Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 22, 2025

Updated Azure.Identity from 1.13.2 to 1.16.0.

Release notes

Sourced from Azure.Identity's releases.

1.16.0

1.16.0 (2025-09-09)

Features Added

  • Added a new DefaultAzureCredential constructor that accepts a custom environment variable name for credential configuration. This provides flexibility beyond the default AZURE_TOKEN_CREDENTIALS environment variable. The constructor accepts any environment variable name and uses the same credential selection logic as the existing AZURE_TOKEN_CREDENTIALS processing.
  • Added DefaultAzureCredential.DefaultEnvironmentVariableName constant property that returns "AZURE_TOKEN_CREDENTIALS" for convenience when referencing the default environment variable name.
  • AzureCliCredential, AzurePowerShellCredential, and AzureDeveloperCliCredential now throw an AuthenticationFailedException when the TokenRequestContext includes claims, as these credentials do not support claims challenges. The exception message includes guidance for handling such scenarios.
  • When AZURE_TOKEN_CREDENTIALS or the equivalent custom environment variable is configured to ManagedIdentityCredential, the DefaultAzureCredential does not issue a probe request and performs retries with exponential backoff.

Bugs Fixed

  • Fixed AzureDeveloperCliCredential hanging when the AZD_DEBUG environment variable is set by adding the --no-prompt flag to prevent interactive prompts (#​52005).
  • BrokerCredential is now included in the chain when AZURE_TOKEN_CREDENTIALS is set to dev.
  • Fixed an issue that prevented ManagedIdentityCredential from utilizing the token cache in Workload Identity Federation environments.
  • Fixed a bug in DefaultAzureCredential that caused the credential chain to be constructed incorrectly when using AZURE_TOKEN_CREDENTIALS in combination with DefaultAzureCredentialOptions.

Other Changes

  • The BrokerCredential is now always included in the DefaultAzureCredential chain. If the Azure.Identity.Broker package is not referenced, an exception will be thrown when GetToken is called, making its behavior consistent with the rest of the credentials in the chain.
  • Updated Microsoft.Identity.Client dependency to version 4.76.0.
  • Updated Microsoft.Identity.Client.Extensions.Msal dependency to version 4.76.0.

1.15.0

1.15.0 (2025-08-07)

Breaking Changes

Behavioral Breaking Changes

  • Deprecated SharedTokenCacheCredential. The supporting credential (SharedTokenCacheCredential) was a legacy mechanism for authenticating clients using credentials provided to Visual Studio. For brokered authentication, consider using InteractiveBrowserCredential instead. The following changes have been made:
    • SharedTokenCacheCredential class is marked as [Obsolete] and [EditorBrowsable(EditorBrowsableState.Never)]
    • SharedTokenCacheCredentialOptions class is marked as [Obsolete] and [EditorBrowsable(EditorBrowsableState.Never)]
    • DefaultAzureCredentialOptions.ExcludeSharedTokenCacheCredential property is marked as [Obsolete] and [EditorBrowsable(EditorBrowsableState.Never)]
    • SharedTokenCacheUsername property is marked as [Obsolete] and [EditorBrowsable(EditorBrowsableState.Never)]
    • SharedTokenCacheCredential is no longer included in the DefaultAzureCredential authentication flow

Bugs Fixed

  • Tenant ID comparisons in credential options are now case-insensitive. This affects AdditionallyAllowedTenants values which will now be matched against tenant IDs without case sensitivity, making the authentication more resilient to case differences in tenant IDs returned from WWW-Authenticate challenges (#​51693).

Other Changes

  • BrokerAuthenticationCredential has been renamed as BrokerCredential.

  • Added the EditorBrowsable(Never) attribute to property VisualStudioCodeTenantId as TenantId is preferred. The VisualStudioCodeTenantId property exists only to provide backwards compatibility.

Commits viewable in compare view.

Updated Intility.Extensions.Logging.Elasticsearch from 3.0.4 to 3.0.5.

Release notes

Sourced from Intility.Extensions.Logging.Elasticsearch's releases.

3.0.5

3.0.5 (2025-07-02)

Bug Fixes

  • update dependencies and enhance automation of releases (862c30a)

Commits viewable in compare view.

Updated Intility.Extensions.Logging.Sentry from 3.0.4 to 3.0.5.

Release notes

Sourced from Intility.Extensions.Logging.Sentry's releases.

3.0.5

3.0.5 (2025-07-02)

Bug Fixes

  • update dependencies and enhance automation of releases (862c30a)

Commits viewable in compare view.

Updated Intility.Logging.AspNetCore from 3.0.4 to 3.0.5.

Release notes

Sourced from Intility.Logging.AspNetCore's releases.

3.0.5

3.0.5 (2025-07-02)

Bug Fixes

  • update dependencies and enhance automation of releases (862c30a)

Commits viewable in compare view.

Updated Microsoft.Azure.AppConfiguration.AspNetCore from 8.1.2 to 8.4.0.

Release notes

Sourced from Microsoft.Azure.AppConfiguration.AspNetCore's releases.

8.4.0

Microsoft.Extensions.Configuration.AzureAppConfiguration 8.4.0 - September 19th, 2025

Enhancements

  • Added support for parsing json values with comments. #​685

  • Added support for snapshot references. If a configuration setting's value is a snapshot reference, loading it automatically pulls all key-values and feature flags from the referenced snapshot into the configuration. This enables dynamically switching between snapshots at runtime. #​689

  • Updated dependency package versions. #​695

    • Azure.Data.AppConfiguration: 1.6.0 -> 1.6.1
    • Azure.Messaging.EventGrid: 4.7.0 -> 5.0.0
    • Azure.Security.KeyVault.Secrets: 4.6.0 -> 4.8.0
    • Microsoft.Extensions.Diagnostics.HealthChecks: 6.0.36 -> 8.0.19
    • Microsoft.Extensions.Azure: 1.7.6 -> 1.12.0
    • Microsoft.Extensions.DependencyInjection.Abstractions: 6.0.0 -> 8.0.2
    • Microsoft.Extensions.Logging: 6.0.0 -> 8.0.1
    • Microsoft.Extensions.Configuration: 6.0.1 -> 8.0.0

Microsoft.Azure.AppConfiguration.AspNetCore 8.4.0 - September 19th, 2025

  • Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.4.0. See the release notes for more information on the changes.

Microsoft.Azure.AppConfiguration.Functions.Worker 8.4.0 - September 19th, 2025

  • Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.4.0. See the release notes for more information on the changes.

8.3.0

Microsoft.Extensions.Configuration.AzureAppConfiguration 8.3.0 - July 24th, 2025

Enhancements

  • Added health check integration for Microsoft.Extensions.Diagnostic.HealthChecks. You can call AddAzureAppConfiguration on IHealthCheckBuilder to register a health check for the Azure App Configuration provider. #​644

    builder.Services
       .AddHealthChecks()
       .AddAzureAppConfiguration();
  • Introduced a new environment variable AZURE_APP_CONFIGURATION_FM_SCHEMA_COMPATIBILITY_DISABLED to force processing and outputting feature flags using the Microsoft schema. #​676

Microsoft.Azure.AppConfiguration.AspNetCore 8.3.0 - July 24th, 2025

  • Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.3.0. See the release notes for more information on the changes.

Microsoft.Azure.AppConfiguration.Functions.Worker 8.3.0 - July 24th, 2025

  • Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.3.0. See the release notes for more information on the changes.

8.2.0

Microsoft.Extensions.Configuration.AzureAppConfiguration 8.2.0 - May 14th, 2025

Enhancements

  • Updated the existing Select APIs with the new parameter tagFilters to support filtering key-values and feature flags by tags.

    public AzureAppConfigurationOptions Select(string keyFilter, string labelFilter = LabelFilter.Null, IEnumerable<string> tagFilters = null)
    public FeatureFlagOptions Select(string featureFlagFilter, string labelFilter = LabelFilter.Null, IEnumerable<string> tagFilters = null)
  • Added an ActivitySource called Microsoft.Extensions.Configuration.AzureAppConfiguration to support instrumentation. A Load activity will start when configuration is initially built and the Refresh activity will start when a refresh is triggered. #​645

  • This is the first stable release of the AzureAppConfigurationOptions.SetClientFactory API introduced in 8.2.0-preview. #​380

    public AzureAppConfigurationOptions SetClientFactory(IAzureClientFactory<ConfigurationClient> factory)

Other Changes

  • Removed the FeatureFlagId property from feature flag telemetry. #​655
  • Shortened default network timeout for requests to App Configuration to improve failover speed and retry responsiveness. #​657
  • This is the first stable release of AllocationId from feature flag telemetry metadata, which was introduced in 8.1.0-preview. #​600

Microsoft.Azure.AppConfiguration.AspNetCore 8.2.0 - May 14th, 2025

  • Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.2.0. See the release notes for more information on the changes.

Microsoft.Azure.AppConfiguration.Functions.Worker 8.2.0 - May 14th, 2025

  • Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.2.0. See the release notes for more information on the changes.

8.2.0-preview

Microsoft.Extensions.Configuration.AzureAppConfiguration 8.2.0-preview - March 21st, 2025

Enhancements

  • Added the ability to set a client factory used for creating ConfigurationClient instances. #​380

    public AzureAppConfigurationOptions SetClientFactory(IAzureClientFactory<ConfigurationClient> factory)

Microsoft.Azure.AppConfiguration.AspNetCore 8.2.0-preview - March 21st, 2025

  • Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.2.0-preview. See the release notes for more information on the changes.

Microsoft.Azure.AppConfiguration.Functions.Worker 8.2.0-preview - March 21st, 2025

  • Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.2.0-preview. See the release notes for more information on the changes.

Commits viewable in compare view.

Updated Microsoft.Extensions.Hosting from 9.0.2 to 9.0.9.

Release notes

Sourced from Microsoft.Extensions.Hosting's releases.

9.0.9

Release

What's Changed

Full Changelog: dotnet/runtime@v9.0.8...v9.0.9

9.0.8

Release

What's Changed

Full Changelog: dotnet/runtime@v9.0.7...v9.0.8

9.0.7

Release

What's Changed

Full Changelog: dotnet/runtime@v9.0.6...v9.0.7

9.0.6

Bug Fixes

  • Read messages from binlog if process output is missing build finished message (#​114676)
    Improves reliability of the WebAssembly build process by reading messages from the binlog when the process output does not contain the expected build finished message, preventing build failures in certain scenarios.

  • Fix debugger app hangs related to thread exit (#​114917)
    Resolves an issue where applications could hang during debugging when threads exit, ensuring smoother debugging experiences and preventing deadlocks.

  • [Mono] Workaround MSVC miscompiling sgen_clz (#​114903)
    Addresses a compiler miscompilation issue in MSVC affecting the Mono garbage collector, improving runtime stability and correctness on affected platforms.

  • Do not set the salt or info if they are NULL for OpenSSL HKDF (#​114877)
    Fixes a cryptographic issue by ensuring that the salt or info parameters are not set when they are NULL in OpenSSL HKDF, preventing potential errors or unexpected behavior in key derivation.

  • [Test Only] Fix Idn tests (#​115032)
    Corrects issues in Internationalized Domain Name (Idn) tests, ensuring accurate and reliable test results for domain name handling.

  • JIT: revised fix for fp division issue in profile synthesis (#​115026)
    Provides a more robust fix for floating-point division issues in JIT profile synthesis, improving numerical accuracy and preventing incorrect calculations.

  • Handle OSSL 3.4 change to SAN:othername formatting (#​115361)
    Updates certificate handling to accommodate changes in Subject Alternative Name (SAN) formatting introduced in OpenSSL 3.4, ensuring compatibility and correct parsing of certificates.

  • [Mono] Fix c11 ARM64 atomics to issue full memory barrier (#​115635)
    Fixes atomic operations on ARM64 in Mono to issue a full memory barrier, ensuring correct synchronization and preventing subtle concurrency bugs.

Performance Improvements

  • [WinHTTP] Certificate caching on WinHttpHandler to eliminate extra call to Custom Certificate Validation (#​114678)
    Improves HTTP performance by caching certificates in WinHttpHandler, reducing redundant calls to custom certificate validation and speeding up secure connections.

  • Improve distribute_free_regions (#​115167)
    Optimizes memory management by enhancing the algorithm for distributing free memory regions, leading to better memory utilization and potentially improved application performance.

Technical Improvements

  • Strip trailing slash from source dir for cmake4 (#​114905)
    Refines build scripts by removing trailing slashes from source directories when using CMake 4, preventing potential build path issues and improving build reliability.

  • Don't expose TrustedCertificatesDirectory() and StartNewTlsSessionContext() to NetFx (#​114995)
    Restricts certain internal APIs from being exposed to .NET Framework, reducing surface area and preventing unintended usage.

  • Add support for more libicu versions (#​115376)
    Expands compatibility by supporting additional versions of the International Components for Unicode (ICU) library, enhancing globalization features across more environments.

Infrastructure

  • Run outerloop pipeline only for release branches, not staging/preview (#​115011)
    Optimizes CI/CD resources by limiting the outerloop pipeline to run only on release branches, reducing unnecessary test runs and speeding up development workflows.

... (truncated)

9.0.5

Release

What's Changed

9.0.4

Release

What's Changed

Full Changelog: dotnet/runtime@v9.0.3...v9.0.4

9.0.3

Release

What's Changed

Full Changelog: dotnet/runtime@v9.0.2...v9.0.3

Commits viewable in compare view.

Updated Microsoft.Identity.Abstractions from 9.0.0 to 9.3.0.

Release notes

Sourced from Microsoft.Identity.Abstractions's releases.

9.3.0

9.3.0

New features

Added a new interface IAuthenticationSchemeInformationProvider to get the effective authentication scheme corresponding to an option name, depending on the platform. For details, see PR #​200

9.2.0

9.2.0

New features

  • OperationResult and OperationError abstractions:
    Introduced a new OperationResult<TResult, TError> struct and OperationError base class. These provide a discriminated union for representing either a result or an error, improving error handling and propagation.
    See implementation in src/Microsoft.Identity.Abstractions/Results/OperationResult.cs and OperationError.cs.

  • DownstreamApiOptions extensibility:
    Added two new properties to DownstreamApiOptions:

    • ExtraHeaderParameters (IDictionary<string, string>?): Set extra headers in HTTP requests to downstream APIs.
    • ExtraQueryParameters (IDictionary<string, string>?): Set extra query parameters in HTTP requests to downstream APIs.
      This enables more flexible API calls and improved integration scenarios.

Fundamentals

  • Development guidelines and Copilot integration:

    • Introduced .clinerules/abstractions-guidelines.md, .clinerules/csharp-guidelines.md, .clinerules/ai-guidelines.md, and .github/copilot-instructions.md to formalize and document development, AI assistant, and C# code standards for contributors and tooling.
    • Solution file and README updated to reference these guidelines.
  • Analyzer and dependency updates:

    • Bumped analyzer versions in Directory.Build.props for better static analysis (BannedApiAnalyzers and MicrosoftCodeAnalysisPublicApiAnalyzers updated from 3.3.4 to 4.14.0).

9.1.0

9.1.0

New features

  • Add a new generic IAuthorizationHeaderProvider to have the possiblity of returning authorization header and metadata or error instead of throwing. For details see #​172
  • Add Algorithm property to CredentialDescription to describe signing credentials. For details see #​182
  • Adding serializer for CredentialDescription in .NET 8+. See #​176

Fundamentals

  • Add dev container to work in Code Spaces. See PR #​175
  • Adding a doc about CredentialDescription. See PR #​181
  • Fixing AoT warnings: part 1 - non breaking. See PR #​187
  • update Readme.md to explain the support policy for the library and the notion of LTS. See PRs 171, 183, , 185

Commits viewable in compare view.

Updated Microsoft.Identity.Web from 3.8.2 to 3.14.1.

Release notes

Sourced from Microsoft.Identity.Web's releases.

3.14.0

3.14.0

New features

  • Support multi-tenant agent user identities. See #​3461 for details.
  • Id Web now allows for passing of ExtraBodyParameters. See #​3463 for details.

3.13.1

3.13.1

Dependencies updates

  • Microsoft.IdentityModel updated to version 8.14.0.

3.13.0

3.13.0

Dependencies updates

  • Microsoft.IdentityModel updated to version 8.13.1.
  • Microsoft.Abstractions updated to version 9.3.0 and using IAuthenticationSchemeInformationProvider from that library, deprecating the interface of the same name in Microsoft.Identity.Web (introduced in 3.12.0).

Bug fixes

  • Fixed an issue with instantiation of TokenAcquirerFactory when AppContext.BaseDirectory is root path. See PR #​3443 for details.

Fundamentals

3.12.0

3.12.0

Dependencies updates

  • Updated MSAL to version 4.74.1 part of #​3398.

Bug fix

Reload certificates for all client credential based issues to solve the issue that when a bad certificate was installed on the machine and picked up, and subsequently rotated, a service restart was needed for the new certificate to be used. See issue #​3429 and PR #​3430

New features

  • Include the thrown exception in CertificateChangeEventArg. See PR #​3428 for better supportabiliby.
  • Support for Agent User identities. See PR #​3435

3.11.0

3.11.0

Dependencies updates

  • Updated global.json to the latest .NET 9 runtime framework 9.0.108. See PR #​3422 for details.

Bug fixes

  • Fix IDW10405 error when using managed identity with common tenant. See PR #​3415 for details.
  • Fix OidcIdpSignedAssertionLoader to remove hard dependency on IConfiguration registration. See PR #​3414 for details.

New feature

  • Add support for ExtraHeaderParameters and ExtraQueryParameters properties on DownstreamApiOptions to simplify adding custom headers and query parameters to downstream API requests. See PR #​3413 for details.
  • Add better support for Azure SDK. For details see Readme-Azure and PR #​3416

What's Changed

New Contributors

Full Changelog: AzureAD/microsoft-identity-web@3.10.0...3.11.0

3.10.0

3.10.0

Dependencies updates

  • Updated MSAL to version 4.73.1 (#​3398).
  • Updated global.json to the latest .NET 9 runtime framework 9.0.107 (#​3385).

New feature

  • Added support for Agent Identities (#​3396, #​3402).
    introducing the Microsoft.Identity.Web.AgentIdentities package .

Bug fixes

  • Processed codeQL issues

Fundamentals

  • improved unit tests for OidcFic with the new SignedAssertionFmiPath

3.9.4

3.9.4

Package updates

  • Microsoft.IdentityModel updated to version 8.12.1.

Bug fix

  • Updates the DefaultAuthorizationHeaderProvider to update the AcquireTokenOptions.LongRunningWebApiSessionKey after the token is acquired so that the key can be used in the next OBO call. See PR #​3381 for details.

Fundamentals

  • Update .NET SDK version to 9.0.107 used when building or running the code. See #​3385 for details.
  • Improved test coverage for managed identity flows. See #​3350 for details.

What's Changed

Full Changelog: AzureAD/microsoft-identity-web@3.9.3...3.9.4

3.9.3

3.9.3

Package updates

  • Microsoft.IdentityModel updated to version 8.12.0.

Fundamentals

  • Add .clinerules to help with AI tooling.
  • Update PublicApiAnalyzers and BannedApiAnalyzers to 4.14.0 Upgraded analyzer packages for improved diagnostics and code consistency (in particular delegates are added). For details see #​3379

What's Changed

Full Changelog: AzureAD/microsoft-identity-web@3.9.2...3.9.3

3.9.2

3.9.2

Package updates

Fundamentals:

  • Fix invalid comparisons in prop and csproj files. For details see #​3297.

What's Changed

Full Changelog: AzureAD/microsoft-identity-web@3.9.1...3.9.2

3.9.1

3.9.1

Package updates

  • Microsoft.Identity.Abstractions updated to version 9.1.0.

Fundamentals

  • Fix AoT warnings. For details see #​3366.

What's Changed

Full Changelog: AzureAD/microsoft-identity-web@3.9.0...3.9.1

3.9.0

3.9.0

Package updates

Bug fixes

  • Fixed issue where RequiredScopeOrAppPermission extension method didn’t work with Minimal APIs. See #​3323.
  • Resolved IL warnings from AddDownstreamApis in NativeAOT projects. See #​3355.
  • Ensured AcquireTokenForConfidentialClient correctly passes MSAL exceptions. See #​3345.
  • Prevented null reference when accessing MergedOptions instance. See #​3337.

New feature

  • Added optional login_hint and domain_hint support to AccountController.SignIn endpoint. See #​3244 and #​3348.

Fundamentals

  • Introduced Long-Term Support (LTS) policy. See #​3357.
  • Added tests to validate xms_cc (client capability) forwarding in CCA flows. See #​3349.

External contributions

Thank you @​evan-buss for your contribution and fixing the issue where RequiredScopeOrAppPermission extension method didn’t work with Minimal APIs. See #​3323.
Thank you @​neha-bhargava for your contribution and ensuring AcquireTokenForConfidentialClient correctly passes MSAL ...

Description has been truncated

Bumps Azure.Identity from 1.13.2 to 1.16.0
Bumps Intility.Extensions.Logging.Elasticsearch from 3.0.4 to 3.0.5
Bumps Intility.Extensions.Logging.Sentry from 3.0.4 to 3.0.5
Bumps Intility.Logging.AspNetCore from 3.0.4 to 3.0.5
Bumps Microsoft.Azure.AppConfiguration.AspNetCore from 8.1.2 to 8.4.0
Bumps Microsoft.Extensions.Hosting from 9.0.2 to 9.0.9
Bumps Microsoft.Identity.Abstractions from 9.0.0 to 9.3.0
Bumps Microsoft.Identity.Web from 3.8.2 to 3.14.1

---
updated-dependencies:
- dependency-name: Azure.Identity
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: Intility.Extensions.Logging.Elasticsearch
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: Intility.Extensions.Logging.Sentry
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: Intility.Logging.AspNetCore
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: Microsoft.Azure.AppConfiguration.AspNetCore
  dependency-version: 8.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 9.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: Microsoft.Identity.Abstractions
  dependency-version: 9.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: Microsoft.Identity.Web
  dependency-version: 3.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Sep 22, 2025
@h3rmanj h3rmanj merged commit a1c368e into main Sep 22, 2025
4 checks passed
@dependabot dependabot bot deleted the dependabot/nuget/dotnet/iworker/Company.Worker1/dependencies-4482e7f23a branch September 22, 2025 09:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant