Skip to content

Bump the minor-and-patch group with 12 updates - #198

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/minor-and-patch-74817b84ef
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/minor-and-patch-74817b84ef

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 7, 2026 •

Copy link
Copy Markdown
Contributor

Updated Avalonia.Headless from 11.3.12 to 11.3.22.

Release notes

Sourced from Avalonia.Headless's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Avalonia.Skia from 11.3.12 to 11.3.22.

Release notes

Sourced from Avalonia.Skia's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated FluentIcons.Avalonia from 1.1.223 to 1.3.316.

Release notes

Sourced from FluentIcons.Avalonia's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection from 10.0.6 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Identity.Client from 4.83.3 to 4.90.1.

Release notes

Sourced from Microsoft.Identity.Client's releases.

4.90.1

New Features

  • Added IMsalWsTrustHttpClientFactory, allowing custom HTTP client factories to provide redirect-disabled, credential-policy-aware clients for federation metadata (MEX) and WS-Trust requests. Added MsalError.TooManyRedirects and MsalError.WsTrustCrossOriginRedirectNotSupported for redirect failures. #​6165

Bug Fixes

  • Hardened federation metadata and WS-Trust requests by requiring HTTPS, securely validating redirects, rejecting credential-bearing cross-origin redirects, and limiting redirect chains. #​6165
  • Fixed instance discovery so a custom authority port is not forwarded to the global discovery host, while preserving the port when discovery uses the authority host. #​6155
  • Fixed KeyGuard attestation to send the tenant ID as the MAA client_id metadata value without changing managed-identity client-ID handling or attestation-cache partitioning. #​6200

Changes

  • Updated Microsoft.Azure.Security.KeyGuardAttestation from version 1.1.7 to 1.1.8. #​6202

4.90.0

Changes

  • Updated the KeyGuardAttestation package version to 1.1.7. #​6189

4.89.0

What's Changed

New Contributors

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.88.0...4.89.0

4.88.0

New Features

  • Added user-assigned managed identity support for Azure Arc, including selecting the identity by client ID and validating the identity returned in the token response. #​6128
  • Added WithRequestOverMtls() to managed identity token requests, enabling attested bearer-token acquisition over the IMDSv2 mTLS transport. #​6086

Bug Fixes

  • Fixed token-cache key collisions by length-prefixing additional cache-key components before hashing. #​6137
  • Populated authentication-result telemetry metadata on proactive background-refresh results. #​6157
  • Fixed mTLS PoP authority validation incorrectly rejecting sovereign-cloud aliases such as login.chinacloudapi.cn and login.usgovcloudapi.net. #​6153

4.87.0

What's Changed

  • Expose MsalServiceException.ErrorCodesForLogging for diagnostics in #​6138
  • Expose WithOtelTagsEnricher for managed identity requests in #​6144
  • Forward OpenTelemetry tags enricher to the client-assertion callback in #​6142
  • Add client-side opaque-token log scrubber in #​6119
  • Populate ExecutionResult.Exception for non-MSAL failures in #​6139
  • Use PSS padding in KeyGuard liveness probe (CodeQL SM03799) in #​6141
  • Remove managed identity support from WithClaimsFromClient (confidential-client only) in #​6113
  • Remove experimental features from client setup in #​6143
  • Update Azure Arc managed identity API version from 2019-11-01 to 2020-06-01 in #​6130

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.86.1...4.87.0

4.86.1

Bug Fixes

  • Fixed the mTLS Proof-of-Possession token cache to key on the certificate's full DER (x5t#S256) instead of only the public key, preventing a stale token (and AADSTS500181) after a same-key certificate renewal. #​6123
  • Fell back to RS256 when a certificate's PSS signing operation is rejected by RSACryptoServiceProvider, rebuilding the client assertion so authentication can proceed. #​6126
  • Detect and reject symbolic links in the Unix cache-file write path (lstat pre-check plus O_NOFOLLOW), closing a TOCTOU window. #​6115
  • Corrected misleading "region required" error messages and doc comments in the mTLS PoP flow. #​6127

4.86.0

What's Changed

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.85.2...4.86.0

4.85.2

What's Changed

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.85.1...4.85.2

4.85.1

What's Changed

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.85.0...4.85.1

4.85.0

What's Changed

New Contributors

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.84.2...4.85.0

4.84.2

New Features

  • Added ManagedIdentityApplication.GetManagedIdentityCapabilitiesAsync(CancellationToken) returning a ManagedIdentityCapabilities object that reports the detected managed identity Source, the host's MaxSupportedBindingStrength (new MtlsBindingStrength enum: None, Software, KeyGuard), and a derived IsMtlsPopSupportedByHost. Replaces GetManagedIdentitySourceAsync()/ManagedIdentitySourceResult. The public ManagedIdentitySource.ImdsV2 value is folded into Imds (v1/v2 routing remains internal). #​6049
  • Added OID-based user identification to the User Federated Identity Credential (user_fic) flow via AcquireTokenByUserFederatedIdentityCredential(scopes, Guid userObjectId, assertion). #​6050
  • Added WithClaimsFromClient(claimsJson) to forward client-originated claims across managed identity and confidential client flows. #​5999
  • Added mTLS PoP support for WithCertificate(() => x509) (dynamic certificate credential). #​5957
  • Added opt-in token-acquisition metrics covering both successful and failed attempts. #​6004

Changes

  • Extended mTLS bearer transport (CertificateOptions.SendCertificateOverMtls) to the OBO, refresh-token, and authorization-code flows. #​6009
  • General Availability of the Microsoft.Identity.Client.KeyAttestation package. #​6038
  • Managed identity now probes IMDSv2 first and the preview latch was removed. #​6041
  • Updated NativeInterop baseline and corrected devapp version ranges. #​6045
  • Simplified GetTenantedAuthority in CiamAuthority and DstsAuthority. #​6001

Bug Fixes

  • Fixed WithExtraQueryParameters on ManagedIdentityApplicationBuilder bypassing token caching. #​6035
  • Guarded HTTP status codes on discovery endpoints in KnownInstanceMetadataIsUpToDateAsync. #​6048
  • Detect orphaned KeyGuard certificates via public-key modulus comparison. #​6020

4.84.1

What's Changed

New Features

  • Added WithReservedScopes and WithCachePartitionKey public API extensions in #​6014
  • Added IAuthenticationOperation3 interface for CDT + mTLS PoP composition in #​5996
  • Added MsalRemainingTokenLifetime histogram metric for token expiry tracking in #​5920

Changes

  • Removed [Obsolete] attribute from WithExtraBodyParameters extension method in #​6006
  • Replaced ConcurrentHashSet with ConcurrentDictionary<T, byte> in #​5975

Bug Fixes

  • Fixed WithTenantId not honoring MSA tenant GUID when specified at request level in #​5958
  • Fixed OBO cache returning multiple_matching_tokens_detected when attributed tokens share a partition in #​5993

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@6ff7075...main (AzureAD/microsoft-authentication-library-for-dotnet@6ff7075...main)

4.84.0

What's Changed

New Features

  • Remove embedded Newtonsoft.Json, migrate to System.Text.Json exclusively in #​5959
  • Expose refresh token via extension and add CacheOptions.DisableInternalCache in #​5947
  • Added support for WithAttributeTokens in #​5888
  • Feature: mTLS Bearer via CertificateOptions.SendCertificateOverMtls in #​5849
  • Remove experimental feature gate from WithClientAssertion(ClientSignedAssertion) overload in #​5945
  • Support forwarding MSAL client metadata headers through IMDS to ESTS in #​5912
  • Add CorrelationId to AssertionRequestOptions for FIC in #​5937
  • Add raw STS error code to MsalFailure metric in #​5961

Bug Fixes

  • Fix: make System.ValueTuple conditional on net462 only in #​5906
  • Fix eager evaluation in ConcurrentDictionary.GetOrAdd calls in #​5950
  • Validate clientSignedAssertionProvider delegate is non-null in WithClientAssertion in #​5956
  • Improve MtlsPopTokenNotSupportedInImdsV1 error message clarity in #​5908
  • Added more checks for issuer validation in #​5931

Improvements

  • Remove region as hard requirement for mTLS PoP flows in #​5902
  • Add in-process MAA token caching to PopKeyAttestor in #​5887
  • Refactor client credential material resolution in #​5835

Dependencies Updates

  • Bump OpenTelemetry version in #​5960

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.83.3...cb59f84 (AzureAD/microsoft-authentication-library-for-dotnet@4.83.3...cb59f84)

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.4.0 to 18.10.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.10.1

What's Changed

Full Changelog: microsoft/vstest@v18.10.0...v18.10.1

18.10.0

What's Changed

Full Changelog: microsoft/vstest@v18.9.0...v18.10.0

18.9.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.8.0...v18.9.0

18.8.1

What's Changed

Full Changelog: microsoft/vstest@v18.8.0...v18.8.1

18.8.0

What's Changed

Full Changelog: microsoft/vstest@v18.7.0...v18.8.0

18.7.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.6.0...v18.7.0

18.6.0

What's Changed

Changes to tests and infra

18.5.1

What's Changed

Full Changelog: microsoft/vstest@v18.5.0...v18.5.1

18.5.0

⚠️ Unlisted on Nuget, because of #​15718

What's Changed

Full Changelog: microsoft/vstest@v18.4.0...v18.5.0

Commits viewable in compare view.

Updated Microsoft.PowerShell.SDK from 7.6.0 to 7.6.6.

Release notes

Sourced from Microsoft.PowerShell.SDK's releases.

7.6.6

## [7.6.6]

Engine Updates and Fixes

  • Fix FileOnlyEntry crashing on older versions of Windows (#​27931)
  • Add support for new WLDP setting EnableFileOnlyEntry (#​27922)

General Cmdlet Updates and Fixes

  • Remove the <assembly> element from CmdletizationCoreResources.resx (#​27932)

Tests

  • Fix the localization tests for Release Automation (#​27945)

Build and Packaging Improvements

Update to .NET SDK 10.0.401

  • Update AppxManifest.xml to only declare en-US for the <Resources> element (#​27941)
  • Localized file check-in by OneLocBuild Task: Build definition ID 13420: Build ID 2701735 (#​27895) (#​27942)
  • Produce satellite assemblies in Windows release build and properly remove them when they are not required (#​27943)
  • Update the manifest resource names for the localized resources embedded in satellite assemblies (#​27921)
  • Update LocProject.json to list each English resource file directly (#​27937)
  • Localized file check-in by OneLocBuild Task: Build definition ID 13420: Build ID 2691582 (#​27936)
  • Localized file check-in by OneLocBuild Task: Build definition ID 13420: Build ID 2684623 (#​27935)
  • Localized file check-in by OneLocBuild Task: Build definition ID 13420: Build ID 2674492 (#​27930)
  • Localized file check-in by OneLocBuild Task: Build definition ID 13420: Build ID 2670960 (#​27929)
  • Localized file check-in by OneLocBuild Task: Build definition ID 13420: Build ID 2661935 (#​27928)
  • Use Custom Validation Policy for vPack Pipeline (#​27914)
  • Fix comments in CmdletizationCoreResources.resx (#​27924)
  • Localized file check-in by OneLocBuild Task: Build definition ID 13420: Build ID 2660148 (#​27923)
  • Fix install dotnet for non early access release (#​27927)
  • Fix the W3C URIs in .resx resource files (#​27917)
  • Localized file check-in by OneLocBuild Task: Build definition ID 13420: Build ID 2652124 (#​27918)
  • Prepare for onboarding PowerShell to the Native2Native localization pipeline (#​27916)
  • Add the group 'mscodehub-feed-read-akv' (#​27894)
  • Add the group 'mscodehub-feed-read-general' for MSIXBundle-vpack pipeline (#​27893)
  • Add debug statement for ResGen build (#​27890)

... (truncated)

7.6.5

## 7.6.5

Engine Updates and Fixes

  • Fix the dot-sourcing behavior of pwsh -file for advanced-function scripts (#​27762)

Tests

  • Update CI workflow to also target servicing-* branches (#​27654)

Build and Packaging Improvements

Update to .NET SDK 10.0.302

  • Fix OneBranch output variables for early .NET jobs (#​27845)
  • Fix the condition check for signing EXE (#​27827)
  • Fix the conflict resolution error in 7.6.5 branch (#​27820)
  • Use .NET SDK and NuGet feed early access for build, package and release pipelines (#​27806)
  • Update Microsoft.PowerShell.Archive version to 1.2.6 (#​27800)
  • Ship localized resources only for MSIX packages (#​27799)
  • Produce min-size package for arm64 architecture (#​27798)
  • Update branch for release (#​27787)

SHA256 Hashes of the release artifacts

  • hashes.sha256
    • C01275FD380911EF2ADFDAF04F04E3E06872DC0112E401DE18A88DD3DDC055D8
  • powershell-7.6.5-1.cm.aarch64.rpm
    • FC5DE8BA1E632258E13B97EBABFB0169336E3EB2D4340475E8CA1AF76EB389FF
  • powershell-7.6.5-1.cm.x86_64.rpm
    • E94598451864707BA807413ADF5B28CBB8E9C11F552D71132ACF19CCDBD0663B
  • powershell-7.6.5-1.rh.x86_64.rpm
    • B5FC85883B84628395E71BBFF6EA0D7046D15C2450AF61DD1953A1824EEDED0B
  • powershell-7.6.5-linux-arm32.tar.gz
    • C5C1902984541D72E8220B2328A36DE9D4C10EBEDFD9506F73B8A550A8AF8DF5
  • powershell-7.6.5-linux-arm64.tar.gz
    • ED4084F215D8BCE2EDD23AA7CB1F1E7B0818E41363A635A22065D2701B6141DF
      ... (truncated)

7.6.4

## 7.6.4

Build and Packaging Improvements

Update to .NET SDK 10.0.302

  • Update branch for release (#​27685)
  • Avoid calling credential provider for public feed for Wix (#​27666)
  • Separate NuGet publish into its own stage after pushing the git tag (#​27652)
  • PMC: Download deb_arm artifact to ensure package is available for PMC publish flow (#​27653)

SHA256 Hashes of the release artifacts

  • hashes.sha256
    • C07BA02C95F9F56F467B1E4FC5515E21F88D4842680DF5C3B106F8DD4C4D052C
  • powershell-7.6.4-1.cm.aarch64.rpm
    • 29B361EFFCC062D9AAB58522A601794BB168F8FFFA750940AA16FB7E112AB41E
  • powershell-7.6.4-1.cm.x86_64.rpm
    • 6BB63EEEFAAA7B39EE3FACA56640A421195DCAAF83FB9621A39FE7B62120B88D
  • powershell-7.6.4-1.rh.x86_64.rpm
    • 9D82CEA75AD553FE8EB06E0E28D1DCD50DC42E63566A31A8D561CAFF86F8FBDE
  • powershell-7.6.4-linux-arm32.tar.gz
    • 34B19245F0264EEEEA94D382FFC033891095D9A2B6D0392ED66B909BF0D3DFF1
  • powershell-7.6.4-linux-arm64.tar.gz
    • D4EF2382FA452F2CCBDB48A01ADBBCE9ED64954872123970C16BE6D086D1224B
  • powershell-7.6.4-linux-musl-x64.tar.gz
    • 2C7C18870B1AD0C107B1665B5F8733B656EB67260F6A6970ABA4E7773287D8FD
  • powershell-7.6.4-linux-x64-fxdependent.tar.gz
    • E5C58D325A52200C37E6161B52E12141EB9A9D2685E2C8835C95018A614FD286
  • powershell-7.6.4-linux-x64-musl-noopt-fxdependent.tar.gz
    • D6933B82992001BC532AB20AAC90692E0341FEE4A55ED77E491D7276F634FA47
  • powershell-7.6.4-linux-x64.tar.gz
    • 4471B5A36BFE86EC7AF8525D36BB1CACBA0128E7AAC22D05CC064BC00E604721
  • powershell-7.6.4-osx-arm64.pkg
    • 0F79FF3F9C41B110B2873B87ABA65F52AACA20AEAA6DD7BC3F6920A61D5DCA2F
  • powershell-7.6.4-osx-arm64.tar.gz
    • FFF37135307D3A57038ADB44EDED6C3B4DCD2E254382F4913BC253499EF3469D
      ... (truncated)

7.6.3

## 7.6.3

Build and Packaging Improvements

Update to .NET SDK 10.0.301

  • Remove the unused Publish-NugetToMyGet command from packaging module (#​27576)
  • Verify Apple codesign immediately after ESRP signing (#​27542)
  • Remove unused step to clone Internal-PowerShellTeam-Tools repo in PMC publish pipeline (#​27496)

SHA256 Hashes of the release artifacts

  • hashes.sha256
    • BFCC1DC3CBB9A35142E13727CF5666F92BDC93376583084F2151559834614F50
  • powershell-7.6.3-1.cm.aarch64.rpm
    • 3DAE865184F53D09382FE3A85F99149E1C4B32C9E02BB6853F5D91BA888BA3BE
  • powershell-7.6.3-1.cm.x86_64.rpm
    • ED10DACE91485A9181B83D098A093137A7F3365A854E71994B9EBB992E0EA28E
  • powershell-7.6.3-1.rh.x86_64.rpm
    • 1FEDA0B0330E567D400F95D352A4EF1E58BB5F48A3D5DC308935DEDF99F7472C
  • powershell-7.6.3-linux-arm32.tar.gz
    • 885FEC4143089832D9A1F3EF063E6F7CF3118E0078927BA49B3BEF5345997330
  • powershell-7.6.3-linux-arm64.tar.gz
    • 7A14A385ECA7DC5BEDC1C8AA3D8B765F449ADA30AABE5785A9FD331266EB062D
  • powershell-7.6.3-linux-musl-x64.tar.gz
    • C2FDCDC95478F05AE9D62CF1C631451DCB98BB526D4BA0C0B675865A3D9B3589
  • powershell-7.6.3-linux-x64-fxdependent.tar.gz
    • DD0A72FB54E0EC1CEAA56C03B649E23E9C83A72AEC879D47AC72867CB559E082
  • powershell-7.6.3-linux-x64-musl-noopt-fxdependent.tar.gz
    • D0FA9707E03BE13CC21FB6C2512D4F382D8D2061DD9BB7398140AB30C7A25A29
  • powershell-7.6.3-linux-x64.tar.gz
    • 856D0765D2332377F9D7A4AEA76EFDFDE4DE51446E7738DDE2DFDA41DBA9E2A7
  • powershell-7.6.3-osx-arm64.pkg
    • 84EC89BE312A761D49BF4EC6E676355A715A01CB36B4E53CD16084E98BDAC492
  • powershell-7.6.3-osx-arm64.tar.gz
    • F0263C2072FE7D0953781C60497A574BEA99B37237F2554A59CE4BAD07DE8D36
  • powershell-7.6.3-osx-x64.pkg
    ... (truncated)

7.6.2

## 7.6.2

Engine Updates and Fixes

  • Enable usage in AppContainers (#​27423)
  • Fix checks for local user config file paths (#​27432)

General Cmdlet Updates and Fixes

  • Update PowerShell telemetry to respect the diagnostics and feedback setting on Windows (#​27438)

Build and Packaging Improvements

Update to .NET SDK 10.0.300

  • Update branch for release (#​27446)
  • Fix *nix permissions and use certificate_logical_to_actual (#​27439)
  • Specify linux-arm64 runtime if package type is deb-arm64 in packaging.psm1 (#​27440)
  • Remove mariner2.0 from PMC mapping (#​27422)
  • Remove package verification from the notice pipeline (#​27425)
  • Update the MSIXBundle-VPack pipeline to create VPack for both LTS and Stable channel packages (#​27435)
  • Update Microsoft.PowerShell.Native to the latest GA version (#​27436)
  • Create PowerShell package for arm debian distribution (#​27433)
  • Add macOS binary code signing and package notarization (#​27434)
  • Externalize findMissingNotices target framework selection with ordered Windows fallback (#​27424)
  • Add appLicensing capability to Appx manifest (#​27437)
  • Download PMC Packages through TemplateContext (#​27331)
  • PMC release: Use slash instead of back-slash for Linux container (#​27319)
  • Correct Variable Template Reference in NonOfficial Pipeline Templates (#​27317)

SHA256 Hashes of the release artifacts

  • hashes.sha256
    • 30E96D4B901B0069965D767A2994F47BA60EB4DB50CEEDB6F1D3BD421CEA86F4
  • powershell-7.6.2-1.cm.aarch64.rpm
    • 5E4F009EED75606DD21138F0A24A463412492930A6E15C3A6B0A4B90E37A92BE
  • powershell-7.6.2-1.cm.x86_64.rpm
    ... (truncated)

7.6.1

## 7.6.1

General Cmdlet Updates and Fixes

  • Delay update notification for one week to ensure all packages become available (#​27215)

Tests

  • Fix the PSNativeCommandArgumentPassing test (#​27179)

Build and Packaging Improvements

Update to .NET SDK 10.0.202

  • Fix PMC Repo URL for RHEL10 (#​27061) (#​27062)
  • Update branch for release (#​27287)
  • Fix package pipeline by adding in PDP-Media directory (#​27257)
  • Pin ready-to-merge.yml reusable workflow to commit SHA (#​27245)
  • [StepSecurity] ci: Harden GitHub Actions tags (#​27236)
  • Build, package, and create VPack for the PowerShell-LTS store package within the same msixbundle-vpack pipeline (#​27237)
  • Change the display name of PowerShell-LTS package to PowerShell LTS (#​27219)
  • [StepSecurity] ci: Harden GitHub Actions tokens (#​27218)
  • Redo windows image fix to use latest image (#​27217)
  • Add comment-based help documentation to build.psm1 functions (#​27216)
  • Separate Store Package Creation, Skip Polling for Store Publish, Clean up PDP-Media (#​27214)
  • Bump github/codeql-action from 4.34.1 to 4.35.1 (#​27184)
  • Bump github/codeql-action from 4.32.6 to 4.34.1 (#​27182)
  • Select New MSIX Package Name (#​27183)
  • Update the PhoneProductId to be the official LTS id used by Store (#​27181)
  • release-upload-buildinfo: replace version-comparison channel gating with metadata flags (#​27180)
  • Move _GetDependencies MSBuild target from dynamic generation in build.psm1 into Microsoft.PowerShell.SDK.csproj (#​27177)
  • Separate Official and NonOfficial templates for ADO pipelines (#​27176)

SHA256 Hashes of the release artifacts

  • hashes.sha256
    • 3EB9255BEE02EFF9E250FBE4ED66BD4215ADFE1FFAB72C7AC22C99DD4D9D93A4
      ... (truncated)

Commits viewable in compare view.

Updated Moq from 4.20.72 to 4.21.0.

Release notes

Sourced from Moq's releases.

4.21.0

What's Changed

✨ Implemented enhancements

🐛 Fixed bugs

🔨 Other

New Contributors

Full Changelog: devlooped/moq@v4.20.72...v4.21.0

Sponsors

The following sponsors made this release possible: @​clarius, @​MFB-Technologies-Inc, @​sandrock, @​drivenet, @​Keflon, @​tbolon, @​rbnswartz, @​jfoshee, @​Mrxx99, @​eajhnsn1, @​Jonathan-Hickey, @​KenBonny, @​SimonCropp, @​agileworks-eu, @​arsdragonfly, @​vezel-dev, @​ChilliCream, @​4OTC, @​DominicSchell, @​adalon, @​torutek, @​mccaffers, @​SeikaLogiciel, @​wizardness, @​eska-gmbh, @​geodata-no.

Thanks 💜

Commits viewable in compare view.

Updated System.IO.Packaging from 10.0.6 to 10.0.12.

Release notes

Sourced from System.IO.Packaging's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated System.Management.Automation from 7.6.0 to 7.6.6.

Release notes

Sourced from System.Management.Automation's releases.

7.6.6

## [7.6.6]

Engine Updates and Fixes

  • Fix FileOnlyEntry crashing on older versions of Windows (#​27931)
  • Add support for new WLDP setting EnableFileOnlyEntry (#​27922)

General Cmdlet Updates and Fixes

  • Remove the <assembly> element from CmdletizationCoreResources.resx (#​27932)

Tests

  • Fix the localization tests for Release Automation (#​27945)

Build and Packaging Improvements

Update to .NET SDK 10.0.401

  • Update AppxManifest.xml to only declare en-US for the <Resources> element (#​27941)
  • Localized file check-in by OneLocBuild Task: Build definition ID 13420: Build ID 2701735 (#​27895) (#​27942)
  • Produce satellite assemblies in Windows release build and properly remove them when they are not required (#​27943)
  • Update the manifest resource names for the localized resources embedded in satellite assemblies (#​27921)
  • Update LocProject.json to list each English resource file directly (#​27937)
  • Localized file check-in by OneLocBuild Task: Build definition ID 13420: Build ID 2691582 (#​27936)
  • Localized file check-in by OneLocBuild Task: Build definition ID 13420: Build ID 2684623 (#​27935)
  • Localized file check-in by OneLocBuild Task: Build definition ID 13420: Build ID 2674492 (#​27930)
  • Localized file check-in by OneLocBuild Task: Build definition ID 13420: Build ID 2670960 (#​27929)
  • Localized file check-in by OneLocBuild Task: Build definition ID 13420: Build ID 2661935 (#​27928)
  • Use Custom Validation Policy for vPack Pipeline (#​27914)
  • Fix comments in CmdletizationCoreResources.resx (#​27924)
  • Localized file check-in by OneLocBuild Task: Build definition ID 13420: Build ID 2660148 (#​27923)
  • Fix install dotnet for non early access release (#​27927)
  • Fix the W3C URIs in .resx resource files (#​27917)
  • Localized file check-in by OneLocBuild Task: Build definition ID 13420: Build ID 2652124 (#​27918)
  • Prepare for onboarding PowerShell to the Native2Native localization pipeline (#​27916)
  • Add the group 'mscodehub-feed-read-akv' (#​27894)
  • Add the group 'mscodehub-feed-read-general' for MSIXBundle-vpack pipeline (#​27893)
  • Add debug statement for ResGen build (#​27890)

... (truncated)

7.6.5

## 7.6.5

Engine Updates and Fixes

  • Fix the dot-sourcing behavior of pwsh -file for advanced-function scripts (#​27762)

Tests

  • Update CI workflow to also target servicing-* branches (#​27654)

Build and Packaging Improvements

Update to .NET SDK 10.0.302

  • Fix OneBranch output variables for early .NET jobs (#​27845)
  • Fix the condition check for signing EXE (#​27827)
  • Fix the conflict resolution error in 7.6.5 branch (#​27820)
  • Use .NET SDK and NuGet feed early access for build, package and release pipelines (#​27806)
  • Update Microsoft.PowerShell.Archive version to 1.2.6 (#​27800)
  • Ship localized resources only for MSIX packages (#​27799)
  • Produce min-size package for arm64 architecture (#​27798)
  • Update branch for release (#​27787)

SHA256 Hashes of the release artifacts

  • hashes.sha256
    • C01275FD380911EF2ADFDAF04F04E3E06872DC0112E401DE18A88DD3DDC055D8
  • powershell-7.6.5-1.cm.aarch64.rpm
    • FC5DE8BA1E632258E13B97EBABFB0169336E3EB2D4340475E8CA1AF76EB389FF
  • powershell-7.6.5-1.cm.x86_64.rpm
    • E94598451864707BA807413ADF5B28CBB8E9C11F552D71132ACF19CCDBD0663B
  • powershell-7.6.5-1.rh.x86_64.rpm
    • B5FC85883B84628395E71BBFF6EA0D7046D15C2450AF61DD1953A1824EEDED0B
  • powershell-7.6.5-linux-arm32.tar.gz
    • C5C1902984541D72E8220B2328A36DE9D4C10EBEDFD9506F73B8A550A8AF8DF5
  • powershell-7.6.5-linux-arm64.tar.gz
    • ED4084F215D8BCE2EDD23AA7CB1F1E7B0818E41363A635A22065D2701B6141DF
      ... (truncated)

7.6.4

## 7.6.4

Build and Packaging Improvements

Update to .NET SDK 10.0.302

  • Update branch for release (#​27685)
  • Avoid calling credential provider for public feed for Wix (#​27666)
  • Separate NuGet publish into its own stage after pushing the git tag (#​27652)
  • PMC: Download deb_arm artifact to ensure package is available for PMC publish flow (#​27653)

SHA256 Hashes of the release artifacts

  • hashes.sha256
    • C07BA02C95F9F56F467B1E4FC5515E21F88D4842680DF5C3B106F8DD4C4D052C
  • powershell-7.6.4-1.cm.aarch64.rpm
    • 29B361EFFCC062D9AAB58522A601794BB168F8FFFA750940AA16FB7E112AB41E
  • powershell-7.6.4-1.cm.x86_64.rpm
    • 6BB63EEEFAAA7B39EE3FACA56640A421195DCAAF83FB9621A39FE7B62120B88D
  • powershell-7.6.4-1.rh.x86_64.rpm
    • 9D82CEA75AD553FE8EB06E0E28D1DCD50DC42E63566A31A8D561CAFF86F8FBDE
  • powershell-7.6.4-linux-arm32.tar.gz
    • 34B19245F0264EEEEA94D382FFC033891095D9A2B6D0392ED66B909BF0D3DFF1
  • powershell-7.6.4-linux-arm64.tar.gz
    • D4EF2382FA452F2CCBDB48A01ADBBCE9ED64954872123970C16BE6D086D1224B
  • powershell-7.6.4-linux-musl-x64.tar.gz
    • 2C7C18870B1AD0C107B1665B5F8733B656EB67260F6A6970ABA4E7773287D8FD
  • powershell-7.6.4-linux-x64-fxdependent.tar.gz
    • E5C58D325A52200C37E6161B52E12141EB9A9D2685E2C8835C95018A614FD286
  • powershell-7.6.4-linux-x64-musl-noopt-fxdependent.tar.gz
    • D6933B82992001BC532AB20AAC90692E0341FEE4A55ED77E491D7276F634FA47
  • powershell-7.6.4-linux-x64.tar.gz
    • 4471B5A36BFE86EC7AF8525D36BB1CACBA0128E7AAC22D05CC064BC00E604721
  • powershell-7.6.4-osx-arm64.pkg
    • 0F79FF3F9C41B110B2873B87ABA65F52AACA20AEAA6DD7BC3F6920A61D5DCA2F
  • powershell-7.6.4-osx-arm64.tar.gz
    • FFF37135307D3A57038ADB44EDED6C3B4DCD2E254382F4913BC253499EF3469D
      ... (truncated)

7.6.3

## 7.6.3

Build and Packaging Improvements

Update to .NET SDK 10.0.301

  • Remove the unused Publish-NugetToMyGet command from packaging module (#​27576)
  • Verify Apple codesign immediately after ESRP signing (#​27542)
  • Remove unused step to clone Internal-PowerShellTeam-Tools repo in PMC publish pipeline (#​27496)

SHA256 Hashes of the release artifacts

  • hashes.sha256
    • BFCC1DC3CBB9A35142E13727CF5666F92BDC93376583084F2151559834614F50
  • powershell-7.6.3-1.cm.aarch64.rpm
    • 3DAE865184F53D09382FE3A85F99149E1C4B32C9E02BB6853F5D91BA888BA3BE
  • powershell-7.6.3-1.cm.x86_64.rpm
    • ED10DACE91485A9181B83D098A093137A7F3365A854E71994B9EBB992E0EA28E
  • powershell-7.6.3-1.rh.x86_64.rpm
    • 1FEDA0B0330E567D400F95D352A4EF1E58BB5F48A3D5DC308935DEDF99F7472C
  • powershell-7.6.3-linux-arm32.tar.gz
    • 885FEC4143089832D9A1F3EF063E6F7CF3118E0078927BA49B3BEF5345997330
  • powershell-7.6.3-linux-arm64.tar.gz
    • 7A14A385ECA7DC5BEDC1C8AA3D8B765F449ADA30AABE5785A9FD331266EB062D
  • powershell-7.6.3-linux-musl-x64.tar.gz
    • C2FDCDC95478F05AE9D62CF1C631451DCB98BB526D4BA0C0B675865A3D9B3589
  • powershell-7.6.3-linux-x64-fxdependent.tar.gz
    • DD0A72FB54E0EC1CEAA56C03B649E23E9C83A72AEC879D47AC72867CB559E082
  • powershell-7.6.3-linux-x64-musl-noopt-fxdependent.tar.gz
    • D0FA9707E03BE13CC21FB6C2512D4F382D8D2061DD9BB7398140AB30C7A25A29
  • powershell-7.6.3-linux-x64.tar.gz
    • 856D0765D2332377F9D7A4AEA76EFDFDE4DE51446E7738DDE2DFDA41DBA9E2A7
  • powershell-7.6.3-osx-arm64.pkg
    • 84EC89BE312A761D49BF4EC6E676355A715A01CB36B4E53CD16084E98BDAC492
  • powershell-7.6.3-osx-arm64.tar.gz
    • F0263C2072FE7D0953781C60497A574BEA99B37237F2554A59CE4BAD07DE8D36
  • powershell-7.6.3-osx-x64.pkg
    ... (truncated)

7.6.2

## 7.6.2

Engine Updates and Fixes

  • Enable usage in AppContainers (#​27423)
  • Fix checks for local user config file paths (#​27432)

General Cmdlet Updates and Fixes

  • Update PowerShell telemetry to respect the diagnostics and feedback setting on Windows (#​27438)

Build and Packaging Improvements

Update to .NET SDK 10.0.300

  • Update branch for release (#​27446)
  • Fix *nix permissions and use certificate_logical_to_actual (#​27439)
  • Specify linux-arm64 runtime if package type is deb-arm64 in packaging.psm1 (#​27440)
  • Remove mariner2.0 from PMC mapping (#​27422)
  • Remove package verification from the notice pipeline (#​27425)
  • Update the MSIXBundle-VPack pipeline to create VPack for both LTS and Stable channel packages (#​27435)
  • Update Microsoft.PowerShell.Native to the latest GA version (#​27436)
  • Create PowerShell package for arm debian distribution (#​27433)
  • Add macOS binary code signing and package notarization (#​27434)
  • Externalize findMissingNotices target framework selection with ordered Windows fallback (#​27424)
  • Add appLicensing capability to Appx manifest (#​27437)
  • Download PMC Packages through TemplateContext (#​27331)
  • PMC release: Use slash instead of back-slash for Linux container (#​27319)
  • Correct Variable Template Reference in NonOfficial Pipeline Templates (#​27317)

SHA256 Hashes of the release artifacts

  • hashes.sha256
    • 30E96D4B901B0069965D767A2994F47BA60EB4DB50CEEDB6F1D3BD421CEA86F4
  • powershell-7.6.2-1.cm.aarch64.rpm
    • 5E4F009EED75606DD21138F0A24A463412492930A6E15C3A6B0A4B90E37A92BE
  • powershell-7.6.2-1.cm.x86_64.rpm
    ... (truncated)

7.6.1

## 7.6.1

General Cmdlet Updates and Fixes

  • Delay update notification for one week to ensure all packages become available (#​27215)

Tests

  • Fix the PSNativeCommandArgumentPassing test (#​27179)

Build and Packaging Improvements

Update to .NET SDK 10.0.202

  • Fix PMC Repo URL for RHEL10 (#​27061) (#​27062)
  • Update branch for release (#​27287)
  • Fix package pipeline by adding in PDP-Media directory (#​27257)
  • Pin ready-to-merge.yml reusable workflow to commit SHA (#​27245)
  • [StepSecurity] ci: Harden GitHub Actions tags (#​27236)
  • Build, package, and create VPack for the PowerShell-LTS store package within the same msixbundle-vpack pipeline (#​27237)
  • Change the display name of PowerShell-LTS package to PowerShell LTS (#​27219)
  • [StepSecurity] ci: Harden GitHub Actions tokens (#​27218)
  • Redo windows image fix to use latest image (#​27217)
  • Add comment-based help documentation to build.psm1 functions (#​27216)
  • Separate Store Package Creation, Skip Polling for Store Publish, Clean up PDP-Media (#​27214)
  • Bump github/codeql-action from 4.34.1 to 4.35.1 (#​27184)
  • Bump github/codeql-action from 4.32.6 to 4.34.1 (#​27182)
  • Select New MSIX Package Name (#​27183)
  • Update the PhoneProductId to be the official LTS id used by Store (#​27181)
  • release-upload-buildinfo: replace version-comparison channel gating with metadata flags (#​27180)
  • Move _GetDependencies MSBuild target from dynamic generation in build.psm1 into Microsoft.PowerShell.SDK.csproj (#​27177)
  • Separate Official and NonOfficial templates for ADO pipelines (#​27176)

SHA256 Hashes of the release artifacts

  • hashes.sha256
    • 3EB9255BEE02EFF9E250FBE4ED66BD4215ADFE1FFAB72C7AC22C99DD4D9D93A4
      ... (truncated)

Commits viewable in compare view.

Updated System.Security.Cryptography.Xml from 10.0.10 to 10.0.12.

Release notes

Sourced from System.Security.Cryptography.Xml's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Tmds.DBus.Protocol from 0.92.0 to 0.95.1.

Release notes

Sourced from Tmds.DBus.Protocol's releases.

0.95.1

Tmds.DBus.Protocol:

0.95.0

Tmds.DBus.Generator

  • Use fully-qualified names to avoid conflicts with generated types (#​451).
  • Add Visibility attribute to control access modifiers of generated types (#​452).

0.94.2

Tmds.DBus.Generator

  • Support interfaces with more than 64 readable properties (#​447).

0.94.1

Tmds.DBus.Generator

  • Fixed DBusHandler code only being generated for the last interface when generating handler types for multiple interfaces (#​445).

0.94.0

Tmds.DBus.Protocol

  • Func<ValueTask> handler overloads added to avoid async void in user code (#​440).

Tmds.DBus.Generator

  • [Breaking] IReadableXxxProperties has been replaced with a unified IXxxProperties interface. Write-only properties are uncommon and the separate interface made explicit interface implementations more verbose (#​441).
  • Fix code generation for single-field D-Bus structs (#​439).
  • DBusHandler.ParseInterface now ignores missing interface string on Properties requests (#​442).

Documentation

  • Documentation rewritten into a single guide (#​443).

0.93.0

0.93.0

Tmds.DBus.Protocol

  • [Breaking] Previously obsoleted types and APIs have been removed (#​426):
    • Connection - use DBusConnection instead.
    • ConnectionOptions - use DBusConnectionOptions instead.
    • ClientConnectionOptions - use DBusConnectionOptions instead.
    • ClientSetupResult - use DBusConnectionOptions.SetupResult instead.
    • Address - use DBusAddress instead.
    • ActionException - use ObserverHandler instead.
    • IMethodHandler - use IPathMethodHandler instead.
    • DBusException - use DBusErrorReplyException instead.
    • DisconnectedException - use DBusConnectionClosedException instead.
    • ConnectException - use DBusConnectFailedException instead.
    • ProtocolException - use DBusUnexpectedValueException instead.
    • MethodContext.Connection - use MethodContext.DBusConnection instead.
  • AddMatchAsync overloads that accept Action<Exception?, T, object?, object?> are marked Obsolete. Use the new Action<Notification<T>> overloads instead (#​427).
  • Notification<T> / Notification / NotificationType: new callback API for signal observers, replacing the Action<Exception?, T, ...> pattern. Notifications distinguish between value, owner change, and completion events (#​427).
  • NameOwnerWatcher: tracks name ownership changes when calling methods and watching signals, enabling detection of service restarts. A DBusOwnerChangedException
    is thrown when a method call targets an owner identifier from NameOwnerWatcher and the owner has changed (#​425).
  • OnException handler on DBusConnectionOptions: provides exception reporting and disconnect control via the new ExceptionContext / ExceptionSource types (#​431).

Tmds.DBus.Generator

  • The generator can now produce handler (server-side) types for implementing D-Bus interfaces. To generate handlers, set the DBusGeneratorMode property to Handler, to generate proxies set it to Proxy. (#​429, #​433)
  • [Breaking] Instead of a single action overload that accepts Action<Exception?, T>, the generator generates a simple overload that accepts Action<T> for users that are not interested in completion notifications, and an Action<Notification<T>> overload to be notified of completions. (#​427)
  • [Breaking] To enable handler code to generate an IXxxProperties interface, the generated proxy code changed as follows:
    • The GetPropertiesAsync method now returns the concrete XxxProperties class. When trying to get properties that were not set the get accessor throws. Alternatively, users can call GetNullablePropertiesAsync which returns an INullableXxxProperties interface which returns null for properties that are not set.
    • The WatchPropertiesChanged methods use a new IChangedXxxProperties interface.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

-...

Description has been truncated

Bumps Avalonia.Headless from 11.3.12 to 11.3.22
Bumps Avalonia.Skia from 11.3.12 to 11.3.22
Bumps FluentIcons.Avalonia from 1.1.223 to 1.3.316
Bumps Microsoft.Extensions.DependencyInjection from 10.0.6 to 10.0.12
Bumps Microsoft.Identity.Client from 4.83.3 to 4.90.1
Bumps Microsoft.NET.Test.Sdk from 18.4.0 to 18.10.1
Bumps Microsoft.PowerShell.SDK from 7.6.0 to 7.6.6
Bumps Moq from 4.20.72 to 4.21.0
Bumps System.IO.Packaging from 10.0.6 to 10.0.12
Bumps System.Management.Automation from 7.6.0 to 7.6.6
Bumps System.Security.Cryptography.Xml from 10.0.10 to 10.0.12
Bumps Tmds.DBus.Protocol from 0.92.0 to 0.95.1

---
updated-dependencies:
- dependency-name: Avalonia.Headless
  dependency-version: 11.3.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Avalonia.Skia
  dependency-version: 11.3.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: FluentIcons.Avalonia
  dependency-version: 1.3.316
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Extensions.DependencyInjection
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Microsoft.Identity.Client
  dependency-version: 4.90.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Microsoft.PowerShell.SDK
  dependency-version: 7.6.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: System.Management.Automation
  dependency-version: 7.6.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Moq
  dependency-version: 4.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: Moq
  dependency-version: 4.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: System.IO.Packaging
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: System.Security.Cryptography.Xml
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Tmds.DBus.Protocol
  dependency-version: 0.95.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Oct 7, 2026
@github-actions

github-actions Bot commented Oct 7, 2026

Copy link
Copy Markdown
Contributor

Automated security review

Semgrep (deterministic)

No Semgrep findings.

@dependabot @github

dependabot Bot commented on behalf of github Oct 12, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 12, 2026
@dependabot
dependabot Bot deleted the dependabot/nuget/minor-and-patch-74817b84ef branch October 12, 2026 13:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants