chore(deps): bump SkiaSharp/HarfBuzz + test tooling; hold AngleSharp - #339
Merged
Conversation
Applies the safe half of the Dependabot group update and consolidates the individual HarfBuzz PRs into one consistent bump: - HarfBuzzSharp (core + Linux/macOS/Win32 native) 8.3.1.1 -> 8.3.1.5, all in lockstep (supersedes #328/#329, which bumped only the macOS/Win32 natives to 14.2.1 and left core at 8.x — a managed/native mismatch). - SkiaSharp (core + natives) 3.119.2 -> 3.119.4. - Test tooling: xunit 2.9.3, Microsoft.NET.Test.Sdk 17.14.1, coverlet 6.0.4, SharpFuzz 2.3.0, Microsoft.Playwright 1.61.0. - Microsoft.CodeAnalysis.CSharp 4.11.0 -> 4.14.0 (stays below the SDK compiler, so no Roslyn build-floor regression — unlike the reverted #331's 5.6.0). HELD: AngleSharp 1.5.2 / AngleSharp.Css beta.216 (the rest of the group, #324/ #334). Verified by isolation that this pair REGRESSES background-image rendering — `background-image: url(...)` stops painting entirely (29 background-paint tests drop to zero image output, plus one cascade edge case). Kept at 1.1.2/beta.144. Full solution green (8606 unit + all golden/snapshot/visual-corpus projects); no golden re-pin needed. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
There was a problem hiding this comment.
Pull request overview
Updates centrally-managed package versions to take the “safe” dependency bumps (SkiaSharp/HarfBuzz + test tooling + Roslyn) while explicitly holding AngleSharp/AngleSharp.Css at known-good versions due to a reported background-image rendering regression.
Changes:
- Bump HarfBuzzSharp (+ native assets) and SkiaSharp (+ native assets) to newer patch versions.
- Update test tooling packages (xunit, .NET Test SDK, coverlet, SharpFuzz, Playwright).
- Update
Microsoft.CodeAnalysis.CSharpto 4.14.0 with expanded rationale, while keeping AngleSharp/AngleSharp.Css pinned with a “do not bump” note.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Comment on lines
+40
to
+41
| <PackageVersion Include="SharpFuzz" Version="2.3.0" /> | ||
| <PackageVersion Include="Microsoft.Playwright" Version="1.61.0" /> |
This was referenced Jul 10, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Applies the safe half of the Dependabot group update (#324/#334) + consolidates the HarfBuzz individual PRs, and holds the part that regresses rendering.
Bumped
8.3.1.1 → 8.3.1.5, in lockstep — supersedes Bump HarfBuzzSharp.NativeAssets.macOS from 8.3.1.5 to 14.2.1 #328/Bump HarfBuzzSharp.NativeAssets.Win32 from 8.3.1.5 to 14.2.1 #329 (which bumped only macOS/Win32 natives to 14.2.1, leaving core at 8.x = managed/native mismatch).3.119.2 → 3.119.4.2.9.3, Test.Sdk17.14.1, coverlet6.0.4, SharpFuzz2.3.0, Playwright1.61.0.Microsoft.CodeAnalysis.CSharp4.11.0 → 4.14.0(stays below the SDK compiler → no Roslyn build-floor break, unlike the reverted Bump Microsoft.CodeAnalysis.Analyzers and Microsoft.CodeAnalysis.CSharp #331's 5.6.0).Held (the rest of #324/#334)
AngleSharp
1.5.2/ AngleSharp.Cssbeta.216— regresses background-image rendering. Verified by isolation: with only these two reverted (Skia/HarfBuzz kept new), the suite goes green; with them bumped,background-image: url(...)stops painting entirely (29 background-paint tests → zero image output, + one cascade edge case). Kept at1.1.2 / beta.144with an explanatory comment inDirectory.Packages.props.Validation
Full solution green locally — 8606 unit tests + all golden/snapshot/visual-corpus projects, 0 failures. No golden re-pin needed (the safe bumps don't change output).
Supersedes held Dependabot PRs #324, #334, #328, #329.
🤖 Generated with Claude Code