[dependabot]

Updated Avalonia from 12.1.4 to 12.1.5.

Release notes

Sourced from Avalonia's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Avalonia.Desktop from 12.1.4 to 12.1.5.

Release notes

Sourced from Avalonia.Desktop's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Avalonia.Fonts.Inter from 12.1.4 to 12.1.5.

Release notes

Sourced from Avalonia.Fonts.Inter's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Avalonia.Themes.Fluent from 12.1.4 to 12.1.5.

Release notes

Sourced from Avalonia.Themes.Fluent's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Magick.NET-Q16-AnyCPU from 15.0.0 to 15.1.0.

Release notes

Sourced from Magick.NET-Q16-AnyCPU's releases.

15.1.0

Changes in Magick.NET:

• Added support for arm64 on linux-musl (#​1688)
• Added support for OpenMP on macOS.
• Added HeicWriteDefines (#​2006)
• Allow setting the Format of the BmpWriteDefines to Bmp, Bmp2 or Bmp3.
• Added Split to the CaptionReadDefines.
• Added MaxRawMemory and ReadThumbnails to the DngReadDefines.
• Added PrimaryImage to the HeicReadDefines.
• Added RestartInterval to the JpegWriteDefines.
• Added SamplingFactor to the TiffWriteDefines.
• Added DecodingSpeed, Distance and Quality to the JxlWriteDefines.
• Added Printed and StopOnError to the PdfReadDefines.
• Added RightToLeft to the PdfWriteDefines.
• Added Timestamp and allow setting the Png format in the PngWriteDefines.
• Added WriteLayers to the PsdWriteDefines.
• Added IgnoreGpsProperties to the TiffReadDefines.
• Added Segments to the WebPWriteDefines and made Segment obsolete.
• Corrected setting the value of ShowCompressed and ThreadLevel in the WebPWriteDefines.
• Added overflow checks to prevent a possible out of bounds read in the native code.
• Added channel overloads to Normalize, BilateralBlur and MotionBlur.
• Added commit information to Notice.txt in the NuGet package.

Related changes in ImageMagick since the last release of Magick.NET:

• Denial of service in BGR, CMYK, GRAY, RGB, YCBCR and YUV decoders (GHSA-67p3-xhc7-g797)
• Policy Bypass on Windows when matching a path (GHSA-hpjv-7vmp-f58w)
• Infinite Loop in SVG decoder (GHSA-q66g-3m63-78mh)
• Policy Bypass in various encoders when reading profiles (GHSA-xvqp-rcj6-3h2q)
• Policy Bypass in ASE decoder (GHSA-x3j8-cjwr-m4pv)
• Policy Bypass when reading XMP profile (GHSA-pp97-v3gv-9vh4)
• Heap Buffer Over-Read in the TIFF decoder that can result in a Heap Buffer Over-Write (GHSA-gr4q-6v79-qj3g)

Library updates:

• ImageMagick 7.1.2-35 (2026-10-31)
• aom 3.15.2 (2026-10-09)
• brotli 1.2.1 (2026-10-21)
• freetype 2.15.0 (2026-10-11)
• fribidi 1.0.18 (2026-10-29)
• harfbuzz 15.0.0 (2026-10-22)
• libjpeg-turbo 3.2.1 (2026-10-27)
• openh264 2.7.0 (2026-10-22)
• libraw 0.22.3 (2026-10-26)
• libzip 1.12.1 (2026-10-14)

Full Changelog: dlemstra/Magick.NET@15.0.0...15.1.0

Commits viewable in compare view.

Updated Meziantou.Analyzer from 3.0.320 to 3.0.322.

Release notes

Sourced from Meziantou.Analyzer's releases.

3.0.322

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.322

What's Changed

• Fuzz: report the compiler bugs to a GitHub project instead of blaming the analyzers by @​meziantou in Fuzz: report the compiler bugs to a GitHub project instead of blaming the analyzers meziantou/Meziantou.Analyzer#1776

Full Changelog: meziantou/Meziantou.Analyzer@3.0.321...3.0.322

3.0.321

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.321

What's Changed

• chore(deps): update dependency meziantou.framework.roslyn to 1.2.3 by @​renovate[bot] in chore(deps): update dependency meziantou.framework.roslyn to 1.2.3 meziantou/Meziantou.Analyzer#1773
• chore(deps): update dependency meziantou.framework.roslyn to 1.2.4 by @​renovate[bot] in chore(deps): update dependency meziantou.framework.roslyn to 1.2.4 meziantou/Meziantou.Analyzer#1774

Full Changelog: meziantou/Meziantou.Analyzer@3.0.320...3.0.321

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions