<!-- RAW PR DATA — Do not remove this comment block. AI uses this data to generate the polished release notes below. Re-run the script to refresh this data from git history. Generated: 2026-06-23T19:19:54Z by generate-release-notes.py version: 3.119.3 status: preview superseded: 3.119.4 (preview only, never released as stable) branch: release/3.119.3-preview.1 diff: release/3.119.2..release/3.119.3-preview.1 prs: 34 api: self=3.119.3/index.md;hb=8.3.1.4 PRs grouped by the preview they first shipped in (newest first). Render each milestone as a trailing "## <label> (<date>)" section per TEMPLATE.md, and merge them all for the top-level Highlights: ## Preview 1 · 3.119.3 · 2026-02-07 · https://github.com/mono/SkiaSharp/compare/v3.119.2...v3.119.3-preview.1.1 (34 PRs) - Bump to the next version (3.119.3) after release by @mattleibow in https://github.com/mono/SkiaSharp/pull/3507 - Add Linux Docker integration tests for release testing by @mattleibow in https://github.com/mono/SkiaSharp/pull/3506 - Fix stable version handling in release skills by @mattleibow in https://github.com/mono/SkiaSharp/pull/3505 - Add semver ordering guidance to release skills by @mattleibow in https://github.com/mono/SkiaSharp/pull/3504 - Add Spectre mitigation flag for libSkiaSharp.so. by @sshumakov in https://github.com/mono/SkiaSharp/pull/3502 [community ✨] - Fix release-testing skill consistency issues by @mattleibow in https://github.com/mono/SkiaSharp/pull/3501 - Add Spectre mitigation flag for libSkiaSharp.dll. by @sshumakov in https://github.com/mono/SkiaSharp/pull/3496 [community ✨] - Fix Linux ARM64 crash: add fontconfig runtime library to cross-compile sysroot by @mattleibow in https://github.com/mono/SkiaSharp/pull/3494 - Add 'copilot' label step to bug-fix skill PR workflow by @mattleibow in https://github.com/mono/SkiaSharp/pull/3495 - Fix AoT crash when IlcDisableReflection=true by @Copilot in https://github.com/mono/SkiaSharp/pull/3485 [community ✨] - Improve AI instructions and skills by @mattleibow in https://github.com/mono/SkiaSharp/pull/3488 - Add structured workflow for adding APIs to SkiaSharp by @Copilot in https://github.com/mono/SkiaSharp/pull/3483 [community ✨] - Use the new CI feed to download the pre-built artifacts by @mattleibow in https://github.com/mono/SkiaSharp/pull/3486 - Add NuGet feed management tools and PR package download script by @mattleibow in https://github.com/mono/SkiaSharp/pull/3479 - Update libwebp to 1.6.0 by @mattleibow in https://github.com/mono/SkiaSharp/pull/3478 (skia: mono/skia#167) - Improve native-dependency-update skill Phase 5 instructions by @mattleibow in https://github.com/mono/SkiaSharp/pull/3477 - Add debugging methodology documentation by @mattleibow in https://github.com/mono/SkiaSharp/pull/3468 - Strengthen skill guidance on submodule merge sequence by @mattleibow in https://github.com/mono/SkiaSharp/pull/3475 - Fix skia submodule to point to squashed commit by @mattleibow in https://github.com/mono/SkiaSharp/pull/3474 (skia: mono/skia#165) - Update brotli to 1.2.0 by @mattleibow in https://github.com/mono/SkiaSharp/pull/3469 - Bump libexpat from 2.6.4 to 2.7.3 by @mattleibow in https://github.com/mono/SkiaSharp/pull/3458 - Remove unused deps and add deps docs by @mattleibow in https://github.com/mono/SkiaSharp/pull/3463 (skia: mono/skia#164) - Update more skills by @mattleibow in https://github.com/mono/SkiaSharp/pull/3460 - Update native-dependency-update skill with guardrails by @mattleibow in https://github.com/mono/SkiaSharp/pull/3457 - Update SkiaSharp package source URL in nuget.config by @mattleibow in https://github.com/mono/SkiaSharp/pull/3459 - Update the native dependency bump skills by @mattleibow in https://github.com/mono/SkiaSharp/pull/3455 - Update libpng to 1.6.54 by @mattleibow in https://github.com/mono/SkiaSharp/pull/3452 (skia: mono/skia#162) - Update docs submodule by @mattleibow in https://github.com/mono/SkiaSharp/pull/3454 - Add native dependency update skill by @mattleibow in https://github.com/mono/SkiaSharp/pull/3453 - Add AI release skills and integration test suite by @mattleibow in https://github.com/mono/SkiaSharp/pull/3451 - Fix the version processing by @mattleibow in https://github.com/mono/SkiaSharp/pull/3450 - Add API guidelines and implement-issue skill by @mattleibow in https://github.com/mono/SkiaSharp/pull/3445 - Document HarfBuzzSharp versioning in release process by @mattleibow in https://github.com/mono/SkiaSharp/pull/3447 - Bump to the next version (3.119.3) after release by @mattleibow in https://github.com/mono/SkiaSharp/pull/3446 --> <!-- Generated: 2026-06-23T19:21:35Z by claude-sonnet-4.6 -->

Version 3.119.3

Preview only · Superseded by 3.119.4 · Never released as stable — these changes rolled up into 3.119.4 · NuGet

API changes · SkiaSharp API diff · HarfBuzzSharp 8.3.1.4

Highlights

This preview-only release focused on security hardening and stability: Spectre mitigations landed for both Windows and Linux native libraries, a NativeAOT crash was fixed for apps with reflection disabled, and a fontconfig crash on Linux ARM64 was resolved. All of these changes shipped cumulatively in 3.119.4. Community contributors @sshumakov and @Copilot drove both Spectre mitigation PRs and the AoT fix.

Security

• Spectre mitigation for Windows — Enables /Qspectre for libSkiaSharp.dll, reducing information-disclosure risk on Windows. ❤️ @sshumakov (#3496)
• Spectre mitigation for Linux — Enables Spectre mitigation flags for libSkiaSharp.so. ❤️ @sshumakov (#3502)
• libwebp updated to 1.6.0 — Latest security release. (#3478)
• brotli updated to 1.2.0 (#3469)
• libexpat bumped to 2.7.3 — Security fix release (from 2.6.4). (#3458)
• libpng updated to 1.6.54 (#3452)

Bug Fixes

• Fixed NativeAOT crash with IlcDisableReflection=true — Resolves a crash in apps compiled ahead-of-time with reflection disabled. ❤️ @Copilot (#3485)
• Fixed Linux ARM64 startup crash — Adds the fontconfig runtime library to the ARM64 cross-compile sysroot, resolving a crash at startup on Linux ARM64. (#3494)

Community Contributors ❤️

Contributor	What They Did
@sshumakov	Spectre mitigations for Windows and Linux native libraries
@Copilot	Fixed NativeAOT crash with IlcDisableReflection=true

Links

• Full Changelog
• NuGet Package

---

Preview 1 (February 7, 2026)

Security hardening with Spectre mitigations for Windows and Linux, NativeAOT crash fix, Linux ARM64 fontconfig fix, and multiple native dependency security updates (libwebp, brotli, libexpat, libpng).

Full Changelog