Bump tusdotnet from 2.5.0 to 2.8.0

[dependabot]

Bumps tusdotnet from 2.5.0 to 2.8.0.

Release notes

Sourced from tusdotnet's releases.

2.8

Client disconnect detection

One of the core features of tusdotnet is knowing when a client has disconnected so that held resources can be released. A client disconnect can be detected by either the client telling the server that it disconnected or that a timeout occurs. The timeout settings in tusdotnet previously depended on a reverse proxy signaling a timeout or that Kestrel was configured correctly. Starting with the release tusdotnet contains its own logic for handling timeouts which are more efficient than relying on a global request timeout. The new timeout mechanism determines how long tusdotnet will wait to receive data from the client and not how long the entire request takes, meaning that it will need to wait a shorter time before disconnecting a slow client and unlocking the file.

The client read timeout is configured using the ClientReadTimeout property on the DefaultTusConfiguration. The default value is set to a conservative 60 seconds to not interfere with existing timeout settings.

Lock on HEAD requests

HEAD requests to determine the upload offset for the client was previously a non-locking action. This version changes this behavior to locking. This increases stability in cases where data is in transfer but has not yet reached the server when the client disconnects and reconnects. In earlier versions this would cause the wrong offset to be retrieved. The client would then continue from the wrong offset causing an offset mismatch error when trying to patch the data.

Compatibility with other implementations

Response code for locked operations have been changed from 409 Conflict to 423 Locked to better conform to how clients and other servers are implemented.

Exceptions thrown from OnFileCompleteAsync were swallowed for creation-with-upload

This causes issues in the case when an exception is thrown from OnFileCompleteAsync as the exception would be swallowed and a 201 Created would be returned to the client instead of the exception. See #211 for details.

What's Changed

• Dev/205 new client disconnect guard by @​smatsson in tusdotnet/tusdotnet#207

Full Changelog: tusdotnet/tusdotnet@2.7.2...2.8

2.7.2

Bug fix release

What's Changed

• Use the request path base when creating location header urls by @​Louis9902 in tusdotnet/tusdotnet#210
• POST to a file url (e.g. /files/1234) created a new file resource (e.g. /files/5678) due to URL misinterpretation (331d707)

New Contributors

• @​Louis9902 made their first contribution in tusdotnet/tusdotnet#210

Full Changelog: tusdotnet/tusdotnet@2.7.1...2.7.2

2.7.1

Bug fix release.

1. Exceptions thrown in TusDiskStore where sometimes hidden from the world (2b18346)
2. TusDiskStore would sometimes throw an InvalidCastException (d08a145)

What's Changed

• Path one place setup by @​SDPMrem71 in tusdotnet/tusdotnet#193
• 194 remove events from core by @​smatsson in tusdotnet/tusdotnet#196

New Contributors

• @​SDPMrem71 made their first contribution in tusdotnet/tusdotnet#193

... (truncated)

Commits

• bc5d805 Remove unused usings
• 0d36520 Dev/205 new client disconnect guard (#207)
• b7d8f3a Do not swallow exceptions thrown during OnFileComplete for creation-with-upload
• 58578dc Add tests for PathBase
• 331d707 Sending a POST to a file uri should not create a new file
• 8ac0ebc Use the request path base when creating location header urls (#210)
• 4ab1116 Ignore temp tus files
• b1915bc Add link to tus2 POC
• e221df5 Mark the chunk as complete if the client disconnected after read for pipelines
• d08a145 Fix issue with InvalidCastException when running on some configs in IIS.
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)