From c266bd533ffa67aeca69aab3b0a4b90928d13910 Mon Sep 17 00:00:00 2001
From: Avery-Dunn <62066438+Avery-Dunn@users.noreply.github.com>
Date: Mon, 20 Apr 2026 10:36:48 -0700
Subject: [PATCH 1/2] Update changelog for version 4.8.0

---
 changelog.md | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/changelog.md b/changelog.md
index a1aa57894..a0b35926a 100644
--- a/changelog.md
+++ b/changelog.md
@@ -1,3 +1,21 @@
+## 4.8.0
+
+### New features
+- Add support for mTLS authentication-only mode for `DownstreamApi`. When protocol is set to MTLS, the configured certificate is attached to the request without an authorization header. See [#3747](https://github.com/AzureAD/microsoft-identity-web/pull/3747).
+- Add token binding support to `MicrosoftIdentityMessageHandler`. See [#3743](https://github.com/AzureAD/microsoft-identity-web/pull/3743).
+
+### Bug fixes
+- Fix race condition in `MergedOptions` causing sporadic "No ClientId was specified" errors under concurrent `GraphServiceClient` usage. See [#3760](https://github.com/AzureAD/microsoft-identity-web/pull/3760).
+- Fix `CredentialsProvider` DI lifetime mismatch causing startup crash in Development mode when using `AddMicrosoftIdentityWebApi()`. See [#3783](https://github.com/AzureAD/microsoft-identity-web/pull/3783).
+
+### Dependencies updates
+- Upgrade Microsoft Application Insights packages. See [#3763](https://github.com/AzureAD/microsoft-identity-web/pull/3763).
+- Bump net8/net9/net10 runtime package baselines to patched crypto servicing versions. See [#3779](https://github.com/AzureAD/microsoft-identity-web/pull/3779).
+
+### Documentation
+- Clarify managed identity credential types for containerized vs. VM/App Service deployments. See [#3585](https://github.com/AzureAD/microsoft-identity-web/pull/3585).
+- Add examples for using PostgreSQL as a distributed token cache. See [#3766](https://github.com/AzureAD/microsoft-identity-web/pull/3766).
+
 ## 4.7.0
 
 ### Bug fixes

From 16a1d4c11fcf41b76eb400fb947c976778ebf801 Mon Sep 17 00:00:00 2001
From: avdunn <avdunn@microsoft.com>
Date: Mon, 20 Apr 2026 10:51:04 -0700
Subject: [PATCH 2/2] Bump build version

---
 Directory.Build.props | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Directory.Build.props b/Directory.Build.props
index 2f4df5039..c998b1454 100644
--- a/Directory.Build.props
+++ b/Directory.Build.props
@@ -4,7 +4,7 @@
     <!-- This needs to be greater than or equal to the validation baseline version. The conditional logic around TargetNetNext is there
     to avoid NU5104 for packing a release version library with prerelease deps. By adding preview to it, that warning is avoided.
     -->
-    <MicrosoftIdentityWebVersion Condition="'$(MicrosoftIdentityWebVersion)' == ''">4.7.1</MicrosoftIdentityWebVersion>
+    <MicrosoftIdentityWebVersion Condition="'$(MicrosoftIdentityWebVersion)' == ''">4.8.1</MicrosoftIdentityWebVersion>
     <!--This will generate AssemblyVersion, AssemblyFileVersion and AssemblyInformationVersion-->
     <Version>$(MicrosoftIdentityWebVersion)</Version>
     <EnablePackageValidation>true</EnablePackageValidation>