3.1.2 - Patch CVE-2024-43485

Bump the minimum supported System.Text.Json version to 6.0.10 to resolve CVE-2024-43485

3.1.1

Use lowest supportable dependency versions

In the interest of maximising compatibility I have lower the required version of System.Text.Json the only dependency for this library to the lowest supportable version I can, 6.0.0.

This should increase the places this library can be used, such as within function apps, and will be my strategy going forwards. Limit the number of external dependencies (zero is the best number) and if I need to take one on, use its lowest supportable version.

What's Changed

• fix: use the lowest supportable version of System.Text.Json by @bmazzarol in #142

Full Changelog: 3.1.0...3.1.1

3.1.0

Support Implicit Usings

If your project has implicit usings enabled
the standard imports and alias entries are not required and can be removed.

So find and remove all,

using HttpBuildR
using Req = HttpMethod; // or using Req = System.Net.HttpMethod
using Resp= HttpStatusCode; // or using Req = System.Net.HttpStatusCode

What's Changed

• chore(deps): Bump csharpier from 0.25.0 to 0.26.6 by @dependabot in #124
• chore(deps-dev): Bump the all group with 2 updates by @dependabot in #135
• chore(deps-dev): Bump the all group with 2 updates by @dependabot in #137
• chore(deps): Bump the all group with 7 updates by @dependabot in #138
• chore(deps-dev): Bump the all group with 2 updates by @dependabot in #140
• chore(deps): Bump the all group with 5 updates by @dependabot in #139
• feat: add implicit usings for net6+ projects that want them by @bmazzarol in #141

Full Changelog: 3.0.0...3.1.0

V3.0.0

Dotnet 8 Support

HttpBuildR.ActionResult now supports net 8 and has dropped support for net 7.

Other breaking changes in Action Result

As part of this change 2 breaking changes have been made.

AsOk is no longer there, I have come to see extension methods on T as problematic. It is too broad and effectively makes every type in the solution a candidate for conversion to action result.

Instead I have renamed the static class to ActionResultBuilder and changed the AsOk method to Ok and made it a normal static method.

using HttpBuildR;

// ActionResult<string> oldAr = "some content".AsOk();
ActionResult<string> newAr = ActionResultBuilder.Ok("some content");

The other change was to align with the standard naming conventions for extension methods, replacing the AsAction<>() command with
ToActionResult<>()

using HttpBuildR;
using Resp = HttpStatusCode;

// ActionResult<string> oldAr = Resp.BadRequest.Result().AsAction<string>();
ActionResult<string> newAr = Resp.BadRequest.Result().ToActionResult<string>();

What's Changed

• chore: enable central package management by @bmazzarol in #115
• chore: simplify CI by @bmazzarol in #116
• chore: test reporter in-line by @bmazzarol in #117
• fix: run test reporter steps only on pr by @bmazzarol in #118
• chore(deps): Bump xunit from 2.5.3 to 2.6.0 by @dependabot in #121
• chore(deps): Bump Meziantou.Analyzer from 2.0.98 to 2.0.103 by @dependabot in #120
• chore(deps): Bump FluentAssertions.Analyzers from 0.25.0 to 0.26.0 by @dependabot in #119
• feat: upgrade to dotnet 8 by @bmazzarol in #122

Full Changelog: 2.0.0...3.0.0

v2.0.0

Reduce Allocations

I have gone through and removed all the unnecessary allocations that were occuring.

This has lead to a number of minor/but breaking changes.

Functions now Mutate

Before the code was cloning the Request/Response for every With method call.

Now it just mutates the Request/Response in-place.

If you require the old behaviour a Clone function is now public for both request and response.

var req = Req.Get.To("test").WithHeader("A","1");
var clonedReq = await req.Clone();
Assert.NotEqual(req, clonedReq);

Xml body function change

I have changed the spec for WithXmlContent, it now uses an internal XmlSerializer factory and the caller cannot pass one in.

If you need the old behaviour, you can use the raw WithContent and re-implement it using your own serializer.

I have also removed the defaultNamespace parameter, it was never the correct way to set the namespaces; use the standard attributes instead.

JsonTypeInfo Support

A JsonTypeInfo can now be passed to the WithJsonContent function if you have source generated JSON models

What's Changed

• feat: reduce allocations in code by @bmazzarol in #104

If you have any problems raise an issue and I will have a look.

Full Changelog: 1.1.3...2.0.0

v1.1.3

What's Changed

• chore(deps): Bump csharpier from 0.23.0 to 0.24.1 by @dependabot in #57
• chore(deps): Bump BunsenBurner from 6.2.1 to 6.2.2 by @dependabot in #56
• chore(deps): Bump HttpBuildR.Response from 1.1.1 to 1.1.2 by @dependabot in #55
• chore(deps): Bump Meziantou.Analyzer from 2.0.37 to 2.0.45 by @dependabot in #53
• chore(deps): Bump HttpBuildR.Request from 1.1.1 to 1.1.2 by @dependabot in #54
• chore(deps): Bump SonarAnalyzer.CSharp from 8.56.0.67649 to 9.0.0.68202 by @dependabot in #58
• chore(deps): Bump csharpier from 0.24.1 to 0.24.2 by @dependabot in #60
• chore(deps): Bump Meziantou.Analyzer from 2.0.45 to 2.0.48 by @dependabot in #59
• chore(deps): Bump Meziantou.Analyzer from 2.0.48 to 2.0.50 by @dependabot in #61
• chore(deps): Bump Microsoft.NET.Test.Sdk from 17.5.0 to 17.6.0 by @dependabot in #64
• chore(deps): Bump coverlet.collector from 3.2.0 to 6.0.0 by @dependabot in #63
• chore(deps): Bump Meziantou.Analyzer from 2.0.50 to 2.0.52 by @dependabot in #62
• chore(deps): Bump SonarAnalyzer.CSharp from 9.0.0.68202 to 9.1.0.70676 by @dependabot in #65
• chore(deps): Bump Meziantou.Analyzer from 2.0.52 to 2.0.54 by @dependabot in #66
• feat: setup documentation [ci] by @bmazzarol in #67
• fix: sonar issues [ci] by @bmazzarol in #68

Full Changelog: 1.1.2...1.1.3

1.1.2

What's Changed

• chore(deps): Bump Meziantou.Analyzer from 2.0.19 to 2.0.20 by @dependabot in #38
• chore(deps): Bump HttpBuildR.Response from 1.1.0 to 1.1.1 by @dependabot in #35
• chore(deps): Bump BunsenBurner from 6.2.0 to 6.2.1 by @dependabot in #36
• chore(deps): Bump HttpBuildR.Request from 1.1.0 to 1.1.1 by @dependabot in #37
• chore(deps): Bump Meziantou.Analyzer from 2.0.20 to 2.0.22 by @dependabot in #39
• chore(deps): Bump SonarAnalyzer.CSharp from 8.54.0.64047 to 8.55.0.65544 by @dependabot in #40
• chore(deps): Bump Meziantou.Analyzer from 2.0.22 to 2.0.26 by @dependabot in #41
• chore(deps): Bump Meziantou.Analyzer from 2.0.26 to 2.0.27 by @dependabot in #42
• chore(deps): Bump Meziantou.Analyzer from 2.0.27 to 2.0.28 by @dependabot in #43
• chore(deps): Bump Meziantou.Analyzer from 2.0.28 to 2.0.29 by @dependabot in #44
• chore(deps): Bump Meziantou.Analyzer from 2.0.29 to 2.0.30 by @dependabot in #45
• chore(deps): Bump Meziantou.Analyzer from 2.0.30 to 2.0.32 by @dependabot in #46
• chore(deps): Bump Meziantou.Analyzer from 2.0.32 to 2.0.34 by @dependabot in #47

Full Changelog: 1.1.1...1.1.2

v1.1.1

What's Changed

• chore(deps): Bump HttpBuildR.Request from 1.0.0 to 1.1.0 by @dependabot in #21
• chore(deps): Bump HttpBuildR.Response from 1.0.0 to 1.1.0 by @dependabot in #20
• chore(deps): Bump FluentAssertions from 6.9.0 to 6.10.0 by @dependabot in #22
• chore(deps): Bump System.Text.Json from 7.0.1 to 7.0.2 by @dependabot in #23
• chore(deps): Bump Meziantou.Analyzer from 2.0.14 to 2.0.15 by @dependabot in #24
• chore(deps): Bump Meziantou.Analyzer from 2.0.15 to 2.0.16 by @dependabot in #25
• chore(deps): Bump Meziantou.Analyzer from 2.0.16 to 2.0.17 by @dependabot in #27
• chore(deps): Bump SonarAnalyzer.CSharp from 8.52.0.60960 to 8.53.0.62665 by @dependabot in #26
• chore(deps): Bump Meziantou.Analyzer from 2.0.17 to 2.0.18 by @dependabot in #29
• chore(deps): Bump Microsoft.NET.Test.Sdk from 17.4.1 to 17.5.0 by @dependabot in #28
• chore(deps): Bump coverlet.collector from 3.1.2 to 3.2.0 by @dependabot in #30
• chore(deps): Bump xunit.runner.visualstudio from 2.4.3 to 2.4.5 by @dependabot in #31
• chore(deps): Bump Meziantou.Analyzer from 2.0.18 to 2.0.19 by @dependabot in #33
• chore(deps): Bump xunit from 2.4.1 to 2.4.2 by @dependabot in #32
• chore(deps): Bump SonarAnalyzer.CSharp from 8.53.0.62665 to 8.54.0.64047 by @dependabot in #34

Full Changelog: 1.1.0...1.1.1

ActionResult integration! Use the response builder with ActionResult

What's Changed

• Adding examples using IHttpClientFactory by @cheranga-bunnings in #5
• chore(deps): bump Meziantou.Analyzer from 2.0.4 to 2.0.5 by @dependabot in #7
• chore(deps): bump BunsenBurner from 5.3.1 to 6.1.0 by @dependabot in #8
• chore(deps): Bump FluentAssertions from 6.8.0 to 6.9.0 by @dependabot in #9
• chore(deps): Bump Meziantou.Analyzer from 2.0.5 to 2.0.7 by @dependabot in #10
• chore(deps): Bump Meziantou.Analyzer from 2.0.7 to 2.0.8 by @dependabot in #11
• chore(deps): Bump BunsenBurner from 6.1.0 to 6.1.1 by @dependabot in #12
• chore(deps): Bump Meziantou.Analyzer from 2.0.8 to 2.0.9 by @dependabot in #13
• chore(deps): Bump Meziantou.Analyzer from 2.0.9 to 2.0.10 by @dependabot in #14
• chore(deps): Bump Meziantou.Analyzer from 2.0.10 to 2.0.13 by @dependabot in #15
• chore(deps): Bump BunsenBurner from 6.1.1 to 6.2.0 by @dependabot in #16
• chore(deps): Bump Meziantou.Analyzer from 2.0.13 to 2.0.14 by @dependabot in #17
• chore(deps): Bump SonarAnalyzer.CSharp from 8.51.0.59060 to 8.52.0.60960 by @dependabot in #18
• feat(action-result): added builder support for ActionResult [ci] by @bmazzarol in #19

New Contributors

• @cheranga-bunnings made their first contribution in #5

Full Changelog: 1.0.0...1.1.0

Version 1 Release!

Initial release!

Contain extension builders for requests and responses.

Covers all features expect for request/response options (was called properties). Will look at this later if and when its requested.

What's Changed

• chore(deps): bump Meziantou.Analyzer from 2.0.3 to 2.0.4 by @dependabot in #1
• feat: support for response building [ci] by @bmazzarol in #3

New Contributors

• @dependabot made their first contribution in #1
• @bmazzarol made their first contribution in #3

Full Changelog: https://github.com/bmazzarol/Http-BuildR/commits/1.0.0