[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
JsonSubTypes	2.0.1 → 2.2.0

Test plan: CI should pass with updated dependencies. No review required: this is an automated dependency update PR.

---

Release Notes

manuc66/JsonSubTypes (JsonSubTypes)

v2.2.0

JsonSubTypes

Added

• JsonSubtypesConverter exposes protected static bool IsClosedGenericFormOf(Type objectType, Type genericType), so custom converters built on the public base can reuse the closed-generic base matching.

Fixed

• Deserialization with an open generic base type (e.g. Base<>) now closes the generic subtype correctly (e.g. Nested1<int> for Base<int>) instead of failing. #​177
• Errors and exceptions raised while deserializing a subtype now carry the fully qualified JSON path (e.g. Property2.Value instead of Value), matching stock Newtonsoft.Json error handling. #​182

Changed

• Faster deserialization and serialization, output unchanged: the attribute-derived subtype mapping and property-presence list are cached per type, single-level type resolution skips the multi-level converter walk, and string/int discriminators are converted directly instead of round-tripping through JToken.FromObject/ToObject reflection. A custom JsonConverter registered on the serializer for the discriminator type still takes the serializer-aware path on both read and write. Measured with BenchmarkDotNet on net10: single deserialize 2.54µs → 2.33µs, collection deserialize 10.21µs → 7.72µs, single serialize 1.54µs → 1.31µs, collection serialize 5.51µs → 4.86µs.
• Generic subtype matching is restricted to the base class hierarchy: CanConvert no longer claims types that merely implement an unrelated generic interface of the base type.
• The name-based resolution risk (declared only when no subtype mapping exists) is documented on the converters, so it shows up in the IDE, and in the README security section.

Security

• netstandard1.3: System.Net.Http and System.Text.RegularExpressions are pinned to the patched 4.3.4 and 4.3.1; NETStandard.Library 1.6.1 otherwise resolves them to the vulnerable 4.3.0 versions.

v2.1.0

Added

• Make JsonSubtypesConverter and JsonSubtypesByDiscriminatorValueConverter public and subclassable: custom subtype converters can now be built with a custom discriminator mapping and control over discriminator serialization, instead of being limited to the fluent builder. #​138

Fixed

• Deserializing dates now matches stock Newtonsoft deserialization #​166 #​167

Changed

• Bump Newtonsoft.Json dependency to 13.0.4
• Deterministic builds, Source Link and .snupkg symbol packages

---

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Test Results

0 tests  ±0   0 ✅ ±0   0s ⏱️ ±0s
0 suites ±0   0 💤 ±0 
0 files   ±0   0 ❌ ±0 

Results for commit c914fa0. ± Comparison against base commit 9dd188e.

♻️ This comment has been updated with latest results.