From 1581591a400aa874465bcb49660829ca35a34129 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 21 Jun 2026 22:37:11 +0000 Subject: [PATCH 1/2] Bump SixLabors.ImageSharp and SixLabors.ImageSharp.Drawing Bumps SixLabors.ImageSharp from 3.1.12 to 4.0.0 Bumps SixLabors.ImageSharp.Drawing from 2.1.7 to 3.0.0 --- updated-dependencies: - dependency-name: SixLabors.ImageSharp dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major - dependency-name: SixLabors.ImageSharp.Drawing dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- Directory.Packages.props | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Directory.Packages.props b/Directory.Packages.props index d0f54e0..fd13578 100644 --- a/Directory.Packages.props +++ b/Directory.Packages.props @@ -13,8 +13,8 @@ - - + + From b3ba6e2b5f16e98bc41c8d554b780808297c41f6 Mon Sep 17 00:00:00 2001 From: HandyS11 Date: Mon, 22 Jun 2026 16:43:04 +0200 Subject: [PATCH 2/2] Keep SixLabors on Apache-2.0 versions; ignore major bumps ImageSharp v4 / ImageSharp.Drawing v3 moved to the commercial "Six Labors Split License", whose MSBuild target hard-fails the build without a paid license key (CI failure on RustPlusBot.Features.Map). Revert the version bump back to the Apache-2.0 3.1.12 / 2.1.7 line and add Dependabot ignore rules for major updates of both packages so the bump is not re-proposed. Co-Authored-By: Claude Opus 4.8 --- .github/dependabot.yml | 8 ++++++++ Directory.Packages.props | 4 ++-- 2 files changed, 10 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 50705dc..d4f9930 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -9,3 +9,11 @@ updates: directory: "/" schedule: interval: "weekly" + ignore: + # SixLabors moved ImageSharp v4 / ImageSharp.Drawing v3 to the commercial + # "Six Labors Split License", which hard-fails the build without a paid + # license key. Stay on the Apache-2.0 3.1.x / 2.1.x line. See PR #21. + - dependency-name: "SixLabors.ImageSharp" + update-types: ["version-update:semver-major"] + - dependency-name: "SixLabors.ImageSharp.Drawing" + update-types: ["version-update:semver-major"] diff --git a/Directory.Packages.props b/Directory.Packages.props index fd13578..d0f54e0 100644 --- a/Directory.Packages.props +++ b/Directory.Packages.props @@ -13,8 +13,8 @@ - - + +