Bump VellumPdf.Layout from 1.5.4 to 2.0.0 - #53
Closed
dependabot[bot] wants to merge 1 commit into
Closed
Conversation
--- updated-dependencies: - dependency-name: VellumPdf.Layout dependency-version: 2.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
.NET
Author
|
Superseded by #54. |
dependabot
Bot
deleted the
dependabot/nuget/dependencies/VellumPdf.Layout-2.0.0
branch
August 19, 2026 08:16
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updated VellumPdf.Layout from 1.5.4 to 2.0.0.
Release notes
Sourced from VellumPdf.Layout's releases.
2.0.0
The first major version since 1.0. Every package moves to 2.0.0 together, as usual.
Two things made a major version necessary: assemblies are strong-named, which changes their
identity, and the analyzer that was supposed to be locking the public API is now actually
locking it, which meant fixing the defects in that surface while doing so was still free.
Most of the rest is work that had to land before the surface froze.
Read Upgrading to 2.0 first if you bind to an assembly
identity by hand — a
PackageReferenceneeds no change, but a binding redirect, anInternalsVisibleTo, or anAssembly.Loadstring does.Breaking changes
Assembly identity
eng/VellumPdf.snk), with public key tokenb2757187a6d18ae5.AssemblyVersionis pinned to2.0.0.0for the whole 2.x line, soservicing releases will not force another rebind. (#53)
Public API
PdfSignature.ByteRangeint[]ReadOnlyMemory<long>(#178)PdfLinkAnnotation.FlagsintPdfAnnotationFlags(#176)TextEncodingWarningcharactercharSystem.Text.Rune(#177)CcittImageLoader.LoadCcittOptions(#177)PdfPreflight.Validate(PdfDocumentReader, PdfConformance)HttpRevocationClient(HttpClient, TimeSpan)HttpTimestampClient(#177)PdfSignatureSettings.SubFilterETSI.CAdES.detachedandadbe.pkcs7.detached(#176)SignaturePlaceholderOptions.SubFilterEach is explained under Added, Changed, or Fixed below.
Behaviour
signing-timesigned attribute. ETSIEN 319 142-1 admits only the signed attributes its table 1 lists, and
signing-timeis notamong them — PAdES conveys the claimed time in the signature dictionary's
/M, which thislibrary already wrote from the same value. Emitting it anyway held every signature at
PAdES-BES instead of PAdES-BASELINE-B. Code reading
signing-timeout ofSignerInfoon asignature written with the default
/SubFilter ETSI.CAdES.detachedwill no longer find it;/Mstill carries the value, andadbe.pkcs7.detachedkeeps the attribute, since it makesno ETSI claim. (#170)
/StructTreeRoot. SettingTagged = trueand drawing nothing previously produced no structure tree at all, whichfailed PDF/A-2a and PDF/UA-1 validation.
Taggednow means tagged. (#120)in-process signing paths, with a message naming the offending bytes and the way forward,
instead of an opaque
ArgumentExceptionraised from inside the BCL's CMS encoder. The... (truncated)
1.11.0
What's Changed
Full Changelog: Tim81/VellumPDF@v1.10.0...v1.11.0
1.10.0
What's Changed
Full Changelog: Tim81/VellumPDF@v1.9.0...v1.10.0
1.9.0
What's Changed
Full Changelog: Tim81/VellumPDF@v1.8.2...v1.9.0
1.8.2
What's Changed
Full Changelog: Tim81/VellumPDF@v1.8.1...v1.8.2
1.8.1
What's Changed
Full Changelog: Tim81/VellumPDF@v1.8.0...v1.8.1
1.8.0
What's Changed
Full Changelog: Tim81/VellumPDF@v1.7.8...v1.8.0
1.7.8
What's Changed
Full Changelog: Tim81/VellumPDF@v1.7.7...v1.7.8
1.7.7
What's Changed
Full Changelog: Tim81/VellumPDF@v1.7.6...v1.7.7
1.7.6
What's Changed
Full Changelog: Tim81/VellumPDF@v1.7.5...v1.7.6
1.7.5
What's Changed
Full Changelog: Tim81/VellumPDF@v1.7.4...v1.7.5
1.7.4
What's Changed
Full Changelog: Tim81/VellumPDF@v1.7.3...v1.7.4
1.7.3
What's Changed
Full Changelog: Tim81/VellumPDF@v1.7.2...v1.7.3
1.7.2
What's Changed
Full Changelog: Tim81/VellumPDF@v1.7.1...v1.7.2
1.7.1
What's Changed
Full Changelog: Tim81/VellumPDF@v1.7.0...v1.7.1
1.7.0
What's Changed
Full Changelog: Tim81/VellumPDF@v1.6.0...v1.7.0
1.6.0
What's Changed
Full Changelog: Tim81/VellumPDF@v1.5.6...v1.6.0
1.5.6
What's Changed
Full Changelog: Tim81/VellumPDF@v1.5.5...v1.5.6
1.5.5
What's Changed
Full Changelog: Tim81/VellumPDF@v1.5.4...v1.5.5
Commits viewable in compare view.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)