Skip to content

deps: Bump Microsoft.Identity.Client and Microsoft.Identity.Client.Extensions.Msal#1157

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/multi-91bca348ce
Closed

deps: Bump Microsoft.Identity.Client and Microsoft.Identity.Client.Extensions.Msal#1157
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/multi-91bca348ce

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 25, 2026

Copy link
Copy Markdown
Contributor

Updated Microsoft.Identity.Client from 4.83.3 to 4.84.1.

Release notes

Sourced from Microsoft.Identity.Client's releases.

4.84.1

What's Changed

New Features

  • Added WithReservedScopes and WithCachePartitionKey public API extensions in #​6014
  • Added IAuthenticationOperation3 interface for CDT + mTLS PoP composition in #​5996
  • Added MsalRemainingTokenLifetime histogram metric for token expiry tracking in #​5920

Changes

  • Removed [Obsolete] attribute from WithExtraBodyParameters extension method in #​6006
  • Replaced ConcurrentHashSet with ConcurrentDictionary<T, byte> in #​5975

Bug Fixes

  • Fixed WithTenantId not honoring MSA tenant GUID when specified at request level in #​5958
  • Fixed OBO cache returning multiple_matching_tokens_detected when attributed tokens share a partition in #​5993

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@6ff7075...main (AzureAD/microsoft-authentication-library-for-dotnet@6ff7075...main)

4.84.0

What's Changed

New Features

  • Remove embedded Newtonsoft.Json, migrate to System.Text.Json exclusively in #​5959
  • Expose refresh token via extension and add CacheOptions.DisableInternalCache in #​5947
  • Added support for WithAttributeTokens in #​5888
  • Feature: mTLS Bearer via CertificateOptions.SendCertificateOverMtls in #​5849
  • Remove experimental feature gate from WithClientAssertion(ClientSignedAssertion) overload in #​5945
  • Support forwarding MSAL client metadata headers through IMDS to ESTS in #​5912
  • Add CorrelationId to AssertionRequestOptions for FIC in #​5937
  • Add raw STS error code to MsalFailure metric in #​5961

Bug Fixes

  • Fix: make System.ValueTuple conditional on net462 only in #​5906
  • Fix eager evaluation in ConcurrentDictionary.GetOrAdd calls in #​5950
  • Validate clientSignedAssertionProvider delegate is non-null in WithClientAssertion in #​5956
  • Improve MtlsPopTokenNotSupportedInImdsV1 error message clarity in #​5908
  • Added more checks for issuer validation in #​5931

Improvements

  • Remove region as hard requirement for mTLS PoP flows in #​5902
  • Add in-process MAA token caching to PopKeyAttestor in #​5887
  • Refactor client credential material resolution in #​5835

Dependencies Updates

  • Bump OpenTelemetry version in #​5960

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.83.3...cb59f84 (AzureAD/microsoft-authentication-library-for-dotnet@4.83.3...cb59f84)

Commits viewable in compare view.

Updated Microsoft.Identity.Client.Extensions.Msal from 4.83.3 to 4.84.1.

Release notes

Sourced from Microsoft.Identity.Client.Extensions.Msal's releases.

4.84.1

What's Changed

New Features

  • Added WithReservedScopes and WithCachePartitionKey public API extensions in #​6014
  • Added IAuthenticationOperation3 interface for CDT + mTLS PoP composition in #​5996
  • Added MsalRemainingTokenLifetime histogram metric for token expiry tracking in #​5920

Changes

  • Removed [Obsolete] attribute from WithExtraBodyParameters extension method in #​6006
  • Replaced ConcurrentHashSet with ConcurrentDictionary<T, byte> in #​5975

Bug Fixes

  • Fixed WithTenantId not honoring MSA tenant GUID when specified at request level in #​5958
  • Fixed OBO cache returning multiple_matching_tokens_detected when attributed tokens share a partition in #​5993

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@6ff7075...main (AzureAD/microsoft-authentication-library-for-dotnet@6ff7075...main)

4.84.0

What's Changed

New Features

  • Remove embedded Newtonsoft.Json, migrate to System.Text.Json exclusively in #​5959
  • Expose refresh token via extension and add CacheOptions.DisableInternalCache in #​5947
  • Added support for WithAttributeTokens in #​5888
  • Feature: mTLS Bearer via CertificateOptions.SendCertificateOverMtls in #​5849
  • Remove experimental feature gate from WithClientAssertion(ClientSignedAssertion) overload in #​5945
  • Support forwarding MSAL client metadata headers through IMDS to ESTS in #​5912
  • Add CorrelationId to AssertionRequestOptions for FIC in #​5937
  • Add raw STS error code to MsalFailure metric in #​5961

Bug Fixes

  • Fix: make System.ValueTuple conditional on net462 only in #​5906
  • Fix eager evaluation in ConcurrentDictionary.GetOrAdd calls in #​5950
  • Validate clientSignedAssertionProvider delegate is non-null in WithClientAssertion in #​5956
  • Improve MtlsPopTokenNotSupportedInImdsV1 error message clarity in #​5908
  • Added more checks for issuer validation in #​5931

Improvements

  • Remove region as hard requirement for mTLS PoP flows in #​5902
  • Add in-process MAA token caching to PopKeyAttestor in #​5887
  • Refactor client credential material resolution in #​5835

Dependencies Updates

  • Bump OpenTelemetry version in #​5960

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.83.3...cb59f84 (AzureAD/microsoft-authentication-library-for-dotnet@4.83.3...cb59f84)

Commits viewable in compare view.

@dependabot @github

dependabot Bot commented on behalf of github May 25, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: nuget. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label May 25, 2026
@dependabot dependabot Bot temporarily deployed to test-dataverse May 25, 2026 12:57 Inactive
@dependabot dependabot Bot temporarily deployed to test-dataverse May 25, 2026 12:57 Inactive
@dependabot dependabot Bot temporarily deployed to test-dataverse May 25, 2026 12:57 Inactive
@dependabot dependabot Bot temporarily deployed to test-dataverse May 25, 2026 12:57 Inactive
@dependabot dependabot Bot temporarily deployed to test-dataverse May 25, 2026 12:57 Inactive
@dependabot dependabot Bot force-pushed the dependabot/nuget/multi-91bca348ce branch from 756f0bb to c90e369 Compare June 4, 2026 15:07
@dependabot dependabot Bot temporarily deployed to test-dataverse June 4, 2026 15:07 Inactive
@dependabot dependabot Bot temporarily deployed to test-dataverse June 4, 2026 15:07 Inactive
@dependabot dependabot Bot temporarily deployed to test-dataverse June 4, 2026 15:07 Inactive
@dependabot dependabot Bot temporarily deployed to test-dataverse June 4, 2026 15:07 Inactive
@dependabot dependabot Bot temporarily deployed to test-dataverse June 4, 2026 15:07 Inactive
…tensions.Msal

Bumps Microsoft.Identity.Client from 4.83.3 to 4.84.1
Bumps Microsoft.Identity.Client.Extensions.Msal from 4.83.3 to 4.84.1

---
updated-dependencies:
- dependency-name: Microsoft.Identity.Client
  dependency-version: 4.84.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: Microsoft.Identity.Client.Extensions.Msal
  dependency-version: 4.84.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/nuget/multi-91bca348ce branch from c90e369 to 116ccd9 Compare June 4, 2026 15:29
@dependabot dependabot Bot temporarily deployed to test-dataverse June 4, 2026 15:29 Inactive
@dependabot dependabot Bot temporarily deployed to test-dataverse June 4, 2026 15:29 Inactive
@dependabot dependabot Bot temporarily deployed to test-dataverse June 4, 2026 15:29 Inactive
@dependabot dependabot Bot temporarily deployed to test-dataverse June 4, 2026 15:29 Inactive
@dependabot dependabot Bot temporarily deployed to test-dataverse June 4, 2026 15:29 Inactive
@dependabot @github

dependabot Bot commented on behalf of github Jun 8, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #1189.

@dependabot dependabot Bot closed this Jun 8, 2026
@dependabot dependabot Bot deleted the dependabot/nuget/multi-91bca348ce branch June 8, 2026 09:11
@github-project-automation github-project-automation Bot moved this from Todo to Done in PPDS Roadmap Jun 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

0 participants