search

evemondevteam / evemon

A lightweight, easy-to-use standalone Windows application designed to assist you in keeping track of your EVE Online character progression.
185 stars 171 forks source link

Bump YamlDotNet from 3.8.0 to 5.0.0 in /src/EVEMon.Common #101

Open dependabot[bot] opened 5 years ago

dependabot[bot] commented 5 years ago

Bumps YamlDotNet from 3.8.0 to 5.0.0.

Release notes *Sourced from [YamlDotNet's releases](https://github.com/aaubry/YamlDotNet/releases).* > ## Security issues and dropping legacy behaviors > /!\ This release fixes a security issue. It is strongly recommended to upgrade, > mainly if you are parsing documents from sources that you do not trust. > > **Many thanks to [Kurt Boberg](https://github.com/aaubry/YamlDotNet/blob/HEAD/mailto:kurt.boberg@docusign.com), from the DocuSign Application Security Team, who identified this issue and provided feedback on mitigation strategies.** > > * **Remove the legacy backwards-compatibe syntax that enabled to create > `Serializer` and `Deserializer` directly then changing their configutation.** > In most cases, the calls to the constructors should be replaced by > instantiations of `SerializerBuilder` and `DeserializerBuilder`. > These can be configured at will, then used to create instances of > (De)serializer. > It is still possible to use the default constructors, if no configuration is needed. > > * **Drop support for specifying arbitrary type names in tags.** > Support for automatically resolving a fully qualified type name > from a tag has been discontinued. That feature was poorly designed > and not standard. > During deserialization, each tag mapping must be explicitly registered. > During serialization, when using the `EnsureRoundtrip` method, it is necessary to > register tag mappings for each type that will require a tag, that is, any type that > is used as the value of a property with a different declared type. > > * Fix bug where deserialized values were not being converted to the destination type. > ```c# > var sut = new DeserializerBuilder() > .WithTagMapping("!dbl", typeof(DoublyConverted)) > .Build(); > > // The scalar "hello" will first be converted to DoublyConverted > // then that value will be converted to int. > var result = sut.Deserialize("!dbl hello"); > > Assert.Equal(5, result); > ``` > > ## Add support for (de)serialization of System.Type > No release notes provided. > > ## Cleanup the project > * Refactored the project and solution so that they load and build cleanly in VS2017. > * Reviewed the target platforms. > * **The currently supported platforms are now:** > * .NET Framework 4.5 > * .NET Framework 3.5 > * .NET Framework 2.0 (**experimental**) > * .NET Standard 1.3 > * Unity Subset v3.5 > * **The following platforms are no longer supported:** > * Profile259 (please upgrade to netstandard) > ... (truncated)
Changelog *Sourced from [YamlDotNet's changelog](https://github.com/aaubry/YamlDotNet/blob/master/RELEASE_NOTES.md).* > # Release notes > ## Release 8.0.0 > > ## New features and improvements > > - Change the default value handling behavior. Fixes [#427](https://github-redirect.dependabot.com/aaubry/YamlDotNet/issues/427) > This is a **breaking change** to the default behaviour of the serializer, which will now **always emit null and default values**. > It is possible to configure this behaviour by using the `ConfigureDefaultValuesHandling` method on `SerializerBuilder`. > > [More details are available in the documentation.](https://github.com/aaubry/YamlDotNet/wiki/Serialization.Serializer#configuredefaultvalueshandlingdefaultvalueshandling) > > - Add default implementations for the following non-generic collections to `DefaultObjectFactory`: > - IEnumerable > - ICollection > - IList > - IDictionary > > - Remove obsolete and unused `SerializationOptions` enum. Fixes [#438](https://github-redirect.dependabot.com/aaubry/YamlDotNet/issues/438) > - Throw descriptive exceptions when using the "linq" methods of `YamlNode`. Relates to [#437](https://github-redirect.dependabot.com/aaubry/YamlDotNet/issues/437) > > ## Bug fixes > > - Never emit document end indicator on stream end. Fixes [#436](https://github-redirect.dependabot.com/aaubry/YamlDotNet/issues/436) > - Fix exception when deserializing an interface. Fixes [#439](https://github-redirect.dependabot.com/aaubry/YamlDotNet/issues/439) > > # Previous releases > - [7.0.0](https://github.com/aaubry/YamlDotNet/blob/master/releases/7.0.0.md) > - [6.1.2](https://github.com/aaubry/YamlDotNet/blob/master/releases/6.1.2.md) > - [6.1.1](https://github.com/aaubry/YamlDotNet/blob/master/releases/6.1.1.md) > - [6.0.0](https://github.com/aaubry/YamlDotNet/blob/master/releases/6.0.0.md) > - [5.4.0](https://github.com/aaubry/YamlDotNet/blob/master/releases/5.4.0.md) > - [5.3.1](https://github.com/aaubry/YamlDotNet/blob/master/releases/5.3.1.md) > - [5.3.0](https://github.com/aaubry/YamlDotNet/blob/master/releases/5.3.0.md) > - [5.2.1](https://github.com/aaubry/YamlDotNet/blob/master/releases/5.2.1.md) > - [5.2.0](https://github.com/aaubry/YamlDotNet/blob/master/releases/5.2.0.md) > - [5.1.0](https://github.com/aaubry/YamlDotNet/blob/master/releases/5.1.0.md) > - [5.0.0](https://github.com/aaubry/YamlDotNet/blob/master/releases/5.0.0.md) > - [4.3.2](https://github.com/aaubry/YamlDotNet/blob/master/releases/4.3.2.md) > - [4.3.1](https://github.com/aaubry/YamlDotNet/blob/master/releases/4.3.1.md) > - [4.3.0](https://github.com/aaubry/YamlDotNet/blob/master/releases/4.3.0.md) > - [4.2.4](https://github.com/aaubry/YamlDotNet/blob/master/releases/4.2.4.md) > - [4.2.3](https://github.com/aaubry/YamlDotNet/blob/master/releases/4.2.3.md) > - [4.2.2](https://github.com/aaubry/YamlDotNet/blob/master/releases/4.2.2.md) > - [4.2.1](https://github.com/aaubry/YamlDotNet/blob/master/releases/4.2.1.md) > - [4.2.0](https://github.com/aaubry/YamlDotNet/blob/master/releases/4.2.0.md) > - [4.1.0](https://github.com/aaubry/YamlDotNet/blob/master/releases/4.1.0.md) > - [4.0.0](https://github.com/aaubry/YamlDotNet/blob/master/releases/4.0.0.md) > - [3.9.0](https://github.com/aaubry/YamlDotNet/blob/master/releases/3.9.0.md) > - [3.8.0](https://github.com/aaubry/YamlDotNet/blob/master/releases/3.8.0.md) > - [3.7.0](https://github.com/aaubry/YamlDotNet/blob/master/releases/3.7.0.md) > ... (truncated)
Commits - [`e024a32`](https://github.com/aaubry/YamlDotNet/commit/e024a3247c88c71d02419fb18fe3b66f43f4d17d) Prepare release 5.0.0 - [`0ce8ac1`](https://github.com/aaubry/YamlDotNet/commit/0ce8ac1c508c5b36bec665da83932f5be134cdcb) Drop support for specifying arbitrary type names in tags - [`c8df563`](https://github.com/aaubry/YamlDotNet/commit/c8df563a4dd11b7c41c526cb6fd326683f75d72a) Remove legacy backwards compatibility - [`f96b7cc`](https://github.com/aaubry/YamlDotNet/commit/f96b7cc40a0498f8bafdeb49df3aa23aa2c60993) Ensure that tagged values are properly converted to the destination type - [`8f20a18`](https://github.com/aaubry/YamlDotNet/commit/8f20a18bb8a8c026bef7ce5ad66e7d8e198426df) Prepare release 4.3.2 - [`857192d`](https://github.com/aaubry/YamlDotNet/commit/857192d7b4b8f37ff7de6b4ab6c1f629906e505c) Fix bug whe TypeConverter was being ignored on all platforms - [`145477a`](https://github.com/aaubry/YamlDotNet/commit/145477a8065214813898bbe75fb58d3a503d3d73) Remove serialization support from exceptions - [`113261c`](https://github.com/aaubry/YamlDotNet/commit/113261c33823fa0e38982ec2fa72cc1b916074a7) Add quick build task - [`837f61a`](https://github.com/aaubry/YamlDotNet/commit/837f61a4d9e0d041755330a3c73ee2b87c6526f1) Pin Cake version - [`667778b`](https://github.com/aaubry/YamlDotNet/commit/667778b21b9f6501dcbf96d034786cf83cea0d6a) Merge pull request [#313](https://github-redirect.dependabot.com/aaubry/YamlDotNet/issues/313) from thoughtcroft/patch-1 - Additional commits viewable in [compare view](https://github.com/aaubry/YamlDotNet/compare/v3.8.0...v5.0.0)


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/evemondevteam/evemon/network/alerts).