Bump Flurl from 2.8.0 to 3.0.0

[dependabot-preview]

Bumps Flurl from 2.8.0 to 3.0.0.

Release notes

Sourced from Flurl's releases.

Flurl.Http 3.0

[Features to be pre-released incrementally. Will update here.]

New Features

• FlurlResponse introduced, primarily to enable inspecting response and deserializing body in separate steps. (#354)
• Major overhaul of cookie functionality. (#506)
• Overhaul of redirect handling. (#500)
• Tests can be set up to return different fake responses depending on the URL or any other request conditions. (#481)
• HttpTest.ForCallsTo(...).AllowRealHttp() for allowing real calls to be made in a test for specific URLs or any other request conditions. (#225)
• New/more complete set of test assertions for headers and cookies. (#508)
• All extension methods on Flurl.Url and string are now also available on System.Uri. (#489)
• Providing a body for PostAsync, PutAsync, and PatchAsync now optional. (#515)

Breaking Changes from 2.x

Making HTTP calls

• Fluent methods that previously returned HttpResponseMessage (such GetAsync, PostAsync, etc) now return FlurlResponse. If you're using GetJsonAsync or chaining ReceiveXXX methods, this shouldn't break anything. (#354)
• HttpCall is now FlurlCall, and several properties of FlurlCall and FlurlHttpException were moved or renamed. (#488)
• Slightly different rules on when a redirect causes the verb to change to GET. (Never on 300, always on 303. #500)
• Minor changes to CapturedStringContent constructors. (#452)

Headers

• New collection type for IFlurlRequest.Headers and IFlurlClient.Headers. (#541)
• HttpRequestMessage.GetHeaderValue and HttpResponseMessage.GetHeaderValue extension methods removed. (#553)
• For multipart requests, Content-Type header for text parts allowed but not defaulted. (#452)
• Cookie request header and Set-Cookie response headers are always visible in Headers collection of request and response. (#506)

Cookies

• CookiesEnabled removed at all settings levels. (#506)
• Cookies, WithCookie and WithCookies removed from IFlurlClient. Use CookieSession instead. (#506)
• IFlurlRequest.Cookies is now read-only IEnumerable<(string Name, string Value)>. Use WithCookies instead. (#506)

Testing

• When asserting a specific URL was called, it must be a full string match rather than "contains" or "starts with". Add a * wildcard to the beginning or end if you need partial match behavior. (#323)
• When faking responses in tests, the last response in the queue becomes "sticky" rather than falling back to empty 200 responses. (#482)
• HttpTest.ResponseQueue public property has been removed. Underlying queue implementation changed significantly to support new features, and hopefully accessing it directly isn't needed. Use RespondWith methods to build the queues.
• Minor changes/enhancements to HttpCallAssertion. (#483)

Other

• UseCookies and AllowAutoRedirect are disabled on the default HttpClientHandler . Any custom factory-provided handler must do the same if Flurl's new cookie and redirect features are required. (#500 & #506)
• Default HttpClient caching strategy based on host, scheme, and port, rather than just host. (#550)
• Dropping support for older platforms. (#544)

Bug Fixes

• In tests, dequeuing fake responses is fully thread-safe. (#366)
• Culture-neutral string comparisons throughout library. (#485)

Flurl 3.0 contains a major rewrite of the URL building/parsing engine. It brings Flurl.Url's feature set more in line with System.Uri, while also addressing some of its quirks.

Commits

• f97a55b bump to 3.0 official!
• df0064e 3.0-pre6 version bump
• 0125ac6 re-naming Flurl.Http.CodeGen -> Flurl.CodeGen
• 422b048 #560 bug in default-path algorithm for cookies
• ce480aa case sensitivity fixes for header and cookie names
• 2e62f43 updated package testers
• 24876c2 bump Flurl ref from Flurl.Http
• 48d0d73 oops, bumped wrong one first
• f75ce05 Flurl version bump
• bbe13b7 misc tweaks
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

[dependabot-preview]

Superseded by #79.