Infra blocker: website-build check failing due external Magick.NET vulnerability gate

[PrzemyslawKlys]

Summary

Required website-build check is currently failing on PRs that do not modify website logic due to an external dependency vulnerability gate in the checked-out PowerForge/PSPublishModule toolchain.

Evidence

• PR Remove hardcoded single live-harness scenario defaults #795 run: https://github.com/EvotecIT/IntelligenceX/actions/runs/22386340565/job/64797724381
• PR Chat: expand mixed-domain ambiguity strict coverage #796 run: https://github.com/EvotecIT/IntelligenceX/actions/runs/22386316872/job/64797632034

Both logs fail in Build PowerForge.Web.Cli with NU1902/NU1903 on Magick.NET-Q8-AnyCPU 14.10.2 in PSPublishModule/PowerForge.Web*.csproj.

Why this is infra-blocked for current PR loop

• The failing package is in the external checked-out website toolchain repository used by workflow.
• Current PRs (Remove hardcoded single live-harness scenario defaults #795/Chat: expand mixed-domain ambiguity strict coverage #796) do not change website or PowerForge dependency policy.

Proposed follow-up

1. Update/pin PowerForge dependency stack to a non-vulnerable Magick.NET version in the upstream workflow/toolchain.
2. Re-run website-build checks for blocked PRs after upstream fix lands.

[PrzemyslawKlys]

Infra fix is in progress in EvotecIT/PSPublishModule#159.\n\nThis PR upgrades Magick.NET-Q8-AnyCPU from 14.10.2 to 14.10.3 in PowerForge.Web, refreshes affected lock files, and passes local validation (dotnet list ... --vulnerable, dotnet build PowerForge.Web.Cli -c Release, and locked restore with CI=true).\n\nOnce #159 is merged, rerunning website-build should remove the NU1902/NU1903 blocker tracked here.

[PrzemyslawKlys]

Update: fix is merged in EvotecIT/PSPublishModule#159 (merge commit: 83bb21dba0f8a102851c08cb7ed615d1cf061aa1, merged on 2026-02-25).\n\nThis includes the Magick.NET upgrade to 14.10.3 and lock-file refresh needed for locked restore. Please rerun the affected website-build jobs for #795/#796 lineage to verify the NU1902/NU1903 gate is now cleared.

[PrzemyslawKlys]

Closing as stale: website-build is passing again on current PRs, including PR #1103 on 2026-03-07. The earlier external Magick.NET gate is no longer reproducing as an active blocker in the current workflow/toolchain.