

Advisories and Breaking Changes

  • None

Release Notes

Bug Fixes

Area:Api

Area:Performance

Area:Build

... (truncated)

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump the nuget group with 4 updates
bba817a 
Bumps Newtonsoft.Json to 13.0.1
Bumps RestSharp from 106.10.1 to 106.12.0
Bumps SharpZipLib to 1.3.3
Bumps SixLabors.ImageSharp to 2.1.11

---
updated-dependencies:
- dependency-name: Newtonsoft.Json
  dependency-version: 13.0.1
  dependency-type: direct:production
  dependency-group: nuget
- dependency-name: Newtonsoft.Json
  dependency-version: 13.0.1
  dependency-type: direct:production
  dependency-group: nuget
- dependency-name: Newtonsoft.Json
  dependency-version: 13.0.1
  dependency-type: direct:production
  dependency-group: nuget
- dependency-name: Newtonsoft.Json
  dependency-version: 13.0.1
  dependency-type: direct:production
  dependency-group: nuget
- dependency-name: SharpZipLib
  dependency-version: 1.3.3
  dependency-type: direct:production
  dependency-group: nuget
- dependency-name: SharpZipLib
  dependency-version: 1.3.3
  dependency-type: direct:production
  dependency-group: nuget
- dependency-name: SixLabors.ImageSharp
  dependency-version: 2.1.11
  dependency-type: direct:production
  dependency-group: nuget
- dependency-name: SixLabors.ImageSharp
  dependency-version: 2.1.11
  dependency-type: direct:production
  dependency-group: nuget
- dependency-name: RestSharp
  dependency-version: 106.12.0
  dependency-type: direct:production
  dependency-group: nuget
- dependency-name: Newtonsoft.Json
  dependency-version: 13.0.1
  dependency-type: direct:production
  dependency-group: nuget
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Jul 30, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants