Release: v2025.1-beta5.patch2.security1

CHANGELOG.md

@@ -1,3 +1,12 @@
+## v2025.1-beta5.patch2.security1
+This is a security hotfix release. It's identical to v2025.1-beta5.patch2, except for the security mitigations listed below. Upgrading is strongly recommended for all server operators.
+
+### Backend
+- Updated SixLabors.ImageSharp to 3.1.7 (addressing [GHSA-2cmq-823j-5qj8](https://github.com/advisories/GHSA-2cmq-823j-5qj8))
+
+### Attribution
+This release was made possible by project contributors: Laura Hausmann
+
 ## v2025.1-beta5.patch2
 This is a hotfix release. It's identical to v2025.1-beta5.patch1, except for a bunch of bugfixes. Upgrading is strongly recommended for all server operators running v2025.1-beta5 or v2025.1-beta5.patch1.
 

Directory.Build.props

@@ -27,7 +27,7 @@
     <!-- Version metadata -->
     <PropertyGroup>
         <VersionPrefix>2025.1</VersionPrefix>
-        <VersionSuffix>beta5.patch2</VersionSuffix>
+        <VersionSuffix>beta5.patch2.security1</VersionSuffix>
     </PropertyGroup>
 
     <ItemGroup>

Iceshrimp.Backend/Iceshrimp.Backend.csproj

@@ -47,7 +47,7 @@
         <PackageReference Include="QRCoder" Version="1.6.0" />
         <PackageReference Include="Scalar.AspNetCore" Version="2.0.15" />
         <PackageReference Include="SixLabors.ImageSharp.Drawing" Version="2.1.5" />
-        <PackageReference Include="SixLabors.ImageSharp" Version="3.1.7-iceshrimp" />
+        <PackageReference Include="SixLabors.ImageSharp" Version="3.1.8-iceshrimp" />
         <PackageReference Include="Swashbuckle.AspNetCore" Version="7.2.0" />
         <PackageReference Include="System.IO.Hashing" Version="9.0.2" />
         <PackageReference Include="System.Linq.Async" Version="6.0.1" />