Skip to content

Upgrading Volo.Abp.Ddd.Application 6 to 7

Breaking6.0.3 → 7.4.5Breaking25Security12Deprecated1New233Changed317Fixed293Other533

BreakingUpgrade verdict

24 breaking changes and 12 security fixes.

  • The EnableTimeZone feature is gone, so anything relying on it must change.
  • Renames the AbpSettingDefinitionRecords table.
  • A constant class used in module configuration has been renamed, so code referencing the old name must be updated.
  • Removes the generators package.
Top 5 of 37 that need code or config changes

Target frameworks requirement changed in 7.3.0-rc.1: .NETStandard2.0 → .NETStandard2.0, .NETStandard2.1, net7.0.

Breaking24
Removes the EnableTimeZone feature.
EnableTimeZone
Renames the AbpSettingDefinitionRecords table.
AbpSettingDefinitionRecords
Renames IdentityUserConsts to AbpUserConsts in ModuleExtensionConfigurator.
IdentityUserConstsAbpUserConstsModuleExtensionConfigurator
Removes the generators package.
Removes ng-bootstrap from the peerDependency of @abp/ng.components.
@abp/ng.components
Removes deprecated packages and bumps @abp/ng.theme.lepton-x.
@abp/ng.theme.lepton-x
Removes JsonInclude.
JsonInclude
Removes timestamp and Level from ABP CLI.
Removes AuthenticationProperties from LogoutController.
LogoutControllerAuthenticationProperties
Removes the setter from the auditing interfaces.
Removes IHybridServiceScopeFactory.
IHybridServiceScopeFactory
Removes unnecessary Event Data classes.
Renames ICmdHelper.OpenWebPage to ICmdHelper.Open.
ICmdHelper.OpenWebPageICmdHelper.Open
Removes FormTenantResolveContributor from AbpTenantResolveOptions.
FormTenantResolveContributorAbpTenantResolveOptions
Removes abp.auth.policies.
abp.auth.policies
Introduces Application Instance Id and renames IApplicationNameAccessor to IApplicationInfoAccessor.
IApplicationNameAccessorIApplicationInfoAccessor
Removes AttachAbpCustomChallengeErrors.
AttachAbpCustomChallengeErrors
Renames StopTheHostException to HostAbortedException.
StopTheHostExceptionHostAbortedException
Removes isSameDataFunction.
isSameDataFunction
Changes the style property type of form-input and checkbox components.
form-inputcheckbox
Adds the Abp prefix to DbProperties classes.
DbProperties
Changes EntityPropertyChangeInfo members to static.
EntityPropertyChangeInfo
Splits JSON support into separate Newtonsoft and SystemTextJson packages.
NewtonsoftSystemTextJson
Changes ResetToDefaultAsync to DeleteAsync.
ResetToDefaultAsyncDeleteAsync
Security12
Encodes returnUrl when sending the PasswordReset email.
returnUrlPasswordReset
Adds script nonce support for Content Security Policy (CSP).
Removes clientSecret from the login URL.
clientSecret
Encodes the Label of TagHelper.
TagHelperLabel
Fixes vulnerable packages.
Fixes a reflected cross site scripting vulnerability in the permission module.
Hardens GitHub Workflows security.
Avoids using eval in JavaScript.
eval
Adds X-Content-Type-Options to AbpSecurityHeaders.
AbpSecurityHeadersX-Content-Type-Options
Disables autocomplete for password inputs.
Invalidates the token after a password change.
Hardens GitHub Workflows security.
Deprecated1
Marks deprecated classes in Angular.