Version 3.119.3

Security and dependency updates · NuGet (prerelease)

Superseded by 3.119.4 · Never released as stable — these changes rolled up into 3.119.4.

API changes · SkiaSharp API diff · HarfBuzzSharp API diff

Highlights

SkiaSharp 3.119.3 is a preview focused on native security mitigations and dependency refreshes. Spectre mitigations are added for Linux, native dependencies including libwebp and brotli are updated, and an AoT crash with IlcDisableReflection is fixed.

Breaking Changes

None in this preview line.

Bug Fixes

AoT crash with IlcDisableReflection fixed — Applications using Native AoT with IlcDisableReflection=true were crashing; the reflection-dependent code path has been removed. (#3485)
Linux ARM64 fontconfig runtime dependency added — A missing fontconfig runtime library has been added to the Linux ARM64 cross-compile sysroot, fixing crashes on ARM64 Linux. (#3494)

Security

Spectre mitigations enabled for Linux native binaries — Spectre v1 mitigation flags are now applied to libSkiaSharp.so on Linux, complementing the Windows mitigations from 3.119.2. — ❤️ @sshumakov (#3502, #3496)
Native dependencies updated — libpng updated to 1.6.54, libwebp to 1.6.0, brotli to 1.2.0, and unused dependencies have been removed. (#3452, #3478, #3469, #3463)

HarfBuzzSharp 8.3.1.4

No HarfBuzzSharp binding changes shipped in this release — it rebuilds the same HarfBuzz as the previous line.

Community Contributors ❤️

Thank you to everyone who contributed to this release!

Contributor	Contributions
@sshumakov	Enabled Spectre mitigation flags for Windows and Linux native binaries (#3496, #3502)

Preview 1 (February 7, 2026)

Preview 1 delivered Spectre mitigations for Linux, AoT reflection fix, Linux ARM64 crash fix, and updates for libpng, libwebp, and brotli.

Full changelog