search

aloneguid / config

⚙ Config.Net - the easiest configuration framework for .NET developers. No BS.
MIT License
641 stars 85 forks source link

Bump YamlDotNet.Signed from 4.3.1 to 6.0.0 in /src/Config.Net.Yaml #96

Closed dependabot[bot] closed 4 years ago

dependabot[bot] commented 4 years ago

Bumps YamlDotNet.Signed from 4.3.1 to 6.0.0.

Release notes *Sourced from [YamlDotNet.Signed's releases](https://github.com/aaubry/YamlDotNet/releases).* > ## Merge YamlDotNet.Signed and YamlDotNet packages > This release merges the YamlDotNet.Signed and YamlDotNet packages, as discussed in [#390](https://github-redirect.dependabot.com/aaubry/YamlDotNet/issues/390). > This change has the following consequences: > > - The **assemblies in the YamlDotNet package will now have strong names**. > This is a breaking change. If you depend on a library that depends on a > previous version of YamlDotNet, you will first need to update that library. > > - The **YamlDotNet.Signed package will cease to be published**. > The code should be updated to depend on YamlDotNet. > > ## Enable serialization of public fields > YamlDotNet will now also serialize public fields. This feature is enabled by default, but it can be disabled by calling IgnoreFields() on the SerializerBuilder or DeserializerBuilder. > > ## More detailed exception > New features: > > * Produce a detailed error message when too much recursion is detected during serialization. > > ## Make configuration more flexible > New features: > > * Add support for supplying custom IObjectGraphTraversalStrategy implementations. > * Add abstract WithTagMapping() method to the base serializer / deserializer builder. > > Bug fixes: > > * Use BenchmarkDotNet and Compile YamlDotNet with Optimize option in Release-* configurations > > ## Bug fixes > * Fix roundtripping of tags on sequences ([#347](https://github-redirect.dependabot.com/aaubry/YamlDotNet/issues/347)) > > ## v5.2.0 > Improvements: > * Allow to specify the maximum recusion limit (fixes [#352](https://github-redirect.dependabot.com/aaubry/YamlDotNet/issues/352)) with the [WithMaximumRecursion](https://github-redirect.dependabot.com/aaubry/YamlDotNet/pull/353/files#diff-86074b6acff29ccad667aca741f62ac5R83) method. > > ## v5.1.0 > Improvements: > * Add interfaces for serializer and deserializer (fixes [#350](https://github-redirect.dependabot.com/aaubry/YamlDotNet/issues/350)). > > Fixes: > * Fixed issue [#348](https://github-redirect.dependabot.com/aaubry/YamlDotNet/issues/348) that caused the assembly to have version 0.0.0.0. > > ## Metadata update > This release adds the repository location to the package metadata. No functional changes were made. > > ## Security issues and dropping legacy behaviors > /!\ This release fixes a security issue. It is strongly recommended to upgrade, > mainly if you are parsing documents from sources that you do not trust. > > ... (truncated)
Changelog *Sourced from [YamlDotNet.Signed's changelog](https://github.com/aaubry/YamlDotNet/blob/master/RELEASE_NOTES.md).* > # Release notes > ## Release 8.0.0 > > ## New features and improvements > > - Change the default value handling behavior. Fixes [#427](https://github-redirect.dependabot.com/aaubry/YamlDotNet/issues/427) > This is a **breaking change** to the default behaviour of the serializer, which will now **always emit null and default values**. > It is possible to configure this behaviour by using the `ConfigureDefaultValuesHandling` method on `SerializerBuilder`. > > [More details are available in the documentation.](https://github.com/aaubry/YamlDotNet/wiki/Serialization.Serializer#configuredefaultvalueshandlingdefaultvalueshandling) > > - Add default implementations for the following non-generic collections to `DefaultObjectFactory`: > - IEnumerable > - ICollection > - IList > - IDictionary > > - Remove obsolete and unused `SerializationOptions` enum. Fixes [#438](https://github-redirect.dependabot.com/aaubry/YamlDotNet/issues/438) > - Throw descriptive exceptions when using the "linq" methods of `YamlNode`. Relates to [#437](https://github-redirect.dependabot.com/aaubry/YamlDotNet/issues/437) > > ## Bug fixes > > - Never emit document end indicator on stream end. Fixes [#436](https://github-redirect.dependabot.com/aaubry/YamlDotNet/issues/436) > - Fix exception when deserializing an interface. Fixes [#439](https://github-redirect.dependabot.com/aaubry/YamlDotNet/issues/439) > > # Previous releases > - [7.0.0](https://github.com/aaubry/YamlDotNet/blob/master/releases/7.0.0.md) > - [6.1.2](https://github.com/aaubry/YamlDotNet/blob/master/releases/6.1.2.md) > - [6.1.1](https://github.com/aaubry/YamlDotNet/blob/master/releases/6.1.1.md) > - [6.0.0](https://github.com/aaubry/YamlDotNet/blob/master/releases/6.0.0.md) > - [5.4.0](https://github.com/aaubry/YamlDotNet/blob/master/releases/5.4.0.md) > - [5.3.1](https://github.com/aaubry/YamlDotNet/blob/master/releases/5.3.1.md) > - [5.3.0](https://github.com/aaubry/YamlDotNet/blob/master/releases/5.3.0.md) > - [5.2.1](https://github.com/aaubry/YamlDotNet/blob/master/releases/5.2.1.md) > - [5.2.0](https://github.com/aaubry/YamlDotNet/blob/master/releases/5.2.0.md) > - [5.1.0](https://github.com/aaubry/YamlDotNet/blob/master/releases/5.1.0.md) > - [5.0.0](https://github.com/aaubry/YamlDotNet/blob/master/releases/5.0.0.md) > - [4.3.2](https://github.com/aaubry/YamlDotNet/blob/master/releases/4.3.2.md) > - [4.3.1](https://github.com/aaubry/YamlDotNet/blob/master/releases/4.3.1.md) > - [4.3.0](https://github.com/aaubry/YamlDotNet/blob/master/releases/4.3.0.md) > - [4.2.4](https://github.com/aaubry/YamlDotNet/blob/master/releases/4.2.4.md) > - [4.2.3](https://github.com/aaubry/YamlDotNet/blob/master/releases/4.2.3.md) > - [4.2.2](https://github.com/aaubry/YamlDotNet/blob/master/releases/4.2.2.md) > - [4.2.1](https://github.com/aaubry/YamlDotNet/blob/master/releases/4.2.1.md) > - [4.2.0](https://github.com/aaubry/YamlDotNet/blob/master/releases/4.2.0.md) > - [4.1.0](https://github.com/aaubry/YamlDotNet/blob/master/releases/4.1.0.md) > - [4.0.0](https://github.com/aaubry/YamlDotNet/blob/master/releases/4.0.0.md) > - [3.9.0](https://github.com/aaubry/YamlDotNet/blob/master/releases/3.9.0.md) > - [3.8.0](https://github.com/aaubry/YamlDotNet/blob/master/releases/3.8.0.md) > - [3.7.0](https://github.com/aaubry/YamlDotNet/blob/master/releases/3.7.0.md) > ... (truncated)
Commits - [`3440d02`](https://github.com/aaubry/YamlDotNet/commit/3440d02c0012da335d6ef211cd5960c62fa8a4b7) Prepare release 6.0.0 - [`0341198`](https://github.com/aaubry/YamlDotNet/commit/03411984b25dd9f7072448d98f0d7c43abb16125) Setup a release task to make it easier to release a new version - [`a66b0d5`](https://github.com/aaubry/YamlDotNet/commit/a66b0d5f0174694d3a86bb3b6fb2dcabcdfc1853) Merge branch 'merge-signed-package' - [`42b2be1`](https://github.com/aaubry/YamlDotNet/commit/42b2be1c753af3b0260afe99582f242f01586aa0) Fix the Travis build and cleanup - [`fff0266`](https://github.com/aaubry/YamlDotNet/commit/fff0266998d8a979ab670380d3332acab65f5a5c) Enable diagnostics in the Travis build - [`ffe7c70`](https://github.com/aaubry/YamlDotNet/commit/ffe7c70d069afcf06a9c62de0eb87aac38126d43) Merge signed and non-signed packages - [`aa9d446`](https://github.com/aaubry/YamlDotNet/commit/aa9d446586acffe2b484a100f6439dc87950c7c5) Switch to Mainline development - [`7d24572`](https://github.com/aaubry/YamlDotNet/commit/7d245720838a3045578dff87c421c3936b722d9f) Pin cake version - [`55b62d4`](https://github.com/aaubry/YamlDotNet/commit/55b62d48dbb8a8a3d4e63c0b167a7ef3bb963e87) Merge pull request [#389](https://github-redirect.dependabot.com/aaubry/YamlDotNet/issues/389) from sungam3r/typos-and-nameof - [`05316f1`](https://github.com/aaubry/YamlDotNet/commit/05316f1497d8dbd6876ff1713cd9271ae0bc8782) SafeEquals -> static object.Equals - Additional commits viewable in [compare view](https://github.com/aaubry/YamlDotNet/compare/v4.3.1...v6.0.0)


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/aloneguid/config/network/alerts).
dependabot[bot] commented 4 years ago

Looks like YamlDotNet.Signed is no longer a dependency, so this is no longer needed.