Bump Azure.Identity and 18 others by dependabot[bot] · Pull Request #804 · frasermolyneux/portal-sync

dependabot · 2026-05-30T06:21:48Z

Updated Azure.Identity from 1.17.1 to 1.21.0.

Release notes

Sourced from Azure.Identity's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Azure.Storage.Blobs from 12.27.0 to 12.28.0.

Release notes

Sourced from Azure.Storage.Blobs's releases.

12.28.0 12.28.0 (2026-05-12)

Features Added

Includes all features from 12.28.0-beta.1

Bugs Fixed

Fixed issue where the TokenRequestContext.Scopes contained a double slash (e.g. https://storage.azure.com//.default) when using TokenCredential authentication. (#58295)

Commits viewable in compare view.

Updated coverlet.collector from 8.0.0 to 10.0.1.

Release notes

Sourced from coverlet.collector's releases.

10.0.1

Improvements

Coverlet with MTP 2 doesn't show test coverage statistic in console #1907
Avoid unnecessary testhost restarts #1912 by https://github.com/mawosoft

Fixed

Fix inconsistent paths in cobertura reports #1723
Fix when using "is" with "and" in pattern matching, branch coverage is lower than normal #1313
Fix Coverlet flagging a branch for an async functions finally block where none exists #1337
Fix Coverlet Tracker Missing CompilerGeneratedAttribute #1828

Maintenance

Add architecture docs and diagrams for all integrations #1927
Update NuGet packages and .NET SDK versions #1933

Diff between 10.0.0 and 10.0.1

10.0.0 Improvements

Unique Report Filenames (coverlet.MTP and AzDO) #1866
Add --coverlet-file-prefix option for unique report files #1869
Introduce .NET 10 support #1823

Fixed

Fix [BUG] Wrong branch rate on IAsyncEnumerable for generic type #1836
Fix [BUG] Missing Coverage after moving to MTP #1843
Fix [BUG] No coverage reported when targeting .NET Framework with 8.0.1 #1842
Fix [BUG] Behavior changes between MTP and Legacy (msbuild) #1878
Fix [BUG] Coverlet.MTP - Unable to load coverlet.mtp.appsettings.json #1880
Fix [BUG] Coverlet.Collector produces empty report when Mediator.SourceGenerator is referenced #1718 by https://github.com/yusyd
Fix [BUG] Crash during instrumentation (Methods using LibraryImport/DllImport have no body) #1762

Maintenance

Add comprehensive async method tests and documentation for issue #1864
Replace Tmds.ExecFunction Package in coverlet.core.coverage.tests #1833
Add net9.0 and net10.0 targets #1822

Diff between 8.0.1 and 10.0.0

8.0.1

Fixed

Fix [BUG] TypeInitializationException when targeting .NET Framework #1818
Fix [BUG] coverlet.MTP build fails with CS0400 due to developmentDependency=true #1827

Improvements

Additional improvements needed for .NET Framework instrumentation type import #1825

Diff between 8.0.0 and 8.0.1

Commits viewable in compare view.

Updated FluentFTP from 53.0.2 to 54.2.0.

Release notes

Sourced from FluentFTP's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.ApplicationInsights from 2.23.0 to 3.1.2.

Release notes

Sourced from Microsoft.ApplicationInsights's releases.

3.1.2 Version 3.1.2

3.1.1 Version 3.1.1

Update OpenTelemetry and Azure Monitor dependencies to address known security advisories (e.g. GHSA-g94r-2vxg-569j in OpenTelemetry.Api 1.15.1): Update OpenTelemetry and Azure Monitor packages to address vulnerabilities microsoft/ApplicationInsights-dotnet#3174
- OpenTelemetry 1.15.3
- OpenTelemetry.Exporter.Console 1.15.3
- OpenTelemetry.Exporter.InMemory 1.15.3
- OpenTelemetry.Extensions.Hosting 1.15.3
- OpenTelemetry.Instrumentation.AspNetCore 1.15.2
- OpenTelemetry.Instrumentation.AspNet 1.15.2
- OpenTelemetry.Instrumentation.Http 1.15.1
- OpenTelemetry.Instrumentation.SqlClient 1.15.2
- Azure.Monitor.OpenTelemetry.Exporter 1.8.0

3.1.0 Version 3.1.0

3.0.0

Replaced netstandard2.0 with net8.0 target framework in Microsoft.ApplicationInsights.NLogTarget package.

3.0.0-rc1

Removed netstandard2.0 target framework from Microsoft.ApplicationInsights, Microsoft.ApplicationInsights.AspNetCore, and Microsoft.ApplicationInsights.WorkerService packages.
The JavaScript in Microsoft.ApplicationInsights.AspNetCore has been updated to version 10.
Centralized package version management
Update OpenTelemetry dependencies, #3092
- OpenTelemetry 1.15.0
- OpenTelemetry.Instrumentation.AspNetCore 1.15.0
- OpenTelemetry.Instrumentation.AspNet 1.15.1
- OpenTelemetry.Instrumentation.Http 1.15.0
- OpenTelemetry.Instrumentation.SqlClient 1.15.0
Vendored OpenTelemetry.Resources.Azure resource detectors to NETCORE shared folder, replaced package with vendored implementation, #3093
Added support to disable telemetry via TelemetryConfiguration.DisableTelemetry
Removed EnabledAdaptiveSampling and replaced with TracesPerSecond and SamplingRatio
Added EnableTraceBasedLogsSampler property to ApplicationInsightsServiceOptions for ASP.NET Core and WorkerService packages
Added support for StorageDirectory and DisableOfflineStorage from TelemetryConfiguration in DI scenarios
Update Azure.Monitor.OpenTelemetry.Exporter dependency to 1.6.0

3.0.0-beta2

Added

Automatic configuration binding from "ApplicationInsights" section in appsettings.json for both AspNetCore and WorkerService packages with configuration precedence: environment variables > explicit configuration > appsettings.json
Added support for Entra ID (Azure Active Directory) authentication using Azure.Core.TokenCredential
Added Self Diagnostics feature
Updated the default sampler from Fixed Rate to Rate-Limited Sampling.
Update Azure Monitor Exporter to 1.6.0-beta.2
Add comprehensive applicationinsights.config support
Add properties in TelemetryConfiguration to configure underlying exporter

Bug fix

Fix TrackMetric(MetricTelemetry) unsupported telemetry type error

3.0.0-beta1

The following Application Insights packages in this repo now use OpenTelemetry internally. OpenTelemetry is the industry standard for telemetry collection and provides better interoperability with other observability tools.
- Microsoft.ApplicationInsights
- Microsoft.ApplicationInsights.AspNetCore
- Microsoft.ApplicationInsights.WorkerService
- Microsoft.ApplicationInsights.Web
- Microsoft.ApplicationInsights.NLogTarget
Classic APIs of the above packages are preserved; calls are translated to OpenTelemetry telemetry.
Other packages not listed above (such as certain auto-collectors and logging adapters that were published from this repo previously) will not have future versions published. See BreakingChanges.md for details.

Commits viewable in compare view.

Updated Microsoft.ApplicationInsights.WorkerService from 2.23.0 to 3.1.2.

Release notes

Sourced from Microsoft.ApplicationInsights.WorkerService's releases.

3.1.2 Version 3.1.2

3.1.1 Version 3.1.1

Update OpenTelemetry and Azure Monitor dependencies to address known security advisories (e.g. GHSA-g94r-2vxg-569j in OpenTelemetry.Api 1.15.1): Update OpenTelemetry and Azure Monitor packages to address vulnerabilities microsoft/ApplicationInsights-dotnet#3174
- OpenTelemetry 1.15.3
- OpenTelemetry.Exporter.Console 1.15.3
- OpenTelemetry.Exporter.InMemory 1.15.3
- OpenTelemetry.Extensions.Hosting 1.15.3
- OpenTelemetry.Instrumentation.AspNetCore 1.15.2
- OpenTelemetry.Instrumentation.AspNet 1.15.2
- OpenTelemetry.Instrumentation.Http 1.15.1
- OpenTelemetry.Instrumentation.SqlClient 1.15.2
- Azure.Monitor.OpenTelemetry.Exporter 1.8.0

3.1.0 Version 3.1.0

3.0.0

Replaced netstandard2.0 with net8.0 target framework in Microsoft.ApplicationInsights.NLogTarget package.

3.0.0-rc1

Removed netstandard2.0 target framework from Microsoft.ApplicationInsights, Microsoft.ApplicationInsights.AspNetCore, and Microsoft.ApplicationInsights.WorkerService packages.
The JavaScript in Microsoft.ApplicationInsights.AspNetCore has been updated to version 10.
Centralized package version management
Update OpenTelemetry dependencies, #3092
- OpenTelemetry 1.15.0
- OpenTelemetry.Instrumentation.AspNetCore 1.15.0
- OpenTelemetry.Instrumentation.AspNet 1.15.1
- OpenTelemetry.Instrumentation.Http 1.15.0
- OpenTelemetry.Instrumentation.SqlClient 1.15.0
Vendored OpenTelemetry.Resources.Azure resource detectors to NETCORE shared folder, replaced package with vendored implementation, #3093
Added support to disable telemetry via TelemetryConfiguration.DisableTelemetry
Removed EnabledAdaptiveSampling and replaced with TracesPerSecond and SamplingRatio
Added EnableTraceBasedLogsSampler property to ApplicationInsightsServiceOptions for ASP.NET Core and WorkerService packages
Added support for StorageDirectory and DisableOfflineStorage from TelemetryConfiguration in DI scenarios
Update Azure.Monitor.OpenTelemetry.Exporter dependency to 1.6.0

3.0.0-beta2

Added

Automatic configuration binding from "ApplicationInsights" section in appsettings.json for both AspNetCore and WorkerService packages with configuration precedence: environment variables > explicit configuration > appsettings.json
Added support for Entra ID (Azure Active Directory) authentication using Azure.Core.TokenCredential
Added Self Diagnostics feature
Updated the default sampler from Fixed Rate to Rate-Limited Sampling.
Update Azure Monitor Exporter to 1.6.0-beta.2
Add comprehensive applicationinsights.config support
Add properties in TelemetryConfiguration to configure underlying exporter

Bug fix

Fix TrackMetric(MetricTelemetry) unsupported telemetry type error

3.0.0-beta1

The following Application Insights packages in this repo now use OpenTelemetry internally. OpenTelemetry is the industry standard for telemetry collection and provides better interoperability with other observability tools.
- Microsoft.ApplicationInsights
- Microsoft.ApplicationInsights.AspNetCore
- Microsoft.ApplicationInsights.WorkerService
- Microsoft.ApplicationInsights.Web
- Microsoft.ApplicationInsights.NLogTarget
Classic APIs of the above packages are preserved; calls are translated to OpenTelemetry telemetry.
Other packages not listed above (such as certain auto-collectors and logging adapters that were published from this repo previously) will not have future versions published. See BreakingChanges.md for details.

Commits viewable in compare view.

Updated Microsoft.Azure.AppConfiguration.Functions.Worker from 8.1.2 to 8.5.0.

Release notes

Sourced from Microsoft.Azure.AppConfiguration.Functions.Worker's releases.

8.5.0 What's Changed

Add AlwaysHealthy health check when provider is disabled by @zhiyuanliang-ms in Add AlwaysHealthy health check when provider is disabled Azure/AppConfiguration-DotnetProvider#700
Bug fix: The registered failture status should be used when health check fails by @zhiyuanliang-ms in Bug fix: The registered failture status should be used when health check fails Azure/AppConfiguration-DotnetProvider#714
AzureAppConfigurationRefresherProvider finds IConfigurationRefresher by @zhiyuanliang-ms in AzureAppConfigurationRefresherProvider finds IConfigurationRefresher Azure/AppConfiguration-DotnetProvider#715
Dependency upgrade by @linglingye001 in Dependency upgrade Azure/AppConfiguration-DotnetProvider#721
Version bump 8.5.0 by @linglingye001 in Version bump 8.5.0 Azure/AppConfiguration-DotnetProvider#723
Merge main to release/stable/v8 by @linglingye001 in Merge main to release/stable/v8 Azure/AppConfiguration-DotnetProvider#724

Full Changelog: Azure/AppConfiguration-DotnetProvider@8.4.0...8.5.0

8.5.0-preview

Microsoft.Extensions.Configuration.AzureAppConfiguration 8.5.0-preview - November 14th, 2025

Enhancements

Added a new method ConnectAzureFrontDoor to AzureAppConfigurationOptions, which can be used to load configuration settings from Azure App Configuration via an Azure Front Door endpoint. This enables client (browser) applications to take advantage of CDN benefits, such as scale, when fetching configuration. #706

Microsoft.Azure.AppConfiguration.AspNetCore 8.5.0-preview - November 14th, 2025

Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.5.0-preview. See the release notes for more information on the changes.

Microsoft.Azure.AppConfiguration.Functions.Worker 8.5.0-preview - November 14th, 2025

Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.5.0-preview. See the release notes for more information on the changes.

8.4.0 Microsoft.Extensions.Configuration.AzureAppConfiguration 8.4.0 - September 19th, 2025

Enhancements

Added an overload of AddAzureAppConfiguration that accepts the endpoint and token credential. #694
Added support for parsing json values with comments. #685
Added support for snapshot references. If a configuration setting's value is a snapshot reference, loading it automatically pulls all key-values and feature flags from the referenced snapshot into the configuration. This enables dynamically switching between snapshots at runtime. #689
Updated dependency package versions. #695
- Azure.Data.AppConfiguration: 1.6.0 -> 1.6.1
- Azure.Messaging.EventGrid: 4.7.0 -> 5.0.0
- Azure.Security.KeyVault.Secrets: 4.6.0 -> 4.8.0
- Microsoft.Extensions.Diagnostics.HealthChecks: 6.0.36 -> 8.0.19
- Microsoft.Extensions.Azure: 1.7.6 -> 1.12.0
- Microsoft.Extensions.DependencyInjection.Abstractions: 6.0.0 -> 8.0.2
- Microsoft.Extensions.Logging: 6.0.0 -> 8.0.1
- Microsoft.Extensions.Configuration: 6.0.1 -> 8.0.0

Microsoft.Azure.AppConfiguration.AspNetCore 8.4.0 - September 19th, 2025

Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.4.0. See the release notes for more information on the changes.

Microsoft.Azure.AppConfiguration.Functions.Worker 8.4.0 - September 19th, 2025

Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.4.0. See the release notes for more information on the changes.

8.3.0 Microsoft.Extensions.Configuration.AzureAppConfiguration 8.3.0 - July 24th, 2025

Enhancements

Added health check integration for Microsoft.Extensions.Diagnostic.HealthChecks. You can call AddAzureAppConfiguration on IHealthCheckBuilder to register a health check for the Azure App Configuration provider. #644
```
builder.Services
   .AddHealthChecks()
   .AddAzureAppConfiguration();
```
Introduced a new environment variable AZURE_APP_CONFIGURATION_FM_SCHEMA_COMPATIBILITY_DISABLED to force processing and outputting feature flags using the Microsoft schema. #676

Microsoft.Azure.AppConfiguration.AspNetCore 8.3.0 - July 24th, 2025

Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.3.0. See the release notes for more information on the changes.

Microsoft.Azure.AppConfiguration.Functions.Worker 8.3.0 - July 24th, 2025

Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.3.0. See the release notes for more information on the changes.

8.2.0 Microsoft.Extensions.Configuration.AzureAppConfiguration 8.2.0 - May 14th, 2025

Enhancements

Updated the existing Select APIs with the new parameter tagFilters to support filtering key-values and feature flags by tags.

public AzureAppConfigurationOptions Select(string keyFilter, string labelFilter = LabelFilter.Null, IEnumerable<string> tagFilters = null)

public FeatureFlagOptions Select(string featureFlagFilter, string labelFilter = LabelFilter.Null, IEnumerable<string> tagFilters = null)

Added an ActivitySource called Microsoft.Extensions.Configuration.AzureAppConfiguration to support instrumentation. A Load activity will start when configuration is initially built and the Refresh activity will start when a refresh is triggered. #645
This is the first stable release of the AzureAppConfigurationOptions.SetClientFactory API introduced in 8.2.0-preview. #380
```
public AzureAppConfigurationOptions SetClientFactory(IAzureClientFactory<ConfigurationClient> factory)
```

Other Changes

Removed the FeatureFlagId property from feature flag telemetry. #655
Shortened default network timeout for requests to App Configuration to improve failover speed and retry responsiveness. #657
This is the first stable release of AllocationId from feature flag telemetry metadata, which was introduced in 8.1.0-preview. #600

Microsoft.Azure.AppConfiguration.AspNetCore 8.2.0 - May 14th, 2025

Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.2.0. See the release notes for more information on the changes.

Microsoft.Azure.AppConfiguration.Functions.Worker 8.2.0 - May 14th, 2025

Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.2.0. See the release notes for more information on the changes.

8.2.0-preview

Microsoft.Extensions.Configuration.AzureAppConfiguration 8.2.0-preview - March 21st, 2025

Enhancements

Added the ability to set a client factory used for creating ConfigurationClient instances. #380

public AzureAppConfigurationOptions SetClientFactory(IAzureClientFactory<ConfigurationClient> factory)

Microsoft.Azure.AppConfiguration.AspNetCore 8.2.0-preview - March 21st, 2025

Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.2.0-preview. See the release notes for more information on the changes.

Microsoft.Azure.AppConfiguration.Functions.Worker 8.2.0-preview - March 21st, 2025

Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.2.0-preview. See the release notes for more information on the changes.

Commits viewable in compare view.

Updated Microsoft.Azure.Functions.Worker from 2.51.0 to 2.52.0.

Release notes

Sourced from Microsoft.Azure.Functions.Worker's releases.

2.52.0 What's Changed

Microsoft.Azure.Functions.Worker (metapackage) 2.52.0

Update Microsoft.Azure.Functions.Worker.Core to 2.52.0
Update Microsoft.Azure.Functions.Worker.Grpc to 2.52.0

Microsoft.Azure.Functions.Worker.Core 2.52.0

Add support for propagating trace context tags from worker to host (#3303)
Add support for propagating OpenTelemetry Baggage to the worker. Requires use with the OpenTelemetry Extension to work end to end (#3319).

Microsoft.Azure.Functions.Worker.Grpc 2.52.0

Update protobuf version to v1.12.0-protofile and add support for propagating tags from the worker to the functions host (#3303).
Update protobuf version to v1.13.0-protofile to add support for propagating OpenTelemetry baggage to the worker (#3319).

Commits viewable in compare view.

Updated Microsoft.Azure.Functions.Worker.Extensions.DurableTask from 1.16.3 to 1.16.5.

Release notes

Sourced from Microsoft.Azure.Functions.Worker.Extensions.DurableTask's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.Memory from 10.0.3 to 10.0.8.

Release notes

Sourced from Microsoft.Extensions.Caching.Memory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Abstractions from 10.0.3 to 10.0.8.

Release notes

Sourced from Microsoft.Extensions.Configuration.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.AzureAppConfiguration from 8.1.2 to 8.5.0.

Release notes

Sourced from Microsoft.Extensions.Configuration.AzureAppConfiguration's releases.

8.5.0 What's Changed

Add AlwaysHealthy health check when provider is disabled by @zhiyuanliang-ms in Add AlwaysHealthy health check when provider is disabled Azure/AppConfiguration-DotnetProvider#700
Bug fix: The registered failture status should be used when health check fails by @zhiyuanliang-ms in Bug fix: The registered failture status should be used when health check fails Azure/AppConfiguration-DotnetProvider#714
AzureAppConfigurationRefresherProvider finds IConfigurationRefresher by @zhiyuanliang-ms in AzureAppConfigurationRefresherProvider finds IConfigurationRefresher Azure/AppConfiguration-DotnetProvider#715
Dependency upgrade by @linglingye001 in Dependency upgrade Azure/AppConfiguration-DotnetProvider#721
Version bump 8.5.0 by @linglingye001 in Version bump 8.5.0 Azure/AppConfiguration-DotnetProvider#723
Merge main to release/stable/v8 by @linglingye001 in Merge main to release/stable/v8 Azure/AppConfiguration-DotnetProvider#724

Full Changelog: Azure/AppConfiguration-DotnetProvider@8.4.0...8.5.0

8.5.0-preview

Microsoft.Extensions.Configuration.AzureAppConfiguration 8.5.0-preview - November 14th, 2025

Enhancements

Added a new method ConnectAzureFrontDoor to AzureAppConfigurationOptions, which can be used to load configuration settings from Azure App Configuration via an Azure Front Door endpoint. This enables client (browser) applications to take advantage of CDN benefits, such as scale, when fetching configuration. #706

Microsoft.Azure.AppConfiguration.AspNetCore 8.5.0-preview - November 14th, 2025

Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.5.0-preview. See the release notes for more information on the changes.

Microsoft.Azure.AppConfiguration.Functions.Worker 8.5.0-preview - November 14th, 2025

Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.5.0-preview. See the release notes for more information on the changes.

8.4.0 Microsoft.Extensions.Configuration.AzureAppConfiguration 8.4.0 - September 19th, 2025

Enhancements

Added an overload of AddAzureAppConfiguration that accepts the endpoint and token credential. #694
Added support for parsing json values with comments. #685
Added support for snapshot references. If a configuration setting's value is a snapshot reference, loading it automatically pulls all key-values and feature flags from the referenced snapshot into the configuration. This enables dynamically switching between snapshots at runtime. #689
Updated dependency package versions. #695
- Azure.Data.AppConfiguration: 1.6.0 -> 1.6.1
- Azure.Messaging.EventGrid: 4.7.0 -> 5.0.0
- Azure.Security.KeyVault.Secrets: 4.6.0 -> 4.8.0
- Microsoft.Extensions.Diagnostics.HealthChecks: 6.0.36 -> 8.0.19
- Microsoft.Extensions.Azure: 1.7.6 -> 1.12.0
- Microsoft.Extensions.DependencyInjection.Abstractions: 6.0.0 -> 8.0.2
- Microsoft.Extensions.Logging: 6.0.0 -> 8.0.1
- Microsoft.Extensions.Configuration: 6.0.1 -> 8.0.0

Microsoft.Azure.AppConfiguration.AspNetCore 8.4.0 - September 19th, 2025

Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.4.0. See the release notes for more information on the changes.

Microsoft.Azure.AppConfiguration.Functions.Worker 8.4.0 - September 19th, 2025

Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.4.0. See the release notes for more information on the changes.

8.3.0 Microsoft.Extensions.Configuration.AzureAppConfiguration 8.3.0 - July 24th, 2025

Enhancements

Added health check integration for Microsoft.Extensions.Diagnostic.HealthChecks. You can call AddAzureAppConfiguration on IHealthCheckBuilder to register a health check for the Azure App Configuration provider. #644
```
builder.Services
   .AddHealthChecks()
   .AddAzureAppConfiguration();
```
Introduced a new environment variable AZURE_APP_CONFIGURATION_FM_SCHEMA_COMPATIBILITY_DISABLED to force processing and outputting feature flags using the Microsoft schema. #676

Microsoft.Azure.AppConfiguration.AspNetCore 8.3.0 - July 24th, 2025

Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.3.0. See the release notes for more information on the changes.

Microsoft.Azure.AppConfiguration.Functions.Worker 8.3.0 - July 24th, 2025

Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.3.0. See the release notes for more information on the changes.

8.2.0 Microsoft.Extensions.Configuration.AzureAppConfiguration 8.2.0 - May 14th, 2025

Enhancements

Updated the existing Select APIs with the new parameter tagFilters to support filtering key-values and feature flags by tags.

public AzureAppConfigurationOptions Select(string keyFilter, string labelFilter = LabelFilter.Null, IEnumerable<string> tagFilters = null)

public FeatureFlagOptions Select(string featureFlagFilter, string labelFilter = LabelFilter.Null, IEnumerable<string> tagFilters = null)

Added an ActivitySource called Microsoft.Extensions.Configuration.AzureAppConfiguration to support instrumentation. A Load activity will start when configuration is initially built and the Refresh activity will start when a refresh is triggered. #645
This is the first stable release of the AzureAppConfigurationOptions.SetClientFactory API introduced in 8.2.0-preview. #380
```
public AzureAppConfigurationOptions SetClientFactory(IAzureClientFactory<ConfigurationClient> factory)
```

Other Changes

Removed the FeatureFlagId property from feature flag telemetry. #655
Shortened default network timeout for requests to App Configuration to improve failover speed and retry responsiveness. #657
This is the first stable release of AllocationId from feature flag telemetry metadata, which was introduced in 8.1.0-preview. #600

Microsoft.Azure.AppConfiguration.AspNetCore 8.2.0 - May 14th, 2025

Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.2.0. See the release notes for more information on the changes.

Microsoft.Azure.AppConfiguration.Functions.Worker 8.2.0 - May 14th, 2025

Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.2.0. See the release notes for more information on the changes.

8.2.0-preview

Microsoft.Extensions.Configuration.AzureAppConfiguration 8.2.0-preview - March 21st, 2025

Enhancements

Added the ability to set a client factory used for creating ConfigurationClient instances. #380

public AzureAppConfigurationOptions SetClientFactory(IAzureClientFactory<ConfigurationClient> factory)

Microsoft.Azure.AppConfiguration.AspNetCore 8.2.0-preview - March 21st, 2025

Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.2.0-preview. See the release notes for more information on the changes.

Microsoft.Azure.AppConfiguration.Functions.Worker 8.2.0-preview - March 21st, 2025

Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.2.0-preview. See the release notes for more information on the changes.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.UserSecrets from 10.0.3 to 10.0.8.

Release notes

Sourced from Microsoft.Extensions.Configuration.UserSecrets's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.3 to 10.0.8.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks from 10.0.3 to 10.0.8.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Abstractions from 10.0.3 to 10.0.8.

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Identity.Web from 4.3.0 to 4.10.0.

Release notes

Sourced from Microsoft.Identity.Web's releases.

4.10.0

New features

Add WithExtraBodyParameters fluent API for attaching extra body parameters to token acquisition requests. See #3819.
Add IConfidentialClientApplicationProvider extensibility interface and CachePartitionKey support for silent token acquisition. See #3822.

Bug fixes

Redirect URI sanitization in authorization scenarios; centralize redirect URI validation in a shared helper. See #3825.
Reject dSTS-shaped Authority values with a clearer exception, steering users to use Instance + TenantId instead. See #3805.
Improve regex handling and adding length/timeout safeguards for SameSite User Agent. See #3811.

Behavior changes

B2C OpenID Connect event handler: LRU cache for issuer address. Issuer address lookups in the B2C OIDC event handler are now cached with an LRU cache, improving performance for repeated lookups. See #3821.

Dependencies updates

Update MSAL.NET to 4.84.1. See #3822.
Pin Microsoft.Kiota.Abstractions to 1.22.0 for GraphServiceClient. See #3817.
Bump uuid and @azure/msal-node in SidecarAdapter TypeScript test app. See #3826.
Bump qs in SidecarAdapter TypeScript test app. See #3829.

4.9.0

New features

Sidecar: per-route override gating. New Sidecar:AllowOverrides configuration section provides explicit, per-route control over whether optionsOverride.* query-string parameters are honored. Authenticated routes default to allowing overrides (preserving existing behavior); unauthenticated routes default to rejecting them. optionsOverride.BaseUrl is unconditionally rejected on all routes as a hardening measure. See #3794.

Bug fixes

Fix AccountController.Challenge redirect URI validation to reject percent-encoded protocol-relative bypasses (%2F%2F, %5C%2F, etc.) that could be decoded by misconfigured reverse proxies. See #3792.

Behavior changes

DownstreamApi: reserved header filtering. Headers supplied via DownstreamApiOptions.ExtraHeaderParameters whose names match reserved HTTP headers (Authorization, Host, Content-Length, Proxy-Authorization, Sec-*, Proxy-*, etc.) or duplicate a header the library already set are now silently skipped. A warning-level log entry (ReservedHeaderIgnored / DuplicateHeaderIgnored) is emitted so operators can spot misconfigurations. No exception is thrown. See #3793.

Dependencies updates

Update Azure.Identity 1.11.4 → 1.17.2 and establish Microsoft.Extensions.* 8.0.x minimum on older TFMs. Azure.Identity 1.17.2 (sovereign-cloud fixes) pulls in Azure.Core 1.50.0, which introduces a transitive dependency on Microsoft.Extensions.DependencyInjection.Abstractions 8.0.2 on non-framework-coupled TFMs (net462, net472, netstandard2.0). This caused a CS0433 type collision with the previously-pinned Microsoft.Extensions.DependencyInjection 2.1.0. Rather than patch individual packages, the entire Microsoft.Extensions.* stack on these older TFMs has been bumped to 8.0.x, closing several 5-year version gaps and aligning with the net8.0 baseline. If your application targets net462, net472, or netstandard2.0, your resolved Microsoft.Extensions.* versions will increase (e.g., Extensions.Http 3.1.3 → 8.0.0, Extensions.DependencyInjection 2.1.0 → 8.0.0, Extensions.Caching.Memory 2.1.0/6.0.2 → 8.0.1). Applications already targeting net8.0+ are unaffected. See #3787.
Bump System.Text.Json 8.0.5 → 8.0.6 (CVE-2024-43485). See #3787.
Bump Microsoft.AspNetCore.DataProtection to 10.0.7 for CVE fix on net10.0. See #3796.
Bump OpenTelemetry.Exporter.OpenTelemetryProtocol 1.14.0 → 1.15.3. See #3788.

Full Changelog: AzureAD/microsoft-identity-web@4.8.0...4.9.0

4.8.0 What's Changed

Bump flatted from 3.3.3 to 3.4.2 in /tests/DevApps/SidecarAdapter/typescript by @dependabot[bot] in Bump flatted from 3.3.3 to 3.4.2 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3753
Update changelog.md for ID.Web 4.6.0 by @bgavrilMS in Update changelog.md for ID.Web 4.6.0 AzureAD/microsoft-identity-web#3756
Add token binding to MicrosoftIdentityMessageHandler by @cpp11nullptr in Add token binding to MicrosoftIdentityMessageHandler AzureAD/microsoft-identity-web#3743
Bump picomatch in /tests/DevApps/SidecarAdapter/typescript by @dependabot[bot] in Bump picomatch in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3759
Documentation: Clarify managed identity credential types for containerized vs. VM/App Service deployments by @Copilot in Documentation: Clarify managed identity credential types for containerized vs. VM/App Service deployments AzureAD/microsoft-identity-web#3585
Bump path-to-regexp from 8.3.0 to 8.4.0 in /tests/DevApps/SidecarAdapter/typescript by @dependabot[bot] in Bump path-to-regexp from 8.3.0 to 8.4.0 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3762
Upgrade Microsoft Application Insights packages by @RojaEnnam in Upgrade Microsoft Application Insights packages AzureAD/microsoft-identity-web#3763
Use Abstractions 12 by @pmaytak in Use Abstractions 12 AzureAD/microsoft-identity-web#3761
Post-4.7.0 by @pmaytak in Post-4.7.0 AzureAD/microsoft-identity-web#3768
Fix Comp Gov DOTNET-Security-10.0 by @reginayap8 in Fix Comp Gov DOTNET-Security-10.0 AzureAD/microsoft-identity-web#3769
Upgrade CodeQL to V4: Fix 10 CodeQL Analysis Warnings and Errors by @reginayap8 in Upgrade CodeQL to V4: Fix 10 CodeQL Analysis Warnings and Errors AzureAD/microsoft-identity-web#3770
fix warnings by @gladjohn in fix warnings AzureAD/microsoft-identity-web#3771
adding examples for using postgres as a distributed cache by @JaredMSFT in adding examples for using postgres as a distributed cache AzureAD/microsoft-identity-web#3766
Suppress AOT configuration-binding SYSLIB warnings in AotCompatibility test app by @Copilot in Suppress AOT configuration-binding SYSLIB warnings in AotCompatibility test app AzureAD/microsoft-identity-web#3774
Bump vite from 7.1.11 to 7.3.2 in /tests/DevApps/SidecarAdapter/typescript by @dependabot[bot] in Bump vite from 7.1.11 to 7.3.2 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3772
Skip legacy B2C local-account Todo UI test in WebAppUiTests by @Copilot in Skip legacy B2C local-account Todo UI test in WebAppUiTests AzureAD/microsoft-identity-web#3778
Fix initialization of ConfidentialClientApplicationOptions in MergedOptions by @cpp11nullptr in Fix initialization of ConfidentialClientApplicationOptions in MergedOptions AzureAD/microsoft-identity-web#3760
Bump net8/net9/net10 runtime package baselines to patched crypto servicing versions by @Copilot in Bump net8/net9/net10 runtime package baselines to patched crypto servicing versions AzureAD/microsoft-identity-web#3779
Fix flaky certificate test failures on CI by @gladjohn in Fix flaky certificate test failures on CI AzureAD/microsoft-identity-web#3780
MTLS Without Tokens Support by @tlupes in MTLS Without Tokens Support - DownstreamApi AzureAD/microsoft-identity-web#3747
Fix CredentialsProvider DI lifetime mismatch causing startup crash in Development by @Avery-Dunn in Fix CredentialsProvider DI lifetime mismatch causing startup crash in Development AzureAD/microsoft-identity-web#3783
Remove unused DataProtection configuration from Sidecar by @Copilot in Remove unused DataProtection configuration from Sidecar AzureAD/microsoft-identity-web#3776

New Contributors

@RojaEnnam made their first contribution in Upgrade Microsoft Application Insights packages AzureAD/microsoft-identity-web#3763
@reginayap8 made their first contribution in Fix Comp Gov DOTNET-Security-10.0 AzureAD/microsoft-identity-web#3769
@JaredMSFT made their first contribution in adding examples for using postgres as a distributed cache AzureAD/microsoft-identity-web#3766

Full Changelog: AzureAD/microsoft-identity-web@4.6.0...4.8.0

4.7.0

Bug fixes

Updates to Microsoft.Identity.Abstractions 12.0.0 to revert breaking changes introduced in Abstractions 11.0.0. (On .NET 10 target, Certificate extension method in CredentialDescription was reverted to normal property.) See #3767.

4.6.0 What's Changed

Move boilerplate code skills to IdWeb, and add Aspire DevApp demonstrating Blazor authentication components by @Copilot in Move boilerplate code skills to IdWeb, and add Aspire DevApp demonstrating Blazor authentication components AzureAD/microsoft-identity-web#3721
Bump MSAL to 4.83.1 and re-enable Managed Identity CAE tests by @Copilot in Bump MSAL to 4.83.1 and re-enable Managed Identity CAE tests AzureAD/microsoft-identity-web#3746
Bump Abstractions to 11.2 by @bgavrilMS in Bump Abstractions to 11.2 AzureAD/microsoft-identity-web#3749
Update documentation to reference Blazor helpers from Microsoft.Identity.Web package by @Copilot in Update documentation to reference Blazor helpers from Microsoft.Identity.Web package AzureAD/microsoft-identity-web#3723

Full Changelog: AzureAD/microsoft-identity-web@4.5.0...4.6.0

4.5.0

New features

Add support for certificate store lookup by subject name. See #3742.

Dependencies updates

Bump minimatch in /tests/DevApps/SidecarAdapter/typescript. See #3739.
Bump rollup from 4.52.3 to 4.59.0 in /tests/DevApps/SidecarAdapter/typescript. See #3740.

4.4.0

New features

Add AOT-compatible web API authentication for .NET 10+. See #3705 and #3664.
Propagate long-running web API session key back to callers in user token acquisition. See #3728.
Add OBO event initialization for OBO APIs. See #3724.
Add support for calling WithClientClaims flow for token acquisition. See #3623.
Add OnBeforeTokenAcquisitionForOnBehalfOf event. See #3680.

Bug fixes

Throw InvalidOperationException with actionable message when a custom credential is not registered. See #3626.
Fix event firing for InvokeOnBeforeTokenAcquisitionForOnBehalfOfAsync. See #3717.
Update OnBeforeTokenAcquisitionForOnBehalfOf to construct ClaimsPrincipal from token. See #3714.
Add a retry counter for acquire token and updated tests with a fake secret. See #3682.
Fix OBO user error handling. See #3712.
Fix override merging for app token (and others). See #3644.
Fix certificate reload logic to only trigger on certificate-specific errors. See #3653.
Update ROPC flow CCA to pass SendX5C to MSAL. See #3671.

Dependencies updates

Bump qs in /tests/DevApps/SidecarAdapter/typescript. See #3725.
Downgrade Microsoft.Extensions.Configuration.Binder to 2.1.0 on .NET Framework. See #3730.
Update .NET SDK to 10.0.103 to address DOTNET-Security-10.0 vulnerability. See #3726.
Upgrade to Microsoft.Identity.Abstractions 11 for AoT compatibility. See #3699.
Update to MSAL 4.81.0. See #3665.

Documentation

Add documentation for auto-generated session key for long-running OBO session. See #3729.
Improve the Aspire doc article and skills. See #3695.
Add an article and agent skill to add Entra ID to an Aspire app. See #3689.
Fix misleading comment in CertificatelessOptions.ManagedIdentityClientId. See #3667.
Add Copilot explore tool functionality. See #3694.

Fundamentals

Remove unnecessary warning suppression. See #3715.
Migrate labs to Lab.API 2.x (first pass). See #3710.
Update Sidecar E2E test constants. See #3693.
Fix intermittent failures in CertificatesObserverTests. See #3687.
Add validation baseline exclusions. See #3684.
Add dSTS integration tests. See #3677.
Fix FIC test. See #3663.
Update IdentityWeb version, build logic, and validation. See #3659.

New Contributors

@XiaoxinMS2 made their first contribution in Add dSTS integration tests AzureAD/microsoft-identity-web#3677
@RyAuld made their first contribution in Fix intermittent failures in CertificatesObserverTests AzureAD/microsoft-identity-web#3687
@agocke made their first contribution in Update AOT annotations AzureAD/microsoft-identity-web#3664
@MZOLN made their first contribution in Remove unnecessary flag switch that causes official build to break. AzureAD/microsoft-identity-web#3700
@christian-posta made their first contribution in Fix override merging for app token (and others) AzureAD/microsoft-identity-web#3644
@4gust made their first contribution in Added retry counter for acquire token and modified added a test with … AzureAD/microsoft-identity-web#3682
@rayluo made their first contribution in Update OnBeforeTokenAcquisitionForOnBehalfOf event to construct ClaimsPricipal from token AzureAD/microsoft-identity-web#3714

4.4.0-preview.1

New features

Add AOT-compatible web API authentication for .NET 10+. See #3705 and #3664.
Propagate long-running web API session key back to callers in user token acquisition. See #3728.
Add OBO event initialization for OBO APIs. See #3724.
Add support for calling WithClientClaims flow for token acquisition. See #3623.
Add OnBeforeTokenAcquisitionForOnBehalfOf event. See #3680.

Bug fixes

Throw InvalidOperationException with actionable message when a custom credential is not registered. See #3626.
Fix event firing for InvokeOnBeforeTokenAcquisitionForOnBehalfOfAsync. See #3717.
Update OnBeforeTokenAcquisitionForOnBehalfOf to construct ClaimsPrincipal from token. See #3714.
Add a retry counter for acquire token and updated tests with a fake secret. See #3682.
Fix OBO user error handling. See #3712.
Fix override merging for app token (and others). See #3644.
Fix certificate reload logic to only trigger on certificate-specific errors. See #3653.
Update ROPC flow CCA to pass SendX5C to MSAL. See #3671.

Dependencies updates

Bump qs in /tests/DevApps/SidecarAdapter/typescript. See #3725.
Downgrade Microsoft.Extensions.Configuration.Binder to 2.1.0 on .NET Framework. See #3730.
Update .NET SDK to 10.0.103 to address DOTNET-Security-10.0 vulnerability. See #3726.
Upgrade to Microsoft.Identity.Abstractions 11 for AoT compatibility. See #3699.
Update to MSAL 4.81.0. See #3665.

Documentation

Add documentation for auto-generated session key for long-running OBO session. See #3729.
Improve the Aspire doc article and skills. See #3695.
Add an article and agent skill to add Entra ID to an Aspire app. See #3689.
Fix misleading comment in CertificatelessOptions.ManagedIdentityClientId. See #3667.
Add Copilot explore tool functionality. See #3694.

Fundamentals

Remove unnecessary warning suppression. S...

Description has been truncated

Bumps Azure.Identity from 1.17.1 to 1.21.0 Bumps Azure.Storage.Blobs from 12.27.0 to 12.28.0 Bumps coverlet.collector from 8.0.0 to 10.0.1 Bumps FluentFTP from 53.0.2 to 54.2.0 Bumps Microsoft.ApplicationInsights from 2.23.0 to 3.1.2 Bumps Microsoft.ApplicationInsights.WorkerService from 2.23.0 to 3.1.2 Bumps Microsoft.Azure.AppConfiguration.Functions.Worker from 8.1.2 to 8.5.0 Bumps Microsoft.Azure.Functions.Worker from 2.51.0 to 2.52.0 Bumps Microsoft.Azure.Functions.Worker.Extensions.DurableTask from 1.16.3 to 1.16.5 Bumps Microsoft.Extensions.Caching.Memory from 10.0.3 to 10.0.8 Bumps Microsoft.Extensions.Configuration.Abstractions from 10.0.3 to 10.0.8 Bumps Microsoft.Extensions.Configuration.AzureAppConfiguration from 8.1.2 to 8.5.0 Bumps Microsoft.Extensions.Configuration.UserSecrets from 10.0.3 to 10.0.8 Bumps Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.3 to 10.0.8 Bumps Microsoft.Extensions.Diagnostics.HealthChecks from 10.0.3 to 10.0.8 Bumps Microsoft.Extensions.Logging.Abstractions from 10.0.3 to 10.0.8 Bumps Microsoft.Identity.Web from 4.3.0 to 4.10.0 Bumps Microsoft.NET.Test.Sdk from 18.3.0 to 18.6.0 Bumps XtremeIdiots.Portal.Integrations.Servers.Api.Client.V1 from 2.1.142 to 2.1.164 --- updated-dependencies: - dependency-name: Microsoft.Extensions.Configuration.Abstractions dependency-version: 10.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget - dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions dependency-version: 10.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget - dependency-name: Microsoft.Extensions.Logging.Abstractions dependency-version: 10.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget - dependency-name: Azure.Identity dependency-version: 1.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget - dependency-name: Azure.Storage.Blobs dependency-version: 12.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget - dependency-name: FluentFTP dependency-version: 54.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget - dependency-name: Microsoft.ApplicationInsights dependency-version: 3.1.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget - dependency-name: Microsoft.ApplicationInsights.WorkerService dependency-version: 3.1.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget - dependency-name: Microsoft.Azure.AppConfiguration.Functions.Worker dependency-version: 8.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget - dependency-name: Microsoft.Extensions.Configuration.AzureAppConfiguration dependency-version: 8.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget - dependency-name: Microsoft.Azure.Functions.Worker dependency-version: 2.52.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget - dependency-name: Microsoft.Azure.Functions.Worker.Extensions.DurableTask dependency-version: 1.16.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget - dependency-name: Microsoft.Extensions.Caching.Memory dependency-version: 10.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget - dependency-name: Microsoft.Extensions.Configuration.UserSecrets dependency-version: 10.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget - dependency-name: Microsoft.Extensions.Diagnostics.HealthChecks dependency-version: 10.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget - dependency-name: Microsoft.Identity.Web dependency-version: 4.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget - dependency-name: XtremeIdiots.Portal.Integrations.Servers.Api.Client.V1 dependency-version: 2.1.164 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget - dependency-name: coverlet.collector dependency-version: 10.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: nuget - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-05-30T06:22:05Z

Dependency Review

The following issues were found:

✅ 0 vulnerable package(s)
✅ 0 package(s) with incompatible licenses
✅ 0 package(s) with invalid SPDX license definitions
⚠️ 14 package(s) with unknown licenses.

See the Details below.

License Issues

src/XtremeIdiots.Portal.Forums.Integration/XtremeIdiots.Portal.Forums.Integration.csproj

Package	Version	License	Issue Type
Microsoft.Extensions.Configuration.Abstractions	10.0.8	Null	Unknown License
Microsoft.Extensions.DependencyInjection.Abstractions	10.0.8	Null	Unknown License
Microsoft.Extensions.Logging.Abstractions	10.0.8	Null	Unknown License

src/XtremeIdiots.Portal.Sync.App.Tests/XtremeIdiots.Portal.Sync.App.Tests.csproj

Package	Version	License	Issue Type
Microsoft.NET.Test.Sdk	18.6.0	Null	Unknown License

src/XtremeIdiots.Portal.Sync.App/XtremeIdiots.Portal.Sync.App.csproj

Package	Version	License	Issue Type
Azure.Storage.Blobs	12.28.0	Null	Unknown License
FluentFTP	54.2.0	Null	Unknown License
Microsoft.ApplicationInsights	3.1.2	Null	Unknown License
Microsoft.ApplicationInsights.WorkerService	3.1.2	Null	Unknown License
Microsoft.Azure.Functions.Worker.Extensions.DurableTask	1.16.5	Null	Unknown License
Microsoft.Extensions.Caching.Memory	10.0.8	Null	Unknown License
Microsoft.Extensions.Configuration.UserSecrets	10.0.8	Null	Unknown License
Microsoft.Extensions.Diagnostics.HealthChecks	10.0.8	Null	Unknown License
Microsoft.Identity.Web	4.10.0	Null	Unknown License
XtremeIdiots.Portal.Integrations.Servers.Api.Client.V1	2.1.164	Null	Unknown License

OpenSSF Scorecard

Scorecard details

Package

Version

Score

Details

nuget/Microsoft.Extensions.Configuration.Abstractions

10.0.8

Unknown

nuget/Microsoft.Extensions.DependencyInjection.Abstractions

10.0.8

Unknown

nuget/Microsoft.Extensions.Logging.Abstractions

10.0.8

Unknown

nuget/Microsoft.NET.Test.Sdk

18.6.0

🟢 5.1

Details

Check	Score	Reason
Code-Review	⚠️ 2	Found 7/28 approved changesets -- score normalized to 2
Maintained	🟢 10	30 commit(s) and 29 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Security-Policy	🟢 10	security policy file detected
License	🟢 10	license file detected
Packaging	⚠️ -1	packaging workflow not detected
Signed-Releases	⚠️ -1	no releases found
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Branch-Protection	🟢 8	branch protection is not maximal on development and all release branches
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	⚠️ 0	binaries present in source code
Fuzzing	⚠️ 0	project is not fuzzed
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Pinned-Dependencies	🟢 9	dependency not pinned by hash detected -- score normalized to 9

nuget/coverlet.collector

10.0.1

🟢 4.2

Details

Check	Score	Reason
Packaging	⚠️ -1	packaging workflow not detected
Code-Review	⚠️ 0	Found 1/26 approved changesets -- score normalized to 0
Maintained	🟢 10	30 commit(s) and 22 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts	🟢 7	binaries present in source code
License	🟢 10	license file detected
Fuzzing	⚠️ 0	project is not fuzzed
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ 0	Project has not signed or included provenance with any releases.
Security-Policy	⚠️ 0	security policy file not detected
SAST	🟢 10	SAST tool is run on all commits

nuget/Azure.Identity

1.21.0

🟢 7.2

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10
Code-Review	🟢 10	all changesets reviewed
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Packaging	⚠️ -1	packaging workflow not detected
License	🟢 10	license file detected
Security-Policy	🟢 10	security policy file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Signed-Releases	⚠️ -1	no releases found
Token-Permissions	🟢 9	detected GitHub workflow tokens with excessive permissions
Branch-Protection	🟢 5	branch protection is not maximal on development and all release branches
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts	🟢 9	binaries present in source code
Pinned-Dependencies	🟢 5	dependency not pinned by hash detected -- score normalized to 5
Fuzzing	⚠️ 0	project is not fuzzed

nuget/Azure.Storage.Blobs

12.28.0

Unknown

nuget/FluentFTP

54.2.0

Unknown

nuget/Microsoft.ApplicationInsights

3.1.2

Unknown

nuget/Microsoft.ApplicationInsights.WorkerService

3.1.2

Unknown

nuget/Microsoft.Azure.AppConfiguration.Functions.Worker

8.5.0

Unknown

nuget/Microsoft.Azure.Functions.Worker

2.52.0

Unknown

nuget/Microsoft.Azure.Functions.Worker.Extensions.DurableTask

1.16.5

Unknown

nuget/Microsoft.Extensions.Caching.Memory

10.0.8

Unknown

nuget/Microsoft.Extensions.Configuration.AzureAppConfiguration

8.5.0

Unknown

nuget/Microsoft.Extensions.Configuration.UserSecrets

10.0.8

Unknown

nuget/Microsoft.Extensions.Diagnostics.HealthChecks

10.0.8

Unknown

nuget/Microsoft.Identity.Web

4.10.0

Unknown

nuget/XtremeIdiots.Portal.Integrations.Servers.Api.Client.V1

2.1.164

Unknown

Scanned Files

src/XtremeIdiots.Portal.Forums.Integration/XtremeIdiots.Portal.Forums.Integration.csproj
src/XtremeIdiots.Portal.Sync.App.Tests/XtremeIdiots.Portal.Sync.App.Tests.csproj
src/XtremeIdiots.Portal.Sync.App/XtremeIdiots.Portal.Sync.App.csproj

sonarqubecloud · 2026-05-30T06:23:53Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependabot · 2026-05-31T02:38:35Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot assigned frasermolyneux May 30, 2026

dependabot Bot requested a review from frasermolyneux as a code owner May 30, 2026 06:21

dependabot Bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels May 30, 2026

github-actions Bot enabled auto-merge (squash) May 30, 2026 06:21

dependabot Bot closed this May 31, 2026

auto-merge was automatically disabled May 31, 2026 02:38
Pull request was closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump Azure.Identity and 18 others#804

Bump Azure.Identity and 18 others#804
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/XtremeIdiots.Portal.Forums.Integration/nuget-8e415b3feb

dependabot Bot commented on behalf of github May 30, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented May 30, 2026

Uh oh!

sonarqubecloud Bot commented May 30, 2026

Uh oh!

dependabot Bot commented on behalf of github May 31, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github May 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

12.28.0

12.28.0 (2026-05-12)

Features Added

Bugs Fixed

10.0.1

Improvements

Fixed

Maintenance

10.0.0

Improvements

Fixed

Maintenance

8.0.1

Fixed

Improvements

3.1.2

Version 3.1.2

3.1.1

Version 3.1.1

3.1.0

Version 3.1.0

3.0.0

3.0.0-rc1

3.0.0-beta2

3.0.0-beta1

3.1.2

Version 3.1.2

3.1.1

Version 3.1.1

3.1.0

Version 3.1.0

3.0.0

3.0.0-rc1

3.0.0-beta2

3.0.0-beta1

8.5.0

What's Changed

8.5.0-preview

Microsoft.Extensions.Configuration.AzureAppConfiguration 8.5.0-preview - November 14th, 2025

Enhancements

Microsoft.Azure.AppConfiguration.AspNetCore 8.5.0-preview - November 14th, 2025

Microsoft.Azure.AppConfiguration.Functions.Worker 8.5.0-preview - November 14th, 2025

8.4.0

Microsoft.Extensions.Configuration.AzureAppConfiguration 8.4.0 - September 19th, 2025

Enhancements

Microsoft.Azure.AppConfiguration.AspNetCore 8.4.0 - September 19th, 2025

Microsoft.Azure.AppConfiguration.Functions.Worker 8.4.0 - September 19th, 2025

8.3.0

Microsoft.Extensions.Configuration.AzureAppConfiguration 8.3.0 - July 24th, 2025

Enhancements

Microsoft.Azure.AppConfiguration.AspNetCore 8.3.0 - July 24th, 2025

Microsoft.Azure.AppConfiguration.Functions.Worker 8.3.0 - July 24th, 2025

8.2.0

Microsoft.Extensions.Configuration.AzureAppConfiguration 8.2.0 - May 14th, 2025

Enhancements

Other Changes

Microsoft.Azure.AppConfiguration.AspNetCore 8.2.0 - May 14th, 2025

Microsoft.Azure.AppConfiguration.Functions.Worker 8.2.0 - May 14th, 2025

8.2.0-preview

Microsoft.Extensions.Configuration.AzureAppConfiguration 8.2.0-preview - March 21st, 2025

Enhancements

Microsoft.Azure.AppConfiguration.AspNetCore 8.2.0-preview - March 21st, 2025

Microsoft.Azure.AppConfiguration.Functions.Worker 8.2.0-preview - March 21st, 2025

2.52.0

What's Changed

Microsoft.Azure.Functions.Worker (metapackage) 2.52.0

Microsoft.Azure.Functions.Worker.Core 2.52.0

Microsoft.Azure.Functions.Worker.Grpc 2.52.0

8.5.0

What's Changed

8.5.0-preview

Microsoft.Extensions.Configuration.AzureAppConfiguration 8.5.0-preview - November 14th, 2025

Enhancements

Microsoft.Azure.AppConfiguration.AspNetCore 8.5.0-preview - November 14th, 2025

Microsoft.Azure.AppConfiguration.Functions.Worker 8.5.0-preview - November 14th, 2025

8.4.0

Microsoft.Extensions.Configuration.AzureAppConfiguration 8.4.0 - September 19th, 2025

dependabot Bot commented on behalf of github May 30, 2026 •

edited

Loading