Skip to content

chore(deps): Bump System.IdentityModel.Tokens.Jwt from 8.18.0 to 8.19.1#505

Merged
github-actions[bot] merged 1 commit into
masterfrom
dependabot/nuget/System.IdentityModel.Tokens.Jwt-8.19.1
Jun 4, 2026
Merged

chore(deps): Bump System.IdentityModel.Tokens.Jwt from 8.18.0 to 8.19.1#505
github-actions[bot] merged 1 commit into
masterfrom
dependabot/nuget/System.IdentityModel.Tokens.Jwt-8.19.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 4, 2026

Copy link
Copy Markdown
Contributor

Updated System.IdentityModel.Tokens.Jwt from 8.18.0 to 8.19.1.

Release notes

Sourced from System.IdentityModel.Tokens.Jwt's releases.

8.19.1

Bug Fixes

  • Update JwtSecurityTokenHandler for IssuerSigningKeyResolverUsingConfiguration to take priority over IssuerSigningKeyResolver, matching the documented contract and the correct behavior already present in JsonWebTokenHandler. See PR #​3519.

8.19.0

New Features

  • Add ML-DSA (FIPS 204) post-quantum signature support. See PR #​3479.
  • Cache custom crypto providers in CryptoProviderFactory. See PR #​3489.

Bug Fixes

  • Disable automatic redirects on default HttpClient for JKU retrieval. See PR #​3494.
  • Adjust rented buffer handling in claim set parsing. See PR #​3493.
  • Tidy null handling in SAML conditions validation. See PR #​3491.
  • Improve validation of jku claim. See PR #​3481.
  • Limit telemetry algorithm dimension cardinality. See PR #​3490.
  • Add defensive copy of collections in ValidationParameters. See PR #​3492.
  • Update TokenValidationParameter copy constructor to make a deep copy. See PR #​3488.
  • Update to fail-closed when replay protection isn't configured and other DPoP hardening. See PR #​3505.
  • Apply RFC 3986 section 6.2.2 normalization to DPoP htu comparison. See PR #​3509.

Commits viewable in compare view.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---
updated-dependencies:
- dependency-name: System.IdentityModel.Tokens.Jwt
  dependency-version: 8.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Jun 4, 2026
@dependabot dependabot Bot requested a review from petrsvihlik as a code owner June 4, 2026 07:47
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Jun 4, 2026
@github-actions github-actions Bot enabled auto-merge (squash) June 4, 2026 07:47
@github-actions

github-actions Bot commented Jun 4, 2026

Copy link
Copy Markdown
Contributor

WOPI Validator results

Status Count
✅ Pass 94
❌ Fail 3
⏭️ Skipped 122

Validator: WopiValidator 2.0.5 (from nuget.org)
Test category: All

📋 Full report and wopi-validator-output artifact ↗

@github-actions

github-actions Bot commented Jun 4, 2026

Copy link
Copy Markdown
Contributor

API Compatibility Report

Compared this PR's packed assemblies against the latest stable release on NuGet.org for each library. This check is informational only — intentional breaks at major version bumps are expected.

⚠️ WopiHost.Abstractions vs 8.0.0

API differences found — click to expand
PKV006: Target framework net8.0 is no longer supported in the latest version.
PKV006: Target framework net8.0 is no longer supported in the latest version.
PKV006: Target framework net9.0 is no longer supported in the latest version.
PKV006: Target framework net9.0 is no longer supported in the latest version.
API compatibility errors between 'lib/net10.0/WopiHost.Abstractions.dll' (./artifacts/baseline/WopiHost.Abstractions.8.0.0.nupkg) and 'lib/net10.0/WopiHost.Abstractions.dll' (./artifacts/new/WopiHost.Abstractions.99.99.99.nupkg):
CP0002: Member 'System.Threading.Tasks.Task<WopiHost.Abstractions.WopiCheckContainerInfo> WopiHost.Abstractions.ICheckContainerInfoBuilder.BuildAsync(WopiHost.Abstractions.IWopiContainer, Microsoft.AspNetCore.Http.HttpContext, System.Threading.CancellationToken)' exists on [Baseline] lib/net10.0/WopiHost.Abstractions.dll but not on lib/net10.0/WopiHost.Abstractions.dll
CP0006: Cannot add interface member 'System.Threading.Tasks.Task<WopiHost.Abstractions.WopiCheckContainerInfo> WopiHost.Abstractions.ICheckContainerInfoBuilder.BuildAsync(WopiHost.Abstractions.IWopiContainer, System.Security.Claims.ClaimsPrincipal, System.Threading.CancellationToken)' to lib/net10.0/WopiHost.Abstractions.dll because it does not exist on [Baseline] lib/net10.0/WopiHost.Abstractions.dll
CP0002: Member 'System.Threading.Tasks.Task<WopiHost.Abstractions.WopiCheckFileInfo> WopiHost.Abstractions.ICheckFileInfoBuilder.BuildAsync(WopiHost.Abstractions.IWopiFile, Microsoft.AspNetCore.Http.HttpContext, WopiHost.Abstractions.WopiHostCapabilities?, string?, System.Threading.CancellationToken)' exists on [Baseline] lib/net10.0/WopiHost.Abstractions.dll but not on lib/net10.0/WopiHost.Abstractions.dll
CP0006: Cannot add interface member 'System.Threading.Tasks.Task<WopiHost.Abstractions.WopiCheckFileInfo> WopiHost.Abstractions.ICheckFileInfoBuilder.BuildAsync(WopiHost.Abstractions.IWopiFile, WopiHost.Abstractions.WopiRequestInfo, WopiHost.Abstractions.WopiHostCapabilities?, string?, System.Threading.CancellationToken)' to lib/net10.0/WopiHost.Abstractions.dll because it does not exist on [Baseline] lib/net10.0/WopiHost.Abstractions.dll
CP0002: Member 'WopiHost.Abstractions.WopiCheckFolderInfo WopiHost.Abstractions.ICheckFolderInfoBuilder.Build(WopiHost.Abstractions.IWopiContainer, Microsoft.AspNetCore.Http.HttpContext)' exists on [Baseline] lib/net10.0/WopiHost.Abstractions.dll but not on lib/net10.0/WopiHost.Abstractions.dll
CP0006: Cannot add interface member 'WopiHost.Abstractions.WopiCheckFolderInfo WopiHost.Abstractions.ICheckFolderInfoBuilder.Build(WopiHost.Abstractions.IWopiContainer, System.Security.Claims.ClaimsPrincipal)' to lib/net10.0/WopiHost.Abstractions.dll because it does not exist on [Baseline] lib/net10.0/WopiHost.Abstractions.dll
CP0002: Member 'System.Threading.Tasks.Task<bool> WopiHost.Abstractions.IWopiProofValidator.ValidateProofAsync(Microsoft.AspNetCore.Http.HttpContext, string)' exists on [Baseline] lib/net10.0/WopiHost.Abstractions.dll but not on lib/net10.0/WopiHost.Abstractions.dll
CP0006: Cannot add interface member 'System.Threading.Tasks.Task<bool> WopiHost.Abstractions.IWopiProofValidator.ValidateProofAsync(WopiHost.Abstractions.WopiRequestInfo, string)' to lib/net10.0/WopiHost.Abstractions.dll because it does not exist on [Baseline] lib/net10.0/WopiHost.Abstractions.dll
CP0002: Member 'WopiHost.Abstractions.WopiNewChildFileRequest.WopiNewChildFileRequest(string, string?, string?, bool, string)' exists on [Baseline] lib/net10.0/WopiHost.Abstractions.dll but not on lib/net10.0/WopiHost.Abstractions.dll
CP0002: Member 'void WopiHost.Abstractions.WopiNewChildFileRequest.Deconstruct(out string, out string?, out string?, out bool, out string)' exists on [Baseline] lib/net10.0/WopiHost.Abstractions.dll but not on lib/net10.0/WopiHost.Abstractions.dll
CP0002: Member 'WopiHost.Abstractions.WopiNewChildFileResult WopiHost.Abstractions.WopiNewChildFileResult.BadRequest()' exists on [Baseline] lib/net10.0/WopiHost.Abstractions.dll but not on lib/net10.0/WopiHost.Abstractions.dll
API breaking changes found. If those are intentional, the APICompat suppression file can be updated by specifying the '--generate-suppression-file' parameter.

⚠️ WopiHost.Core vs 8.0.0

API differences found — click to expand
PKV006: Target framework net8.0 is no longer supported in the latest version.
PKV006: Target framework net8.0 is no longer supported in the latest version.
PKV006: Target framework net9.0 is no longer supported in the latest version.
PKV006: Target framework net9.0 is no longer supported in the latest version.
API compatibility errors between 'lib/net10.0/WopiHost.Core.dll' (./artifacts/baseline/WopiHost.Core.8.0.0.nupkg) and 'lib/net10.0/WopiHost.Core.dll' (./artifacts/new/WopiHost.Core.99.99.99.nupkg):
CP0001: Type 'WopiHost.Core.Controllers.ContainersController' exists on [Baseline] lib/net10.0/WopiHost.Core.dll but not on lib/net10.0/WopiHost.Core.dll
CP0001: Type 'WopiHost.Core.Controllers.EcosystemController' exists on [Baseline] lib/net10.0/WopiHost.Core.dll but not on lib/net10.0/WopiHost.Core.dll
CP0001: Type 'WopiHost.Core.Controllers.FilesController' exists on [Baseline] lib/net10.0/WopiHost.Core.dll but not on lib/net10.0/WopiHost.Core.dll
CP0001: Type 'WopiHost.Core.Controllers.FoldersController' exists on [Baseline] lib/net10.0/WopiHost.Core.dll but not on lib/net10.0/WopiHost.Core.dll
CP0001: Type 'WopiHost.Core.Controllers.WopiBootstrapperController' exists on [Baseline] lib/net10.0/WopiHost.Core.dll but not on lib/net10.0/WopiHost.Core.dll
CP0002: Member 'System.Threading.Tasks.Task<WopiHost.Abstractions.WopiCheckContainerInfo> WopiHost.Core.Infrastructure.DefaultCheckContainerInfoBuilder.BuildAsync(WopiHost.Abstractions.IWopiContainer, Microsoft.AspNetCore.Http.HttpContext, System.Threading.CancellationToken)' exists on [Baseline] lib/net10.0/WopiHost.Core.dll but not on lib/net10.0/WopiHost.Core.dll
CP0002: Member 'System.Threading.Tasks.Task<WopiHost.Abstractions.WopiCheckFileInfo> WopiHost.Core.Infrastructure.DefaultCheckFileInfoBuilder.BuildAsync(WopiHost.Abstractions.IWopiFile, Microsoft.AspNetCore.Http.HttpContext, WopiHost.Abstractions.WopiHostCapabilities?, string?, System.Threading.CancellationToken)' exists on [Baseline] lib/net10.0/WopiHost.Core.dll but not on lib/net10.0/WopiHost.Core.dll
CP0002: Member 'WopiHost.Abstractions.WopiCheckFolderInfo WopiHost.Core.Infrastructure.DefaultCheckFolderInfoBuilder.Build(WopiHost.Abstractions.IWopiContainer, Microsoft.AspNetCore.Http.HttpContext)' exists on [Baseline] lib/net10.0/WopiHost.Core.dll but not on lib/net10.0/WopiHost.Core.dll
CP0002: Member 'WopiHost.Core.Infrastructure.DefaultWopiNewChildFileNegotiator.DefaultWopiNewChildFileNegotiator(WopiHost.Abstractions.IWopiStorageProvider, WopiHost.Abstractions.IWopiWritableStorageProvider, WopiHost.Abstractions.IWopiLockProvider?)' exists on [Baseline] lib/net10.0/WopiHost.Core.dll but not on lib/net10.0/WopiHost.Core.dll
CP0001: Type 'WopiHost.Core.Infrastructure.FromStringBodyAttribute' exists on [Baseline] lib/net10.0/WopiHost.Core.dll but not on lib/net10.0/WopiHost.Core.dll
CP0001: Type 'WopiHost.Core.Infrastructure.FromStringBodyModelBinder' exists on [Baseline] lib/net10.0/WopiHost.Core.dll but not on lib/net10.0/WopiHost.Core.dll
CP0001: Type 'WopiHost.Core.Infrastructure.HttpHeaderAttribute' exists on [Baseline] lib/net10.0/WopiHost.Core.dll but not on lib/net10.0/WopiHost.Core.dll
CP0001: Type 'WopiHost.Core.Infrastructure.RequiresWritableStorageAttribute' exists on [Baseline] lib/net10.0/WopiHost.Core.dll but not on lib/net10.0/WopiHost.Core.dll
CP0001: Type 'WopiHost.Core.Infrastructure.WopiOverrideHeaderAttribute' exists on [Baseline] lib/net10.0/WopiHost.Core.dll but not on lib/net10.0/WopiHost.Core.dll
CP0001: Type 'WopiHost.Core.Infrastructure.WopiTelemetryActionFilter' exists on [Baseline] lib/net10.0/WopiHost.Core.dll but not on lib/net10.0/WopiHost.Core.dll
CP0001: Type 'WopiHost.Core.Results.FileResult' exists on [Baseline] lib/net10.0/WopiHost.Core.dll but not on lib/net10.0/WopiHost.Core.dll
CP0001: Type 'WopiHost.Core.Results.InternalServerErrorResult' exists on [Baseline] lib/net10.0/WopiHost.Core.dll but not on lib/net10.0/WopiHost.Core.dll
CP0001: Type 'WopiHost.Core.Results.InvalidContainerNameResult' exists on [Baseline] lib/net10.0/WopiHost.Core.dll but not on lib/net10.0/WopiHost.Core.dll
CP0001: Type 'WopiHost.Core.Results.JsonResult<T>' exists on [Baseline] lib/net10.0/WopiHost.Core.dll but not on lib/net10.0/WopiHost.Core.dll
CP0001: Type 'WopiHost.Core.Results.LockMismatchResult' exists on [Baseline] lib/net10.0/WopiHost.Core.dll but not on lib/net10.0/WopiHost.Core.dll
CP0001: Type 'WopiHost.Core.Results.NotImplementedResult' exists on [Baseline] lib/net10.0/WopiHost.Core.dll but not on lib/net10.0/WopiHost.Core.dll
CP0001: Type 'WopiHost.Core.Results.PreconditionFailedResult' exists on [Baseline] lib/net10.0/WopiHost.Core.dll but not on lib/net10.0/WopiHost.Core.dll
CP0001: Type 'WopiHost.Core.Security.Authentication.WopiOriginValidationActionFilter' exists on [Baseline] lib/net10.0/WopiHost.Core.dll but not on lib/net10.0/WopiHost.Core.dll
CP0002: Member 'System.Threading.Tasks.Task<bool> WopiHost.Core.Security.Authentication.WopiProofValidator.ValidateProofAsync(Microsoft.AspNetCore.Http.HttpContext, string)' exists on [Baseline] lib/net10.0/WopiHost.Core.dll but not on lib/net10.0/WopiHost.Core.dll
API breaking changes found. If those are intentional, the APICompat suppression file can be updated by specifying the '--generate-suppression-file' parameter.

⚠️ WopiHost.Discovery vs 8.0.0

API differences found — click to expand
PKV006: Target framework net8.0 is no longer supported in the latest version.
PKV006: Target framework net8.0 is no longer supported in the latest version.
PKV006: Target framework net9.0 is no longer supported in the latest version.
PKV006: Target framework net9.0 is no longer supported in the latest version.
API breaking changes found. If those are intentional, the APICompat suppression file can be updated by specifying the '--generate-suppression-file' parameter.

⚠️ WopiHost.Url vs 8.0.0

API differences found — click to expand
PKV006: Target framework net8.0 is no longer supported in the latest version.
PKV006: Target framework net8.0 is no longer supported in the latest version.
PKV006: Target framework net9.0 is no longer supported in the latest version.
PKV006: Target framework net9.0 is no longer supported in the latest version.
API breaking changes found. If those are intentional, the APICompat suppression file can be updated by specifying the '--generate-suppression-file' parameter.

⚠️ WopiHost.FileSystemProvider vs 8.0.0

API differences found — click to expand
PKV006: Target framework net8.0 is no longer supported in the latest version.
PKV006: Target framework net8.0 is no longer supported in the latest version.
PKV006: Target framework net9.0 is no longer supported in the latest version.
PKV006: Target framework net9.0 is no longer supported in the latest version.
API breaking changes found. If those are intentional, the APICompat suppression file can be updated by specifying the '--generate-suppression-file' parameter.

⚠️ WopiHost.MemoryLockProvider vs 8.0.0

API differences found — click to expand
PKV006: Target framework net8.0 is no longer supported in the latest version.
PKV006: Target framework net8.0 is no longer supported in the latest version.
PKV006: Target framework net9.0 is no longer supported in the latest version.
PKV006: Target framework net9.0 is no longer supported in the latest version.
API breaking changes found. If those are intentional, the APICompat suppression file can be updated by specifying the '--generate-suppression-file' parameter.

⚠️ WopiHost.AzureStorageProvider vs 8.0.0

API differences found — click to expand
PKV006: Target framework net8.0 is no longer supported in the latest version.
PKV006: Target framework net8.0 is no longer supported in the latest version.
PKV006: Target framework net9.0 is no longer supported in the latest version.
PKV006: Target framework net9.0 is no longer supported in the latest version.
API breaking changes found. If those are intentional, the APICompat suppression file can be updated by specifying the '--generate-suppression-file' parameter.

⚠️ WopiHost.AzureLockProvider vs 8.0.0

API differences found — click to expand
PKV006: Target framework net8.0 is no longer supported in the latest version.
PKV006: Target framework net8.0 is no longer supported in the latest version.
PKV006: Target framework net9.0 is no longer supported in the latest version.
PKV006: Target framework net9.0 is no longer supported in the latest version.
API breaking changes found. If those are intentional, the APICompat suppression file can be updated by specifying the '--generate-suppression-file' parameter.

Diagnostic IDs starting with CP are assembly-level diffs; PKV are package-shape diffs. See the ApiCompat docs for details.

@qltysh

qltysh Bot commented Jun 4, 2026

Copy link
Copy Markdown

Qlty


Coverage Impact

This PR will not change total coverage.

🚦 See full report on Qlty Cloud »

🛟 Help
  • Diff Coverage: Coverage for added or modified lines of code (excludes deleted files). Learn more.

  • Total Coverage: Coverage for the whole repository, calculated as the sum of all File Coverage. Learn more.

  • File Coverage: Covered Lines divided by Covered Lines plus Missed Lines. (Excludes non-executable lines including blank lines and comments.)

    • Indirect Changes: Changes to File Coverage for files that were not modified in this PR. Learn more.

@codecov

codecov Bot commented Jun 4, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.05%. Comparing base (3bd6743) to head (20bbcf0).
⚠️ Report is 10 commits behind head on master.

Additional details and impacted files
@@           Coverage Diff           @@
##           master     #505   +/-   ##
=======================================
  Coverage   93.05%   93.05%           
=======================================
  Files         116      116           
  Lines        4582     4582           
  Branches      563      563           
=======================================
  Hits         4264     4264           
  Misses        161      161           
  Partials      157      157           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@github-actions github-actions Bot merged commit 7f10aec into master Jun 4, 2026
13 checks passed
@github-actions github-actions Bot deleted the dependabot/nuget/System.IdentityModel.Tokens.Jwt-8.19.1 branch June 4, 2026 07:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants