Bump Trellis version to 3.0.0-alpha.447 - #52
Merged
Conversation
Picks up the Native AOT parity work for value-object validation paths (xavierjohn/Trellis#664, #699) and the publish workflow rename (#700). Of interest to this repository: Trellis.Asp now bundles a source generator under analyzers/dotnet/cs that emits index-precise JSON validation field paths (/members/1/email rather than the bare leaf email) under Native AOT. It requires no opt-in and flows through the existing package reference. Restore, build, and the full 330-test suite pass unchanged against the new pin.
There was a problem hiding this comment.
Pull request overview
Updates the repository’s centralized Trellis framework version pin so all Trellis.* package references that use $(TrellisVersion) move forward in lock-step.
Changes:
- Bumped
TrellisVersionfrom3.0.0-alpha.432to3.0.0-alpha.447in central package management.
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the
TrellisVersionpin from3.0.0-alpha.432to3.0.0-alpha.447.What this picks up
Trellis.Aspnow ships a source generator atanalyzers/dotnet/csthat precomputes the JSON path graph at compile time, so index-precise field paths (/members/1/email) survive trimming instead of degrading to the bare leaf (email). No opt-in required; it flows through the existingTrellis.Asppackage reference.Validation
dotnet restoredotnet build -c Releasedotnet test -c ReleaseNo source changes were needed, which confirms
alpha.432 -> alpha.447is non-breaking for this repository.Not included
The three outstanding findings from the earlier security review (mint-time claim-shape validation, gateway signing-algorithm breadth vs. the RS256 pin, and per-request re-validation logging on a stuck-bad key ring) are deliberately left out so this stays a mechanical, reviewable version bump. They will follow in a separate PR.