Skip to content

fix: upgrade AutoMapper 12→15.1.1 and Nethereum.Web3 5→6.1.0#287

Merged
jumperck merged 1 commit into
mainfrom
fix/automapper-15-with-nethereum-6
Jun 11, 2026
Merged

fix: upgrade AutoMapper 12→15.1.1 and Nethereum.Web3 5→6.1.0#287
jumperck merged 1 commit into
mainfrom
fix/automapper-15-with-nethereum-6

Conversation

@jumperck

Copy link
Copy Markdown
Owner

Security Fix

Resolves the dependency conflict that was blocking PR #260 (AutoMapper Dependabot PR).

Problem

AutoMapper 15.1.1 requires Microsoft.Extensions.Logging.Abstractions >= 10.0.0, but the previous Nethereum.Web3 5.0.0 restricted it to < 10.0.0 — an incompatible constraint (NU1107).

Changes

Package Before After Reason
AutoMapper 12.0.1 15.1.1 Security: uncontrolled recursion DoS fix
Nethereum.Web3 5.0.0 6.1.0 Removes the MEL.Abstractions upper-bound restriction

Code changes

  • AutoMapperConfiguration.cs: AutoMapper 15 now requires ILoggerFactory as a second parameter — added with NullLoggerFactory.Instance as fallback
  • ApplicationConfiguration.cs: Changed DI registration to a factory delegate so the real ILoggerFactory is injected from the service provider

Verified

  • dotnet restore Reminders.sln — no NU1107 conflict
  • dotnet build Reminders.sln — 0 errors

Closes #260

Resolves the dependency conflict where AutoMapper 15.1.1 requires
Microsoft.Extensions.Logging.Abstractions >=10.0.0 while Nethereum.Web3 5.0.0
restricts it to <10.0.0.

Changes:
- AutoMapper: 12.0.1 → 15.1.1 (security fix: uncontrolled recursion DoS)
- Nethereum.Web3: 5.0.0 → 6.1.0 (removes the MEL.Abstractions upper bound)
- AutoMapperConfiguration.cs: pass ILoggerFactory (new required param in v15)
- ApplicationConfiguration.cs: use factory delegate to inject ILoggerFactory from DI

Build verified locally with `dotnet build Reminders.sln` — 0 errors.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@jumperck jumperck merged commit 5e22df4 into main Jun 11, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant