Skip to content

Bump AutoMapper from 6.2.2 to 16.1.1#103

Merged
fredatgithub merged 1 commit intomasterfrom
dependabot/nuget/dev/Net6/VOL.Core/AutoMapper-16.1.1
Mar 14, 2026
Merged

Bump AutoMapper from 6.2.2 to 16.1.1#103
fredatgithub merged 1 commit intomasterfrom
dependabot/nuget/dev/Net6/VOL.Core/AutoMapper-16.1.1

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 14, 2026

Updated AutoMapper from 6.2.2 to 16.1.1.

Release notes

Sourced from AutoMapper's releases.

16.1.1

What's Changed

Security

Fixed an issue where certain cyclic or self-referential object graphs could trigger uncontrolled recursion during mapping, potentially resulting in stack exhaustion and denial of service.

Applications that process untrusted or attacker-controlled object graphs through affected mapping paths may be impacted.

Users should upgrade to this release.

Security advisory: GHSA-rvv3-g6hj-g44x

Thanks to @​bluefossa for responsibly disclosing this issue.

Full Changelog: LuckyPennySoftware/AutoMapper@v16.1.0...v16.1.1

16.1.0

What's Changed

New Contributors

Full Changelog: LuckyPennySoftware/AutoMapper@v16.0.0...v16.1.0

16.0.0

What's Changed

Full Changelog: LuckyPennySoftware/AutoMapper@v15.1.0...v16.0.0

16.0.0-beta-1

What's Changed

Full Changelog: LuckyPennySoftware/AutoMapper@v15.1.0...v16.0.0-beta-1

This release is a beta release that introduces .NET 10 support and package signing. Signed packages means going forward packages can be validated against trusted authorities that the package has been published by Lucky Penny Software and not tampered with.

15.1.0

What's Changed

New Contributors

Full Changelog: LuckyPennySoftware/AutoMapper@v15.0.1...v15.1.0

15.0.1

What's Changed

Full Changelog: LuckyPennySoftware/AutoMapper@v15.0.0...v15.0.1

This release supersedes the 15.0.0 release, reverting behavior and overloads so that the AddAutoMapper overloads separate the "scanning for maps" from the "scanning for dependencies". Unfortunately it's not really possible to combine these two together.

This also fixes a critical bug in #​4545 that does not work with .NET 4.x applications (as intended).

Because of this, the 15.0.0 will be delisted because of the breaking changes there.

15.0.0

Full Changelog: LuckyPennySoftware/AutoMapper@v14.0.0...v15.0.0

  • Added support for .NET Standard 2.0
  • Requiring license key
  • Moving from MIT license to dual commercial/OSS license

To set your license key:

services.AddAutoMapper(cfg => {
    cfg.LicenseKey = "<License key here>";
});

This also introduced a breaking change with MapperConfiguration requiring an ILoggerFactory for logging purposes:

public MapperConfiguration(MapperConfigurationExpression configurationExpression, ILoggerFactory loggerFactory)

Registering AutoMapper with services.AddAutoMapper will automatically supply this parameter. Otherwise you'll need to supply the logger factory.

You can obtain your license key at AutoMapper.io

14.0.0

What's Changed

New Contributors

Full Changelog: LuckyPennySoftware/AutoMapper@v13.0.1...v14.0.0

13.0.1

What's Changed

New Contributors

Full Changelog: LuckyPennySoftware/AutoMapper@v13.0.0...v13.0.1

13.0.0

What's Changed

New Contributors

Full Changelog: LuckyPennySoftware/AutoMapper@v12.0.1...v13.0.0

12.0.1

What's Changed

Full Changelog: LuckyPennySoftware/AutoMapper@v12.0.0...v12.0.1

12.0.0

What's Changed

New Contributors

Full Changelog: LuckyPennySoftware/AutoMapper@v11.0.1...v12.0.0
Upgrade Guide: https://docs.automapper.org/en/latest/12.0-Upgrade-Guide.html

11.0.1

As part of this release we had 10 issues closed.

Bugs

  • #​3870 Handle identity lambda resolvers with ProjectTo subquery
  • #​3869 v11 InvalidOperationException: Stack Empty on mapping which used to generate a subquery
  • #​3856 Allow non-public Enumerator.Current
  • #​3821 Assign collections we can't handle
  • #​3820 StackOverflowException when using JObject.Parse
  • #​3818 Return the first method we find
  • #​3817 Calling IMapper.Map with an OrderBy causes an AmbiguousMatchException to be thrown

Improvements/Features

  • #​3874 Fix EF6 relationships and Id initialization
  • #​3839 Add AsProxy property to AutoMapAttribute
  • #​3830 Adding information to exception message; Addresses #​3828

Where to get it

You can download this release from nuget

11.0.0

The upgrade guide.

As part of this release we had 17 issues closed.

Bugs

  • #​3676 Error when using nullables with an implicit conversion operation.
  • #​3595 Open Generics with base generic
  • #​3565 Evaluate Conditional Expressions for projections with subqueries
  • #​3563 Query projection with subquery can generate non-compiling expression
  • #​3523 Multiple source matches for a destination property
  • #​3516 Static field requires null instance, non-static field requires non-null instance

Improvements/Features

  • #​3723 Inherited source operators support for ConversionOperatorMapper
  • #​3613 Map closed to ienumerable generic destination
  • #​3605 Generic destination value resolver
  • #​3596 11.0 upgrade guide
  • #​3593 InvalidCastException with multi-dimensional arrays
  • #​3537 CreateProjection
  • #​3532 IncludeBase is ignored when ForAllOtherMembers are used
  • #​3526 Expression of type 'TInterface' cannot be used for parameter of type 'TConcrete' (Parameter 'arg1')
  • #​3518 Global pre and postfixes
  • #​3510 Unable to map byte[] or byte[]? (nullable byte[]) using AutoMapper ForCtorParam function
  • #​3504 Separate internal APIs

Where to get it

You can download this release from nuget

10.1.1

As part of this release we had 3 issues closed.

Bugs

  • #​3520 NonNullableToNullable
  • #​3519 InvalidProgramException with ProjectTo and nullable ints
  • #​3517 Operation could destabilize the runtime with ProjectTo and NHibernate

10.1.0

As part of this release we had 6 issues closed.

Bugs

  • #​3490 Ignore static constructors
  • #​3458 Null destination value type with mapper
  • #​3453 Mapping with struct destination

Improvements/Features

  • #​3509 Update 10.0-Upgrade-Guide.md
  • #​3487 Trim keys when mapping from dictionaries
  • #​3473 Issue 3422 ExplicitExpansion

Where to get it

You can download this release from nuget

10.0.0

https://docs.automapper.org/en/latest/10.0-Upgrade-Guide.html

As part of this release we had 30 issues closed.

Bugs

  • #​3413 Enable ForAllMaps to work with ForCtorParam
  • #​3334 The source type must be assignable to the type of the transformation

Improvements/Features

  • #​3451 Update 10.0-Upgrade-Guide.md
  • #​3448 10.0 upgrade guide and some refactorings
  • #​3443 Links to more ReadableExpressions resources
  • #​3438 Clean up Mapper and friends
  • #​3437 AllowNull overrides per member AllowNullDestinationValues/Collections
  • #​3424 Allow any expression with IncludeMembers
  • #​3415 Exclude some public members from api checks
  • #​3411 EF Core; generalize constructor mapping for ProjectTo
  • #​3408 Update Open-Generics.md
  • #​3405 Improve cycle detection with inheritance
  • #​3403 Example for setting up DI for Catel.IoC
  • #​3401 Matching source values should override constructor parameters default…
  • #​3400 ExactMatchNamingConvention
  • #​3396 Only check simple member expressions for source members
  • #​3393 Avoid collections with null values when reaching max depth
  • #​3387 Non generic member transformer
  • #​3379 ProjectTo does not load expanded child collections.
  • #​3374 Generic value resolvers
  • #​3373 String based MapFrom for constructors
  • #​3368 Map read-only collections by default
  • #​3356 Reverse naming conventions for reverse maps by default
  • #​3349 Allow recursive queries
  • #​3347 Add brief documentation for 8.1.1 upgrade
  • #​3337 Attribute-based reverse mapping with SourceMemberAttribute
  • #​3336 Reverse the string based MapFrom
  • #​3319 Update Expression-Translation-(UseAsDataSource).md
  • #​3314 Fix .NET standard link on docs homepage
  • #​3306 Update Flattening.md

Where to get it

You can download this release from nuget

9.0.0

As part of this release we had 21 issues closed.

This release completely removes the static mapper (Mapper.Map) and dynamic mapping. See the 9.0 upgrade guide for details on how to migrate.

Improvements/Features

  • #​3134 Remove dynamic maps
  • #​3136 Removing static API
  • #​3187 Match destination enumerable types with it's enumerable for LINQ
  • #​3182 Help the runtime find the AM assembly
  • #​3180 Update Custom-value-resolvers.md
  • #​3173 Don't check for IDisposable at runtime for value types
  • #​3170 Update Conditional Mapping docs
  • #​3169 ForCtorParam MapFrom any expression
  • #​3162 Inherit included members
  • #​3160 WIP ForCtorParam MapFrom any expression
  • #​3158 Call dispose on the enumerator while avoiding boxing
  • #​3150 When using the context, check that the right Map overload was used
  • #​3149 Public Source property for ContextCacheKey
  • #​3144 Automate updating last version binary
  • #​3141 Moving enums after assignable to simplify assignable enums
  • #​3135 Remove static API
  • #​3127 Respect AllowNullCollections
  • #​3106 Adding ResolutionContext to IMappingAction<TSource, TDestination>.Process()
  • #​3105 ResolutionContext unavailable in IMappingAction
  • #​3063 Remove dynamic maps

Bugs

  • #​3172 Allow non nullable default values for nullable enum constructor param…

Where to get it

You can download this release from nuget

8.1.1

As part of this release we had 10 issues closed.

Improvements

  • #​3102 Deprecate CreateMissingTypeMaps and change the default to false
  • #​3082 Deprecate the static mapper
  • #​3101 Validate all member maps, not only the property maps
  • #​3096 Type.EmptyTypes instead of new Type[0]
  • #​3050 Enabled multiple usage of AutoMapAttribute

Bugs

Where to get it

You can download this release from nuget

8.1.0

As part of this release we had 31 issues closed.

New feature: attribute-based maps

Bugs

  • #​3040 Match members by name
  • #​3038 ForAllOtherMembers rewrites mapping of properties.
  • #​3021 Checking collections for null is not allowed in EF6
  • #​3020 fixed enum values caseinsensitivity bug
  • #​2977 Skip generic mappings when precompiling
  • #​2967 Handle redirected properties in the let clause
  • #​2927 Generics with untyped MapFrom
  • #​2902 Validation fails despite a value resolver being configured
  • #​2901 A value converter/resolver always returns a value of the destination …
  • #​2887 A constructor parameter with no name won't match anything

Improvements/Features

  • #​3041 Refactor feature extensions
  • #​3030 Features cleanup
  • #​3004 Obsolete Profile.CreateMissingTypeMaps
  • #​3003 IncludeMembers with MemberList.Source validation
  • #​3001 Respect PathMappings in unmapped property names list
  • #​2997 Dropping value tuples.
  • #​2981 AutoMap attribute configuration options
  • #​2978 AutoMap attribute configuration options
  • #​2972 Include members
  • #​2969 Consolidate ProjectTo parameters handling
  • #​2960 Add support to specify ShouldMapMethod
  • #​2952 Added AddProfiles method that takes an IEnumerable
  • #​2944 Attribute map configuration
  • #​2940 Flow resolution context to nested mappings
  • #​2938 Assume single automap attribute
  • #​2936 Support configuring attribute maps with additional properties
  • #​2933 Attributes to define a type map configuration
  • #​2930 Support creating maps via attributes
  • #​2928 Set UseDestinationValue for readonly members
  • #​2895 Throw a detailed exception when sourceExpression is null in MapFrom.
  • #​2892 Added methods BeforeMap and AfterMap for IMappingExpression with ResolutionContext

Where to get it

You can download this release from nuget

8.0.0

As part of this release we had 45 issues closed.

Bugs

  • #​2746 Check for generic instances of included maps
  • #​2742 IncludeBase doesn't work with a generic map
  • #​2741 fix PropertiesWithAnInaccessibleSetter
  • #​2740 IgnoreAllPropertiesWithAnInaccessibleSetter not working with base classes

Improvements/Features

7.0.1

As part of this release we had 11 issues closed.

This is a bugfix release to remove the dependency on the deprecated System.Reflection.Emit package from Microsoft.

Bugs

  • #​2661 Regression: Exception during Expression Builder Map Creation

Improvements/Features

  • #​2682 Remove package references to System.Reflection.Emit
  • #​2681 ProjectTo : An edge case with the let clause
  • #​2679 Adding sourcelink to enable PDB debugging
  • #​2677 Parameterized queries
  • #​2675 Unable to cast TypedConstantExpression to MemberExpression in ProjectTo
  • #​2671 Include with open generics
  • #​2669 Fix SetTraceIdentifierAction constructor name
  • #​2665 Does AutoMapper support Open Generics with inheritance from a non-generic base class?
  • #​2664 Link to the new expressions package
  • #​2662 Fix bad similar type replacement in parameters

Where to get it

You can download this release from nuget

7.0.0

As part of this release we had 48 issues closed.

This release contains mainly bug fixes and a few breaking API changes, as well as an explicit netstandard2.0 target.

Bugs

  • #​2521 #​2520 - Fixed Effort- and ODataQueryTests and a bug in ExpressionVisitor
  • #​2502 Return the same type on both branches
  • #​2501 ProjectTo Exception: Argument types do not match
  • #​2466 Mapping from ExpandoObject to existing destination
  • #​2461 The MapFrom should have higher priority than postfixes
  • #​2459 ForMember doesn't work after AddMemberConfiguration().AddName()

Improvements/Features

  • #​2658 Break out expression mapper
  • #​2651 Add a section about conditions and resolvers
  • #​2650 Condition vs PreCondition docs
  • #​2641 Nullable untyped MapFrom
  • #​2640 Dynamic mapping : Map null to the default for value types
  • #​2633 Exception when mapping from an ExpandoObject.
  • #​2632 Add repository information to csproj
  • #​2621 Say that it's a dynamic map when validation fails
  • #​2616 Fixed documentation to not have DuplicateTypeMap
  • #​2614 Update unit test to match behavior as explained
  • #​2610 Extract NullsafeQueryRewriter to separate licensed file
  • #​2606 From #​2515
  • #​2605 Removing preview version of VS 2017
  • #​2604 Fix to issue #​2578
  • #​2603 Fix TypeDetails ignoring non-generic extension methods #​2593
  • #​2602 Fix projection to destinations using extension methods #​2593
  • #​2596 ##​2594: Remove empty profile name from MapperConfigurationException
  • #​2594 Exception Message for DuplicateTypeMapConfigurationException
  • #​2593 ProjectTo error with aggregate functions on IEnumerable
  • #​2586 Update build status link
  • #​2580 Fix for Issue #​2578
  • #​2578 Automapper should sort properties in ProjectTo consistently
  • #​2575 .NET Standard 2.0 support
  • #​2568 ProjectTo : Expose binders and result converters
  • #​2560 Define ComVisible Attribute
  • #​2541 Missing closing bracket in example code
  • #​2518 Use resolve when looking for included maps
  • #​2513 Open generics in combination with mapping inheritance do not work
  • #​2504 fix whitespace
  • #​2499 Let clause : explicitly generate just the properties we need
  • #​2495 Update Lists-and-arrays.md
  • #​2494 Ignore properties that are not expanded
  • #​2491 Update copy of NeinLinq.NullsafeQueryRewriter
  • #​2490 Massive performance issues from 6.1.0 upwards
  • #​2488 Custom validation docs
  • #​2487 Test for #​2486
  • #​2477 Added doc for IMappingAction and Asp.Net Core Dependency Injection.
    ... (truncated)

Commits viewable in compare view.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump AutoMapper from 6.2.2 to 16.1.1
50d368d 
---
updated-dependencies:
- dependency-name: AutoMapper
  dependency-version: 16.1.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Mar 14, 2026
@fredatgithub fredatgithub merged commit d074c29 into master Mar 14, 2026
@dependabot dependabot bot deleted the dependabot/nuget/dev/Net6/VOL.Core/AutoMapper-16.1.1 branch March 14, 2026 20:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@fredatgithub