nissl-lab / npoi

a .NET library that can read/write Office formats without Microsoft Office installed. No COM+, no interop.
Apache License 2.0
5.67k stars 1.43k forks source link

Upgrade SixLabors.ImageSharp to version 2.1.9 #1402

Closed lahma closed 1 month ago

lahma commented 1 month ago

Enabling pinning which allows to define all target versions in Directory.Packages.props. dotnet restore --force-evaluate -p:NuGetAudit=true -p:NuGetAuditMode=all .\NPOI.Core.Test.sln was also reporting " warning NU1903: Package 'System.Formats.Asn1' 8.0.0 has a known high severity vulnerability" which was fixed by adding explicit reference and pinnin guiding the restore in projects.

fixes #1394