automapper

AutoMapper 16.3.0 and 15.1.4 fix two high-severity advisories where deeply nested input bypassed MaxDepth and crashed the process with an uncatchable StackOverflowException. Here is which mapping paths were exposed and what changes when you upgrade.

Mapperly is the default for new .NET code: it matches hand-written speed, survives Native AOT, and catches unmapped members at build time. AutoMapper still wins on ProjectTo. Benchmarks and license thresholds included.

AutoMapper 15 removed the single-argument MapperConfiguration constructor. Pass an ILoggerFactory as the second argument, and add a config action to every AddAutoMapper call.

A step-by-step checklist to replace AutoMapper 15 Profiles, IMapper, ForMember, and ProjectTo with Riok.Mapperly 4.3 source-generated mappers in .NET 11.