search

checkmarx-ts / CxAnalytix

Exports vulnerability scan data from the Checkmarx SAST platform for use in analytical tools.
Other
20 stars 10 forks source link

Bump Autofac from 6.4.0 to 7.0.1 #217

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps Autofac from 6.4.0 to 7.0.1.

Release notes

Sourced from Autofac's releases.

v7.0.1

What's Changed

  • Reduced lock contention in LifetimeScope.CreateSharedInstance (thanks @​botinko)
  • Optimized Autofac.Features.OpenGenerics.OpenGenericServiceBinder.TryBindOpenGenericTypedService (thanks @​SergeiPavlov)

Full Changelog: https://github.com/autofac/Autofac/compare/v7.0.0...v7.0.1

v7.0.0

Version 7.0.0 is a major increment due to some changes in the target frameworks and some behavioral changes. We summarize these in the documentation, but included here as well:

New Features

  • Properties marked required will now be injected by default. As part of this, the default property injector using PropertiesAutowired() will not inject properties marked required. The documentation has more explanation with examples.
  • Ability to isolate AssemblyLoadContext by lifetime scope. A new method, BeginLoadContextLifetimeScope, has been added that allows you to create a lifetime scope tied to a specific AssemblyLoadContext. When the scope is disposed, Autofac will perform a best-effort release of all references to types from that context so the assemblies can be unloaded. The documentation explains this in greater detail.
  • Documentation links in exception messages. Common Autofac exceptions now include links to our online documentation to help you understand what the exceptions mean and how to troubleshoot them.

Issues and PRs

Full Changelog: https://github.com/autofac/Autofac/compare/v6.5.0...v7.0.0

Breaking Changes

  • net50 no longer targeted. Autofac will still work with .NET 5 via the netstandard2.1 target, but we recommend you upgrade to a later, supported version of .NET.
  • Properties marked required will now be injected by default. As noted above, required properties will be injected. This is a behavioral change from Autofac 6.0.
  • Default property injection ignores required properties. Using PropertiesAutowired() will ignore required properties because it's assumed they must be set during construction rather than post-object-creation.
  • RegisterGeneratedFactory is obsolete. This feature has been replaced by the Func<X, Y, B> built-in relationship and delegate factories.
  • ILifetimeScope has a new BeginLoadContextLifetimeScope method. If you have mocks of ILifetimeScope this method must now be implemented.

v6.5.0

  • Reflection caches have moved to a central location Autofac.Core.ReflectionCacheSet (#1341). This is part of an effort to support unloading AssemblyLoadContexts associated with child scopes and enable better plugin support (#1324).
  • IDecoratorContext now extends IComponentContext so decorator decisions can be made based on the constructed container (#1338, #1352).
  • Fix memory leak regression (#1353 - Thanks @​botinko!)

Full Changelog: https://github.com/autofac/Autofac/compare/v6.4.0...v6.5.0

Commits
  • 27e1832 Use latest .NET SDKs with security patches.
  • 73530e0 Update non-functional dependencies, resolve issues
  • f4a54b0 Semver => 7.0.1
  • 24a188f Merge pull request #1374 from SergeiPavlov/optimize_TryBindOpenGenericTypedSe...
  • d703f81 Fix comment
  • 1f99354 Add doc comment
  • 04d5f75 Fix formatting
  • d513b6a Remove using
  • 2e016ad Move Concurrentdictionary to ReflectionCacheSet.Shared.Internal.GenericTypeDe...
  • 2748277 Revert ReadOnlyList<Service>
  • Additional commits viewable in compare view


Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

nleach999 commented 1 year ago

@dependabot rebase

dependabot[bot] commented 1 year ago

Looks like Autofac is up-to-date now, so this is no longer needed.