Bump Microsoft.Identity.Client and Microsoft.Identity.Client.Extensions.Msal

[dependabot]

Updated Microsoft.Identity.Client from 4.86.0 to 4.86.1.

Release notes

Sourced from Microsoft.Identity.Client's releases.

4.86.1

Bug Fixes

• Fixed the mTLS Proof-of-Possession token cache to key on the certificate's full DER (x5t#S256) instead of only the public key, preventing a stale token (and AADSTS500181) after a same-key certificate renewal. #​6123
• Fell back to RS256 when a certificate's PSS signing operation is rejected by RSACryptoServiceProvider, rebuilding the client assertion so authentication can proceed. #​6126
• Detect and reject symbolic links in the Unix cache-file write path (lstat pre-check plus O_NOFOLLOW), closing a TOCTOU window. #​6115
• Corrected misleading "region required" error messages and doc comments in the mTLS PoP flow. #​6127

Commits viewable in compare view.

Updated Microsoft.Identity.Client.Extensions.Msal from 4.85.2 to 4.86.1.

Release notes

Sourced from Microsoft.Identity.Client.Extensions.Msal's releases.

4.86.1

Bug Fixes

• Fixed the mTLS Proof-of-Possession token cache to key on the certificate's full DER (x5t#S256) instead of only the public key, preventing a stale token (and AADSTS500181) after a same-key certificate renewal. #​6123
• Fell back to RS256 when a certificate's PSS signing operation is rejected by RSACryptoServiceProvider, rebuilding the client assertion so authentication can proceed. #​6126
• Detect and reject symbolic links in the Unix cache-file write path (lstat pre-check plus O_NOFOLLOW), closing a TOCTOU window. #​6115
• Corrected misleading "region required" error messages and doc comments in the mTLS PoP flow. #​6127

4.86.0

What's Changed

• Propagate KeyGuard attestation failures and bridge native MAA logs to the MSAL logger by @​gladjohn in Propagate KeyGuard attestation failures and bridge native MAA logs to the MSAL logger AzureAD/microsoft-authentication-library-for-dotnet#6081
• Token Binding Demo Helper by @​gladjohn in Token Binding Demo Helper AzureAD/microsoft-authentication-library-for-dotnet#6097
• Include ManagedIdentitySource in managed identity error messages and request-failure logs by @​Robbie-Microsoft in Include ManagedIdentitySource in managed identity error messages and request-failure logs AzureAD/microsoft-authentication-library-for-dotnet#6101
• Remove Mooncake (AzureChinaCloud) lab client from WAM dev apps by @​RyAuld in Remove Mooncake (AzureChinaCloud) lab client from WAM dev apps AzureAD/microsoft-authentication-library-for-dotnet#6103
• Surface token-acquisition failure metadata on MsalException by @​neha-bhargava in Surface token-acquisition failure metadata on MsalException AzureAD/microsoft-authentication-library-for-dotnet#6096
• Skip IMDS lookup for explicit regions by @​4gust in Skip IMDS lookup for explicit regions AzureAD/microsoft-authentication-library-for-dotnet#6092
• Fix region failure-metadata test broken by explicit-region IMDS skip by @​neha-bhargava in Fix region failure-metadata test broken by explicit-region IMDS skip AzureAD/microsoft-authentication-library-for-dotnet#6105

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.85.2...4.86.0

Commits viewable in compare view.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.