Skip to content

Suppress ImageSharp vuln warnings - #1143

Merged
Toastbrot236 merged 2 commits into
LittleBigRefresh:mainfrom
Toastbrot236:img-sharp-bump
Oct 10, 2026
Merged

Toastbrot236 merged 2 commits into
LittleBigRefresh:mainfrom
Toastbrot236:img-sharp-bump

Conversation

@Toastbrot236

Copy link
Copy Markdown
Contributor

For some reason Dependabot didn't open a PR for this automatically

@Toastbrot236
Toastbrot236 marked this pull request as ready for review October 9, 2026 16:33
@Toastbrot236

Copy link
Copy Markdown
Contributor Author

Yeah no we might need to replace this library, wtf

@Toastbrot236

Copy link
Copy Markdown
Contributor Author

Since I really don't want to delay the next release too much, and I've still got a fair amount of other stuff to finish for the next release, I'll deal with replacing this lib after the release. For now, I will revert back to v3.1.12, and its vulnerability warnings will be suppressed (4/5 of them are limited to just TIFF parsing, which we don't do here, and the one other vuln doesn't seem too bad)

@Toastbrot236 Toastbrot236 changed the title Manually bump ImageSharp version to 4.1.3 Suppress ImageSharp vuln warnings Oct 10, 2026
@Toastbrot236
Toastbrot236 merged commit f514436 into LittleBigRefresh:main Oct 10, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant