chore(deps): tier 1 cascade — Test.Toolkit 1.14.13, Aspose 26.7.0, and NU1510 cleanup

[poxet]

Part of Tier 1 in the cascade update. Tier 0 is released and indexed, so this consumes it.

Internal — consuming tier 0

• Tharga.Test.Toolkit 1.14.12 → 1.14.13 (verified live on nuget.org before referencing)

External

Library

• Aspose.BarCode 26.5.0 → 26.7.0
• System.Drawing.Common 10.0.10 → 10.0.11
• Microsoft.SourceLink.GitHub 10.0.301 → 10.0.400 (PrivateAssets=all, build-only)

PdfSharp.MigraDoc.Standard 1.51.15 is current and unchanged.

Test tooling (does not ship)

• Microsoft.NET.Test.Sdk 18.6.0 → 18.9.0

Also: cleared the NU1510 warnings (backlog item 6)

Deleted System.Net.Http 4.3.4 and System.Text.RegularExpressions 4.3.1 from the test project. Both are .NET Framework-era packages now built into the shared framework, so the types still resolve without them — the same removal Tharga.Runtime made in July.

This was already filed as backlog item 6 (Low / Easy), and it is package-reference work, so it belongs with a dependency sweep rather than waiting for its own pass.

Effect on a full --no-incremental Release build: 7 warnings → 3. The three that remain are pre-existing and tracked: SYSLIB0014 (obsolete WebClient in Image.cs:154, backlog item 1) and two CS0219 unused locals. This matters because build.yml fails above 15 warnings, so the budget is now less tight.

Verification

dotnet build -c Release --no-incremental — succeeded, 3 warnings, 0 errors. dotnet test -c Release — 6 passed, 44 skipped, 0 failed.

The test result is not a strong signal here, and that is worth saying plainly. 44 of the 50 tests are disabled with hardcoded [Fact(Skip = "Fix!")] attributes across 10 files — they are abandoned, not environment-gated. So "tests pass" verifies about 12% of a PDF-rendering library. This is pre-existing and already tracked as backlog item 2 (Important); nothing in this PR changed it. Flagging it so the green check is not over-read.

No source changes, no public API change, no MAJOR_MINOR bump (the 2.4 series and its tag-lookup || true guard are untouched).

Note on what this release also ships: master carried two unreleased commits before this PR, so releasing this publishes those too.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[github-actions]

Released as v2.4.1 — https://github.com/Tharga/Reporter/releases/tag/2.4.1