Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency System.Linq.Dynamic.Core to 1.3.0 [SECURITY] #118

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Aug 6, 2024

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
System.Linq.Dynamic.Core (source) 1.2.20 -> 1.3.0 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2023-32571

Dynamic Linq 1.0.7.10 through 1.2.25 before 1.3.0 allows attackers to execute arbitrary code and commands when untrusted input to methods including Where, Select, OrderBy is parsed.


Release Notes

zzzprojects/System.Linq.Dynamic.Core (System.Linq.Dynamic.Core)

v1.3.0

  • #​669 - Methods should only be callable on predefined types [security] contributed by StefH
  • #​671 - Add support for DateOnly and TimeOnly [feature] contributed by StefH
  • #​672 - Fixed ExpressionParser when WrappedValue-string is used for equals-operator for Enum [bug] contributed by StefH
  • #​676 - Change default setting for PrioritizePropertyOrFieldOverTheType to 'true'. [bug] contributed by StefH
  • #​660 - Question about security [security]
  • #​667 - DateOnly support [feature]
  • #​668 - With UseParameterizedNamesInDynamicQuery, can't compare enum type with String [bug]
  • #​675 - Expression does not parse any more 1.2.25 (works in 1.2.24) [bug]

v1.2.25

  • #​664 - Add config setting for PrioritizePropertyOrFieldOverTheType [feature] contributed by StefH
  • #​665 - Update AbstractDynamicLinqCustomTypeProvider to exclude null types [bug] contributed by StefH
  • #​666 - Fixed ExpressionParser when WrappedValue-string is used for equals-operator contributed by StefH
  • #​645 - With UseParameterizedNamesInDynamicQuery, can't compare DateTimeOffset with String [bug]
  • #​662 - System.Linq.Dynamic.Core.Exceptions.ParseException : No applicable method 'DateTime' exists in type [feature]

v1.2.24

  • #​621 - Fix Join on inherited class [bug] contributed by StefH
  • #​646 - Add more unittests for issue 645 [feature] contributed by StefH
  • #​647 - Support nullable notation "xxx?" in As expression [feature] contributed by StefH
  • #​649 - Fix DynamicExpressionParser and ExpressionPromoter to support LambdExpression [bug] contributed by StefH
  • #​653 - Add support to cast to a fully qualified type [feature] contributed by StefH
  • #​614 - Join problem with inherited entities [bug]
  • #​652 - Implement casting to fully qualified type [feature]

v1.2.23

  • #​644 - Add support for .NET 7 and EF Core 7 [feature] contributed by StefH

v1.2.22

  • #​642 - Rename extension method "AsEnumerable" to "AsDynamicEnumerable". [feature] contributed by StefH
  • #​304 - System.Linq.Dynamic.Core.DynamicQueryableExtensions.AsEnumerable conflicts with System.Linq.Enumerable.AsEnumerable [bug]

v1.2.21

  • #​627 - Use PackageIcon + upgrade JetBrains.Annotations [feature] contributed by StefH
  • #​630 - Fix MethodFinder to return topmost implementation of the virtual method [feature] contributed by jogibear9988
  • #​631 - Init field only on first execution [bug] contributed by BBreiden
  • #​636 - Fix nullable issues [bug] contributed by StefH
  • #​637 - Fixed accessing dynamic properties by index [bug] contributed by StefH
  • #​641 - Add unit test for DynamicClass SerializeToJson [feature] contributed by StefH
  • #​580 - C# Expressions use Base Class Virtual Methodinfo [bug]
  • #​629 - Error accessing values in DynamicClass - fails on second attempt [bug]
  • #​634 - After Upgrade NuGet-Package to 1.2.20 accessing dynamic properties by index fails [bug]
  • #​635 - Compile errors due to missing nullable reference annotations on APIs that accept null [bug]
  • #​640 - NullReferenceException during json serialize of DynamicClass [bug]

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot changed the title Update dependency System.Linq.Dynamic.Core to v1.3.0 [SECURITY] Update dependency System.Linq.Dynamic.Core to 1.3.0 [SECURITY] Aug 28, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants