From d59aaceef103719d81922ddcf8f7ccf324a7f5ee Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 4 Jun 2026 09:18:09 +0000
Subject: [PATCH] Bump Microsoft.IdentityModel.Protocols.OpenIdConnect and
 System.IdentityModel.Tokens.Jwt

Bumps Microsoft.IdentityModel.Protocols.OpenIdConnect from 8.18.0 to 8.19.1
Bumps System.IdentityModel.Tokens.Jwt from 8.18.0 to 8.19.1

---
updated-dependencies:
- dependency-name: Microsoft.IdentityModel.Protocols.OpenIdConnect
  dependency-version: 8.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: System.IdentityModel.Tokens.Jwt
  dependency-version: 8.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Directory.Packages.props                                      | 4 ++--
 .../GovUk.Forms.Components/GovUk.Forms.Components.csproj      | 1 +
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/Directory.Packages.props b/Directory.Packages.props
index fe595876..15af6cb0 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -40,11 +40,11 @@
     <PackageVersion Include="Microsoft.Extensions.Http.Polly" Version="10.0.8" />
     <PackageVersion Include="Microsoft.Extensions.Logging.Abstractions" Version="10.0.8" />
     <PackageVersion Include="Microsoft.AspNetCore.Authentication.OpenIdConnect" Version="10.0.8" />
-    <PackageVersion Include="Microsoft.IdentityModel.Protocols.OpenIdConnect" Version="8.18.0" />
+    <PackageVersion Include="Microsoft.IdentityModel.Protocols.OpenIdConnect" Version="8.19.1" />
     <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="18.6.0" />
     <PackageVersion Include="Newtonsoft.Json" Version="13.0.4" />
     <PackageVersion Include="NSubstitute" Version="5.3.0" />
-    <PackageVersion Include="System.IdentityModel.Tokens.Jwt" Version="8.18.0" />
+    <PackageVersion Include="System.IdentityModel.Tokens.Jwt" Version="8.19.1" />
     <PackageVersion Include="Verify.NUnit" Version="31.18.0" />
     <PackageVersion Include="Verify.Playwright" Version="3.1.0" />
     <PackageVersion Include="xunit.runner.visualstudio" Version="3.1.5" />
diff --git a/src/engine/GovUk.Forms.Components/GovUk.Forms.Components.csproj b/src/engine/GovUk.Forms.Components/GovUk.Forms.Components.csproj
index 86c2069e..c49c1c88 100644
--- a/src/engine/GovUk.Forms.Components/GovUk.Forms.Components.csproj
+++ b/src/engine/GovUk.Forms.Components/GovUk.Forms.Components.csproj
@@ -6,6 +6,7 @@
     <ItemGroup>
         <PackageReference Include="GovUk.Frontend.AspNetCore" />
         <PackageReference Include="Microsoft.AspNetCore.Authentication.OpenIdConnect" />
+        <PackageReference Include="Microsoft.IdentityModel.Protocols.OpenIdConnect" VersionOverride="8.19.1" />
     </ItemGroup>
     <ItemGroup>
         <UpToDateCheckInput Remove="Views\Form\Index.cshtml" />