umbraco/Umbraco-CMS release-13.16.4

13.16.4

on GitHub

Warning

ImageSharp licence check: Release builds can fail after upgrading

This release updates SixLabors.ImageSharp to 3.2.0 and SixLabors.ImageSharp.Web to 3.3.0 to take Six Labors' security fixes (#24339). These versions add a build-time licence check from Six Labors. Whether your project is affected depends on how it references ImageSharp:

• ImageSharp comes in only through Umbraco (or another package): no change.
• Your project has a direct PackageReference to SixLabors.ImageSharp or SixLabors.ImageSharp.Web: Release builds fail with "No Six Labors license found". Debug builds only warn, so you may not notice this until CI or publish.
• Your direct reference is pinned to an older version (for example 3.1.12): restore fails with NU1605 (package downgrade). After you update the reference, the point above applies.

To resolve this, either remove the direct reference if it only exists to pin a version (Umbraco still brings ImageSharp in, so its APIs stay available), or get a licence key from Six Labors. See Security Support and License Enforcement for licence options. Sites using Umbraco.Cms.Imaging.ImageSharp2 stay on ImageSharp 2.x and are not affected.