Refresh dependencies and fix vulnerable packages

.github/workflows/pr-checks.yml

@@ -167,6 +167,13 @@ jobs:
           dotnet-version: '10.0.x'
       - name: Restore dependencies
         run: dotnet restore
+      - name: Install Six Labors license
+        env:
+          SIXLABORS_LICENSE: ${{ secrets.SIXLABORS_LICENSE }}
+        run: |
+          printf '%s\n' "$SIXLABORS_LICENSE" > "$RUNNER_TEMP/sixlabors.lic"
+          # Later steps read this as an MSBuild property (build/SixLabors.ImageSharp.targets)
+          echo "SixLaborsLicenseFile=$RUNNER_TEMP/sixlabors.lic" >> "$GITHUB_ENV"
       - name: Build
         run: dotnet build --no-restore --configuration Release
       - name: Test

.github/workflows/publish-to-nuget.yml

@@ -47,6 +47,14 @@ jobs:
     - name: Restore dependencies
       run: dotnet restore
 
+    - name: Install Six Labors license
+      env:
+        SIXLABORS_LICENSE: ${{ secrets.SIXLABORS_LICENSE }}
+      run: |
+        printf '%s\n' "$SIXLABORS_LICENSE" > "$RUNNER_TEMP/sixlabors.lic"
+        # Later steps read this as an MSBuild property (build/SixLabors.ImageSharp.targets)
+        echo "SixLaborsLicenseFile=$RUNNER_TEMP/sixlabors.lic" >> "$GITHUB_ENV"
+
     - name: Build
       run: dotnet build --no-restore --configuration Release
 
@@ -75,6 +83,14 @@ jobs:
     - name: Restore dependencies
       run: dotnet restore Pixelbadger.Toolkit/Pixelbadger.Toolkit.csproj
 
+    - name: Install Six Labors license
+      env:
+        SIXLABORS_LICENSE: ${{ secrets.SIXLABORS_LICENSE }}
+      run: |
+        printf '%s\n' "$SIXLABORS_LICENSE" > "$RUNNER_TEMP/sixlabors.lic"
+        # Later steps read this as an MSBuild property (build/SixLabors.ImageSharp.targets)
+        echo "SixLaborsLicenseFile=$RUNNER_TEMP/sixlabors.lic" >> "$GITHUB_ENV"
+
     - name: Build
       run: dotnet build Pixelbadger.Toolkit/Pixelbadger.Toolkit.csproj --no-restore --configuration Release
 

.gitignore

@@ -489,3 +489,6 @@ test-assets/
 # GPT/Markov model checkpoint directories
 .gpt/
 .Markov/
+
+# Six Labors (ImageSharp) license file. Never commit it; CI supplies it from a secret.
+sixlabors.lic

Pixelbadger.Toolkit.Benchmarks/Pixelbadger.Toolkit.Benchmarks.csproj

@@ -9,7 +9,16 @@
 
   <ItemGroup>
     <PackageReference Include="BenchmarkDotNet" Version="0.15.8" />
-    <PackageReference Include="SixLabors.ImageSharp" Version="3.1.12" />
+    <PackageReference Include="SixLabors.ImageSharp" Version="4.1.2" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <!-- Transitive packages pinned to their latest non-breaking (same-major) release -->
+    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="10.0.12" />
+    <PackageReference Include="Microsoft.Extensions.Diagnostics.Abstractions" Version="10.0.12" />
+    <PackageReference Include="Microsoft.Extensions.FileProviders.Abstractions" Version="10.0.12" />
+    <PackageReference Include="Microsoft.Extensions.Hosting.Abstractions" Version="10.0.12" />
+    <PackageReference Include="Microsoft.Extensions.Options" Version="10.0.12" />
   </ItemGroup>
 
   <ItemGroup>

Pixelbadger.Toolkit.Tests/Pixelbadger.Toolkit.Tests.csproj

@@ -8,16 +8,25 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="coverlet.collector" Version="10.0.1" />
-    <PackageReference Include="FluentAssertions" Version="8.10.0" />
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.6.0" />
-    <PackageReference Include="Moq" Version="4.20.72" />
+    <PackageReference Include="coverlet.collector" Version="10.1.0" />
+    <PackageReference Include="FluentAssertions" Version="8.11.0" />
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.10.1" />
+    <PackageReference Include="Moq" Version="4.21.0" />
     <PackageReference Include="Anthropic" Version="12.54.1" />
-    <PackageReference Include="OpenAI" Version="2.10.0" />
+    <PackageReference Include="OpenAI" Version="2.14.0" />
     <PackageReference Include="xunit" Version="2.9.3" />
     <PackageReference Include="xunit.runner.visualstudio" Version="3.1.5" />
   </ItemGroup>
 
+  <ItemGroup>
+    <!-- Transitive packages pinned to their latest non-breaking (same-major) release -->
+    <PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="10.0.12" />
+    <PackageReference Include="Microsoft.Extensions.Diagnostics.Abstractions" Version="10.0.12" />
+    <PackageReference Include="Microsoft.Extensions.FileProviders.Abstractions" Version="10.0.12" />
+    <PackageReference Include="Microsoft.Extensions.Hosting.Abstractions" Version="10.0.12" />
+    <PackageReference Include="Microsoft.Extensions.Options" Version="10.0.12" />
+  </ItemGroup>
+
   <ItemGroup>
     <Using Include="Xunit" />
   </ItemGroup>

Pixelbadger.Toolkit/Pixelbadger.Toolkit.csproj

@@ -10,7 +10,7 @@
     <PackAsTool>true</PackAsTool>
     <ToolCommandName>pbtk</ToolCommandName>
     <PackageId>Pixelbadger.Toolkit</PackageId>
-    <Version>7.2.0</Version>
+    <Version>7.2.1</Version>
     <Authors>Pixelbadger</Authors>
     <Description>A CLI toolkit exposing varied functionality organized by topic, including string manipulation, distance calculations, esoteric programming language interpreters, image steganography, web serving, LLM integration, homomorphic encryption, Markov chain text generation, and Amiga demoscene effects.</Description>
     <PackageTags>cli;toolkit;strings;interpreters;steganography;llm;openai;crypto;homomorphic-encryption;markov;text-generation;demoscene;amiga</PackageTags>
@@ -33,18 +33,24 @@
 
   <ItemGroup>
     <PackageReference Include="Anthropic" Version="12.54.1" />
-    <PackageReference Include="Dapper" Version="2.1.66" />
-    <PackageReference Include="Microsoft.Data.Sqlite" Version="10.0.8" />
-    <PackageReference Include="Microsoft.Extensions.AI" Version="10.6.0" />
-    <PackageReference Include="Microsoft.Extensions.AI.OpenAI" Version="10.6.0" />
-    <PackageReference Include="Microsoft.Extensions.DependencyInjection" Version="10.0.8" />
-    <PackageReference Include="Microsoft.Extensions.Hosting" Version="10.0.8" />
-    <PackageReference Include="OpenAI" Version="2.10.0" />
-    <PackageReference Include="SixLabors.ImageSharp" Version="3.1.12" />
+    <PackageReference Include="Dapper" Version="2.1.89" />
+    <PackageReference Include="Microsoft.Data.Sqlite" Version="10.0.12" />
+    <PackageReference Include="Microsoft.Extensions.AI" Version="10.10.0" />
+    <PackageReference Include="Microsoft.Extensions.AI.OpenAI" Version="10.10.1" />
+    <PackageReference Include="Microsoft.Extensions.DependencyInjection" Version="10.0.12" />
+    <PackageReference Include="Microsoft.Extensions.Hosting" Version="10.0.12" />
+    <PackageReference Include="OpenAI" Version="2.14.0" />
+    <PackageReference Include="SixLabors.ImageSharp" Version="4.1.2" />
     <PackageReference Include="Spectre.Console" Version="0.57.2" />
     <PackageReference Include="Spectre.Console.ImageSharp" Version="0.57.2" />
-    <PackageReference Include="System.CommandLine" Version="2.0.8" />
-    <PackageReference Include="System.Numerics.Tensors" Version="10.0.8" />
+    <PackageReference Include="System.CommandLine" Version="2.0.12" />
+    <PackageReference Include="System.Numerics.Tensors" Version="10.0.12" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <!-- Transitive packages pinned to their latest non-breaking (same-major) release -->
+    <PackageReference Include="System.ClientModel" Version="1.16.0" />
+    <PackageReference Include="System.Memory.Data" Version="10.0.12" />
   </ItemGroup>
 
 </Project>