Changelog History
Page 1
-
v16.2.0 Changes
July 02, 2026What's Changed
- β¨ Enhance SECURITY.md with comprehensive security policy by @jbogard in #4633
- π Attach NuGet packages and SBOM to GitHub Release by @jbogard in #4637
- π Support LicenseKey via environment variable fallback by @Nit8 in #4634
- β ci: publish fork-PR test reports via workflow_run by @jbogard in #4643
- π Run license validation off the construction path (fixes #4640) by @jbogard in #4645
π New Contributors
Full Changelog : v15.1.1...v16.2.0
-
v16.1.1 Changes
March 13, 2026What's Changed
- π Better async handling of license validation; fixes #4612 by @jbogard in #4613
- π More artifacts for builds (test results and SBOM) by @jbogard in #4615
- β‘οΈ Update Microsoft.Sbom.DotNetTool to 4.1.5 by @jbogard in #4616
π Security
π Fixed an issue where certain cyclic or self-referential object graphs could trigger uncontrolled recursion during mapping, potentially resulting in stack exhaustion and denial of service.
Applications that process untrusted or attacker-controlled object graphs through affected mapping paths may be impacted.
π Users should upgrade to this release.
π Security advisory: GHSA-rvv3-g6hj-g44x
Thanks to @skdishansachin for responsibly disclosing this issue.
Full Changelog : v16.1.0...v16.1.1
-
v16.1.0 Changes
March 03, 2026What's Changed
- β Add Debug and Release build configurations to slnx by @Copilot in #4590
- Migrating to slnx by @jbogard in #4589
- π Allow disabling of polymorphic LINQ mapping by @jbogard in #4596
- π Fix duplicate BOM in ServiceCollectionExtensions.cs by @Copilot in #4600
- π Fix review feedback: double semicolon, DI condition integration test, docs example by @Copilot in #4601
- β Adding DI-enabled conditions and pre-conditions; updated docs accordiβ¦ by @jbogard in #4599
- β Adding support for DI-enabled destination factories. by @jbogard in #4603
- π Correctly converting nullables for MapAtRuntime; fixes #4597 by @jbogard in #4604
- π Correctly handling consecutive uppercase characters; fixes #4593 by @jbogard in #4605
- π Wrapping the exception to provide better feedback to the user; fixes β¦ by @jbogard in #4606
- π Fixing bug around order of open generic registration by @jbogard in #4607
- β Adding perpetual licensing by @jbogard in #4608
π New Contributors
- @Copilot made their first contribution in #4590
Full Changelog : v16.0.0...v16.1.0
-
v16.0.0 Changes
December 03, 2025What's Changed
Full Changelog : v15.1.0...v16.0.0
-
v16.0.0-beta Changes
November 20, 2025What's Changed
Full Changelog : v15.1.0...v16.0.0-beta-1
π This release is a beta release that introduces .NET 10 support and package signing. Signed packages means going forward packages can be validated against trusted authorities that the package has been published by Lucky Penny Software and not tampered with.
-
v15.1.3 Changes
March 18, 2026What's Changed
- π Fix GHSA-rvv3-g6hj-g44x: default MaxDepth of 64 for self-referential types (15.x backport) by @jbogard in #4619
π Security
π Fixed an issue where certain cyclic or self-referential object graphs could trigger uncontrolled recursion during mapping, potentially resulting in stack exhaustion and denial of service.
Applications that process untrusted or attacker-controlled object graphs through affected mapping paths may be impacted.
π Users should upgrade to this release.
π Security advisory: GHSA-rvv3-g6hj-g44x
Thanks to @skdishansachin for responsibly disclosing this issue.
Full Changelog : v15.1.0...v15.1.3
-
v15.1.2 Changes
March 17, 2026What's Changed
- π docs: Document duplicate license message behavior and fixes by @Copilot in #4617
π Security
π Fixed an issue where certain cyclic or self-referential object graphs could trigger uncontrolled recursion during mapping, potentially resulting in stack exhaustion and denial of service.
Applications that process untrusted or attacker-controlled object graphs through affected mapping paths may be impacted.
π Users should upgrade to this release.
π Security advisory: GHSA-rvv3-g6hj-g44x
Thanks to @skdishansachin for responsibly disclosing this issue.
Full Changelog : v16.1.1...v15.1.2
-
v15.1.1 Changes
March 15, 2026What's Changed
- π docs: Document duplicate license message behavior and fixes by @Copilot in #4617
π Security
π Fixed an issue where certain cyclic or self-referential object graphs could trigger uncontrolled recursion during mapping, potentially resulting in stack exhaustion and denial of service.
Applications that process untrusted or attacker-controlled object graphs through affected mapping paths may be impacted.
π Users should upgrade to this release.
π Security advisory: GHSA-rvv3-g6hj-g44x
Thanks to @skdishansachin for responsibly disclosing this issue.
Full Changelog : v16.1.1...v15.1.1
-
v15.1.0 Changes
October 24, 2025What's Changed
- β remove Microsoft.SourceLink.GitHub by @SimonCropp in #4555
- π Direct .NET 4.x support by @jbogard in #4569
- β¬οΈ Bumping the JsonWebTokens because of GHSA-8g4q-xg66-9fp4; fixes #4575 by @jbogard in #4576
- π Provide better exceptions for errors when building the mapping plan by @jbogard in #4577
- β Adding docs for license configuration by @jbogard in #4581
- β‘οΈ Updating refs to fix missing method issue by @jbogard in #4582
π New Contributors
- @SimonCropp made their first contribution in #4555
Full Changelog : v15.0.1...v15.1.0
-
v15.0.1 Changes
July 11, 2025What's Changed
- π Removing public signing; fixes #4545 by @jbogard in #4552
- β Adding back missing overloads and reverting registering behavior by @jbogard in #4554
Full Changelog : v15.0.0...v15.0.1
π This release supersedes the 15.0.0 release, reverting behavior and overloads so that the
AddAutoMapperoverloads separate the "scanning for maps" from the "scanning for dependencies". Unfortunately it's not really possible to combine these two together.π This also fixes a critical bug in #4545 that does not work with .NET 4.x applications (as intended).
Because of this, the 15.0.0 will be delisted because of the breaking changes there.