Upgrading Volo.Abp.Ddd.Application 6 to 7
Breaking6.0.3 → 7.4.5Breaking25Security12Deprecated1New233Changed317Fixed293Other533
BreakingUpgrade verdict
24 breaking changes and 12 security fixes.
In plain terms
- The EnableTimeZone feature is gone, so anything relying on it must change.
- Renames the AbpSettingDefinitionRecords table.
- A constant class used in module configuration has been renamed, so code referencing the old name must be updated.
- Removes the generators package.
Must act Top 5 of 37 that need code or config changes
Target frameworks requirement changed in 7.3.0-rc.1: .NETStandard2.0 → .NETStandard2.0, .NETStandard2.1, net7.0.
What you must change
Breaking24
Removes the
EnableTimeZone feature.EnableTimeZoneRenames the AbpSettingDefinitionRecords table.
AbpSettingDefinitionRecordsRenames IdentityUserConsts to AbpUserConsts in ModuleExtensionConfigurator.
IdentityUserConstsAbpUserConstsModuleExtensionConfiguratorRemoves the generators package.
Removes ng-bootstrap from the peerDependency of @abp/ng.components.
@abp/ng.componentsRemoves deprecated packages and bumps @abp/ng.theme.lepton-x.
@abp/ng.theme.lepton-xRemoves JsonInclude.
JsonIncludeRemoves timestamp and Level from ABP CLI.
Removes AuthenticationProperties from LogoutController.
LogoutControllerAuthenticationPropertiesRemoves the setter from the auditing interfaces.
Removes IHybridServiceScopeFactory.
IHybridServiceScopeFactoryRemoves unnecessary Event Data classes.
Renames ICmdHelper.OpenWebPage to ICmdHelper.Open.
ICmdHelper.OpenWebPageICmdHelper.OpenRemoves FormTenantResolveContributor from AbpTenantResolveOptions.
FormTenantResolveContributorAbpTenantResolveOptionsRemoves abp.auth.policies.
abp.auth.policiesIntroduces Application Instance Id and renames IApplicationNameAccessor to IApplicationInfoAccessor.
IApplicationNameAccessorIApplicationInfoAccessorRemoves AttachAbpCustomChallengeErrors.
AttachAbpCustomChallengeErrorsRenames StopTheHostException to HostAbortedException.
StopTheHostExceptionHostAbortedExceptionRemoves isSameDataFunction.
isSameDataFunctionChanges the style property type of form-input and checkbox components.
form-inputcheckboxAdds the Abp prefix to DbProperties classes.
DbPropertiesChanges EntityPropertyChangeInfo members to static.
EntityPropertyChangeInfoSplits JSON support into separate Newtonsoft and SystemTextJson packages.
NewtonsoftSystemTextJsonChanges ResetToDefaultAsync to DeleteAsync.
ResetToDefaultAsyncDeleteAsyncSecurity12
Encodes returnUrl when sending the PasswordReset email.
returnUrlPasswordResetAdds script nonce support for Content Security Policy (CSP).
Removes clientSecret from the login URL.
clientSecretEncodes the Label of TagHelper.
TagHelperLabelFixes vulnerable packages.
Fixes a reflected cross site scripting vulnerability in the permission module.
Hardens GitHub Workflows security.
Avoids using eval in JavaScript.
evalAdds X-Content-Type-Options to AbpSecurityHeaders.
AbpSecurityHeadersX-Content-Type-OptionsDisables autocomplete for password inputs.
Invalidates the token after a password change.
Hardens GitHub Workflows security.
Deprecations to plan for
Deprecated1
Marks deprecated classes in Angular.