Skip to content

Update dependency Yarp.ReverseProxy to 2.3.0 #2527

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependencyupdates[bot]
Copy link
Contributor

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
Yarp.ReverseProxy 2.2.0 -> 2.3.0 age adoption passing confidence

Release Notes

dotnet/yarp (Yarp.ReverseProxy)

v2.3.0: 2.3.0

This release supports .NET 8.0 and newer. See Getting Started.
Note that while this version also includes targets for .NET 6 and .NET 7, those runtimes are no longer supported.

The Yarp.ReverseProxy packages are available on NuGet.org.

Breaking changes

  • More errors triggered by the client disconnecting are now logged under a Debug severity (#​2765 by @​MihaZupan).
    • ForwarderError.ResponseBodyCanceled and UpgradeResponseCanceled are no longer logged with a Warning severity.
    • This is a continuation of a change we've made in 2.2 where we've done the same with RequestCanceled, RequestBodyCanceled, and UpgradeRequestCanceled.
  • Replacing the HttpRequestMessage.Content property in a request transform will throw an exception (#​2722 by @​MihaZupan).
    • While setting the property may have appeared to work during limited testing, it could lead to various issues as YARP internally relies on the property remaining unchanged. See the pull request for more context on this change.
  • We now always enforce the HttpVersionPolicy during HTTP version negotiation (#​2729 by @​MihaZupan).
    • It was previously possible for YARP to initiate HTTP/1.1 connections for WebSocket and SPDY requests even if the specified HttpVersionPolicy disallowed it. This was breaking scenarios such as outgoing HTTP/2 WebSockets without TLS.
    • If the policy disallows the use of outbound HTTP/1.1, SPDY requests will not be proxied and will instead return a RequestCreation error.
    • This does not affect the default YARP configuration, which is Version=2.0, Policy=RequestVersionOrLower.

Major changes

  • YARP has always logically been a part of .NET and we have now moved the repository from the microsoft to the dotnet organization.
  • We've created a JSON schema for YARP configuration! Editing now comes with validation and autocompletions (#​2758 by @​MihaZupan).
    • The change is automatic when referencing the 2.3.0 version of the YARP package and editing the ReverseProxy section in appsettings.json.
      image
      image
    • If you encounter any issues with the schema, please let us know by opening an issue.
    • False positives can be safely ignored until we're able to update the schema. Runtime interpretation of the configuration remains unchanged and is unaffected by schema validation.
    • You can manually reference the latest version of the schema without changing the package by pointing Visual Studio at https://raw.githubusercontent.com/dotnet/yarp/refs/heads/main/src/ReverseProxy/ConfigurationSchema.json.
      image
  • We've started shipping a minimal YARP container image at mcr.microsoft.com (#​2710 by @​benjaminpetit).
    • More functionality will be added to the image over time.

Other changes

New Contributors

For a full list of changes see here.


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

Commands to ignore dependencies

You can trigger dependency actions by commenting on this PR:

  • @particularbot ignore this major version
  • @particularbot ignore this minor version
  • @particularbot ignore this dependency

@dependencyupdates dependencyupdates bot added dependencies Pull requests that update a dependency file NuGet labels Jul 16, 2025
@dependencyupdates dependencyupdates bot force-pushed the renovate/yarp.reverseproxy-2.x branch from 167a78b to 6f3722d Compare August 8, 2025 21:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file NuGet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants