Sebazzz / financial-app

Financial management SPA app created using ASP.NET Core, knockout.js and Typescript
GNU General Public License v2.0
50 stars 15 forks source link

Bump MailKit from 2.3.2 to 2.13.0 #484

Closed dependabot-preview[bot] closed 3 years ago

dependabot-preview[bot] commented 3 years ago

Bumps MailKit from 2.3.2 to 2.13.0.

Changelog

Sourced from MailKit's changelog.

MailKit 2.13.0 (2021-06-12)

  • Added new properties to all clients to get SSL cipher/hash/protocol/key-exchange info. (issue #1175)
  • Added support for GMail's WEBALERT resp-code. (issue #1214)
  • Updated GMail SSL certificate serial numbers and fingerprints.

MailKit 2.12.0 (2021-05-12)

  • Fixed the .NET 5.0 build to include .NET 5.0-specific features. Previous releases incorrectly used #if NET50 instead of #if NET5_0. (issue #1140)
  • Added support for NETStandard 2.1. (issue #1181)
  • .NETStandard 2.1 and .NET 5.0 versions of MailKit now use the newer SslStream.AuthenticateAsClientAsync() methods that take SslClientAuthenticationOptions and CancellationToken arguments. In theory, this should make upgrading a TCP/IP connection to SSL/TLS cancellable. Older .NET frameworks remain uncancellable for this operation.
  • Fixed a NullReferenceException bug in the NTLM SASL mechanism logic.
  • Updated hard-coded SSL certificate serial numbers and fingerprints for common mail servers.

MailKit 2.11.1 (2021-03-16)

  • Added work-around for IMAP servers that do not correctly handle the ESEARCH RETURN () syntax the same as RETURN (ALL). (issue #1177)

MailKit 2.11.0 (2021-03-12)

  • Handle BAD responses to the NAMESPACE command for Exchange. (issue #1135)
  • Added support for configuring SSL/TLS cipher algorithms (only available in the .NET 5.0 API). (issue #1140)
  • Updated GMail and Yahoo! Mail SSL certificate info.
  • Protect against NREs in NTLM authentication of no OSVersion is set. (issue #1148)
  • Added work-around for hMailServer bug that doesn't accept seq-ranges in descending order. (issue #1150)
  • Properly escape IPv6 addresses for Uri in order to allow Connect/Async methods to work with IPv6 addresses. (issue #1165)
  • Added IsEncrypted and IsSigned properties to IMailService. (issue #1175)

MailKit 2.10.1 (2021-01-02)

  • A few NTLM improvements that I hope are correct.

MailKit 2.10.0 (2020-11-20)

  • Don't enable support for TLS v1.1 by default anymore. (issue #1077)
  • Added support for the SCRAM-SHA-512 SASL mechanism.

... (truncated)

Commits
  • 5f7a084 Bumped version to 2.13.0
  • 3787e3b bumped MimeKit dependency
  • 22bc279 Updated GMail SSL certificate serial numbers and fingerprints
  • 1d89560 Added support for GMail's WEBALERT resp-code
  • 4c9ccdf Fix Google OAuth2 FAQ code snippet to refresh expired tokens
  • f5b2604 Bump System.Data.SQLite.Core from 1.0.114.1 to 1.0.114.2 (#1216)
  • f48ebd9 Bump System.Data.SQLite.Core from 1.0.113.7 to 1.0.114.1 (#1209)
  • de4e46d Bump Microsoft.NET.Test.Sdk from 16.9.4 to 16.10.0 (#1208)
  • 8e0ff20 Added SslKeyExchangeAlgorithm/Strength accessors to clients
  • 72c7ef0 Added new properties to all clients to get SSL cipher/hash/protocol info
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will not automatically merge this PR because it includes a minor update to a production dependency.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Pull request limits (per update run and/or open at any time) - Automerge options (never/patch/minor, and dev/runtime dependencies) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired)
dependabot-preview[bot] commented 3 years ago

Superseded by #496.