Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump Twilio.AspNet.Mvc from 5.20.1 to 8.0.2 in /AirTNG.Web.Tests #444

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github May 11, 2023

Bumps Twilio.AspNet.Mvc from 5.20.1 to 8.0.2.

Release notes

Sourced from Twilio.AspNet.Mvc's releases.

8.0.2

No release notes provided.

8.0.1

No release notes provided.

8.0.1-rc

No release notes provided.

8.0.0

No release notes provided.

7.0.0

No release notes provided.

7.0.0-rc

No release notes provided.

6.0.0

  • Big breaking change to the [ValidateRequest] attribute. The attribute no longer accepts parameters nor properties. Instead, you have to configure the request validation as documented in the readme.
  • You can now add the Twilio REST client to ASP.NET Core's dependency injection container, using the .AddTwilioClient method. This Twilio client will use an HttpClient provided by an HTTP client factory. See readme for more details.
  • We no longer try to match the Twilio SDK version number, and instead go by our own versioning to better communicate breaking changes vs minor changes.
  • The projects are now built and packages are now pushed using GitHub Actions instead of AppVeyor.
  • The projects are now built deterministically and support source link for better debugging.
  • More samples have been added to the readme.

6.0.0-alpha2

No release notes provided.

6.0.0-alpha

No release notes provided.

Changelog

Sourced from Twilio.AspNet.Mvc's changelog.

8.0.0 (2023-03-02)

New:

  • The RequestValidationHelper for Twilio.AspNet.Core now has async an async version to validate HTTP requests: IsValidRequestAsync.

Enhancements:

  • Twilio.AspNet.Core automatically updates configuration for Twilio request validation and Twilio clients when the underlying configuration sources are updated without requiring an application restart.
  • Twilio.AspNet.Core validates the configuration when invoking AddTwilioClient and AddTwilioRequestValidation.
  • AddTwilioClient and AddTwilioRequestValidation have more overloads to configure these features as desired.
  • The request validation filters and middleware now load the form asynchronously.
  • Updated Twilio dependency to 6.2.4.

Breaking changes:

  • The AllowLocal setting for request validation filters and middleware, now defaults to false instead of true. ⚠️ Only use this during development, as this will make your application vulnerable to Server-Side Request Forgery.
  • The overloads for AddTwilioClient where you could provide a lambda to provide an HttpClient have been removed. To customize the HttpClient, override the HTTP client factory with name "Twilio", after invoking AddTwilio. See README.md.
  • The Twilio.AspNet.Core library dropped support for .NET versions prior to .NET 6, as these versions no longer supported by Microsoft.

7.0.0 (2022-11-18)

New:

  • The new ValidateTwilioRequest extension method and ValidateTwilioRequestFilter adds Twilio request validation to your endpoints and Minimal APIs, only for ASP.NET Core 7.
  • The new ValidateTwilioRequestMiddleware adds Twilio request validation to the ASP.NET Core request pipeline. This is helpful for securing static files among other things that can't be secured using attributes and filters.
  • New TwiMLResult constructor overloads to specify formatting of the TwiML. The TwiML extension methods and methods on TwilioController also have the new formatting overloads.
  • VoiceResponse and MessagingResponse have a new extension method ToTwiMLResult() that will create a TwiMLResult instance for you.
  • SmsRequest and VoiceRequest have been updated with parameters that were missing.
  • Library now depends on version 6 of the Twilio C# library.

Breaking changes:

  • You can no longer pass in a string or XDocument into the TwiMLResult constructor. Read the v7 announcement post for recommended alternatives.
  • The public properties on TwiMLResult have been removed.
  • The HttpRequest.IsLocal() extension method has been removed.
  • The Twilio.AspNet.Core.HttpStatusCodeResult class has been removed in favor of the action results built into the framework.
  • The Twilio.AspNet.Core.MinimalApi namespace has been removed. Types from the namespace have moved to the Twilio.AspNet.Core namespace.
  • The RequestValidationHelper class is now static. You'll need to change your code to not instantiate this class and call its methods in a static manner.

Other changes include updated documentation with more samples and performance improvements. Read about these changes in more detail at the v7 announcement post.

6.0.0 (2022-08-05)

  • Big breaking change to the [ValidateRequest] attribute. The attribute no longer accepts parameters nor properties. Instead, you have to configure the request validation as documented in the readme.
  • You can now add the Twilio REST client to ASP.NET Core's dependency injection container, using the .AddTwilioClient method. This Twilio client will use an HttpClient provided by an HTTP client factory. See readme for more details.
  • We no longer try to match the Twilio SDK version number, and instead go by our own versioning to better communicate breaking changes vs minor changes.
  • The projects are now built and packages are now pushed using GitHub Actions instead of AppVeyor.
  • The projects are now built deterministically and support source link for better debugging.
  • More samples have been added to the readme.

Read about these changes in more detail at the v6 announcement post.

5.77.0 (2022-07-19)

  • Twilio.AspNet.Core and Twilio.AspNet.Common now use .NET Standard 2.0 and dropped older .NET Standard versions.
  • Microsoft.AspNetCore.Mvc.Core dependency has been updated to a version that is not vulnerable. For newer versions of .NET, a framework dependency is used instead.
  • Twilio.AspNet.Mvc now targets .NET 4.6.2.

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [Twilio.AspNet.Mvc](https://github.com/twilio-labs/twilio-aspnet) from 5.20.1 to 8.0.2.
- [Release notes](https://github.com/twilio-labs/twilio-aspnet/releases)
- [Changelog](https://github.com/twilio-labs/twilio-aspnet/blob/main/CHANGELOG.md)
- [Commits](https://github.com/twilio-labs/twilio-aspnet/commits/8.0.2)

---
updated-dependencies:
- dependency-name: Twilio.AspNet.Mvc
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label May 11, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants