Skip to content

Bump Azure.Extensions.AspNetCore.Configuration.Secrets and 14 others - #49

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/server/backend-minor-patch-50bfd01c53
Closed

Bump Azure.Extensions.AspNetCore.Configuration.Secrets and 14 others#49
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/server/backend-minor-patch-50bfd01c53

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Updated Azure.Extensions.AspNetCore.Configuration.Secrets from 1.3.2 to 1.5.1.

Release notes

Sourced from Azure.Extensions.AspNetCore.Configuration.Secrets's releases.

1.5.0

1.5.0 (2026-06-30)

Features Added

  • Upgraded api-verion to 2026-01-01.

Other Changes

  • Migrated code generation from AutoRest to TypeSpec.
  • Upgraded dependent Azure.Core to 1.59.0.
  • Upgraded dependent Azure.ResourceManager to 1.14.0.

1.5.0-beta.2

1.5.0-beta.2 (2026-06-28)

Other Changes

  • Upgraded dependent Azure.Core to 1.59.0.
  • Upgraded dependent Azure.ResourceManager to 1.14.0.

1.4.1

1.4.1 (2026-07-10)

Bugs Fixed

  • Added support for Teams Extension sovereign (GCCH) Entra scopes using https://auth.msft.communication.azure.us/ in EntraCommunicationTokenCredentialOptions.

1.4.0-beta.2

1.4.0-beta.2 (2026-06-30)

Other Changes

  • Upgraded dependent Azure.Core to 1.59.0.
  • Upgraded dependent Azure.ResourceManager to 1.14.0.

1.4.0-beta.1

1.4.0-beta.1 (2026-06-28)

Other Changes

  • Migrated from AutoRest to TypeSpec-based code generation.
  • Upgraded dependent Azure.Core to 1.59.0.
  • Upgraded dependent Azure.ResourceManager to 1.14.0.

Commits viewable in compare view.

Updated Azure.Identity from 1.13.2 to 1.21.0.

Release notes

Sourced from Azure.Identity's releases.

1.18.0-beta.1

1.18.0-beta.1 (2026-06-30)

Features Added

  • Upgraded api-version to 2026-04-15-preview. Tag detail available at https://github.com/Azure/azure-rest-api-specs/blob/main/specification/netapp/resource-manager/Microsoft.NetApp/NetApp/readme.md.
  • Added first-class Active Directory configuration resource support, including NetAppActiveDirectoryConfigResource, NetAppActiveDirectoryConfigCollection, and related create, update, get, and list operations.
  • Added first-class Elastic resource support, including NetAppElasticAccountResource, NetAppElasticCapacityPoolResource, NetAppElasticVolumeResource, NetAppElasticSnapshotPolicyResource, NetAppElasticSnapshotResource, NetAppElasticBackupVaultResource, NetAppElasticBackupPolicyResource, and NetAppElasticBackupResource, together with their related models and operations.
  • Added account-level LDAP and Entra ID configuration models, including LdapConfiguration, LdapConfigurationPatch, BindPasswordAkvConfig, BindPasswordAkvConfigPatch, EntraIdConfig, and EntraIdConfigPatch.
  • Added new supporting Elastic and NetApp models and enums, including CheckElasticResourceAvailabilityResult, CheckElasticVolumeFilePathAvailabilityContent, BreakthroughMode, BindAuthenticationLevel, LargeVolumeType, and related Elastic policy, encryption, protocol, snapshot, and availability types.

Breaking Changes

  • Preview account configuration and patch APIs were reshaped to align with the 2026-04-15-preview service contract. Code using preview-only NetAppAccountPatch, LDAP, Entra ID, Active Directory configuration, or Elastic resource types may need to be updated.

Other Changes

  • Refreshed generated models, resource operations, and samples to align with the latest preview service definitions.

1.17.0

1.17.0 (2026-06-23)

Features Added

Breaking Changes

  • Cache operation return type changes: Method NetAppCacheResource.PoolChange() now returns Operation<NetAppCacheResource> instead of Operation
  • Cache operation return type changes: Method NetAppCacheResource.ResetSmbPassword() now returns Operation<NetAppCacheResource> instead of Operation
  • Some legacy Elastic and Active Directory compatibility APIs are now runtime compatibility stubs. These members are kept for source compatibility but throw NotSupportedException when invoked.
  • Impacted compatibility areas include Elastic compatibility APIs, NetAppActiveDirectoryConfig*, EntraId*, CheckElastic*, and LdapConfiguration related compatibility types.

1.16.1

1.16.1 (2026-06-30)

Bugs Fixed

  • Fixed duplicate public APIs with different casing that were accidentally introduced during TypeSpec migration, and restored affected model properties to their previous GA API shape.

1.16.0

1.16.0 (2026-06-22)

Features Added

  • Upgraded api-version to 2025-07-01.

Breaking Changes

  • This is the first GA release generated from TypeSpec. Some obsolete APIs were added as migration compatibility shims and are not supported by the TypeSpec-generated SDK; please review obsolete messages for replacement guidance.

Other Changes

  • Migrated code generation from AutoRest to TypeSpec.

1.15.0

1.15.0 (2026-06-29)

Features Added

  • Upgraded Compute API version from 2025-04-01 to 2025-11-01.

Breaking Changes

  • This is the first GA release generated from TypeSpec. Some obsolete APIs were added as migration compatibility shims and are not supported by the TypeSpec-generated SDK; please review obsolete messages for replacement guidance.
  • Cloud Services (classic) APIs are no longer supported by the TypeSpec-generated SDK and are preserved only as obsolete compatibility shims.

Other Changes

  • Migrated code generation from AutoRest to TypeSpec.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 8.0.10 to 8.0.28.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

8.0.28

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.27...v8.0.28

8.0.27

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.26...v8.0.27

8.0.26

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.25...v8.0.26

8.0.25

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.24...v8.0.25

8.0.24

Release

8.0.23

Release

What's Changed

https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-january-2026-servicing-updates/#release-changelogs

8.0.22

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.21...v8.0.22

8.0.21

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.20...v8.0.21

8.0.20

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.19...v8.0.20

8.0.18

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.17...v8.0.18

8.0.17

Bug Fixes

  • Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61623)
    The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

  • Update dependencies from dotnet/arcade (#​61832)
    This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.

  • Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61761)
    The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

  • Update branding to 8.0.17 (#​61830)
    The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.

  • Merging internal commits for release/8.0 (#​61924)
    This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: dotnet/aspnetcore@v8.0.16...v8.0.17

8.0.16

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.15...v8.0.16

8.0.15

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.14...v8.0.15

8.0.14

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.13...v8.0.14

8.0.13

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.12...v8.0.13

8.0.12

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.11...v8.0.12

8.0.11

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.10...v8.0.11

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 8.0.10 to 8.0.28.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

8.0.28

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.27...v8.0.28

8.0.27

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.26...v8.0.27

8.0.26

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.25...v8.0.26

8.0.25

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.24...v8.0.25

8.0.24

Release

8.0.23

Release

What's Changed

https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-january-2026-servicing-updates/#release-changelogs

8.0.22

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.21...v8.0.22

8.0.21

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.20...v8.0.21

8.0.20

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.19...v8.0.20

8.0.18

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.17...v8.0.18

8.0.17

Bug Fixes

  • Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61623)
    The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

  • Update dependencies from dotnet/arcade (#​61832)
    This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.

  • Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61761)
    The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

  • Update branding to 8.0.17 (#​61830)
    The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.

  • Merging internal commits for release/8.0 (#​61924)
    This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: dotnet/aspnetcore@v8.0.16...v8.0.17

8.0.16

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.15...v8.0.16

8.0.15

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.14...v8.0.15

8.0.14

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.13...v8.0.14

8.0.13

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.12...v8.0.13

8.0.12

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.11...v8.0.12

8.0.11

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v8.0.10...v8.0.11

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 9.0.9 to 9.0.17.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

9.0.17

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.16...v9.0.17

9.0.16

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.15...v9.0.16

9.0.15

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.14...v9.0.15

9.0.14

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.13...v9.0.14

9.0.13

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.12...v9.0.13

9.0.12

Release

What's Changed

Description has been truncated

@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Jul 20, 2026
@nicpozent Claude

nicpozent commented Jul 20, 2026

Copy link
Copy Markdown
Owner

·@·d·ependabot r·ebase

Generated by Claude Code

@dependabot
Bump Azure.Extensions.AspNetCore.Configuration.Secrets and 14 others
a4ac6bd 
Bumps Azure.Extensions.AspNetCore.Configuration.Secrets from 1.3.2 to 1.5.1
Bumps Azure.Identity from 1.13.2 to 1.21.0
Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 8.0.10 to 8.0.28
Bumps Microsoft.AspNetCore.Mvc.Testing from 8.0.10 to 8.0.28
Bumps Microsoft.EntityFrameworkCore.Design from 9.0.9 to 9.0.17
Bumps Microsoft.EntityFrameworkCore.InMemory from 9.0.9 to 9.0.17
Bumps Microsoft.Extensions.Configuration.KeyPerFile from 8.0.24 to 8.0.28
Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.15.3 to 1.16.0
Bumps OpenTelemetry.Extensions.Hosting from 1.15.3 to 1.16.0
Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.10.0 to 1.16.0
Bumps OpenTelemetry.Instrumentation.Http from 1.10.0 to 1.16.0
Bumps OpenTelemetry.Instrumentation.Runtime from 1.10.0 to 1.16.0
Bumps Swashbuckle.AspNetCore from 6.6.2 to 6.9.0
Bumps System.Text.Json to 9.0.17, 10.0.9
Bumps xunit from 2.9.2 to 2.9.3

---
updated-dependencies:
- dependency-name: Azure.Extensions.AspNetCore.Configuration.Secrets
  dependency-version: 1.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: Azure.Identity
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer
  dependency-version: 8.0.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: Microsoft.AspNetCore.Mvc.Testing
  dependency-version: 8.0.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: Microsoft.EntityFrameworkCore.Design
  dependency-version: 9.0.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: Microsoft.EntityFrameworkCore.InMemory
  dependency-version: 9.0.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: Microsoft.Extensions.Configuration.KeyPerFile
  dependency-version: 8.0.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: OpenTelemetry.Extensions.Hosting
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: OpenTelemetry.Instrumentation.AspNetCore
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: OpenTelemetry.Instrumentation.Http
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: OpenTelemetry.Instrumentation.Runtime
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: Swashbuckle.AspNetCore
  dependency-version: 6.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: System.Text.Json
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: System.Text.Json
  dependency-version: 9.0.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: xunit
  dependency-version: 2.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/nuget/server/backend-minor-patch-50bfd01c53 branch from c0c911e to a4ac6bd Compare July 20, 2026 13:24
@nicpozent nicpozent mentioned this pull request Jul 20, 2026
Merged
nicpozent added a commit that referenced this pull request Jul 20, 2026
@nicpozent @claude
build(deps): backend dependency updates (STJ-9.x-safe subset of #49) (#…
bebb640 
…50)

Takes the safe backend/test NuGet bumps from Dependabot #49 while keeping the
deliberate System.Text.Json 9.x pin (EF Core 9 references STJ 9.0.x; the test
host is pinned to avoid a CS1705 mismatch):

  EF Core Design/InMemory 9.0.9 -> 9.0.17
  Microsoft.AspNetCore.Authentication.JwtBearer 8.0.10 -> 8.0.28
  Microsoft.AspNetCore.Mvc.Testing 8.0.10 -> 8.0.28
  Swashbuckle.AspNetCore 6.6.2 -> 6.9.0
  OpenTelemetry.* 1.15.3/1.10.0 -> 1.16.0
  Microsoft.Extensions.Configuration.KeyPerFile 8.0.0 -> 8.0.28
  xunit 2.9.2 -> 2.9.3
  System.Text.Json (test pin) 9.0.9 -> 9.0.17

Held back from #49: Azure.Extensions.AspNetCore.Configuration.Secrets 1.5.1 and
Azure.Identity 1.21.0 — their Azure.Core 1.54 transitively requires
System.Text.Json >= 10, which would force a STJ 9 -> 10 runtime major and break
the intentional pin (NU1605 downgrade). Those, plus the explicit STJ 10 bump,
are deferred to a deliberate STJ-10 adoption.

Build clean; 472/472 backend tests green.


Claude-Session: https://claude.ai/code/session_01F1g44VLAeYdf3FAoXsXRu7

Co-authored-by: Claude <noreply@anthropic.com>
@nicpozent Claude

nicpozent commented Jul 20, 2026

Copy link
Copy Markdown
Owner

Superseded by #50, which merged the System.Text.Json-9.x-safe subset of this group (EF Core 9.0.17, JwtBearer/Mvc.Testing 8.0.28, Swashbuckle 6.9.0, OpenTelemetry 1.16.0, KeyPerFile 8.0.28, xunit 2.9.3, test STJ pin 9.0.17).

Held back here: Azure.Extensions.AspNetCore.Configuration.Secrets 1.5.1 + Azure.Identity 1.21.0 (their Azure.Core 1.54 transitively needs System.Text.Json >= 10) and the explicit System.Text.Json 10.0.9 — adopting those is a deliberate STJ 9 → 10 runtime-major upgrade, deferred. Closing this group PR.

Generated by Claude Code

@nicpozent nicpozent closed this Jul 20, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/nuget/server/backend-minor-patch-50bfd01c53 branch July 20, 2026 14:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@nicpozent