Bump Microsoft.Identity.Web from 3.4.0 to 3.8.2

[dependabot]

Updated Microsoft.Identity.Web from 3.4.0 to 3.8.2.

Release notes

Sourced from Microsoft.Identity.Web's releases.

3.8.2

3.8.2

• Updated to Microsoft.Identity.Abstractions 9.0.0

New feature

• An exception is now thrown if MSAL TokenCacheNotificationArgs indicates that distributed cache is configured when it should not have been. See #​3304.
• Added support for federated identity credentials with AT_POP. See #​3299.

3.8.1

New features

• Updated to Microsoft.IdentityModel.* 8.7.0

Bug fixes

• Pins Microsoft.Extensions.Http dependency version to 3.1.3 for .NET Framework and .NET Standard and uses inbox version for .NET Core. See #​3145.

What's Changed

• Post release cleanup by @​jmprieur in Post release cleanup AzureAD/microsoft-identity-web#3291
• update MIM by @​jennyf19 in update MIM AzureAD/microsoft-identity-web#3292
• Updates CodeQL.yaml to exclude test files by @​sruke in Updates CodeQL.yaml to exclude test files AzureAD/microsoft-identity-web#3294
• Make Microsoft.Extensions.Http dependency framework friendly by @​ksaaf in Make Microsoft.Extensions.Http dependency framework friendly AzureAD/microsoft-identity-web#3296
• Update to IdentityModel 8.7.0 by @​pmaytak in Update to IdentityModel 8.7.0 AzureAD/microsoft-identity-web#3307

New Contributors

• @​ksaaf made their first contribution in Make Microsoft.Extensions.Http dependency framework friendly AzureAD/microsoft-identity-web#3296

Full Changelog: AzureAD/microsoft-identity-web@3.8.0...3.8.1

3.8.0

3.8.0

New feature

• Updated to Microsoft.IdentityModel.* 8.6.1
• Updated to MSAL.NET 4.69.1
• Updated the Json Schema to include extensiblity for signed assertion providers. See #​3235
• Added support for Federation Identity Credential on any OIDC Idp (FIC+OIDC credential provider). See #​3255
• Support for acquiring token for Federation Managed Identity (FMI). Supports the FmiPath property of AcquireTokenOptions. See #​3247
• Downstream APIs now support Authorization headers with a custom SAML bearer syntax. See #​3273

Bug fixes

• TokenAcquirerFactory is now thread safe. See #​3274
• Fix a bug in the parsing of the token in the authority. See #​3261

Fundamentals

• Removed old Blazorwasm sample, wasm-tools and added new blazor web API: #​3259, #​3257, #​3254
• Modified the build so that, in CI/CD internal builds, the NuGet.olg NuGet source is replaced by a managed Nuget source. More verbose information added. See #​3263
• Fixed CS8602 Warnings in Weather.razor (BlazorApp) – Handle Nullable forecasts and user.Identity. See #​3266,

What's Changed

• Update changelog.md by @​jennyf19 in Update changelog.md AzureAD/microsoft-identity-web#3246
• Lozensky/add fmi path by @​JoshLozensky in Lozensky/add fmi path AzureAD/microsoft-identity-web#3247
• Lozensky/perf fix graph service client by @​JoshLozensky in Lozensky/perf fix graph service client AzureAD/microsoft-identity-web#3251
• M.IM 8.6.0 by @​jennyf19 in M.IM 8.6.0 AzureAD/microsoft-identity-web#3252
• Jennyf/blazor prototype by @​jennyf19 in Jennyf/blazor prototype AzureAD/microsoft-identity-web#3254
• remove old blazor apps by @​jennyf19 in remove old blazor apps AzureAD/microsoft-identity-web#3257
• Remove step for installing wasm-tools in the build by @​gladjohn in Remove step for installing wasm-tools in the build AzureAD/microsoft-identity-web#3259
• Fix for Remove NuGet Source steps (now with enhanced logging) by @​gladjohn in Fix for Remove NuGet Source steps (now with enhanced logging) AzureAD/microsoft-identity-web#3263
• Add CustomSignedAssertion to Credentials.json by @​JoshLozensky in Add CustomSignedAssertion to Credentials.json AzureAD/microsoft-identity-web#3235
• Fix CS8602 Warnings in Weather.razor (BlazorApp) – Handle Nullable forecasts and user.Identity by @​gladjohn in Fix CS8602 Warnings in Weather.razor (BlazorApp) – Handle Nullable forecasts and user.Identity AzureAD/microsoft-identity-web#3266
• Add Support for Custom Saml Bearer in HttpRequest Headers by @​sthanu98 in Add Support for Custom Saml Bearer in HttpRequest Headers AzureAD/microsoft-identity-web#3273
• comment out the code coverage by @​jennyf19 in comment out the code coverage AzureAD/microsoft-identity-web#3279
• update msal to 4.69.1 by @​jennyf19 in update msal to 4.69.1 AzureAD/microsoft-identity-web#3281
• FIC+OIDC credential provider by @​jmprieur in FIC+OIDC credential provider AzureAD/microsoft-identity-web#3255
• Update the IdWeb version number by @​jmprieur in Update the IdWeb version number AzureAD/microsoft-identity-web#3280
• Locking Down the TokenAcquirerFactory by @​JoshLozensky in Locking Down the TokenAcquirerFactory AzureAD/microsoft-identity-web#3274
• Fix authority parsing logic by @​JoshLozensky in Fix authority parsing logic AzureAD/microsoft-identity-web#3261
• Update changelog.md for Id.web 3.8.0 by @​jmprieur in Update changelog.md for Id.web 3.8.0 AzureAD/microsoft-identity-web#3285

New Contributors

• @​sthanu98 made their first contribution in Add Support for Custom Saml Bearer in HttpRequest Headers AzureAD/microsoft-identity-web#3273

Full Changelog: AzureAD/microsoft-identity-web@3.7.1...3.8.0

3.7.1

3.7.1

• Updated to Microsoft.IdentityModel.* 8.5.0

3.7.0

3.7.0

• Updated to Microsoft.Identity.Abstractions 8.1.0
• Updated to Microsoft.IdentityModel.* 8.4.0

New Feature

• IdentityWeb now provides extensibility to DefaultCredentialsLoader so that partner teams, or an SDK on top of IdWeb, can bring their own credential providers. See #​3220 for details.

Bug fixes

• The merged options are now being passed to MSAL for the CCA ROPC scenario. See #​3207 for details.

What's Changed

• changelog update by @​jennyf19 in changelog update AzureAD/microsoft-identity-web#3216
• Pass the assertion options to MSAL for ROPC call by @​neha-bhargava in Pass the assertion options to MSAL for ROPC call AzureAD/microsoft-identity-web#3217
• Update global.json to 9.0.102 by @​jennyf19 in Update global.json to 9.0.102 AzureAD/microsoft-identity-web#3222
• Bump the notsecurity group with 3 updates by @​dependabot in Bump the notsecurity group with 3 updates AzureAD/microsoft-identity-web#3219
• update abstractions to 8.1.0 by @​jennyf19 in update abstractions to 8.1.0 AzureAD/microsoft-identity-web#3224
• update benchmark by @​jennyf19 in update benchmark AzureAD/microsoft-identity-web#3229
• Adding Extensibility for Custom Signed Assertion Providers by @​JoshLozensky in Adding Extensibility for Custom Signed Assertion Providers AzureAD/microsoft-identity-web#3226
• Update changelog.md 3.7.0 by @​jennyf19 in Update changelog.md 3.7.0 AzureAD/microsoft-identity-web#3233

Full Changelog: AzureAD/microsoft-identity-web@3.6.2...3.7.0

3.6.2

3.6.2

• Updated to Microsoft.Identity.Abstractions 8.0.0

Fundamentals

• Clean-up the tests that were using properties removed in Abstractions 8.0.0. See issue #​3212 for details.

What's Changed

• Bump the notsecurity group across 1 directory with 3 updates by @​dependabot in Bump the notsecurity group across 1 directory with 3 updates AzureAD/microsoft-identity-web#3211
• Suppress TFM Build Warnings by @​kllysng in Suppress TFM Build Warnings AzureAD/microsoft-identity-web#3210
• Fixing 3212 and cleaning-up technical debt by @​jmprieur in Fixing 3212 and cleaning-up technical debt AzureAD/microsoft-identity-web#3213

Full Changelog: AzureAD/microsoft-identity-web@3.6.1...3.6.2

3.6.1

3.6.1

• Updated to Microsoft.Identity.Abstractions 7.2.1

3.6.0

3.6.0

• Updated to Microsoft.IdentityModel.* 8.3.1
• Updated to MSAL.NET 4.67.2

Bug fixes

• Checks that B2C tokens don't contain the claims used by Identity Web to represent the home tenant and object ID (obtained from the UserInfo endpoint). See Add checks to protect the internal claims used by MIW. Ref: issue #2968 AzureAD/microsoft-identity-web#3131
• Remove explicit locking in OpenIdConnectCachingSecurityTokenProvider. See Issue #​3078

Fundamentals

• Fix Null Reference Exception in OwinTokenAcquirerFactory + other OWIN cleanup. See - Fixes 3181 AzureAD/microsoft-identity-web#3183
• Re-add code coverage comments & scope to src files. See [Fundamentals] re-add code coverage comments & scope to src files AzureAD/microsoft-identity-web#3177

What's Changed

• Update changelog.md by @​jmprieur in Update changelog.md AzureAD/microsoft-identity-web#3161
• Update global.json by @​keegan-caruso in Update global.json AzureAD/microsoft-identity-web#3163
• Use ExtraQP to inject telemetry SDK ID by @​bgavrilMS in Use ExtraQP to inject telemetry SDK ID AzureAD/microsoft-identity-web#2973
• Fix 3167 (package downgrade when referencing IdentityModel.Tokens from dev) by @​jmprieur in Fix 3167 (package downgrade when referencing IdentityModel.Tokens from dev) AzureAD/microsoft-identity-web#3168
• Add Warning Quality Check Build Task 🔨 by @​kllysng in Add Warning Quality Check Build Task 🔨 AzureAD/microsoft-identity-web#3169
• Treat warnings as errors by @​keegan-caruso in Treat warnings as errors AzureAD/microsoft-identity-web#3166
• Revert: Warning Quality Check Build Task by @​alexholub113 in Revert: Warning Quality Check Build Task AzureAD/microsoft-identity-web#3172
• fix warnings in idweb and readd warnings as errors by @​jennyf19 in fix warnings in idweb and readd warnings as errors AzureAD/microsoft-identity-web#3173
• Add checks to protect the internal claims used by MIW. Ref: issue #​2968 by @​DOMZE in Add checks to protect the internal claims used by MIW. Ref: issue #2968 AzureAD/microsoft-identity-web#3131
• use only src files and re-add comments by @​jennyf19 in use only src files and re-add comments AzureAD/microsoft-identity-web#3176
• Update dotnet actions by @​sebastienros in Update dotnet actions AzureAD/microsoft-identity-web#3175
• • Fixes 3181 by @​jmprieur in - Fixes 3181 AzureAD/microsoft-identity-web#3183
• Add retry logic to stabilize flaky UI tests by @​kllysng in Add retry logic to stabilize flaky UI tests AzureAD/microsoft-identity-web#3180
• Add null handling for process output/error data in UiTestHelpers by @​kllysng in Add null handling for process output/error data in UiTestHelpers AzureAD/microsoft-identity-web#3184
• package updates from dependabot by @​jennyf19 in package updates from dependabot AzureAD/microsoft-identity-web#3185
• Fix E2E tests persistent flakiness + build hanging by @​kllysng in Fix E2E tests persistent flakiness + build hanging AzureAD/microsoft-identity-web#3188
• Revert WaitForProcess in UI Tests by @​jmprieur in Revert WaitForProcess in UI Tests AzureAD/microsoft-identity-web#3189
• Update to use MSAL 4.67.1 by @​gladjohn in Update to use MSAL 4.67.1 AzureAD/microsoft-identity-web#3193
• Update to use MSAL 4.67.2 by @​gladjohn in Update to use MSAL 4.67.2 AzureAD/microsoft-identity-web#3200
• Remove explicit locking in OpenIdConnectCachingSecurityTokenProvider by @​keegan-caruso in Remove explicit locking in OpenIdConnectCachingSecurityTokenProvider AzureAD/microsoft-identity-web#3202
• 3.6.0 changelog by @​kllysng in 3.6.0 changelog AzureAD/microsoft-identity-web#3203

New Contributors

• @​DOMZE made their first contribution in Add checks to protect the internal claims used by MIW. Ref: issue #2968 AzureAD/microsoft-identity-web#3131
• @​sebastienros made their first contribution in Update dotnet actions AzureAD/microsoft-identity-web#3175
• @​gladjohn made their first contribution in Update to use MSAL 4.67.1 AzureAD/microsoft-identity-web#3193

Full Changelog: AzureAD/microsoft-identity-web@3.5.0...3.6.0

3.5.0

Bug fixes

• Ensure Singleton registration for TokenAcquisition Services when TokenAcquirerFactory is null. See Ensure Singleton registration for TokenAcquisition Services when TokenAcquirerFactory is null AzureAD/microsoft-identity-web#3155
• Dont modify the merged options when building the confidential client. See Dont modify the merged options when building the confidential client AzureAD/microsoft-identity-web#3137

Fundamentals

• Install all .NET versions in pipeline, including .NET 9. See Install all .NET versions in pipeline to fix run tests task AzureAD/microsoft-identity-web#3152
• Upgrade to C# 13. See Upgrade to C# 13 AzureAD/microsoft-identity-web#3138
• Specify sdk version in global.json. See Specify sdk version in global.json AzureAD/microsoft-identity-web#3156
• Disable Coverage PR comments. See in Disable Coverage PR comments AzureAD/microsoft-identity-web#3159

What's Changed

• Install all .NET versions in pipeline to fix run tests task by @​msbw2 in Install all .NET versions in pipeline to fix run tests task AzureAD/microsoft-identity-web#3152
• Upgrade to C# 13 by @​westin-m in Upgrade to C# 13 AzureAD/microsoft-identity-web#3138
• Specify sdk version in global.json by @​westin-m in Specify sdk version in global.json AzureAD/microsoft-identity-web#3156
• Ensure Singleton registration for TokenAcquisition Services when TokenAcquirerFactory is null by @​sruke in Ensure Singleton registration for TokenAcquisition Services when TokenAcquirerFactory is null AzureAD/microsoft-identity-web#3155
• Disable Coverage PR comments by @​westin-m in Disable Coverage PR comments AzureAD/microsoft-identity-web#3159
• Dont modify the merged options when building the confidential client by @​keegan-caruso in Dont modify the merged options when building the confidential client AzureAD/microsoft-identity-web#3137

Full Changelog: AzureAD/microsoft-identity-web@3.4.0...3.5.0

Commits viewable in compare view.

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.