Skip to content

Revert #3909: keep OWIN Saml/WsFederation on 5.7.0#3944

Merged
iarekk merged 1 commit into
masterfrom
iarekk/revert-3909-saml-owin
Jul 14, 2026
Merged

Revert #3909: keep OWIN Saml/WsFederation on 5.7.0#3944
iarekk merged 1 commit into
masterfrom
iarekk/revert-3909-saml-owin

Conversation

@iarekk

@iarekk iarekk commented Jul 14, 2026

Copy link
Copy Markdown
Contributor

Reverts #3909.

That PR (Dependabot) bumped the default IdentityModelV5Version in Microsoft.Identity.Web.OWIN.csproj from 5.7.0 → 8.19.1. This property deliberately pins Microsoft.IdentityModel.Tokens.Saml and Microsoft.IdentityModel.Protocols.WsFederation to the 5.x line for the net472 OWIN package (an 8.x bump was attempted and explicitly reverted in #3900).

Problems with the bump:

  • Only the default branch was changed; the CI path (TF_BUILD=true) still resolves 5.7.1, so local builds (now 8.19.1) diverge from official builds.
  • The MSB3277 warning suppression is still keyed to '5.7.1', so it no longer matches the default value.

Reverting to 5.7.0 until the intent/impact is clarified.

Reverts the default IdentityModelV5Version bump from 8.19.1 back to 5.7.0.
This property deliberately pins Microsoft.IdentityModel.Tokens.Saml and
Microsoft.IdentityModel.Protocols.WsFederation to the 5.x line for the
net472 OWIN package. The bump only touched the default branch (CI/TF_BUILD
stays 5.7.1) and left the MSB3277 suppression keyed to 5.7.1, causing a
local-vs-CI version divergence. Reverting until the intent is clarified.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 742e5e40-2da7-4d10-af81-d038b3802ce4
@iarekk
iarekk requested a review from a team as a code owner July 14, 2026 14:20
@iarekk
iarekk merged commit c92b806 into master Jul 14, 2026
8 checks passed
@iarekk
iarekk deleted the iarekk/revert-3909-saml-owin branch July 14, 2026 16:33
This was referenced Jul 17, 2026
This was referenced Jul 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants