deps: Bump Azure.Identity and 12 others#81
Merged
lukemurraynz merged 1 commit intomainfrom Mar 16, 2026
Merged
Conversation
Bumps Azure.Identity to 1.19.0 Bumps Azure.ResourceManager from 1.13.2 to 1.14.0 Bumps Microsoft.Extensions.Configuration from 9.0.12 to 9.0.14 Bumps Microsoft.Extensions.Configuration.Abstractions to 10.0.3, 10.0.5 Bumps Microsoft.Extensions.Configuration.Json from 9.0.12 to 9.0.14 Bumps Microsoft.Extensions.DependencyInjection from 9.0.12 to 9.0.14 Bumps Microsoft.Extensions.DependencyInjection.Abstractions from 9.0.12 to 9.0.14 Bumps Microsoft.Extensions.Hosting from 9.0.12 to 9.0.14 Bumps Microsoft.Extensions.Logging from 9.0.12 to 9.0.14 Bumps Microsoft.Extensions.Logging.Abstractions from 9.0.12 to 9.0.14 Bumps Microsoft.Identity.Client to 4.83.1 Bumps Microsoft.NET.ILLink.Tasks from 8.0.23 to 8.0.25 Bumps Microsoft.NET.Test.Sdk from 18.0.1 to 18.3.0 --- updated-dependencies: - dependency-name: Azure.Identity dependency-version: 1.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: microsoft-packages - dependency-name: Microsoft.Extensions.Configuration.Abstractions dependency-version: 10.0.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: microsoft-packages - dependency-name: Microsoft.Identity.Client dependency-version: 4.83.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: microsoft-packages - dependency-name: Azure.ResourceManager dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: microsoft-packages - dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions dependency-version: 9.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-packages - dependency-name: Microsoft.Extensions.Logging.Abstractions dependency-version: 9.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-packages - dependency-name: Microsoft.NET.ILLink.Tasks dependency-version: 8.0.25 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-packages - dependency-name: Azure.Identity dependency-version: 1.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: microsoft-packages - dependency-name: Microsoft.Identity.Client dependency-version: 4.83.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: microsoft-packages - dependency-name: Microsoft.Extensions.Configuration dependency-version: 9.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-packages - dependency-name: Microsoft.Extensions.Configuration.Abstractions dependency-version: 10.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-packages - dependency-name: Microsoft.Extensions.Configuration.Json dependency-version: 9.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-packages - dependency-name: Microsoft.Extensions.DependencyInjection dependency-version: 9.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-packages - dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions dependency-version: 9.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-packages - dependency-name: Microsoft.Extensions.Hosting dependency-version: 9.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-packages - dependency-name: Microsoft.Extensions.Logging dependency-version: 9.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-packages - dependency-name: Microsoft.NET.ILLink.Tasks dependency-version: 8.0.25 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-packages - dependency-name: Microsoft.Extensions.Logging.Abstractions dependency-version: 9.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: microsoft-packages - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: microsoft-packages ... Signed-off-by: dependabot[bot] <support@github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Rebasing might not happen immediately, so don't worry if this takes some time.
Note: if you make any changes to this PR yourself, they will take precedence over the rebase.
Updated Azure.Identity from 1.16.0 to 1.19.0.
Release notes
Sourced from Azure.Identity's releases.
1.19.0
1.19.0 (2026-03-11)
Features Added
ClientCertificateCredentialto specify a path in the form ofcert:/StoreLocation/StoreName/Thumbprintto refer to a certificate in the platform certificate store - such as the Windows Certificate Store on Windows, and the KeyChain on MacOS - instead of a file on disk. For example to load a certificate from the "My" store in the "CurrentUser" location use the pathcert:/CurrentUser/My/E661583E8FABEF4C0BEF694CBC41C28FB81CD870(A community contribution, courtesy of fowl2).Other Changes
Microsoft.Identity.ClientandMicrosoft.Identity.Client.Extensions.Msaldependencies to version 4.83.1.1.18.0
1.18.0 (2026-02-25)
Features Added
Added experimental
Microsoft.Extensions.ConfigurationandMicrosoft.Extensions.DependencyInjectionintegration for Azure SDK clients. For details, see the Configuration and Dependency Injection documentation.The
WorkloadIdentityCredentialOptions.IsAzureProxyEnabledproperty, which enables Azure Kubernetes token proxy mode, is only available in beta releases of this package.AzureDeveloperCliCredentialnow parses JSON error output fromazd auth tokento extract clean error messages instead of including raw JSON in exceptions. Error messages like{"type":"consoleMessage","data":{"message":"ERROR: fetching token: ..."}}are now displayed asERROR: fetching token: ....1.18.0-beta.3
1.18.0-beta.3 (2026-02-20)
Breaking Changes
WorkloadIdentityCredentialOptions.IsAzureKubernetesTokenProxyEnabledtoIsAzureProxyEnabledto follow .NET naming conventions for boolean properties.Bugs Fixed
Fixed a NullReferenceException that occurred during X509Chain validation on Linux when using the Identity Bindings feature.
Disabled MSAL's internal retry logic for
ConfidentialClientApplicationandPublicClientApplicationto prevent double retries when combined with Azure SDK's retry policy. Only the configured Azure SDK retry policy is applied, avoiding unexpected additional retry attempts.Commits viewable in compare view.
Updated Azure.Identity from 1.17.1 to 1.19.0.
Release notes
Sourced from Azure.Identity's releases.
1.19.0
1.19.0 (2026-03-11)
Features Added
ClientCertificateCredentialto specify a path in the form ofcert:/StoreLocation/StoreName/Thumbprintto refer to a certificate in the platform certificate store - such as the Windows Certificate Store on Windows, and the KeyChain on MacOS - instead of a file on disk. For example to load a certificate from the "My" store in the "CurrentUser" location use the pathcert:/CurrentUser/My/E661583E8FABEF4C0BEF694CBC41C28FB81CD870(A community contribution, courtesy of fowl2).Other Changes
Microsoft.Identity.ClientandMicrosoft.Identity.Client.Extensions.Msaldependencies to version 4.83.1.1.18.0
1.18.0 (2026-02-25)
Features Added
Added experimental
Microsoft.Extensions.ConfigurationandMicrosoft.Extensions.DependencyInjectionintegration for Azure SDK clients. For details, see the Configuration and Dependency Injection documentation.The
WorkloadIdentityCredentialOptions.IsAzureProxyEnabledproperty, which enables Azure Kubernetes token proxy mode, is only available in beta releases of this package.AzureDeveloperCliCredentialnow parses JSON error output fromazd auth tokento extract clean error messages instead of including raw JSON in exceptions. Error messages like{"type":"consoleMessage","data":{"message":"ERROR: fetching token: ..."}}are now displayed asERROR: fetching token: ....1.18.0-beta.3
1.18.0-beta.3 (2026-02-20)
Breaking Changes
WorkloadIdentityCredentialOptions.IsAzureKubernetesTokenProxyEnabledtoIsAzureProxyEnabledto follow .NET naming conventions for boolean properties.Bugs Fixed
Fixed a NullReferenceException that occurred during X509Chain validation on Linux when using the Identity Bindings feature.
Disabled MSAL's internal retry logic for
ConfidentialClientApplicationandPublicClientApplicationto prevent double retries when combined with Azure SDK's retry policy. Only the configured Azure SDK retry policy is applied, avoiding unexpected additional retry attempts.Commits viewable in compare view.
Updated Azure.ResourceManager from 1.13.2 to 1.14.0.
Release notes
Sourced from Azure.ResourceManager's releases.
1.14.0
1.14.0 (2026-02-26)
Features Added
ManagementGroupto2023-04-01.Bugs Fixed
ArgumentNullExceptionwhen deserializingManagedServiceIdentitywith null or emptytypeproperty value.Commits viewable in compare view.
Updated Microsoft.Extensions.Configuration from 9.0.12 to 9.0.14.
Release notes
Sourced from Microsoft.Extensions.Configuration's releases.
9.0.14
Release
9.0.13
Release
What's Changed
Full Changelog: dotnet/runtime@v9.0.12...v9.0.13
Commits viewable in compare view.
Updated Microsoft.Extensions.Configuration.Abstractions from 9.0.12 to 10.0.3.
Release notes
Sourced from Microsoft.Extensions.Configuration.Abstractions's releases.
10.0.0-preview.6.25358.103
You can build .NET 10.0 Preview 6 from the repository by cloning the release tag
v10.0.0-preview.6.25358.103and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
10.0.0-preview.5.25277.114
You can build .NET 10.0 Preview 5 from the repository by cloning the release tag
v10.0.0-preview.5.25277.114and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
10.0.0-preview.4.25258.110
You can build .NET 10.0 Preview 4 from the repository by cloning the release tag
v10.0.0-preview.4.25258.110and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
10.0.0-preview.3.25171.5
You can build .NET 10.0 Preview 3 from the repository by cloning the release tag
v10.0.0-preview.3.25171.5and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
10.0.0-preview.2.25163.2
You can build .NET 10.0 Preview 2 from the repository by cloning the release tag
v10.0.0-preview.2.25163.2and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
10.0.0-preview.1.25080.5
You can build .NET 10.0 Preview 1 from the repository by cloning the release tag
v10.0.0-preview.1.25080.5and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
9.0.115
You can build .NET 9.0 from the repository by cloning the release tag
v9.0.115and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
9.0.114
You can build .NET 9.0 from the repository by cloning the release tag
v9.0.114and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached is the PGP signature for the GitHub generated tarball. You can find the public key at https://dot.net/release-key-2023
9.0.113
You can build .NET 9.0 from the repository by cloning the release tag
v9.0.113and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
9.0.112
You can build .NET 9.0 from the repository by cloning the release tag
v9.0.112and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
9.0.111
You can build .NET 9.0 from the repository by cloning the release tag
v9.0.111and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
9.0.110
You can build .NET 9.0 from the repository by cloning the release tag
v9.0.110and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
9.0.109
You can build .NET 9.0 from the repository by cloning the release tag
v9.0.109and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
9.0.101
You can build .NET 9.0 from the repository by cloning the release tag
v9.0.101and following the build instructions in the main README.md.Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.
Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023
Commits viewable in compare view.
Updated Microsoft.Extensions.Configuration.Abstractions from 10.0.3 to 10.0.5.
Release notes
Sourced from Microsoft.Extensions.Configuration.Abstractions's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.Extensions.Configuration.Json from 9.0.12 to 9.0.14.
Release notes
Sourced from Microsoft.Extensions.Configuration.Json's releases.
9.0.14
Release
9.0.13
Release
What's Changed
Full Changelog: dotnet/runtime@v9.0.12...v9.0.13
Commits viewable in compare view.
Updated Microsoft.Extensions.DependencyInjection from 9.0.12 to 9.0.14.
Release notes
Sourced from Microsoft.Extensions.DependencyInjection's releases.
9.0.14
Release
9.0.13
Release
What's Changed
Full Changelog: dotnet/runtime@v9.0.12...v9.0.13
Commits viewable in compare view.
Updated Microsoft.Extensions.DependencyInjection.Abstractions from 9.0.12 to 9.0.14.
Release notes
Sourced from Microsoft.Extensions.DependencyInjection.Abstractions's releases.
9.0.14
Release
9.0.13
Release
What's Changed
Full Changelog: dotnet/runtime@v9.0.12...v9.0.13
Commits viewable in compare view.
Updated Microsoft.Extensions.Hosting from 9.0.12 to 9.0.14.
Release notes
Sourced from Microsoft.Extensions.Hosting's releases.
9.0.14
Release
9.0.13
Release
What's Changed
Full Changelog: dotnet/runtime@v9.0.12...v9.0.13
Commits viewable in compare view.
Updated Microsoft.Extensions.Logging from 9.0.12 to 9.0.14.
Release notes
Sourced from Microsoft.Extensions.Logging's releases.
9.0.14
Release
9.0.13
Release
What's Changed
Full Changelog: dotnet/runtime@v9.0.12...v9.0.13
Commits viewable in compare view.
Updated Microsoft.Extensions.Logging.Abstractions from 9.0.12 to 9.0.14.
Release notes
Sourced from Microsoft.Extensions.Logging.Abstractions's releases.
9.0.14
Release
9.0.13
Release
What's Changed
Full Changelog: dotnet/runtime@v9.0.12...v9.0.13
Commits viewable in compare view.
Updated Microsoft.Identity.Client from 4.77.1 to 4.83.1.
Release notes
Sourced from Microsoft.Identity.Client's releases.
4.83.1
Bug Fixes
4.83.0
New Features
Changes
Bug Fixes
GetManagedIdentitySourceAsync()is explicitly invoked #5815expires_onfield in attestation tokens for better token lifecycle management #5741ValidateCachedTokenAsyncto work properly with multiple APIs beyond the initial scope #5764IAuthenticationOperationandWithAuthenticationExtension#5699ICustomWebUidocumentation #5704Infrastructure & Dependencies
4.82.1
Bug Fixes
Changes
4.82.0
4.82.0
Highlights
This release expands extensibility for confidential-client authentication (certificates + client assertions), adds additional sovereign cloud environments, and hardens security-sensitive flows (mTLS PoP and system browser auth) with clearer validation and safer defaults.
Features
CertificateOptionsand updatedWithCertificateextensibility APIs to accept it, including support for passingsendX5Cconfiguration through the options model. (#5655)WithExtraClientAssertionClaimsonAcquireTokenForClientParameterBuilderto enable supplying additional signed claims in client assertions (intended for advanced scenarios and higher-level libraries). (#5650)login.*hosts. (#5684)response_mode=form_postsupport for the default system browser (loopback) flow. MSAL will enforceform_postand process the authorization response from POST data. (#5678)Changes
Microsoft.Identity.Client.MtlsPoprenamed toMicrosoft.Identity.Client.KeyAttestation(assembly/package naming update). (#5653)4.81.0
What's Changed
Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.80.0...4.81.0
4.80.0
Features
Changes
Bug Fixes
4.79.2
What's Changed
Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.79.0...4.79.2
4.79.0
What's Changed
IMsalMtlsHttpClientFactoryinterface public by @cpp11nullptr in MakeIMsalMtlsHttpClientFactoryinterface public AzureAD/microsoft-authentication-library-for-dotnet#5559Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.78.0...4.79.0
4.78.0
Changes
Bug Fixes
Commits viewable in compare view.
Updated Microsoft.Identity.Client from 4.78.0 to 4.83.1.
Release notes
Sourced from Microsoft.Identity.Client's releases.
4.83.1
Bug Fixes
4.83.0
New Features
Changes
Bug Fixes
GetManagedIdentitySourceAsync()is explicitly invoked #5815expires_onfield in attestation tokens for better token lifecycle management #5741ValidateCachedTokenAsyncto work properly with multiple APIs beyond the initial scope #5764IAuthenticationOperationandWithAuthenticationExtension#5699ICustomWebUidocumentation #5704Infrastructure & Dependencies
4.82.1
Bug Fixes
Changes
4.82.0
4.82.0
Highlights
This release expands extensibility for confidential-client authentication (certificates + client assertions), adds additional sovereign cloud environments, and hardens security-sensitive flows (mTLS PoP and system browser auth) with clearer validation and safer defaults.
Features
CertificateOptionsand updatedWithCertificateextensibility APIs to accept it, including support for passingsendX5Cconfiguration through the options model. (#5655)WithExtraClientAssertionClaimsonAcquireTokenForClientParameterBuilderto enable supplying additional signed claims in client assertions (intended for advanced scenarios and higher-level libraries). (#5650)login.*hosts. (#5684)response_mode=form_postsupport for the default system browser (loopback) flow. MSAL will enforceform_postand process the authorization response from POST data. (#5678)Changes
Microsoft.Identity.Client.MtlsPoprenamed toMicrosoft.Identity.Client.KeyAttestation(assembly/package naming update). (#5653)4.81.0
What's Changed
Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.80.0...4.81.0
4.80.0
Features
Changes
Bug Fixes
4.79.2
What's Changed
Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.79.0...4.79.2
4.79.0
What's Changed
IMsalMtlsHttpClientFactoryinterface public by @cpp11nullptr in MakeIMsalMtlsHttpClientFactoryinterface public AzureAD/microsoft-authentication-library-for-dotnet#5559Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.78.0...4.79.0
Commits viewable in compare view.
Updated Microsoft.NET.ILLink.Tasks from 8.0.23 to 8.0.25.
Release notes
Sourced from Microsoft.NET.ILLink.Tasks's releases.
8.0.25
Release
8.0.24
Release
What's Changed
Full Changelog: dotnet/runtime@v8.0.23...v8.0.24
Commits viewable in compare view.
Updated Microsoft.NET.Test.Sdk from 18.0.1 to 18.3.0.
Release notes
Sourced from Microsoft.NET.Test.Sdk's releases.
18.3.0
What's Changed
Internal fixes and updates
New Contributors
Commits viewable in compare view.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions