chore(deps): Bump DocumentFormat.OpenXml and 7 others by dependabot[bot] · Pull Request #192 · LayoutParser/LayoutParserApi

dependabot · 2026-08-26T13:14:32Z

Updated DocumentFormat.OpenXml from 3.3.0 to 3.5.1.

Release notes

Sourced from DocumentFormat.OpenXml's releases.

3.5.1

Added

Added DocumentFormat.OpenXml.Office2016.Drawing.ChartDrawing.Offset class
Added Version attribute to DocumentFormat.OpenXml.Office2016.Drawing.ChartDrawing.ChartSpace
Added FeatureList attribute to DocumentFormat.OpenXml.Office2016.Drawing.ChartDrawing.ChartSpace
Added FalbackImg attribute to DocumentFormat.OpenXml.Office2016.Drawing.ChartDrawing.ChartSpace
Added DocumentFormat.OpenXml.Office2016.Drawing.ChartDrawing.ExtensionDropMode enum

3.4.1

Added

Added MediaDataPartType.Mp4 to support MP4 video media parts in presentations and documents (#1866)
Updated bundled Open XML schemas to the Q3 2025 Office release, enabling newer document and presentation features (#1963)

Changed

Reduced JIT and AOT size and improved document load performance by removing the generic builder pattern from element metadata creation (#1842, #1843)
Optimized FromChunkedBase64String to significantly reduce allocations and improve throughput when decoding chunked base64 content (≈2.4× faster, ≈70% less memory) (#1868)

Fixed

Switched to XmlDOMTextWriter instead of XmlWriter.Create to correctly handle serialization of certain XML content (#1869, #1961)
Added a clear error when attempting to open encrypted documents that the SDK cannot process (#1635, #1969)
Improved exception messages when required package parts are missing by including the name of the missing part (#1971, #1974)

Documentation

Clarified the README SDK description and simplified the note on 3.0.0 breaking changes (#1858)
Documented that disposing a package with AutoSave set to false does not persist changes (#1873)
Removed the PowerPoint modern comments sample, which now lives on learn.microsoft.com (#1861)

Thanks to the following for their contributions:

@QuocDatHoang
@Varorbc

Commits viewable in compare view.

Updated Microsoft.Extensions.Hosting from 10.0.0 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Hosting's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Http from 10.0.0 to 10.0.11.

Release notes

Sourced from Microsoft.Extensions.Http's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.8.1 to 18.9.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.9.0 What's Changed

Fix tilde/exclamation characters corrupted in TerminalLogger test output by @nohwnd in [fix] Fix tilde/exclamation characters corrupted in TerminalLogger test output microsoft/vstest#16046
Make TranslationLayer Native AOT-compatible by @drewnoakes in Make TranslationLayer Native AOT-compatible microsoft/vstest#16045
Guard GenerateProgramFile target against UseWinUI/UseUwpTools evaluation order by @nohwnd in [fix] fix: guard GenerateProgramFile target against UseWinUI/UseUwpTools evaluation order microsoft/vstest#16072
Add RequestingAssembly to AssemblyResolveEventArgs for binary compat by @nohwnd in [fix] fix: add RequestingAssembly to AssemblyResolveEventArgs for binary compat microsoft/vstest#16076
Remove stale Microsoft.Extensions.FileSystemGlobbing binding redirect from testhost.x86 and datacollector by @Evangelink in Remove stale Microsoft.Extensions.FileSystemGlobbing binding redirect from testhost.x86 and datacollector microsoft/vstest#16082
Fix TRX attachment paths when LogFileName contains a subdirectory by @nohwnd in [fix] Fix TRX attachment paths when LogFileName contains a subdirectory microsoft/vstest#15791
Fix missing dumps for .NET Framework child processes in NetClientHangDumper by @nohwnd in [fix] Fix missing dumps for .NET Framework child processes in NetClientHangDumper microsoft/vstest#16098
Fix data collection channels to use negotiated protocol version instead of V1 by @nohwnd in [fix] Fix data collection channels to use negotiated protocol version instead of V1 microsoft/vstest#16096
Fix race condition in BlameCollector: skip hang dump when testhost hasn't launched yet by @nohwnd in [fix] Fix race condition in BlameCollector: skip hang dump when testhost hasn't launched yet microsoft/vstest#16065
Replace TestSDKAutoGeneratedCode with ExcludeFromCodeCoverage in auto-generated Program files by @nohwnd in [fix] Replace TestSDKAutoGeneratedCode with ExcludeFromCodeCoverage in auto-generated Program files microsoft/vstest#16101
Include testhost process path in crash error messages by @nohwnd in [fix] Include testhost process path in crash error messages microsoft/vstest#16108
Fix DataDriven test results being double-counted in TRX logger totals by @nohwnd in [fix] Fix DataDriven test results being double-counted in TRX logger totals microsoft/vstest#15766
Fix datacollector crash visibility: replace Assert with throwable exceptions by @nohwnd in [fix] Fix datacollector crash visibility: replace Assert with throwable exceptions microsoft/vstest#16048
Add TreatErrorMessagesAsWarnings parameter to TRX logger by @nohwnd in [fix] Add TreatErrorMessagesAsWarnings parameter to TRX logger microsoft/vstest#16106
Wait for testhost stderr to drain before reading its crash output by @nohwnd in Wait for testhost stderr to drain before reading its crash output microsoft/vstest#16128
Handle runtimeconfig.dev.json without additionalProbingPaths by @tmat in Handle runtimeconfig.dev.json without additionalProbingPaths microsoft/vstest#16166
Suggest Microsoft.NET.Test.Sdk when a managed test project brings no testhost by @nohwnd in Suggest Microsoft.NET.Test.Sdk when a managed test project brings no testhost microsoft/vstest#16169
Fix x86 testhost loading mismatched x64 hostfxr (0x800700C1) when run via vstest.console.exe directly (#16151) by @azat-msft in Fix x86 testhost loading mismatched x64 hostfxr (0x800700C1) when run via vstest.console.exe directly (#16151) microsoft/vstest#16156
Preserve the real exception (type + stack trace) when a test run aborts in BaseRunTests by @nohwnd in [fix] Preserve the real exception (type + stack trace) when a test run aborts in BaseRunTests microsoft/vstest#16167

New Contributors

@drewnoakes made their first contribution in Make TranslationLayer Native AOT-compatible microsoft/vstest#16045

Full Changelog: microsoft/vstest@v18.8.0...v18.9.0

Commits viewable in compare view.

Updated PdfPig from 0.1.15 to 0.1.16.

Release notes

Sourced from PdfPig's releases.

0.1.16 What's Changed

Bump version to 0.1.16 by @github-actions[bot] in Bump version to 0.1.16 UglyToad/PdfPig#1344
Better deal with infinite recursion in GlyphDataTable.ReadCompositeGlyph and fix #1347 by @BobLd in Better deal with infinite recursion in GlyphDataTable.ReadCompositeGlyph and fix #1347 UglyToad/PdfPig#1348
Accept out of range characterCode in type 3 font and fix #1349 by @BobLd in Accept out of range characterCode in type 3 font and fix #1349 UglyToad/PdfPig#1350
Correctly clamp values in IndexedColorSpaceDetails and fix #1351 by @BobLd in Correctly clamp values in IndexedColorSpaceDetails and fix #1351 UglyToad/PdfPig#1352
Ensure abbreviated key name takes precedence in inline images by @BobLd in Ensure abbreviated key name takes precedence in inline images UglyToad/PdfPig#1353
Prevent infinite recursion when resolving default substitute color space and fix #1354 by @BobLd in Prevent infinite recursion when resolving default substitute color space and fix #1354 UglyToad/PdfPig#1355
Properly handle missing ColorSpace entry in JPX image and fix #1356 by @BobLd in Properly handle missing ColorSpace entry in JPX image and fix #1356 UglyToad/PdfPig#1357
Expose annotation appearance streams and appearance state as public by @jeske in Expose annotation appearance streams and appearance state as public UglyToad/PdfPig#1359
PageBuilder: Fix importing page contents stored as indirect array by @MultisoftPontus in PageBuilder: Fix importing page contents stored as indirect array UglyToad/PdfPig#1358
Properly override Equals and GetHashCode methods for IToken and add tests by @BobLd in Properly override Equals and GetHashCode methods for IToken and add tests UglyToad/PdfPig#1362
Cache values in DeviceNColorSpaceDetails.GetColor() and improve Transform() method to use array by @BobLd in Cache values in DeviceNColorSpaceDetails.GetColor() and improve Transform() method to use array UglyToad/PdfPig#1363
Cache color spaces in ResourceStore when possible by @BobLd in Cache color spaces in ResourceStore when possible UglyToad/PdfPig#1364
Make PdfFunctionType4.Eval() allocation-free and boxing-free by @BobLd in Make PdfFunctionType4.Eval() allocation-free and boxing-free UglyToad/PdfPig#1365
Fix: brute-force xref scan loses stream position, missing recoverable trailers by @jeske in Fix: brute-force xref scan loses stream position, missing recoverable trailers UglyToad/PdfPig#1360
Add integration test for 28a1878 (#1360) by @BobLd in Add integration test for 28a1878 (#1360) UglyToad/PdfPig#1366
Expose font dictionary indirect reference on FontDetails by @jeske in Expose font dictionary indirect reference on FontDetails UglyToad/PdfPig#1367
BUGFIX: Decode Indexed colour-table bytes to the base space's component ranges by @jeske in BUGFIX: Decode Indexed colour-table bytes to the base space's component ranges UglyToad/PdfPig#1369
Do not clip form XObject when bbox is invalid and fix #1371 by @BobLd in Do not clip form XObject when bbox is invalid and fix #1371 UglyToad/PdfPig#1373
Expose XmpMetadata.GetXmlMemory() and add warning to GetXDocument() by @BobLd in Expose XmpMetadata.GetXmlMemory() and add warning to GetXDocument() UglyToad/PdfPig#1374
Move Indexed table-byte decoding onto the base colour space (in place) by @jeske in Move Indexed table-byte decoding onto the base colour space (in place) UglyToad/PdfPig#1375
Fix wrong number of components for DeviceNColorSpaceDetails and SeparationColorSpaceDetails, and ensure BaseType is correctly set by @BobLd in Fix wrong number of components for DeviceNColorSpaceDetails and SeparationColorSpaceDetails, and ensure BaseType is correctly set UglyToad/PdfPig#1376
Unseal ParsingOptions by @BobLd in Unseal ParsingOptions UglyToad/PdfPig#1377
Change GetColor() signature to use ReadOnlySpan and avoid allocation by @BobLd in Change GetColor() signature to use ReadOnlySpan<double> and avoid allocation UglyToad/PdfPig#1378
Split color space details in their own files by @BobLd in Split color space details in their own files UglyToad/PdfPig#1379
Prefer double array over span in IColorSpaceContext so that operands can be saved without allocation by @BobLd in Prefer double array over span in IColorSpaceContext so that operands can be saved without allocation UglyToad/PdfPig#1380
Fix #1234 and ensure documents are disposed in Merge() by @BobLd in Fix #1234 and ensure documents are disposed in Merge() UglyToad/PdfPig#1382
Use StackDictionary<> for marked content, shadings and patterns in ResourceStore by @BobLd in Use StackDictionary<> for marked content, shadings and patterns in ResourceStore UglyToad/PdfPig#1384
PdfPageBuilder: fix ResetColor() and line width in Draw methods by @BobLd in PdfPageBuilder: fix ResetColor() and line width in Draw methods UglyToad/PdfPig#1385
Expose ILookupFilterProvider in the doc's Structure, address IFilterProvider propagation and fix #1243 by @BobLd in Expose ILookupFilterProvider in the doc's Structure, address IFilterProvider propagation and fix #1243 UglyToad/PdfPig#1386
Properly concatenate matrix in GetGlobalTransform and fix #1163 by @BobLd in Properly concatenate matrix in GetGlobalTransform and fix #1163 UglyToad/PdfPig#1387
Allow skipping token that are not an IndirectReferenceToken in BasePageFactory.Create and fix #1286 by @BobLd in Allow skipping token that are not an IndirectReferenceToken in BasePageFactory.Create and fix #1286 UglyToad/PdfPig#1388
Add PdfDocEncoding as a valid encoding in ReadEncodingDictionary when lenient is on and fix #1284 by @BobLd in Add PdfDocEncoding as a valid encoding in ReadEncodingDictionary when lenient is on and fix #1284 UglyToad/PdfPig#1389
Improve caching: found tokens in token scanner, resolved resources and XObject forms by @BobLd in Improve caching: found tokens in token scanner, resolved resources and XObject forms UglyToad/PdfPig#1391
Prevent NullReferenceException in NameToken.GetHashCode() race condition by @BobLd in Prevent NullReferenceException in NameToken.GetHashCode() race condition UglyToad/PdfPig#1392
Check unencrypted metadata in DecryptInternal() and fix #1393 by @BobLd in Check unencrypted metadata in DecryptInternal() and fix #1393 UglyToad/PdfPig#1395
Track stack depth in CMapParser and fix #1394 by @BobLd in Track stack depth in CMapParser and fix #1394 UglyToad/PdfPig#1396
Include time in nightly version date format by @BobLd in Include time in nightly version date format UglyToad/PdfPig#1397
Tidy up netstandard2.1 by @BobLd in Tidy up netstandard2.1 UglyToad/PdfPig#1400

New Contributors

@MultisoftPontus made their first contribution in PageBuilder: Fix importing page contents stored as indirect array UglyToad/PdfPig#1358

Full Changelog: UglyToad/PdfPig@v0.1.15...v0.1.16

Commits viewable in compare view.

Updated Serilog from 4.2.0 to 4.4.0.

Release notes

Sourced from Serilog's releases.

4.4.0 What's Changed

Emit SelfLog warning when extra arguments are provided by @matantsach in Emit SelfLog warning when extra arguments are provided serilog/serilog#2222
dont WriteQuotedJsonString for null by @SimonCropp in dont WriteQuotedJsonString for null serilog/serilog#2216
Pin System.Security.Cryptography.Xml to 8.0.3 in tests by @ArieGato in Pin System.Security.Cryptography.Xml to 8.0.3 in tests serilog/serilog#2232
Route optional interfaces through OptionalInterfaceForwardingSink for restricted sinks by @ArieGato in Route optional interfaces through OptionalInterfaceForwardingSink for restricted sinks serilog/serilog#2234
SelfMetrics by @nblumhardt in SelfMetrics serilog/serilog#2237

New Contributors

@matantsach made their first contribution in Emit SelfLog warning when extra arguments are provided serilog/serilog#2222
@ArieGato made their first contribution in Pin System.Security.Cryptography.Xml to 8.0.3 in tests serilog/serilog#2232

Full Changelog: serilog/serilog@v4.3.1...v4.4.0

4.3.1 What's Changed

Remove SourceLink by @SimonCropp in remove SourceLink serilog/serilog#2183
Handle Exception.ToString failures in text formatter by @krisbiradar in Handle Exception.ToString failures in text formatter serilog/serilog#2197
Remove char[] allocation by @karpinsn in Remove char[] allocation serilog/serilog#2198
Remove backpressure from XMLDoc by @timothycoleman in Remove backpressure from XMLDoc serilog/serilog#2203
Don't enable XDOC for tests by @nblumhardt in Don't enable XDOC for tests serilog/serilog#2205
Target and test on net10 by @SimonCropp in target and test on net10 serilog/serilog#2206
Fix trimming error when Serilog is a transitive dependency by @Numpsy in Package Serilog.targets as 'buildTransitive' as well as 'build' serilog/serilog#2214
Inline TraceId and SpanId JSON string formatting by @SimonCropp in Inline TraceId and SpanId JSON string formatting serilog/serilog#2215

New Contributors

@krisbiradar made their first contribution in Handle Exception.ToString failures in text formatter serilog/serilog#2197
@karpinsn made their first contribution in Remove char[] allocation serilog/serilog#2198
@timothycoleman made their first contribution in Remove backpressure from XMLDoc serilog/serilog#2203
@Numpsy made their first contribution in Package Serilog.targets as 'buildTransitive' as well as 'build' serilog/serilog#2214

Full Changelog: serilog/serilog@v4.3.0...v4.3.1

4.3.0 What's Changed

#2149 - LogEvent.AddPropertyIfAbsent(ILogEventPropertyFactory, ...) overload that helps avoid allocations (@vanni-giachin)
#2158 - use HTTPS in all README.md images and links (@TimHess)
#2163 - LogContext.Push() overloads accepting IEnumerable<ILogEventEnricher> and ReadOnlySpan<ILogEventEnricher> (@SimonCropp)
#2175, #2178, #2179 - fix AOT compatibility (@agocke)

New Contributors

@vanni-giachin made their first contribution in Property factory as AddPropertyIfAbsent parameter serilog/serilog#2149
@TimHess made their first contribution in Use HTTPS in README.md images and links serilog/serilog#2158

Full Changelog: serilog/serilog@v4.2.0...v4.3.0

Commits viewable in compare view.

Pinned Serilog at 4.4.0.

Release notes

Sourced from Serilog's releases.

4.4.0 What's Changed

Emit SelfLog warning when extra arguments are provided by @matantsach in Emit SelfLog warning when extra arguments are provided serilog/serilog#2222
dont WriteQuotedJsonString for null by @SimonCropp in dont WriteQuotedJsonString for null serilog/serilog#2216
Pin System.Security.Cryptography.Xml to 8.0.3 in tests by @ArieGato in Pin System.Security.Cryptography.Xml to 8.0.3 in tests serilog/serilog#2232
Route optional interfaces through OptionalInterfaceForwardingSink for restricted sinks by @ArieGato in Route optional interfaces through OptionalInterfaceForwardingSink for restricted sinks serilog/serilog#2234
SelfMetrics by @nblumhardt in SelfMetrics serilog/serilog#2237

New Contributors

@matantsach made their first contribution in Emit SelfLog warning when extra arguments are provided serilog/serilog#2222
@ArieGato made their first contribution in Pin System.Security.Cryptography.Xml to 8.0.3 in tests serilog/serilog#2232

Full Changelog: serilog/serilog@v4.3.1...v4.4.0

4.3.1 What's Changed

Remove SourceLink by @SimonCropp in remove SourceLink serilog/serilog#2183
Handle Exception.ToString failures in text formatter by @krisbiradar in Handle Exception.ToString failures in text formatter serilog/serilog#2197
Remove char[] allocation by @karpinsn in Remove char[] allocation serilog/serilog#2198
Remove backpressure from XMLDoc by @timothycoleman in Remove backpressure from XMLDoc serilog/serilog#2203
Don't enable XDOC for tests by @nblumhardt in Don't enable XDOC for tests serilog/serilog#2205
Target and test on net10 by @SimonCropp in target and test on net10 serilog/serilog#2206
Fix trimming error when Serilog is a transitive dependency by @Numpsy in Package Serilog.targets as 'buildTransitive' as well as 'build' serilog/serilog#2214
Inline TraceId and SpanId JSON string formatting by @SimonCropp in Inline TraceId and SpanId JSON string formatting serilog/serilog#2215

New Contributors

@krisbiradar made their first contribution in Handle Exception.ToString failures in text formatter serilog/serilog#2197
@karpinsn made their first contribution in Remove char[] allocation serilog/serilog#2198
@timothycoleman made their first contribution in Remove backpressure from XMLDoc serilog/serilog#2203
@Numpsy made their first contribution in Package Serilog.targets as 'buildTransitive' as well as 'build' serilog/serilog#2214

Full Changelog: serilog/serilog@v4.3.0...v4.3.1

Commits viewable in compare view.

Updated Serilog.Sinks.Console from 6.0.0 to 6.1.1.

Release notes

Sourced from Serilog.Sinks.Console's releases.

6.1.1 What's Changed

Report the number of escape characters formatted into themed sequence rendering by @nblumhardt in Report the number of escape characters formatted into themed sequence rendering serilog/serilog-sinks-console#136

Full Changelog: serilog/serilog-sinks-console@v6.1.0...v6.1.1

6.1.0

#165 - support for {UtcTimestamp} in output templates (@ManuelRin)
#172, #173 - switch build to Serilog org standard (@nblumhardt)

Commits viewable in compare view.

Updated StackExchange.Redis from 3.1.13 to 3.1.31.

Release notes

Sourced from StackExchange.Redis's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps DocumentFormat.OpenXml from 3.3.0 to 3.5.1 Bumps Microsoft.Extensions.Hosting from 10.0.0 to 10.0.11 Bumps Microsoft.Extensions.Http from 10.0.0 to 10.0.11 Bumps Microsoft.NET.Test.Sdk from 18.8.1 to 18.9.0 Bumps PdfPig from 0.1.15 to 0.1.16 Bumps Serilog to 4.4.0 Bumps Serilog.Sinks.Console from 6.0.0 to 6.1.1 Bumps StackExchange.Redis from 3.1.13 to 3.1.31 --- updated-dependencies: - dependency-name: DocumentFormat.OpenXml dependency-version: 3.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: runtime-minor-patch - dependency-name: Microsoft.Extensions.Hosting dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: runtime-minor-patch - dependency-name: Microsoft.Extensions.Http dependency-version: 10.0.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: runtime-minor-patch - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: runtime-minor-patch - dependency-name: PdfPig dependency-version: 0.1.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: runtime-minor-patch - dependency-name: Serilog dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: runtime-minor-patch - dependency-name: Serilog dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: runtime-minor-patch - dependency-name: Serilog dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: runtime-minor-patch - dependency-name: Serilog.Sinks.Console dependency-version: 6.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: runtime-minor-patch - dependency-name: Serilog.Sinks.Console dependency-version: 6.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: runtime-minor-patch - dependency-name: StackExchange.Redis dependency-version: 3.1.31 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: runtime-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-08-26T13:14:46Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package

Version

Score

Details

nuget/Serilog

4.4.0

🟢 5.9

Details

Check	Score	Reason
Code-Review	🟢 7	Found 17/24 approved changesets -- score normalized to 7
Security-Policy	🟢 10	security policy file detected
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Maintained	🟢 8	5 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 8
Token-Permissions	🟢 9	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Signed-Releases	⚠️ 0	Project has not signed or included provenance with any releases.
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

nuget/Serilog.Sinks.File

7.0.0

Unknown

nuget/ModelContextProtocol

2.2.0

Unknown

nuget/Serilog.Extensions.Hosting

10.0.0

Unknown

nuget/Serilog.Sinks.File

7.0.0

Unknown

Scanned Files

LayoutParserApi.csproj
ai/XslSynth/XslSynth.csproj
mcp/LayoutParserMcp/LayoutParserMcp.csproj

…evelop/runtime-minor-patch-f26aacb8c8

dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Aug 26, 2026

Merge branch 'develop' into dependabot/nuget/ai/XslSynth.Core.Tests/d…

1b72b94

…evelop/runtime-minor-patch-f26aacb8c8

elson-vinicius-lopes merged commit 8dfb8df into develop Aug 26, 2026
3 checks passed

elson-vinicius-lopes deleted the dependabot/nuget/ai/XslSynth.Core.Tests/develop/runtime-minor-patch-f26aacb8c8 branch August 26, 2026 13:19

Navigation Menu

Uh oh!

chore(deps): Bump DocumentFormat.OpenXml and 7 others - #192

chore(deps): Bump DocumentFormat.OpenXml and 7 others#192
elson-vinicius-lopes merged 2 commits into
developfrom
dependabot/nuget/ai/XslSynth.Core.Tests/develop/runtime-minor-patch-f26aacb8c8

dependabot Bot commented on behalf of github Aug 26, 2026

Uh oh!

github-actions Bot commented Aug 26, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 26, 2026

3.5.1

Added

3.4.1

Added

Changed

Fixed

Documentation

18.9.0

What's Changed

New Contributors

0.1.16

What's Changed

New Contributors

4.4.0

What's Changed

New Contributors

4.3.1

What's Changed

New Contributors

4.3.0

What's Changed

New Contributors

4.4.0

What's Changed

New Contributors

4.3.1

What's Changed

New Contributors

6.1.1

What's Changed

6.1.0

Uh oh!

github-actions Bot commented Aug 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dependency Review

OpenSSF Scorecard

Scanned Files

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

github-actions Bot commented Aug 26, 2026 •

edited

Loading