AutoMapper v16.1.1 Release Notes
Release Date: 2026-03-13 // 3 months ago-
What's Changed
- 👍 Better async handling of license validation; fixes #4612 by @jbogard in #4613
- 🏗 More artifacts for builds (test results and SBOM) by @jbogard in #4615
- ⚡️ Update Microsoft.Sbom.DotNetTool to 4.1.5 by @jbogard in #4616
🔒 Security
🛠 Fixed an issue where certain cyclic or self-referential object graphs could trigger uncontrolled recursion during mapping, potentially resulting in stack exhaustion and denial of service.
Applications that process untrusted or attacker-controlled object graphs through affected mapping paths may be impacted.
🚀 Users should upgrade to this release.
🔒 Security advisory: GHSA-rvv3-g6hj-g44x
Thanks to @skdishansachin for responsibly disclosing this issue.
Full Changelog : v16.1.0...v16.1.1
Previous changes from v16.1.0
-
What's Changed
- ➕ Add Debug and Release build configurations to slnx by @Copilot in #4590
- Migrating to slnx by @jbogard in #4589
- 👍 Allow disabling of polymorphic LINQ mapping by @jbogard in #4596
- 🛠 Fix duplicate BOM in ServiceCollectionExtensions.cs by @Copilot in #4600
- 🛠 Fix review feedback: double semicolon, DI condition integration test, docs example by @Copilot in #4601
- ➕ Adding DI-enabled conditions and pre-conditions; updated docs accordi… by @jbogard in #4599
- ➕ Adding support for DI-enabled destination factories. by @jbogard in #4603
- 🛠 Correctly converting nullables for MapAtRuntime; fixes #4597 by @jbogard in #4604
- 🛠 Correctly handling consecutive uppercase characters; fixes #4593 by @jbogard in #4605
- 🛠 Wrapping the exception to provide better feedback to the user; fixes … by @jbogard in #4606
- 🛠 Fixing bug around order of open generic registration by @jbogard in #4607
- ➕ Adding perpetual licensing by @jbogard in #4608
🆕 New Contributors
- @Copilot made their first contribution in #4590
Full Changelog : v16.0.0...v16.1.0