chore(deps): Bump the nuget group with 3 updates

[dependabot]

Updated Microsoft.IdentityModel.Tokens from 8.21.0 to 8.22.0.

Release notes

Sourced from Microsoft.IdentityModel.Tokens's releases.

8.22.0

What's Changed

• Promote exception to property, add test by @​westin-m in [cherry-pick] promote exception to property, add test (#3471) AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3486
• Add IgnoreCaseWhenValidatingAudience flag to audience validation by @​cpp11nullptr in Backport: Add IgnoreCaseWhenValidatingAudience flag to audience validation (#3558) AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3563

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.21.0...8.22.0

Commits viewable in compare view.

Updated StackExchange.Redis from 3.0.17 to 3.0.25.

Release notes

Sourced from StackExchange.Redis's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated System.IdentityModel.Tokens.Jwt from 8.21.0 to 8.22.0.

Release notes

Sourced from System.IdentityModel.Tokens.Jwt's releases.

8.22.0

What's Changed

• Promote exception to property, add test by @​westin-m in [cherry-pick] promote exception to property, add test (#3471) AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3486
• Add IgnoreCaseWhenValidatingAudience flag to audience validation by @​cpp11nullptr in Backport: Add IgnoreCaseWhenValidatingAudience flag to audience validation (#3558) AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#3563

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.21.0...8.22.0

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

API Compatibility Report

Compared this PR's packed assemblies against the latest stable release on NuGet.org for each library, honoring each project's CompatibilitySuppressions.xml. This check fails on any public-API break not recorded as intentional — already-suppressed breaks are masked, so what surfaces below is what this PR changes. If a break is deliberate, regenerate and commit the suppressions:

dotnet pack -c Release -p:ApiCompatGenerateSuppressionFile=true

✅ WopiHost.Abstractions vs 9.1.0

No public API breaking changes detected.

✅ WopiHost.Core vs 9.1.0

No public API breaking changes detected.

✅ WopiHost.Discovery vs 9.1.0

No public API breaking changes detected.

✅ WopiHost.Url vs 9.1.0

No public API breaking changes detected.

✅ WopiHost.FileSystemProvider vs 9.1.0

No public API breaking changes detected.

✅ WopiHost.MemoryLockProvider vs 9.1.0

No public API breaking changes detected.

✅ WopiHost.AzureStorageProvider vs 9.1.0

No public API breaking changes detected.

✅ WopiHost.AzureLockProvider vs 9.1.0

No public API breaking changes detected.

---

No unsuppressed public-API breaks across any package.

[github-actions]

WOPI Validator results

Status	Count
✅ Pass	115
❌ Fail	3
⏭️ Skipped	101

Validator: WopiValidator 2.0.5 (from nuget.org)
Test category: All

📋 Full report and wopi-validator-output artifact ↗

[qltysh]

Coverage Impact

This PR will not change total coverage.

🚦 See full report on Qlty Cloud »

🛟 Help

• Diff Coverage: Coverage for added or modified lines of code (excludes deleted files). Learn more.

• Total Coverage: Coverage for the whole repository, calculated as the sum of all File Coverage. Learn more.

• File Coverage: Covered Lines divided by Covered Lines plus Missed Lines. (Excludes non-executable lines including blank lines and comments.)

  • Indirect Changes: Changes to File Coverage for files that were not modified in this PR. Learn more.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.31%. Comparing base (b4f7c0d) to head (9ce3f2c).
⚠️ Report is 1 commits behind head on master.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##           master     #626   +/-   ##
=======================================
  Coverage   93.31%   93.31%           
=======================================
  Files         125      125           
  Lines        4906     4906           
  Branches      599      599           
=======================================
  Hits         4578     4578           
  Misses        169      169           
  Partials      159      159           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.