Skip to content

Bump the all-packages group with 32 updates - #272

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/UKHO.D365CallbackDistributorStub.API/UKHO.D365CallbackDistributorStub.API.Tests/all-packages-72fb2678c5
Open

Bump the all-packages group with 32 updates#272
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/UKHO.D365CallbackDistributorStub.API/UKHO.D365CallbackDistributorStub.API.Tests/all-packages-72fb2678c5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Updated Azure.Core from 1.55.0 to 1.63.0.

Release notes

Sourced from Azure.Core's releases.

1.63.0

1.63.0 (2026-09-25)

Features Added

  • Added mTLS proof-of-possession support to ClientCertificateCredential, including subject name and issuer certificate authentication configured with SendCertificateChain. Proof-of-possession is used by default when requested; first-party applications can opt out by setting the Azure.Identity.EnableClientCertificateMtlsProofOfPossession AppContext switch (or AZURE_IDENTITY_ENABLE_CLIENT_CERTIFICATE_MTLS_POP environment variable) to false.
  • Added mTLS proof-of-possession support to the managed identity federated identity flow used by configured credentials, covering both managed identity assertion acquisition and client assertion token redemption. It is enabled by default; set EnableMtlsProofOfPossession to false in the credential's JSON configuration to force bearer authentication for both exchanges. On a host that cannot provide a binding certificate, the flow falls back to a bearer token instead of failing, matching the direct managed identity flow.

Breaking Changes

  • Renamed the experimental ManagedIdentityCredentialOptions.DisableMtlsProofOfPossession property and corresponding configuration setting to EnableMtlsProofOfPossession. mTLS proof-of-possession is enabled by default for direct and configured managed identity when requested and supported. To force bearer authentication, replace DisableMtlsProofOfPossession = true with EnableMtlsProofOfPossession = false in code or credential configuration.

Bugs Fixed

  • Fixed ModelReaderWriter deserialization of GeoPoint with AzureCoreContext or a generated consumer context throwing because its type builder was not registered.
  • Fixed DefaultAzureCredential taking up to a minute to continue past managed identity on hosts where IMDS is unavailable. Ordinary chained requests use the short Azure.Core IMDS probe, while proof-of-possession capability discovery passes the same initial IMDS timeout to MSAL so discovery retry delays are canceled and timed-out discovery results are not cached.
  • Fixed chained managed identity aborting the credential chain when MSAL reports all sources unavailable immediately after a successful initial IMDS probe.
  • Managed identity mTLS proof-of-possession now requires a KeyGuard-backed host capability and enforces KeyGuard as the minimum binding strength during token acquisition. (#​62585)

Commits viewable in compare view.

Updated Azure.Extensions.AspNetCore.Configuration.Secrets from 1.5.1 to 1.5.2.

Release notes

Sourced from Azure.Extensions.AspNetCore.Configuration.Secrets's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Azure.Security.KeyVault.Secrets from 4.11.0 to 4.11.1.

Release notes

Sourced from Azure.Security.KeyVault.Secrets's releases.

4.11.1

4.11.1 (2026-09-02)

Bugs Fixed

  • Fixed an issue in the challenge-based authentication policy where a cached authentication challenge, and the access token acquired for it, could be reused for a request to a different Key Vault or Managed HSM endpoint. The policy now resolves the challenge per request endpoint, ensuring a token acquired for one vault is never attached to a request to another.

Commits viewable in compare view.

Updated Azure.Storage.Blobs from 12.29.1 to 12.30.0.

Release notes

Sourced from Azure.Storage.Blobs's releases.

12.30.0

12.30.0 (2026-09-28)

Features Added

  • Includes all features from 12.30.0-beta.1 and 12.30.0-beta.2.

Commits viewable in compare view.

Updated Azure.Storage.Queues from 12.27.1 to 12.28.0.

Release notes

Sourced from Azure.Storage.Queues's releases.

12.28.0

12.28.0 (2026-09-28)

Features Added

  • Includes all features from 12.28.0-beta.1

Commits viewable in compare view.

Updated Elastic.Apm from 1.34.1 to 1.35.0.

Release notes

Sourced from Elastic.Apm's releases.

1.35.0

Breaking Changes

[!IMPORTANT]
The OpenTelemetry Bridge no longer subscribes to activity sources whose names begin with Experimental.. On .NET 9 and later the runtime uses that prefix for sources describing connection level work (DNS resolution, socket connect, TLS handshake, HTTP connection setup), and they only emit while a listener is subscribed to them. On .NET 9 and later, transactions which open a new HTTP connection no longer contain DNS lookup, socket connect, TLS client handshake, HTTP connection_setup and HTTP wait_for_connection spans. Applications running on .NET 8 and earlier are unaffected. To restore the previous behavior, set OpenTelemetryBridgeExperimentalSourcesEnabled to true.

The minimum supported MongoDB.Driver version has been raised to 3.9.0. Consumers referencing an earlier version receive a NU1605 build error when upgrading Elastic.Apm.MongoDb to this release. Update your MongoDB.Driver package reference to 3.9.0 or later before upgrading. For more information, check elastic/apm-agent-dotnet#2804.

The Elastic.Apm package now references System.Diagnostics.DiagnosticSource 8.0.1 on .NET Framework targets (net462 and net472). Classic ASP.NET applications that have hand-edited binding redirects for System.Diagnostics.DiagnosticSource in web.config may need to update those redirects. Visual Studio and the MSBuild GenerateBindingRedirects target can regenerate them automatically.

What's Changed

Full Changelog: elastic/apm-agent-dotnet@v1.34.7...v1.35.0

1.34.7

What's Changed

Fixes

New Contributors

Full Changelog: elastic/apm-agent-dotnet@v1.34.6...v1.34.7

1.34.6

What's Changed

Fixes

Full Changelog: elastic/apm-agent-dotnet@v1.34.5...v1.34.6

1.34.5

What's Changed

Fixes

Full Changelog: elastic/apm-agent-dotnet@v1.34.4...v1.34.5

1.34.4

What's Changed

Bug fixes

New Contributors

Full Changelog: elastic/apm-agent-dotnet@v1.34.3...v1.34.4

1.34.3

What's Changed

Bug fixes

Full Changelog: elastic/apm-agent-dotnet@v1.34.2...v1.34.3

1.34.2

What's Changed

Bug fixes

New Contributors

Full Changelog: elastic/apm-agent-dotnet@v1.34.1...v1.34.2

Commits viewable in compare view.

Updated Elastic.Apm.Azure.Storage from 1.34.1 to 1.35.0.

Release notes

Sourced from Elastic.Apm.Azure.Storage's releases.

1.35.0

Breaking Changes

[!IMPORTANT]
The OpenTelemetry Bridge no longer subscribes to activity sources whose names begin with Experimental.. On .NET 9 and later the runtime uses that prefix for sources describing connection level work (DNS resolution, socket connect, TLS handshake, HTTP connection setup), and they only emit while a listener is subscribed to them. On .NET 9 and later, transactions which open a new HTTP connection no longer contain DNS lookup, socket connect, TLS client handshake, HTTP connection_setup and HTTP wait_for_connection spans. Applications running on .NET 8 and earlier are unaffected. To restore the previous behavior, set OpenTelemetryBridgeExperimentalSourcesEnabled to true.

The minimum supported MongoDB.Driver version has been raised to 3.9.0. Consumers referencing an earlier version receive a NU1605 build error when upgrading Elastic.Apm.MongoDb to this release. Update your MongoDB.Driver package reference to 3.9.0 or later before upgrading. For more information, check elastic/apm-agent-dotnet#2804.

The Elastic.Apm package now references System.Diagnostics.DiagnosticSource 8.0.1 on .NET Framework targets (net462 and net472). Classic ASP.NET applications that have hand-edited binding redirects for System.Diagnostics.DiagnosticSource in web.config may need to update those redirects. Visual Studio and the MSBuild GenerateBindingRedirects target can regenerate them automatically.

What's Changed

Full Changelog: elastic/apm-agent-dotnet@v1.34.7...v1.35.0

1.34.7

What's Changed

Fixes

New Contributors

Full Changelog: elastic/apm-agent-dotnet@v1.34.6...v1.34.7

1.34.6

What's Changed

Fixes

Full Changelog: elastic/apm-agent-dotnet@v1.34.5...v1.34.6

1.34.5

What's Changed

Fixes

Full Changelog: elastic/apm-agent-dotnet@v1.34.4...v1.34.5

1.34.4

What's Changed

Bug fixes

New Contributors

Full Changelog: elastic/apm-agent-dotnet@v1.34.3...v1.34.4

1.34.3

What's Changed

Bug fixes

Full Changelog: elastic/apm-agent-dotnet@v1.34.2...v1.34.3

1.34.2

What's Changed

Bug fixes

New Contributors

Full Changelog: elastic/apm-agent-dotnet@v1.34.1...v1.34.2

Commits viewable in compare view.

Updated Elastic.Apm.NetCoreAll from 1.34.1 to 1.35.0.

Release notes

Sourced from Elastic.Apm.NetCoreAll's releases.

1.35.0

Breaking Changes

[!IMPORTANT]
The OpenTelemetry Bridge no longer subscribes to activity sources whose names begin with Experimental.. On .NET 9 and later the runtime uses that prefix for sources describing connection level work (DNS resolution, socket connect, TLS handshake, HTTP connection setup), and they only emit while a listener is subscribed to them. On .NET 9 and later, transactions which open a new HTTP connection no longer contain DNS lookup, socket connect, TLS client handshake, HTTP connection_setup and HTTP wait_for_connection spans. Applications running on .NET 8 and earlier are unaffected. To restore the previous behavior, set OpenTelemetryBridgeExperimentalSourcesEnabled to true.

The minimum supported MongoDB.Driver version has been raised to 3.9.0. Consumers referencing an earlier version receive a NU1605 build error when upgrading Elastic.Apm.MongoDb to this release. Update your MongoDB.Driver package reference to 3.9.0 or later before upgrading. For more information, check elastic/apm-agent-dotnet#2804.

The Elastic.Apm package now references System.Diagnostics.DiagnosticSource 8.0.1 on .NET Framework targets (net462 and net472). Classic ASP.NET applications that have hand-edited binding redirects for System.Diagnostics.DiagnosticSource in web.config may need to update those redirects. Visual Studio and the MSBuild GenerateBindingRedirects target can regenerate them automatically.

What's Changed

Full Changelog: elastic/apm-agent-dotnet@v1.34.7...v1.35.0

1.34.7

What's Changed

Fixes

New Contributors

Full Changelog: elastic/apm-agent-dotnet@v1.34.6...v1.34.7

1.34.6

What's Changed

Fixes

Full Changelog: elastic/apm-agent-dotnet@v1.34.5...v1.34.6

1.34.5

What's Changed

Fixes

Full Changelog: elastic/apm-agent-dotnet@v1.34.4...v1.34.5

1.34.4

What's Changed

Bug fixes

New Contributors

Full Changelog: elastic/apm-agent-dotnet@v1.34.3...v1.34.4

1.34.3

What's Changed

Bug fixes

Full Changelog: elastic/apm-agent-dotnet@v1.34.2...v1.34.3

1.34.2

What's Changed

Bug fixes

New Contributors

Full Changelog: elastic/apm-agent-dotnet@v1.34.1...v1.34.2

Commits viewable in compare view.

Updated Elastic.Clients.Elasticsearch from 9.1.10 to 9.5.3.

Release notes

Sourced from Elastic.Clients.Elasticsearch's releases.

9.5.3

[!WARNING]
This release contains a breaking change in the generated security types. Review the Breaking entry below before upgrading.

What's Changed

Full Changelog: elastic/elasticsearch-net@9.5.2...9.5.3

9.5.2

[!WARNING]
This release contains breaking changes in generated types. Please review the breaking changes listed below before upgrading.

What's Changed

  • Regenerate client by @​flobernd in [9.5] Regenerate client elastic/elasticsearch-net#8990
    • DenseVectorIndexOptions gains the bbq_disk properties AutoCalibrate, Bits, ClusterSize,
      DefaultVisitPercentage and Precondition.
    • DenseVectorIndexOptions.ConfidenceInterval is now marked [Obsolete] (deprecated since 9.5.0).
    • SourceFieldMode gains ColumnarStored (columnar_stored), so index templates and mappings that use the new mode
      no longer fail deserialization.
    • Breaking: InnerRetriever.Normalizer and InnerRetriever.Weight are now optional (ScoreNormalizer? and
      float? instead of required), following the spec change that made normalizer and weight optional on the linear
      retriever's inner retrievers. The [SetsRequiredMembers] constructor no longer takes normalizer and weight
      arguments.
    • Breaking: RoleDescriptor.Global, QueryRole.Global and RoleDescriptorRead.Global now use a single
      GlobalPrivilege instead of a collection, matching the server-side parser, which only accepts an object for the
      global privilege. The Global descriptor methods replace their params array overloads with a single-object
      overload.

Full Changelog: elastic/elasticsearch-net@9.5.1...9.5.2

9.5.1

[!WARNING]
This release contains breaking changes in generated types. Please review the breaking changes listed below before upgrading.

What's Changed

  • Regenerate client by @​flobernd in [9.5] Regenerate client elastic/elasticsearch-net#8957 and [9.5] Regenerate client elastic/elasticsearch-net#8981
    • Transform destinations now accept aliases, each with an optional move_on_creation flag, through the new DestinationAlias type.
    • Request converter sources regenerated to emit the full client invocation.
    • Breaking: KnnRetriever.NumCandidates is now optional (int? instead of required int), following the spec change that made num_candidates optional on the kNN retriever. The [SetsRequiredMembers] constructor no longer takes a numCandidates argument.
    • Breaking: TransformSummary.Dest and UpdateTransformResponse.Dest now use Elastic.Clients.Elasticsearch.TransformManagement.Destination instead of Elastic.Clients.Elasticsearch.Core.Reindex.Destination.
  • Restore delegate caching in IdResolver by @​fresh55 in Restore delegate caching in IdResolver elastic/elasticsearch-net#8973
    • The getter delegate was only cached when resolution failed, so it was rebuilt on every successful call.
    • 100k resolves of the same type improve from 64 ms / 55.2 MB to 3.5 ms / 40 bytes. Partially addresses (#​7664).

Full Changelog: elastic/elasticsearch-net@9.5.0...9.5.1

9.5.0

What's Changed

Initial 9.5.x release.

[!WARNING]
This release regenerates the client against the Elasticsearch 9.5 specification and contains breaking changes. Please review the list below before upgrading.

  • Regenerate client against the Elasticsearch 9.5 specification by @​flobernd in [9.5] Add request-converter code generation (#8612) elastic/elasticsearch-net#8930 and [9.5] Regenerate client elastic/elasticsearch-net#8944
    • New experimental client.Encryption.Reset endpoint, plus a ProjectEncryptionKey indicator on the health report
    • New experimental ES|QL data federation APIs: PutDataSource / GetDataSource / DeleteDataSource and PutDataset / GetDataset / DeleteDataset, with the supporting ESQLDataSource, ESQLDataset and DatasetMapping types
    • New experimental Inference region policy APIs: PutRegionPolicy / GetRegionPolicy / DeleteRegionPolicy
    • New _slice routing parameter (RouteSlice) across the search, get, index, delete, update and bulk APIs, as well as on the multi-search header and the reindex destination
    • FrequentItemSets aggregations now round-trip correctly. The generated variant used an empty discriminator where the converter expected frequent_item_sets, so the property always read back as null
    • Role-template queries in index privileges now deserialize to RoleTemplateQuery. Previously any object-shaped query was unconditionally read as a regular QueryDsl.Query
    • SpanGap and RoleMappingRule.Field variant accessors now return null instead of a default KeyValuePair when the union holds a different variant
    • New enum members: EmbeddingContentType.Audio / .Pdf / .Video, AnthropicTaskType.ChatCompletion, OpenAITaskType.Embedding, and the ClusterPrivilege.ManageReindex / .MonitorReindex values
    • Breaking (mapping): DocValues on 32 property types changes from bool? to Union<bool, DocValuesConfig>? to carry the new doc_values.multi_value setting. The parameterless DocValues() descriptor overload is gone, and reading the property into a bool? no longer compiles. SourceField.Compress and CompressThreshold are removed, and TextIndexPrefixes.MinChars / MaxChars become optional (int?), dropping the two-argument constructor
    • Breaking (ES|QL): the named-parameter arm of Params on EsqlQuery and AsyncQuery changes from KeyValuePair<string, ICollection<FieldValue>> to KeyValuePair<string, Union<ICollection<FieldValue>, ClassifiedNamedParameter>>, which affects every existing named-parameter call site. Both requests also gain a Settings body property
    • Breaking (inference): Rerank now accepts the expanded multimodal request format, so Input becomes Union<ICollection<string>, ICollection<RerankInputObject>>, Query becomes Union<string, RerankInputObject>, and the Input(params string[]) overload is removed. EmbeddingContentObject.Content becomes ICollection<EmbeddingContentObjectItem> and EmbeddingContentObjectContents is gone, OpenAIServiceSettings.ApiKey is now optional, and JinaAIServiceSettings.ElementType is renamed to EmbeddingType
    • Breaking (snapshot): SourceOnlyRepositorySettings is replaced by the ISourceOnlyRepositorySettings variant family with per-backend settings types, constructed through SourceOnlyRepositorySettingsFactory (ForAzure, ForGcs, ForReadOnlyUrl, ForS3, ForSharedFileSystem). SourceOnlyRepository.Settings now takes the interface, and its descriptor overloads are replaced by a factory callback
    • Breaking (security): RoleInfo.Indices changes from IndicesPrivileges to IndicesPrivilegesRead, and role definitions gain DataSourcePrivileges
    • Breaking (stats): GetStats.Time is renamed to GetTime, ShardStats.Indices becomes a dictionary of ShardStats, the DenseVectorOffHeapStats.TotalCenifSize typo is corrected to TotalCenivfSize, and newly required members change the positional constructors of IndexingStats, SearchStats, FlushStats, MappingStats and MachineLearning.Defaults
  • Make custom JSON converters safe for multi-segment readers by @​flobernd in Make custom JSON converters safe for multi-segment readers elastic/elasticsearch-net#8923
    • The hand-written date, duration, stringified and fractional numeric converters no longer fail when the Utf8JsonReader is constructed over a multi-segment ReadOnlySequence<byte>, which unblocks sequence-based deserializers such as a streaming reader over a PipeReader
    • The existing single-segment typed deserialization path is unchanged

New Contributors

Full Changelog: elastic/elasticsearch-net@9.4.2...9.5.0

9.4.2

What's Changed

  • Add plugin-defined (non-exhaustive) variant registry by @​flobernd in Add plugin-defined (non-exhaustive) variant registry elastic/elasticsearch-net#8911
    • Unknown discriminators on variant union families (properties, analyzers, char filters, token filters, tokenizers, repositories, similarity settings, aggregations, queries, etc.) now deserialize into an Unknown* carrier and re-serialize losslessly — no data is dropped for plugin-defined or future variants the client doesn't model
    • Opt into strong typing by registering a CLR type for a discriminator: settings.Variants.Register<IProperty, MyPluginProperty>("my_plugin"); registrations are scoped per client instance and AOT-safe — see the Plugin-defined variant types documentation for details
  • Regenerate client by @​flobernd in [9.4] Regenerate client elastic/elasticsearch-net#8908 and [9.4] Regenerate client elastic/elasticsearch-net#8917
    • Generated Unknown* carrier types for all variant families (properties, analyzers, char filters, token filters, tokenizers, repositories, similarity settings, aggregations, queries, suggesters, rescorers) to support the non-exhaustive variant registry
    • Improved XML documentation coverage across generated client methods, request/response types, and type members that previously had no IntelliSense descriptions

Full Changelog: elastic/elasticsearch-net@9.4.1...9.4.2

9.4.1

What's Changed

  • Regenerate client by @​flobernd in [9.4] Regenerate client elastic/elasticsearch-net#8899 and [9.4] Regenerate client elastic/elasticsearch-net#8907
    • Fixes (de-)serialization of unions with three or more variants — previously, hand-rolled union converters could fail to select the correct variant
    • Search response shape fix in InnerHits: the Fields property is split into Field (single-field selector using Fields) and a new Fields collection of FieldAndFormat — existing usages of InnerHits.Fields = … may need to be retargeted to Field
    • DataStreamLifecycle gains EffectiveRetention and RetentionDeterminedBy; new GlobalRetention and RetentionSource types; GetDataLifecycleResponse now exposes GlobalRetention
    • Reindex rethrottle response now models parent task progress via the new ParentReindexStatus type
    • Inference and _mvt content-type alignment: chat_completion_unified / stream_completion send Content-Type: application/json; _mvt uses the versioned application/vnd.elasticsearch+vnd.mapbox-vector-tile Accept header

Full Changelog: elastic/elasticsearch-net@9.4.0...9.4.1

9.4.0

What's Changed

Initial 9.4.x release.

Full Changelog: elastic/elasticsearch-net@9.3.7...9.4.0

9.3.7

What's Changed

  • Regenerate client by @​flobernd in [9.3] Regenerate client elastic/elasticsearch-net#8898
    • Set explicit ContentType: application/json for ChatCompletionUnified and StreamCompletion streaming inference requests
    • Switch SearchMvt Accept header to application/vnd.elasticsearch+vnd.mapbox-vector-tile (Elasticsearch product-flavored content-type)
    • Bump Elastic.Transport to 0.17.1
    • Document default max_page_search_size values for pivot (500) and latest (5000) transforms

Full Changelog: elastic/elasticsearch-net@9.3.6...9.3.7

9.3.6

What's Changed

Full Changelog: elastic/elasticsearch-net@9.3.5...9.3.6

9.3.5

What's Changed

Full Changelog: elastic/elasticsearch-net@9.3.4...9.3.5

9.3.4

What's Changed

Full Changelog: elastic/elasticsearch-net@9.3.3...9.3.4

9.3.3

What's Changed

Full Changelog: elastic/elasticsearch-net@9.3.2...9.3.3

9.3.2

What's Changed

New Contributors

Full Changelog: elastic/elasticsearch-net@9.3.1...9.3.2

9.3.1

What's Changed

Full Changelog: elastic/elasticsearch-net@9.3.0...9.3.1

9.3.0

What's Changed

Initial 9.3.x release.

Full Changelog: elastic/elasticsearch-net@9.2.3...9.3.0

9.2.3

What's Changed

New Contributors

Full Changelog: elastic/elasticsearch-net@9.2.2...9.2.3

9.2.2

What's Changed

Full Changelog: elastic/elasticsearch-net@9.2.1...9.2.2

9.2.1

What's Changed

Full Changelog: elastic/elasticsearch-net@9.2.0...9.2.1

9.2.0

What's Changed

Initial 9.2 release.

Full Changelog: elastic/elasticsearch-net@9.1.12...9.2.0

9.1.12

What's Changed

Full Changelog: elastic/elasticsearch-net@9.1.11...9.1.12

9.1.11

What's Changed

Full Changelog: elastic/elasticsearch-net@9.1.10...9.1.11

Commits viewable in compare view.

Updated FluentValidation from 12.0.0 to 12.1.1.

Release notes

Sourced from FluentValidation's releases.

12.1.0

Release notes

Please read the upgrade guide if you are moving from 11.x to 12.x

Changes in 12.1.0

  • Add Tamil language (#​2334)
  • Add Telugu language (#​2333)
  • Fixes to Japanese translations (#​2340)

Changes in 12.0.0

  • Drops support for netstandard2.0, netstandard2.1, .net 5, .net 6 and .net 7. Minimum supported platform is now .net 8.
  • Add support for dependent rules for custom rules (#​2170)
  • Removes deprecated DI extensions
  • Removes deprecated transform methods (#​2027)
  • Remove the ability to disable the root-model null check (#​2069)
  • Use Zomp.SyncMethodGenerator to clean up internal sync/async code paths and increase performance (#​2136)
  • Add Serbian (Cyrillic) language; rename existing Serbian to Serbian (Latin) (#​2283)

Downloads

Binaries can be downloaded from nuget:

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.HeaderPropagation from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.AspNetCore.HeaderPropagation's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Azure.WebJobs from 3.0.42 to 3.0.47.

Release notes

Sourced from Microsoft.Azure.WebJobs's releases.

3.0.46

What's Changed

New Contributors

Full Changelog: Azure/azure-webjobs-sdk@v3.0.45...v3.0.46

3.0.43

What's Changed

New Contributors

Full Changelog: Azure/azure-webjobs-sdk@v3.0.42...v3.0.43

Commits viewable in compare view.

Updated Microsoft.Azure.WebJobs.Extensions.Storage from 5.3.6 to 5.3.9.

Release notes

Sourced from Microsoft.Azure.WebJobs.Extensions.Storage's releases.

5.3.9

5.3.9 (2026-09-08)

Other Changes

Please refer to Microsoft.Azure.WebJobs.Extension.Storage.Blobs and Microsoft.Azure.WebJobs.Extension.Storage.Queues for detailed list of changes.

Commits viewable in compare view.

Updated Microsoft.Azure.WebJobs.Host.Storage from 5.0.1 to 5.0.2.

Release notes

Sourced from Microsoft.Azure.WebJobs.Host.Storage's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Azure.WebJobs.Logging.ApplicationInsights from 3.0.41 to 3.0.47.

Release notes

Sourced from Microsoft.Azure.WebJobs.Logging.ApplicationInsights's releases.

3.0.42

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Binder from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Configuration.Binder's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Json from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Configuration.Json's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Hosting from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Hosting's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Hosting.Abstractions from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Hosting.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Http from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Http's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Http.Polly from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Http.Polly's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.AzureAppServices from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Logging.AzureAppServices's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Console from 10.0.9 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Logging.Console's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Identity.Client from 4.85.2 to 4.90.1.

Release notes

Sourced from Microsoft.Identity.Client's releases.

4.90.1

New Features

  • Added IMsalWsTrustHttpClientFactory, allowing custom HTTP client factories to provide redirect-disabled, credential-policy-aware clients for federation metadata (MEX) and WS-Trust requests. Added MsalError.TooManyRedirects and MsalError.WsTrustCrossOriginRedirectNotSupported for redirect failures. #​6165

Bug Fixes

  • Hardened federation metadata and WS-Trust requests by requiring HTTPS, securely validating redirects, rejecting credential-bearing cross-origin redirects, and limiting redirect chains. #​6165
  • Fixed instance discovery so a custom authority port is not forwarded to the global discovery host, while preserving the port when discovery uses the authority host. #​6155
  • Fixed KeyGuard attestation to send the tenant ID as the MAA client_id metadata value without changing managed-identity client-ID handling or attestation-cache partitioning. #​6200

Changes

  • Updated Microsoft.Azure.Security.KeyGuardAttestation from version 1.1.7 to 1.1.8. #​6202

4.90.0

Changes

  • Updated the KeyGuardAttestation package version to 1.1.7. #​6189

4.89.0

What's Changed

New Contributors

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.88.0...4.89.0

4.88.0

New Features

  • Added user-assigned managed identity support for Azure Arc, including selecting the identity by client ID and validating the identity returned in the token response. #​6128
  • Added WithRequestOverMtls() to managed identity token requests, enabling attested bearer-token acquisition over the IMDSv2 mTLS transport. #​6086

Bug Fixes

  • Fixed token-cache key collisions by length-prefixing additional cache-key components before hashing. #​6137
  • Populated authentication-result telemetry metadata on proactive background-refresh results. #​6157
  • Fixed mTLS PoP authority validation incorrectly rejecting sovereign-cloud aliases such as login.chinacloudapi.cn and login.usgovcloudapi.net. #​6153

4.87.0

What's Changed

  • Expose MsalServiceException.ErrorCodesForLogging for diagnostics in #​6138
  • Expose WithOtelTagsEnricher for managed identity requests in #​6144
  • Forward OpenTelemetry tags enricher to the client-assertion callback in #​6142
  • Add client-side opaque-token log scrubber in #​6119
  • Populate ExecutionResult.Exception for non-MSAL failures in #​6139
  • Use PSS padding in KeyGuard liveness probe (CodeQL SM03799) in #​6141
  • Remove managed identity support from WithClaimsFromClient (confidential-client only) in #​6113
  • Remove experimental features from client setup in #​6143
  • Update Azure Arc managed identity API version from 2019-11-01 to 2020-06-01 in #​6130

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.86.1...4.87.0

4.86.1

Bug Fixes

  • Fixed the mTLS Proof-of-Possession token cache to key on the certificate's full DER (x5t#S256) instead of only the public key, preventing a stale token (and AADSTS500181) after a same-key certificate renewal. #​6123
  • Fell back to RS256 when a certificate's PSS signing operation is rejected by RSACryptoServiceProvider, rebuilding the client assertion so authentication can proceed. #​6126
  • Detect and reject symbolic links in the Unix cache-file write path (lstat pre-check plus O_NOFOLLOW), closing a TOCTOU window. #​6115
  • Corrected misleading "region required" error messages and doc comments in the mTLS PoP flow. #​6127

4.86.0

What's Changed

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.85.2...4.86.0

Commits viewable in compare view.

Updated NUnit from 4.4.0 to 4.6.1.

Release notes

Sourced from NUnit's releases.

4.6.1

See release notes for details.

4.6.0

See release notes for details.

4.5.1

See release notes for details.

4.5.0

See [release notes](https://docs.nunit.org/articles/n...

Description has been truncated

@dependabot
Bump the all-packages group with 32 updates
d3512f5 
Bumps Azure.Core from 1.55.0 to 1.63.0
Bumps Azure.Extensions.AspNetCore.Configuration.Secrets from 1.5.1 to 1.5.2
Bumps Azure.Security.KeyVault.Secrets from 4.11.0 to 4.11.1
Bumps Azure.Storage.Blobs from 12.29.1 to 12.30.0
Bumps Azure.Storage.Queues from 12.27.1 to 12.28.0
Bumps Elastic.Apm from 1.34.1 to 1.35.0
Bumps Elastic.Apm.Azure.Storage from 1.34.1 to 1.35.0
Bumps Elastic.Apm.NetCoreAll from 1.34.1 to 1.35.0
Bumps Elastic.Clients.Elasticsearch from 9.1.10 to 9.5.3
Bumps FluentValidation from 12.0.0 to 12.1.1
Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.9 to 10.0.12
Bumps Microsoft.AspNetCore.HeaderPropagation from 10.0.9 to 10.0.12
Bumps Microsoft.AspNetCore.Mvc.Testing from 10.0.9 to 10.0.12
Bumps Microsoft.Azure.WebJobs from 3.0.42 to 3.0.47
Bumps Microsoft.Azure.WebJobs.Extensions.Storage from 5.3.6 to 5.3.9
Bumps Microsoft.Azure.WebJobs.Host.Storage from 5.0.1 to 5.0.2
Bumps Microsoft.Azure.WebJobs.Logging.ApplicationInsights from 3.0.41 to 3.0.47
Bumps Microsoft.Extensions.Configuration to 10.0.10, 10.0.12
Bumps Microsoft.Extensions.Configuration.Binder from 10.0.9 to 10.0.12
Bumps Microsoft.Extensions.Configuration.Json from 10.0.9 to 10.0.12
Bumps Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions from 10.0.9 to 10.0.12
Bumps Microsoft.Extensions.Hosting from 10.0.9 to 10.0.12
Bumps Microsoft.Extensions.Hosting.Abstractions from 10.0.9 to 10.0.12
Bumps Microsoft.Extensions.Http from 10.0.9 to 10.0.12
Bumps Microsoft.Extensions.Http.Polly from 10.0.9 to 10.0.12
Bumps Microsoft.Extensions.Logging.AzureAppServices from 10.0.9 to 10.0.12
Bumps Microsoft.Extensions.Logging.Console from 10.0.9 to 10.0.12
Bumps Microsoft.Identity.Client from 4.85.2 to 4.90.1
Bumps NUnit from 4.4.0 to 4.6.1
Bumps NUnit.Analyzers from 4.10.0 to 4.15.0
Bumps Serilog from 4.3.0 to 4.4.0
Bumps SharpCompress from 0.49.1 to 0.50.4

---
updated-dependencies:
- dependency-name: Azure.Core
  dependency-version: 1.63.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Azure.Extensions.AspNetCore.Configuration.Secrets
  dependency-version: 1.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Azure.Extensions.AspNetCore.Configuration.Secrets
  dependency-version: 1.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Configuration
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Azure.Security.KeyVault.Secrets
  dependency-version: 4.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Azure.Security.KeyVault.Secrets
  dependency-version: 4.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Azure.Storage.Blobs
  dependency-version: 12.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Azure.Storage.Queues
  dependency-version: 12.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Azure.Storage.Queues
  dependency-version: 12.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Azure.Storage.Queues
  dependency-version: 12.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Elastic.Apm
  dependency-version: 1.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Elastic.Apm.Azure.Storage
  dependency-version: 1.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Elastic.Apm.NetCoreAll
  dependency-version: 1.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Elastic.Clients.Elasticsearch
  dependency-version: 9.5.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: FluentValidation
  dependency-version: 12.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.AspNetCore.HeaderPropagation
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.AspNetCore.Mvc.Testing
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Azure.WebJobs
  dependency-version: 3.0.47
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Azure.WebJobs.Extensions.Storage
  dependency-version: 5.3.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Azure.WebJobs.Host.Storage
  dependency-version: 5.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Azure.WebJobs.Logging.ApplicationInsights
  dependency-version: 3.0.47
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Configuration
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Configuration
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Configuration.Binder
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Configuration.Binder
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Configuration.Json
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Hosting.Abstractions
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Logging.Console
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Http
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Http.Polly
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Logging.AzureAppServices
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Identity.Client
  dependency-version: 4.90.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: NUnit
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: NUnit
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: NUnit
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: NUnit
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: NUnit
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: NUnit.Analyzers
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: NUnit.Analyzers
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: NUnit.Analyzers
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: NUnit.Analyzers
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: NUnit.Analyzers
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Serilog
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: SharpCompress
  dependency-version: 0.50.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Oct 1, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Oct 1, 2026
@dependabot dependabot Bot mentioned this pull request Oct 1, 2026
Closed
@snyk-io-eu

snyk-io-eu Bot commented Oct 1, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues
✅ Licenses 0 0 0 0 0 issues
✅ Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@MuhammadJawad-Mastek MuhammadJawad-Mastek Awaiting requested review from MuhammadJawad-Mastek MuhammadJawad-Mastek is a code owner
@Raj29-Mastek Raj29-Mastek Awaiting requested review from Raj29-Mastek Raj29-Mastek is a code owner
@jaibheem22 jaibheem22 Awaiting requested review from jaibheem22 jaibheem22 is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Milestone

No milestone

0 participants