[dependabot]

Pinned Autofac at 9.3.4.

Release notes

Sourced from Autofac's releases.

9.3.4

What's Changed

Do not build a held registration's pipeline early by @​tillig in autofac/Autofac#1504 (fixes #​1503) - a regression introduced in 9.3.3. Registering an open generic for several services (.As(typeof(IFirstService<>)).As(typeof(ISecondService<>))) threw InvalidOperationException: Component pipeline has already been built, and cannot be modified. on first resolve whenever anything attached to PipelineBuilding from the component registry's Registered event. Autofac.Extensions.DependencyInjection attaches exactly that way on every registration, so ASP.NET Core applications using a multi-service open generic registration hit it deterministically. The fix restores the ordering 9.3.2 had, where the pipeline is built only after Registered has been raised.

If you are on 9.3.3 and register an open generic against more than one service, upgrade. Thanks to @​hjalle for the report and for pinning it to the exact line.

Full Changelog: autofac/Autofac@v9.3.3...v9.3.4

9.3.3

What's Changed

• Create AnyKey adapter registrations per registry by @​tillig in Create AnyKey adapter registrations per registry (#1497) autofac/Autofac#1498 (fixes #​1497) - the KeyedService.AnyKey fallback adapter was cached and handed to every registry that asked for it, so the first scope to receive it built and disposed its pipeline out from under the rest. Other scopes then failed to add middleware, resolved through a disposed activator, or adapted another scope's registration. Multitenant containers hit this most often.
• Fix open generic multi-service registrations overriding later defaults by @​tillig in Fix open generic multi-service registrations overriding later defaults autofac/Autofac#1499 (fixes #​1465) - a registration source exposing one component for several open generic services applied it to all of them at once, landing it ahead of higher-priority sources those services had yet to query. Whichever service was resolved second got the shared component instead of its own overriding registration. Source priority rather than resolution order now decides the default; closed generic types were never affected.
• System.Diagnostics.DiagnosticSource and Microsoft.Bcl.AsyncInterfaces (netstandard2.0 only) move to 10.0.12.

Full Changelog: autofac/Autofac@v9.3.2...v9.3.3

9.3.2

What's Changed

• Reduce registration cost incurred by scans for [ServiceKey] attribute by @​npease18 (#​1495, fixes #​1480)

New Contributors

• @​npease18 made their first contribution in fix: reduce O(types × inherited-members) registration cost from [ServiceKey] scan autofac/Autofac#1495

Full Changelog: autofac/Autofac@v9.3.1...v9.3.2

9.3.1

What's Changed

Fix per-resolve closure allocation in resolve pipeline (#​1493) by @​tillig in autofac/Autofac#1494

Full Changelog: autofac/Autofac@v9.3.0...v9.3.1

9.3.0

What's Changed

• Annotate core for trimming and Native AOT compatibility by @​tillig in Annotate core for trimming and Native AOT compatibility autofac/Autofac#1492

Full Changelog: autofac/Autofac@v9.2.0...v9.3.0

9.2.0

What's Changed

• Fix decorator parameter selection for derived-service dependencies (#​1459) by @​tillig in Fix decorator parameter selection for derived-service dependencies (#1459) autofac/Autofac#1484
• Dispose container when an IStartable throws during Build (#​1392) by @​tillig in Dispose container when an IStartable throws during Build (#1392) autofac/Autofac#1485
• Honor ExternallyOwned ownership for decorators (#​1402) by @​tillig in Honor ExternallyOwned ownership for decorators (#1402) autofac/Autofac#1486
• Only subscribe Module registry events when hooks are overridden (#​1446) by @​tillig in Only subscribe Module registry events when hooks are overridden (#1446) autofac/Autofac#1487
• Prefer a complete generic argument mapping for multi-interface open generics (#​1464) by @​tillig in Prefer a complete generic argument mapping for multi-interface open generics (#1464) autofac/Autofac#1489
• Fail fast when a scope-local registration binds its lifetime to an ancestor scope (#​1460) by @​tillig in Fail fast when a scope-local registration binds its lifetime to an ancestor scope (#1460) autofac/Autofac#1488
• Add GetRegistrationId extension to expose a registration's unique ID (#​1327) by @​tillig in Add GetRegistrationId extension to expose a registration's unique ID (#1327) autofac/Autofac#1490
• Cache compiled factory-delegate generators to avoid recompilation across scopes (#​1461) by @​tillig in Cache compiled factory-delegate generators to avoid recompilation across scopes (#1461) autofac/Autofac#1491

Full Changelog: autofac/Autofac@v9.1.0...v9.2.0

Commits viewable in compare view.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	autofac@​9.3.2

View full report

[nickskliar-davies]

@dependabot rebase

[dependabot]

Looks like Autofac is updatable in another way, so this is no longer needed.