chore: stop dependabot proposing SixLabors majors it cannot land

[erwan-joly]

Closes #299 and #301 — neither can be merged.

Why they cannot go green

ImageSharp 4 / Drawing 3 ship an MSBuild task that validates a Six Labors license key. It is lenient in Debug and strict in Release:

<ValidateLicenseTask ... ContinueOnError="$(Configuration.StartsWith('Debug'))" />

The release workflow runs dotnet build -c Release before dotnet pack, so with the bump applied:

SixLabors.ImageSharp.Drawing.targets(28,5): error : No Six Labors license found.
SixLabors.ImageSharp.Drawing.targets(28,5): error : Please obtain a license from https://sixlabors.com/pricing/
    1 Error(s)

That is a purchase, not a code fix.

Separately, Drawing 3 removes the IImageProcessingContext Fill / DrawText extension methods entirely and replaces them with a stateful DrawingCanvas built from an ImageFrame, taking Brush/Pen instead of Color and Rectangle instead of RectangleF. Every drawing call across TestHelper, BrushFireTests, FlowFieldTests, GoalBasedPathfinderTests and JumpPointSearchPathfinderTests would need rewriting — for test-only visualisation that already works.

What this does

Pins the three SixLabors packages to their current major (3.1.12 / 2.1.7 / 2.1.3, still Apache-2.0) and tells dependabot to stop opening major bumps for them, so these PRs do not reappear daily.

Minor and patch updates still flow normally.

If the licence is ever bought, drop the ignore block and the migration can be done deliberately.

Verified: dotnet build -c Release succeeds on this branch and fails with the bump applied.

🤖 Generated with Claude Code

Summary by CodeRabbit

• Chores
  • Configured automated dependency updates to skip major-version upgrades for selected image-processing and font libraries.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 7a74def7-adeb-4d06-8bf7-d714a5e0dca0

📥 Commits

Reviewing files that changed from the base of the PR and between 8e7b88f and 98747b2.

📒 Files selected for processing (1)

• .github/dependabot.yml

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

Walkthrough

Changes

Dependency update policy

Layer / File(s)	Summary
SixLabors major-version ignore rules .github/dependabot.yml	Dependabot ignores major-version updates for SixLabors.ImageSharp, SixLabors.ImageSharp.Drawing, and SixLabors.Fonts.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 98747

This change only limits Dependabot from proposing incompatible SixLabors major upgrades while allowing minor and patch updates to continue; no actionable merge-blocking risk remains after normal checks and review.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Linked Issues check	⚠️ Warning	The PR does not implement issue #299 because it retains the current package versions instead of upgrading them.	Implement the package upgrades and required ImageSharp 4 compatibility, or link this PR to an issue that authorizes retaining the current major versions.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly describes the main change: preventing Dependabot from proposing unsupported SixLabors major updates.
Out of Scope Changes check	✅ Passed	The changes target the same SixLabors packages and Dependabot behavior described in the PR objectives.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/sixlabors-v4

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}