Skip to content

Releases: reactiveui/refit

Release list

13.0.0

13.0.0 Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 01 Jul 07:39
v13.0.0
c0bbb5a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

🗞️ What's Changed

Refit 13 is a major release focused on security hardening and a brand-new testing package.

  • Security hardening (#2181) — closes issues found in a security audit. XML deserialization is now protected against XXE (external entity) attacks, the Newtonsoft.Json integration no longer honours unsafe TypeNameHandling by default (blocking type-confusion/deserialization attacks), and sensitive values (auth headers, tokens) are now redacted from exception and log output. This is the main reason for the major version bump: if you relied on permissive Newtonsoft type handling you may need to opt back in explicitly.
  • New Refit.Testing package (#2184) — a first-party way to stub and verify Refit clients in tests without spinning up a real HttpClient. Supply canned responses for interface calls and assert which requests your code made, instead of hand-rolling HttpMessageHandler fakes.
  • R3 bridge analyzer fix (#2186) — corrects the removal target for the R3 bridge analyzer.
  • CI and documentation tidy-ups for SonarCloud on fork pull requests.

✨ Features

🧹 General Changes

📝 Documentation

📌 Other

🔗 Full Changelog: v12.1.0...v13.0.0

🙌 Contributions

💖 Thanks to all the contributors: @ChrisPulman, @glennawatson

Contributors

ChrisPulman and glennawatson
Assets 7
Loading

12.1.0

12.1.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 29 Jun 00:10
v12.1.0
db33053
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

🗞️ What's Changed

✨ Features

🐛 Fixes

📝 Documentation

📦 Dependencies

🔗 Full Changelog: v12.0.0...12.1.0

🙌 Contributions

💖 Thanks to all the contributors: @ChrisPulman, @glennawatson, @HulinCedric

🤖 Automated services that contributed: @renovate[bot]

Contributors

HulinCedric, renovate, and 2 other contributors
Loading

12.0.0

12.0.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 24 Jun 10:45
v12.0.0
98982b4
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Overview

Refit 12.0 is a large release centred on a near-complete rewrite of how requests are built. The source generator now constructs HTTP requests inline at compile time instead of going through the reflection pipeline, making generated clients faster and friendly to trimming and Native AOT. On top of that foundation it adds response streaming, JSON Lines, naming-convention presets, and a batch of long-standing fixes. Two small, well-scoped breaking changes are called out below.

This release also removed netstandard2.0 and netstandard2.1 support. You should to use net462/net8 as your base lines, and use multiple targets if you need to target both.

Highlights

  • Reflection-free, AOT-ready source generation. Eligible interface methods now have their request (URI, headers, body, request properties) built directly in generated code, with the reflection request-builder kept only as a fallback for shapes that cannot be generated inline. Form bodies flatten through compiled, source-generated field descriptors. The generator itself was modernised and optimised, and ships analyzer diagnostics and code fixes. There is also a generated-only client-creation mode and a build-time switch for generated request building.
  • IAsyncEnumerable<T> response streaming. Stream large responses, auto-detecting a JSON array vs JSON Lines from the content type, generated inline on the hot path.
  • JSON Lines request bodies. [Body(BodySerializationMethod.JsonLines)] plus a streaming JsonLinesContent (application/x-ndjson), wired through both the reflection and source-gen paths.
  • Naming-convention presets. RefitSettings.CamelCase() / SnakeCase() / KebabCase() configure query keys, form-url-encoded keys, and JSON body property names consistently, plus snake/kebab URL key formatters. Opt-in, so existing behaviour is unchanged.
  • Response ergonomics. EnsureSuccessStatusCodeAsync() / EnsureSuccessfulAsync() are now available directly on IApiResponse<T>; a new IsSuccessfulWithContent (and HasContent) gives a single, mock-safe success-with-content check; nullable annotations on IApiResponse<T> were corrected to be sound.
  • URL and route control. Opt-in RFC 3986 / HttpClient-style URL resolution via RefitSettings.UrlResolution, and RefitSettings.AllowUnmatchedRouteParameters to leave an unmatched {token} for a DelegatingHandler to rewrite.
  • Faster JSON. A fast-path serialization option (SystemTextJsonContentSerializer.GetFastPathJsonSerializerOptions()) and buffered/streamed request-body modes that run through it.
  • Smaller additions. [Query(SerializeNull = true)] to send a null property as key= instead of omitting it, and a public UniqueName.ForType<T>() to resolve the generated IHttpClientFactory client name.
  • Fixes. Multipart Guid/DateTime/DateTimeOffset/TimeSpan (and DateOnly/TimeOnly) are sent as plain text (#2016); property-level [Query(delimiter, prefix)] is honoured when flattening complex objects (#1334); [Query(Format = "")] serializes a complex value via ToString() (#1281); and IApiResponse<T> no longer shadows base members (#1933).

Breaking changes and migration

  • IApiResponse<T> no longer shadows base members. The new-shadowed Error, ContentHeaders, IsSuccessStatusCode, and IsSuccessful members are removed from the generic interface. Source that reads these still compiles (they bind to the inherited base members), but code compiled against v8-v11 that bound to the generic-interface slots needs a recompile. If you relied on IsSuccessful to narrow Content to non-null on an IApiResponse<T>-typed value, switch to HasContent / IsSuccessfulWithContent.
  • The default System.Text.Json serializer now reads numbers from JSON strings (NumberHandling = AllowReadingFromString). Opt back out with NumberHandling = JsonNumberHandling.Strict on your JsonSerializerOptions.

🗞️ What's Changed

💥 Breaking Changes

✨ Features

♻️ Refactoring

⚡ Performance

🧹 General Changes

🔗 Full Changelog: v11.2.0...v12.0.0

🙌 Contributions

💖 Thanks to all the contributors: @glennawatson

Contributors

glennawatson
Loading

11.2.0

11.2.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 18 Jun 00:26
v11.2.0
54a8e62
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

🗞️ What's Changed

🐛 Fixes

🔗 Full Changelog: v11.1.0...v11.2.0

🙌 Contributions

💖 Thanks to all the contributors: @glennawatson

Contributors

glennawatson
Loading

11.1.0

11.1.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 17 Jun 07:17
v11.1.0
5f67752
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

🗞️ What's Changed

🐛 Fixes

🧹 General Changes

📝 Documentation

📦 Dependencies

🔗 Full Changelog: v11.0.1...v11.1.0

🙌 Contributions

🌱 New contributors since the last release: @HulinCedric
💖 Thanks to all the contributors: @ChrisPulman, @glennawatson, @HulinCedric, @PressXtoChris

🤖 Automated services that contributed: @renovate[bot]

Contributors

HulinCedric, renovate, and 3 other contributors
Loading

11.0.1

11.0.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 04 Jun 03:27
v11.0.1
8652c5e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

🗞️ What's Changed

🧹 General Changes

📌 Other

🔗 Full Changelog: v11.0.0...11.0.1

🙌 Contributions

🌱 New contributors since the last release: @xIceFox
💖 Thanks to all the contributors: @glennawatson, @xIceFox

Contributors

glennawatson and xIceFox
Loading

11.0.0

11.0.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 03 Jun 13:36
v11.0.0
f94a300

⚠️ This is a breaking release (major: 10.x → 11.0.0)

11.0.0 reworks Refit's error/exception model and tightens interface validation. Most apps will compile, but code that inspects ApiResponse.Error, reads StatusCode, or catches transport exceptions around Refit calls will need changes. These are the same breaking changes that briefly shipped in the now‑delisted 10.1.7 and were reported by the community in #2114.

💡 Need a drop‑in, non‑breaking replacement for 10.1.6? Use 10.2.0 — it is 10.1.6 re‑signed with a valid certificate (the 10.1.6 cert was revoked, see #2114). Move to 11.0.0 when you're ready to adopt the changes below.

💥 What changed & how to migrate

1. ApiResponse<T>.Error is now ApiExceptionBase? (was ApiException?) (#2052)
A new abstract base ApiExceptionBase now sits under both ApiException and the new ApiRequestException. ApiExceptionBase does not expose Content / HasContent — those still live on ApiException.

// before
string? body = response.Error?.Content;

// after — narrow to ApiException first
if (response.Error is ApiException apiEx)
{
    string? body = apiEx.Content;   // Content/HasContent are on ApiException
}

2. New ApiRequestException wraps transport/connection failures (#2052)
Exceptions thrown by HttpClient.SendAsync before a response arrives — HttpRequestException (DNS/host unreachable), TaskCanceledException (timeouts), etc. — are now wrapped in ApiRequestException : ApiExceptionBase, carrying the full request context. For ApiResponse<T> return types these are now surfaced via .Error instead of only being thrown, so you no longer need a separate try/catch and IsSuccessful check.

// catching transport errors: catch the base (or ApiRequestException) now
catch (ApiExceptionBase ex) { /* covers ApiException + ApiRequestException */ }

3. ApiResponse<T>.StatusCode is now nullable (HttpStatusCode?) (#2052)
When the request never reached the server there is no status code. Code that assumed a non‑null value must handle null:

int code = (int)response.StatusCode;          // ❌ won't compile / may throw
int? code = (int?)response.StatusCode;         // ✅ handle the no-response case

4. Stricter interface validation + enum name handling (#2068)
Synchronous return types are now only permitted for generated/non‑public interface members (RestMethodInfo enforces the rule), and the System.Text.Json enum converter now maps serialized names both ways (including JsonStringEnumMemberName on .NET 9+). Interfaces that previously relied on unsupported sync members may now fail generation.

🗞️ What's Changed

✨ Features & Enhancements

⚡ Performance

  • Replace Activator.CreateInstance with direct constructor in ApiResponse.Create by @james-s-tayler in #2071
  • Avoid extra allocations when deserializing with Newtonsoft.Json by @yzhoholiev in #2085

🐛 Fixes

🧹 General & Housekeeping

📦 Dependencies

🙌 New Contributors

💖 Contributions

Thanks to everyone who contributed: @ChrisPulman, @PressXtoChris, @james-s-tayler, @yzhoholiev, @dyatlov-a

🤖 Automated services that contributed: @renovate[bot]

🔗 Full Changelog: v10.2.0...v11.0.0

Contributors

renovate, ChrisPulman, and 4 other contributors
Loading

10.2.0

10.2.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 21 Mar 01:51
v10.2.0
f94a300

NOTE

This is a re-release of v10.1.6 which had a certificate revoked.

🗞️ What's Changed

🐛 Fixes

🧹 General Changes

📦 Dependencies

📌 Other

🔗 Full Changelog: 10.0.1...10.1.6

🙌 Contributions

💖 Thanks to all the contributors: @ChrisPulman

🤖 Automated services that contributed: @renovate[bot]

Contributors

renovate and ChrisPulman
Loading

10.0.1

10.0.1

Choose a tag to compare

View all tags
@glennawatson glennawatson released this 06 Feb 01:19
10.0.1
0155eeb
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

🗞️ What's Changed

♻️ Refactoring

🐛 Fixes

🧹 General Changes

📦 Dependencies

🔗 Full Changelog: 9.0.2...10.0.1

🙌 Contributions

🌱 New contributors since the last release: @baynezy, @zms9110750
💖 Thanks to all the contributors: @baynezy, @ChrisPulman, @glennawatson, @zms9110750

🤖 Automated services that contributed: @renovate[bot]

Contributors

baynezy, renovate, and 3 other contributors
Loading

9.0.2

9.0.2

Choose a tag to compare

View all tags
@glennawatson glennawatson released this 30 Nov 01:49
9.0.2
1e4e9c5
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

🗞️ What's Changed

✨ Features

🐛 Fixes

🧹 General Changes

✅ Tests

📦 Dependencies

📌 Other

🔗 Full Changelog: 8.0.0...9.0.2

🙌 Contributions

🌱 New contributors since the last release: @AldeRoberge, @DavidGarton8, @derekm, @fubar-coder, @KodamaSakuno, @Krzysztof318, @mark-pro, @rdeveen
💖 Thanks to all the contributors: @AldeRoberge, @ChrisPulman, @DavidGarton8, @derekm, @fubar-coder, @Glenn, @glennawatson, @KodamaSakuno, @Krzysztof318, @mark-pro, @rdeveen, @TimothyMakkison

🤖 Automated services that contributed: @renovate[bot]

Contributors

Glenn, derekm, and 11 other contributors
Loading