Skip to content

SCJ-000: Bump Azure.Identity and 13 others#339

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/nuget/app/nuget-minor-and-patch-9306f1b032
Closed

SCJ-000: Bump Azure.Identity and 13 others#339
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/nuget/app/nuget-minor-and-patch-9306f1b032

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 16, 2026

Updated Azure.Identity from 1.17.1 to 1.19.0.

Release notes

Sourced from Azure.Identity's releases.

1.19.0

1.19.0 (2026-03-11)

Features Added

  • Added support in ClientCertificateCredential to specify a path in the form of cert:/StoreLocation/StoreName/Thumbprint to refer to a certificate in the platform certificate store - such as the Windows Certificate Store on Windows, and the KeyChain on MacOS - instead of a file on disk. For example to load a certificate from the "My" store in the "CurrentUser" location use the path cert:/CurrentUser/My/E661583E8FABEF4C0BEF694CBC41C28FB81CD870 (A community contribution, courtesy of fowl2).

Other Changes

  • Updated Microsoft.Identity.Client and Microsoft.Identity.Client.Extensions.Msal dependencies to version 4.83.1.

1.18.0

1.18.0 (2026-02-25)

Features Added

  • Added experimental Microsoft.Extensions.Configuration and Microsoft.Extensions.DependencyInjection integration for Azure SDK clients. For details, see the Configuration and Dependency Injection documentation.

  • The WorkloadIdentityCredentialOptions.IsAzureProxyEnabled property, which enables Azure Kubernetes token proxy mode, is only available in beta releases of this package.

  • AzureDeveloperCliCredential now parses JSON error output from azd auth token to extract clean error messages instead of including raw JSON in exceptions. Error messages like {"type":"consoleMessage","data":{"message":"ERROR: fetching token: ..."}} are now displayed as ERROR: fetching token: ....

1.18.0-beta.3

1.18.0-beta.3 (2026-02-20)

Breaking Changes

  • Renamed WorkloadIdentityCredentialOptions.IsAzureKubernetesTokenProxyEnabled to IsAzureProxyEnabled to follow .NET naming conventions for boolean properties.

Bugs Fixed

  • Fixed a NullReferenceException that occurred during X509Chain validation on Linux when using the Identity Bindings feature.

  • Disabled MSAL's internal retry logic for ConfidentialClientApplication and PublicClientApplication to prevent double retries when combined with Azure SDK's retry policy. Only the configured Azure SDK retry policy is applied, avoiding unexpected additional retry attempts.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.OpenIdConnect from 8.0.23 to 8.0.25.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.OpenIdConnect's releases.

8.0.25

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.24...v8.0.25

8.0.24

Release

Commits viewable in compare view.

Pinned Microsoft.AspNetCore.DataProtection.EntityFrameworkCore at 8.0.25.

Release notes

Sourced from Microsoft.AspNetCore.DataProtection.EntityFrameworkCore's releases.

8.0.25

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.24...v8.0.25

8.0.24

Release

Commits viewable in compare view.

Pinned Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore at 8.0.25.

Release notes

Sourced from Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore's releases.

8.0.25

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.24...v8.0.25

8.0.24

Release

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.NewtonsoftJson from 8.0.23 to 8.0.25.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.NewtonsoftJson's releases.

8.0.25

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.24...v8.0.25

8.0.24

Release

Commits viewable in compare view.

Pinned Microsoft.CodeAnalysis.Common at 4.14.0.

Release notes

Sourced from Microsoft.CodeAnalysis.Common's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned Microsoft.CodeAnalysis.CSharp at 4.14.0.

Release notes

Sourced from Microsoft.CodeAnalysis.CSharp's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned Microsoft.CodeAnalysis.CSharp.Workspaces at 4.14.0.

Release notes

Sourced from Microsoft.CodeAnalysis.CSharp.Workspaces's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 8.0.23 to 8.0.25.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

8.0.25

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.24...v8.0.25

8.0.24

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.23...v8.0.24

Commits viewable in compare view.

Pinned Microsoft.EntityFrameworkCore.InMemory at 8.0.25.

Release notes

Sourced from Microsoft.EntityFrameworkCore.InMemory's releases.

8.0.25

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.24...v8.0.25

8.0.24

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.23...v8.0.24

Commits viewable in compare view.

Pinned Microsoft.EntityFrameworkCore.Sqlite at 8.0.25.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Sqlite's releases.

8.0.25

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.24...v8.0.25

8.0.24

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.23...v8.0.24

Commits viewable in compare view.

Pinned Microsoft.EntityFrameworkCore.SqlServer at 8.0.25.

Release notes

Sourced from Microsoft.EntityFrameworkCore.SqlServer's releases.

8.0.25

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.24...v8.0.25

8.0.24

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.23...v8.0.24

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Tools from 8.0.23 to 8.0.25.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Tools's releases.

8.0.25

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.24...v8.0.25

8.0.24

Release

What's Changed

Full Changelog: dotnet/efcore@v8.0.23...v8.0.24

Commits viewable in compare view.

Updated Microsoft.IdentityModel.Protocols.OpenIdConnect from 8.15.0 to 8.16.0.

Release notes

Sourced from Microsoft.IdentityModel.Protocols.OpenIdConnect's releases.

8.16.0

New Features

  • Add telemetry around signature validation. See PR #​3415 for details.

Fundamentals

  • Fix FileVersion format to use two-digit year and day of year. See PR #​3389 for details.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
SCJ-000: Bump Azure.Identity and 13 others
bd45886 
Bumps Azure.Identity from 1.17.1 to 1.19.0
Bumps Microsoft.AspNetCore.Authentication.OpenIdConnect from 8.0.23 to 8.0.25
Bumps Microsoft.AspNetCore.DataProtection.EntityFrameworkCore from 8.0.23 to 8.0.25
Bumps Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore from 8.0.23 to 8.0.25
Bumps Microsoft.AspNetCore.Mvc.NewtonsoftJson from 8.0.23 to 8.0.25
Bumps Microsoft.CodeAnalysis.Common from 4.8.0 to 4.14.0
Bumps Microsoft.CodeAnalysis.CSharp from 4.5.0 to 4.14.0
Bumps Microsoft.CodeAnalysis.CSharp.Workspaces from 4.5.0 to 4.14.0
Bumps Microsoft.EntityFrameworkCore.Design from 8.0.23 to 8.0.25
Bumps Microsoft.EntityFrameworkCore.InMemory from 8.0.23 to 8.0.25
Bumps Microsoft.EntityFrameworkCore.Sqlite from 8.0.23 to 8.0.25
Bumps Microsoft.EntityFrameworkCore.SqlServer from 8.0.23 to 8.0.25
Bumps Microsoft.EntityFrameworkCore.Tools from 8.0.23 to 8.0.25
Bumps Microsoft.IdentityModel.Protocols.OpenIdConnect from 8.15.0 to 8.16.0

---
updated-dependencies:
- dependency-name: Azure.Identity
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: Microsoft.AspNetCore.Authentication.OpenIdConnect
  dependency-version: 8.0.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
- dependency-name: Microsoft.AspNetCore.DataProtection.EntityFrameworkCore
  dependency-version: 8.0.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
- dependency-name: Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore
  dependency-version: 8.0.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
- dependency-name: Microsoft.AspNetCore.Mvc.NewtonsoftJson
  dependency-version: 8.0.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
- dependency-name: Microsoft.CodeAnalysis.Common
  dependency-version: 4.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: Microsoft.CodeAnalysis.CSharp
  dependency-version: 4.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: Microsoft.CodeAnalysis.CSharp.Workspaces
  dependency-version: 4.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: Microsoft.EntityFrameworkCore.Design
  dependency-version: 8.0.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
- dependency-name: Microsoft.EntityFrameworkCore.InMemory
  dependency-version: 8.0.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
- dependency-name: Microsoft.EntityFrameworkCore.Sqlite
  dependency-version: 8.0.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
- dependency-name: Microsoft.EntityFrameworkCore.SqlServer
  dependency-version: 8.0.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
- dependency-name: Microsoft.EntityFrameworkCore.Tools
  dependency-version: 8.0.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
- dependency-name: Microsoft.IdentityModel.Protocols.OpenIdConnect
  dependency-version: 8.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Mar 16, 2026
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 16, 2026

Superseded by #340.

@dependabot dependabot bot closed this Mar 16, 2026
@dependabot dependabot bot deleted the dependabot/nuget/app/nuget-minor-and-patch-9306f1b032 branch March 16, 2026 15:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants