chore: Bump Microsoft.AspNetCore.Authentication.JwtBearer and 13 others#50
Open
dependabot[bot] wants to merge 6 commits into
Open
Conversation
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
- Passage en feature-based -> déplacement dans dossier feature et separation par type de controller - Remplacement des vars - fix de la modale qui ne fonctionnait pas sur /restaurant/:id/creneau - ajout de type d'exception dans globalexceptionhandler
Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.5 to 10.0.9 Bumps Microsoft.AspNetCore.Components.WebAssembly from 10.0.5 to 10.0.9 Bumps Microsoft.AspNetCore.Components.WebAssembly.Authentication from 10.0.5 to 10.0.9 Bumps Microsoft.AspNetCore.Components.WebAssembly.DevServer from 10.0.5 to 10.0.9 Bumps Microsoft.AspNetCore.Identity.EntityFrameworkCore from 10.0.5 to 10.0.9 Bumps Microsoft.AspNetCore.OpenApi from 10.0.5 to 10.0.9 Bumps Microsoft.AspNetCore.SignalR.Client from 10.0.7 to 10.0.9 Bumps Microsoft.EntityFrameworkCore from 10.0.5 to 10.0.9 Bumps Microsoft.EntityFrameworkCore.Design from 10.0.5 to 10.0.9 Bumps Microsoft.EntityFrameworkCore.InMemory from 10.0.5 to 10.0.9 Bumps Microsoft.EntityFrameworkCore.Tools from 10.0.5 to 10.0.9 Bumps Microsoft.Extensions.Caching.StackExchangeRedis from 10.0.5 to 10.0.9 Bumps Microsoft.NET.Test.Sdk from 18.3.0 to 18.6.0 Bumps System.IdentityModel.Tokens.Jwt to 8.19.1 --- updated-dependencies: - dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-framework - dependency-name: Microsoft.AspNetCore.Components.WebAssembly dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-framework - dependency-name: Microsoft.AspNetCore.Components.WebAssembly.Authentication dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-framework - dependency-name: Microsoft.AspNetCore.Components.WebAssembly.DevServer dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-framework - dependency-name: Microsoft.AspNetCore.Identity.EntityFrameworkCore dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-framework - dependency-name: Microsoft.AspNetCore.Identity.EntityFrameworkCore dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-framework - dependency-name: Microsoft.AspNetCore.OpenApi dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-framework - dependency-name: Microsoft.AspNetCore.SignalR.Client dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-framework - dependency-name: Microsoft.EntityFrameworkCore dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-framework - dependency-name: Microsoft.EntityFrameworkCore.Design dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-framework - dependency-name: Microsoft.EntityFrameworkCore.Design dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-framework - dependency-name: Microsoft.EntityFrameworkCore.InMemory dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-framework - dependency-name: Microsoft.EntityFrameworkCore.Tools dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-framework - dependency-name: Microsoft.Extensions.Caching.StackExchangeRedis dependency-version: 10.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-framework - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: microsoft-framework - dependency-name: System.IdentityModel.Tokens.Jwt dependency-version: 8.19.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: microsoft-framework ... Signed-off-by: dependabot[bot] <support@github.com>
12e79c4 to
96f9044
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.5 to 10.0.9.
Release notes
Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.AspNetCore.Components.WebAssembly from 10.0.5 to 10.0.9.
Release notes
Sourced from Microsoft.AspNetCore.Components.WebAssembly's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.AspNetCore.Components.WebAssembly.Authentication from 10.0.5 to 10.0.9.
Release notes
Sourced from Microsoft.AspNetCore.Components.WebAssembly.Authentication's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.AspNetCore.Components.WebAssembly.DevServer from 10.0.5 to 10.0.9.
Release notes
Sourced from Microsoft.AspNetCore.Components.WebAssembly.DevServer's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.AspNetCore.Identity.EntityFrameworkCore from 10.0.5 to 10.0.9.
Release notes
Sourced from Microsoft.AspNetCore.Identity.EntityFrameworkCore's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.AspNetCore.OpenApi from 10.0.5 to 10.0.9.
Release notes
Sourced from Microsoft.AspNetCore.OpenApi's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.AspNetCore.SignalR.Client from 10.0.7 to 10.0.9.
Release notes
Sourced from Microsoft.AspNetCore.SignalR.Client's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.EntityFrameworkCore from 10.0.5 to 10.0.9.
Release notes
Sourced from Microsoft.EntityFrameworkCore's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.EntityFrameworkCore.Design from 10.0.5 to 10.0.9.
Release notes
Sourced from Microsoft.EntityFrameworkCore.Design's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.EntityFrameworkCore.InMemory from 10.0.5 to 10.0.9.
Release notes
Sourced from Microsoft.EntityFrameworkCore.InMemory's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.EntityFrameworkCore.Tools from 10.0.5 to 10.0.9.
Release notes
Sourced from Microsoft.EntityFrameworkCore.Tools's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.Extensions.Caching.StackExchangeRedis from 10.0.5 to 10.0.9.
Release notes
Sourced from Microsoft.Extensions.Caching.StackExchangeRedis's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.NET.Test.Sdk from 18.3.0 to 18.6.0.
Release notes
Sourced from Microsoft.NET.Test.Sdk's releases.
18.6.0
What's Changed
Changes to tests and infra
... (truncated)
18.5.1
What's Changed
Full Changelog: microsoft/vstest@v18.5.0...v18.5.1
18.5.0
What's Changed
Full Changelog: microsoft/vstest@v18.4.0...v18.5.0
18.4.0
What's Changed
Add LoongArch64 support by @stdmnpkg in Add LoongArch64 support microsoft/vstest#15359
Refactor Condition evaluation by @Youssef1313 in Refactor Condition evaluation microsoft/vstest#15357
Adding info on extensions points part 1 by @nohwnd in Adding info on extensions points part 1 microsoft/vstest#15360
Add option to ask for uploading code QL before the standard window ends by @nohwnd in Add option to ask for uploading code QL before the standard window ends microsoft/vstest#15373
Update runtime versions by @nohwnd in Update runtime versions microsoft/vstest#15372
Fix .NET 10 regression for traits by @Youssef1313 in Fix .NET 10 regression for traits microsoft/vstest#15370
Update target frameworks to net10.0 and net11.0 by @dotnet-maestro[bot] in Update target frameworks to net10.0 and net11.0 microsoft/vstest#15349
Fix names in pipeline matrix so we don't have to align them by @nohwnd in Fix names in pipeline matrix so we don't have to align them microsoft/vstest#15365
Update SECURITY.md by @Youssef1313 in Update SECURITY.md microsoft/vstest#15342
New Contributors
Full Changelog: microsoft/vstest@v18.3.0...v18.4.0
Commits viewable in compare view.
Pinned System.IdentityModel.Tokens.Jwt at 8.19.1.
Release notes
Sourced from System.IdentityModel.Tokens.Jwt's releases.
8.19.1
Bug Fixes
JwtSecurityTokenHandlerforIssuerSigningKeyResolverUsingConfigurationto take priority overIssuerSigningKeyResolver, matching the documented contract and the correct behavior already present inJsonWebTokenHandler. See PR #3519.8.19.0
New Features
Bug Fixes
jkuclaim. See PR #3481.htucomparison. See PR #3509.8.18.0
New Features
IConfigurationEventHandlerContextAware<T>that provides context to the configuration event handler implementation, allowing it to optionally bypass a cache lookup. See PR #3444.8.17.0
Dependencies
8.16.0
New Features
Fundamentals
8.15.0
New Features
X509SecurityKeyandJsonWebKeyConverter.ConvertFromX509SecurityKeyExtended
X509SecurityKeyandJsonWebKeyConverter.ConvertFromX509SecurityKeyto support ECDSA keys.See PR #2377 for details.
Bug Fixes
Updated logging to sanitize sensitive values, reducing the risk of inadvertently exposing secrets or PII in logs.
See PR #3316 for details.
SearchValuesImproved the performance of the log sanitization logic introduced earlier by using
SearchValues, making sanitization more efficient in high-throughput scenarios.See PR #3341 for details.
IDX10400Adjusted the
IDX10400test to align with the current behavior and error messaging.See PR #3314 for details.
Fundamentals
Added new tests to validate the set of supported cryptographic algorithms, increasing confidence in algorithm coverage and compatibility.
See PR #3296 for details.
.clinerulestoagents.mdMoved repository agent/AI-assist rules into markdown documentation to make them more visible and easier to maintain.
See PR #3313 for details.
Microsoft.IdentityModel.TestExtensionsfrom Newtonsoft.Json to System.Text.JsonUpdated
Microsoft.IdentityModel.TestExtensionsto useSystem.Text.Jsoninstead ofNewtonsoft.Json, aligning tests with the runtime serialization stack.See PR #3356 for details.
Turned off automated code coverage comments on PRs to reduce noise while retaining coverage data elsewhere.
See PR #3349 for details.
Addressed CodeQL-reported issues to improve security posture and static analysis cleanliness.
See PR #3364 for details.
.NET 10 / SDK and tooling updates
Updated the repository to build and test against .NET 10.0 preview/RC1, ensuring early compatibility with the upcoming runtime.
See PRs #3287, #3357, and #3358 for details.
Ensured consistent use of the
TargetNetNextparameter across build, test, and pack phases so .NET 10.0 tests execute reliably.See PR #3337 for details.
Adjusted project files and CI workflows to correctly target and run on .NET 10.0, including test and pack scenarios.
See PR #3363 for details.
Updated the .NET version references to be compliant with corporate governance (CG) requirements.
See PR #3353 for details.
CoverletCollectorVersionto 6.0.4.See PR #3333 for details.
Microsoft.NET.Test.Sdkto a newer version for improved test reliability and tooling support.... (truncated)
8.14.0
8.14.0
Bug Fixes
ValidationResultinstead ofOperationResultwhen validating a token in a new experimental validation flow. Additionally removed the dependency on Microsoft.IdentityModel.Abstractions. See #3299 for details.8.13.1
8.13.1
Dependencies
Microsoft.IdentityModel now depends on Microsoft.Identity.Abstractions 9.3.0
Bug Fixes
Work related to redesign of IdentityModel's token validation logic #2711
8.13.0
8.13.0
8.13.0
Fundamentals
CaseSensitiveClaimsIdentity.SecurityTokensetter is now protected internal (was internal). See PR #3278 for details.What's Changed
New Contributors
Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.12.1...8.13.0
8.12.1
8.12.1
Fundamentals
What's Changed
Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.12.0...8.12.1
8.12.0
8.12.0
New Features
Added event handling capabilities to the
ConfigurationManager, enabling consumers to subscribe to configuration change events. This enhancement improves extensibility and allows more responsive applications. For details see #3253Bug Fixes
Introduced the expected overload of
Base64UrlEncoder.Decodefor .NET 6 and 8, ensuring compatibility and preventing missing method issues on these frameworks.For details see #3249
Fundamentals
Incorporated AI assist rules to enhance AI agents effectiveness.
For details see #3255
Upgraded analyzer packages for improved diagnostics and code consistency (in particular delegates are added).
For details see #3256
Centralized suppression of RS006 warnings in project files for easier management.
For details see #3230
What's Changed
Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.11.0...8.12.0
8.11.0
8.11.0
New Features:
JsonWebTokenHandler.DecryptTokenWithConfigurationAsync, which decrypts a JWE token using keys from eitherTokenValidationParametersor, if not present, from configuration (such as via a ConfigurationManager). This enhancement improves developer experience by enabling asynchronous, cancellation-aware JWE decryption scenarios, aligning with modern .NET async patterns and making integration with external key/configuration sources more robust and observable. See PR #3243 for details.What's Changed
Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.10.0...8.11.0
8.10.0
8.10.0
Bug Fixes
Fundamentals
8.9.0
8.9.0
Bug Fixes
New Features
Fundamentals
8.8.0
8.8.0
New Features
Switch.Microsoft.IdentityModel.UpdateConfigAsBlockingswitch. If set, configuration calls will be blocking when metadata is updated, otherwise, if token arrive with a new signing keys, validation errors will be returned to the caller. See PR #3193 for details.Switch.Microsoft.IdentityModel.DoNotScrubExceptionsAppContextSwitch. See PR #3195 and https://aka.ms/identitymodel/app-context-switches for details.System.Thread.Lockobjects for .NET 9 or greater. See PRs #3185 and #3189 for details.8.7.0
Bug Fixes
IsRecoverableExceptionandIsRecoverableExceptionTypewhose signatures were changed in the previous version. See #3181.New Features
Cnfclass public and move it to Microsoft.IdentityModel.Tokens package. See #3165.What's Changed
New Contributors
Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.6.1...8.7.0
8.6.1
8.6.1
Bug fix
JsonWebTokenHandlerwhereJwtTokenDecryptionParameters'sAlgandEncwere not set during token decryption, causingIDX10611andIDX10619errors to show null values in the messages. See issue #3003 for details.Fundamentals
What's Changed
New Contributors
Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.6.0...8.6.1
8.6.0
8.6.0
New Features
TryAllDecryptionKeysthat let you choose whether to try all decrypt keys when no key matches the token decrypt key IDs. By default it's set to true (legacy behavior) but you can set it to false to avoid tyring all keys which is more performant. See #3128Fundamentals
What's Changed
Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.5.0...8.6.0
8.5.0
8.5.0
Reverting previous breaking change
What's Changed
Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.4.0...8.5.0
8.4.0
8.4.0
New Features
Repair items
KeyIDshould be present in exception messages and is no longer PII. See #3104 for details.Fundamentals
Work related to redesign of IdentityModel's token validation logic #2711
8.3.1
8.3.1
Bug Fixes
AuthenticationEncryptionProvider.cs. See #3063Fundamentals
Work related to redesign of IdentityModel's token validation logic #2711
What's Changed
New Contributors
... (truncated)
8.3.0
New features
Work related to redesign of IdentityModel's token validation logic #2711
Bug fixes
Fundamentals
New Contributors
Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.2.1...8.3.0
8.2.1
8.2.1
New features
Bug fixes
Fundamentals
SecurityTokenDescriptor. See 2993.Work related to redesign of IdentityModel's token validation logic #2711
IssuerExtensibility. See 2987.What's Changed
New Contributors
Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.2.0...8.2.1
8.2.0
8.2.0
Fundamentals
Work related to redesign of IdentityModel's token validation logic #2711
What's Changed
... (truncated)
8.1.2
What's Changed
Bug fixes
Description has been truncated