Skip to content

Upgrading Volo.Abp.AspNetCore.Mvc 9 to 10

Breaking9.3.7 → 10.7.0Breaking34Security7New301Changed293Fixed136Other397

Full comparisonBack to Volo.Abp.AspNetCore.Mvc
BreakingUpgrade verdict

34 breaking changes and 7 security fixes.

In plain terms
  • Remove all related data when deleting a user.
  • Remove indeterminate state from Grant All permissions.
  • Remove dev-only changes from rel-10.7.
  • Remove unused Angular scaffold from CmsKit module.
Must act Top 5 of 41 that need code or config changes

Target frameworks requirement changed in 10.0.0-rc.1: net9.0 → net10.0.

What you must change

Breaking34
Remove all related data when deleting a user.
10.7.0GitHub ReleaseOriginalView source
Remove indeterminate state from Grant All permissions.
10.7.0GitHub ReleaseOriginalView source
Remove dev-only changes from rel-10.7.
10.7.0GitHub ReleaseOriginalView source
Remove unused Angular scaffold from CmsKit module.
10.7.0GitHub ReleaseOriginalView source
Rename auto-pr.yml to auto-merge-forward.yml.
10.6.1GitHub ReleaseOriginalView source
Remove redundant FallbackToProvider call in MedallionAbpDistributedLock.
FallbackToProviderMedallionAbpDistributedLock
10.5.0GitHub ReleaseOriginalView source
Remove unused project reference for AspNetCore.Components.Server in common.ps1.
10.4.1GitHub ReleaseOriginalView source
Remove Operation Rate Limiting from framework.
10.3.0GitHub ReleaseOriginalView source
Delete .github/pr-review.instructions.md.
10.2.0GitHub ReleaseOriginalView source
Remove unused template and NgStyle import.
10.2.0GitHub ReleaseOriginalView source
Remove trailing periods from Feature title.
10.2.0GitHub ReleaseOriginalView source
Rename image and update markdown link.
10.2.0GitHub ReleaseOriginalView source
Remove redundant "Permissions" heading from resource permission management modals.
10.2.0GitHub ReleaseOriginalView source
Remove permissions header in permission form.
10.2.0GitHub ReleaseOriginalView source
Remove LC links from docs navigation.
10.2.0GitHub ReleaseOriginalView source
Remove bottom padding from modal header.
10.2.0GitHub ReleaseOriginalView source
Remove duplicate AI project references from solution file.
10.1.0GitHub ReleaseOriginalView source
Delete unnecessary abpsln file.
10.1.0GitHub ReleaseOriginalView source
Remove "preview" notice from the ai-management document.
10.1.0GitHub ReleaseOriginalView source
Remove reviewer from auto PR configuration.
10.0.3GitHub ReleaseOriginalView source
Remove AsyncKeyedLock dependency from LocalAbpDistributedLock.
AsyncKeyedLockLocalAbpDistributedLock
10.0.2GitHub ReleaseOriginalView source
Remove StaticTemplateDefinitionChangedEventHandler.
10.0.2GitHub ReleaseOriginalView source
Remove the old-cli note from the CLI documentation.
10.0.1GitHub ReleaseOriginalView source
Remove duplicate entry for lang-utils.js in BlazorWebAssemblyScriptContributor.
10.0.0GitHub ReleaseOriginalView source
Remove duplicate Volo.Abp.AutoMapper project references from templates.
10.0.0GitHub ReleaseOriginalView source
Remove extra padding class from tab content wrapper.
10.0.0GitHub ReleaseOriginalView source
Rename 'ElsaWorkflows' to 'Elsa Workflows Demo' in docs-nav.
10.0.0GitHub ReleaseOriginalView source
Remove JSRuntime from MauiBlazorCachedApplicationConfigurationClient.
JSRuntimeMauiBlazorCachedApplicationConfigurationClient
10.0.0GitHub ReleaseOriginalView source
Remove unused Toc.init and fix link formatting.
10.0.0GitHub ReleaseOriginalView source
Delete docs-admin-generate-proxy.json.
10.0.0GitHub ReleaseOriginalView source
Delete docs/en/aspect-oriented-programming.md.
10.0.0GitHub ReleaseOriginalView source
Remove embedded file providers prune target.
10.0.0GitHub ReleaseOriginalView source
Angular - Template layout breaks when APP_ROUTE_PROVIDER is removed from providers.
10.0.0-rc.2GitHub ReleaseOriginalView source
Remove unused schema.
10.3.0GitHub ReleaseOriginalView source
Security7
Upgrade vulnerable NuGet packages to patched versions.
10.6.0GitHub ReleaseOriginalView source
Upgrade Scriban to 7.2.1 to fix GHSA-24c8-4792-22hx.
10.4.1GitHub ReleaseOriginalView source
Bump Microsoft./System. packages to 10.0.7 (CVE-2026-40372).
10.4.0GitHub ReleaseOriginalView source
Sanitize package.json and prevent command injection in ABP CLI.
10.2.1GitHub ReleaseOriginalView source
Fix the vulnerable npm packages.
10.2.0GitHub ReleaseOriginalView source
Set default MaxDepth for all AutoMapper maps to mitigate GHSA-rvv3-g6hj-g44x.
10.2.0GitHub ReleaseOriginalView source
Update Vulnerability packages to latest.
Vulnerability
10.0.0GitHub ReleaseOriginalView source