Skip to content

chore(deps): Bump Azure.Identity and Microsoft.Identity.Client#53

Merged
LaurentAerens merged 1 commit into
mainfrom
dependabot/nuget/src/Arcus.ClamAV.Api.Client/multi-bb41a5c2b7
Mar 18, 2026
Merged

chore(deps): Bump Azure.Identity and Microsoft.Identity.Client#53
LaurentAerens merged 1 commit into
mainfrom
dependabot/nuget/src/Arcus.ClamAV.Api.Client/multi-bb41a5c2b7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 16, 2026

Copy link
Copy Markdown
Contributor

Updated Azure.Identity from 1.18.0 to 1.19.0.

Release notes

Sourced from Azure.Identity's releases.

1.19.0

1.19.0 (2026-03-11)

Features Added

  • Added support in ClientCertificateCredential to specify a path in the form of cert:/StoreLocation/StoreName/Thumbprint to refer to a certificate in the platform certificate store - such as the Windows Certificate Store on Windows, and the KeyChain on MacOS - instead of a file on disk. For example to load a certificate from the "My" store in the "CurrentUser" location use the path cert:/CurrentUser/My/E661583E8FABEF4C0BEF694CBC41C28FB81CD870 (A community contribution, courtesy of fowl2).

Other Changes

  • Updated Microsoft.Identity.Client and Microsoft.Identity.Client.Extensions.Msal dependencies to version 4.83.1.

Commits viewable in compare view.

Updated Microsoft.Identity.Client from 4.82.1 to 4.83.1.

Release notes

Sourced from Microsoft.Identity.Client's releases.

4.83.1

Bug Fixes

4.83.0

New Features

  • Agent Skills: Added Agent Skills catalog with complete coverage of both Confidential Client Authentication and mTLS PoP flows #​5733
  • mTLS PoP Skills Guide: Added comprehensive guide for GitHub Copilot Chat covering MSAL.NET authentication, mTLS Proof of Possession, and Federated Identity Credentials #​5790

Changes

  • Credential Guard Attestation: Integrated native DLL handling for Credential Guard attestation with centralized versioning #​5674

Bug Fixes

  • IMDSv2 mTLS Auto-Recovery: Implemented automatic recovery from SCHANNEL handshake failures by evicting cached certificates and re-minting #​5761
  • Managed Identity Fallback Behavior: Restored classic fallback behavior in MSAL MI unless GetManagedIdentitySourceAsync() is explicitly invoked #​5815
  • Attestation Token Expiration: Exposed expires_on field in attestation tokens for better token lifecycle management #​5741
  • Service Fabric API Version: Updated Service Fabric managed identity API version from 2019-07-01-preview to 2020-05-01 #​5781
  • Cached Token Validation: Enhanced ValidateCachedTokenAsync to work properly with multiple APIs beyond the initial scope #​5764
  • Client Credentials Tenant ID: Updated result to properly pass tenant ID in client credentials flow #​5754
  • Experimental Flag Removal: Removed experimental flag requirement from IAuthenticationOperation and WithAuthenticationExtension #​5699
  • OpenTelemetry Exception Handling: Expanded OTel exception handling for Azure Functions compatibility #​5720
  • ICustomWebUi Security Warning: Added security warnings to ICustomWebUi documentation #​5704

Infrastructure & Dependencies

  • GitHub Actions Workflow: Added GitHub Actions workflow for Managed Identity WebAPI automated build and deployment to Azure #​5751
  • .NET SDK Security Update: Updated .NET SDK from version 8.0.415 to 8.0.418 to address high severity security vulnerabilities #​5779 #​5783

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps Azure.Identity from 1.18.0 to 1.19.0
Bumps Microsoft.Identity.Client from 4.82.1 to 4.83.1

---
updated-dependencies:
- dependency-name: Azure.Identity
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: Microsoft.Identity.Client
  dependency-version: 4.83.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added chore dependencies Pull requests that update a dependency file labels Mar 16, 2026
@github-actions

Copy link
Copy Markdown

PR Size Analysis

Metric Value
Files Changed 1
Lines Added 2
Lines Deleted 2
Total Changes 4
Category XS

✅ Good PR size for review

@github-actions

Copy link
Copy Markdown

Test Results (Unit + BlackBox)

240 tests   240 ✅  6s ⏱️
  1 suites    0 💤
  1 files      0 ❌

Results for commit 08dc9f5.

@github-actions

Copy link
Copy Markdown

📈 Code Coverage Report for Arcus.ClamAV

Metric Value
Line Coverage 78%
Report View on Codecov

For detailed coverage information, see the Codecov report.

@github-actions

Copy link
Copy Markdown

⚡ Performance Metrics

Startup Time (container launch → /healthz 200): 4743ms

Metric Value
Docker Image Size 430MB (.42GB)

@LaurentAerens LaurentAerens merged commit 8aa61f4 into main Mar 18, 2026
18 checks passed
@dependabot dependabot Bot deleted the dependabot/nuget/src/Arcus.ClamAV.Api.Client/multi-bb41a5c2b7 branch March 18, 2026 10:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

chore dependencies Pull requests that update a dependency file size: XS

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant