Bump Microsoft.AspNetCore.Authentication.JwtBearer from 8.0.14 to 8.0.27

[dependabot]

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 8.0.14 to 8.0.27.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

8.0.27

Release

What's Changed

• [release/8.0] Update branding to 8.0.27 by @​vseanreesermsft in [release/8.0] Update branding to 8.0.27 dotnet/aspnetcore#66205
• [release/8.0] Update NPM dependencies by @​wtgodbe in [release/8.0] Update NPM dependencies dotnet/aspnetcore#66052
• [release/8.0] Move off of dead-lettered Windows preview helix queue by @​wtgodbe in [release/8.0] Move off of dead-lettered Windows preview helix queue dotnet/aspnetcore#66220
• [release/8.0] (deps): Bump src/submodules/googletest from 73a63ea to d72f9c8 by @​dependabot[bot] in [release/8.0] (deps): Bump src/submodules/googletest from 73a63ea to d72f9c8 dotnet/aspnetcore#66087
• [release/8.0] Replace dn-bot-dnceng-build-rw-code-rw PAT with WIF service connection in mirror-within-azdo by @​missymessa in [release/8.0] Replace dn-bot-dnceng-build-rw-code-rw PAT with WIF service connection in mirror-within-azdo dotnet/aspnetcore#66115
• [release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#66216
• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#66081
• [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#66131
• [release/8.0] Update @​azure/msal-browser from 2.x to 4.x by @​wtgodbe in [release/8.0] Update @azure/msal-browser from 2.x to 4.x dotnet/aspnetcore#66236
• [release/8.0] Use source-build-assets repo by @​NikolaMilosavljevic in [release/8.0] Use source-build-assets repo dotnet/aspnetcore#66276
• Merging internal commits for release/8.0 by @​vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#66317

Full Changelog: dotnet/aspnetcore@v8.0.26...v8.0.27

8.0.26

Release

What's Changed

• [release/8.0] Update branding to 8.0.26 by @​vseanreesermsft in [release/8.0] Update branding to 8.0.26 dotnet/aspnetcore#65635
• [release/8.0] (deps): Bump src/submodules/googletest from 56efe39 to 73a63ea by @​dependabot[bot] in [release/8.0] (deps): Bump src/submodules/googletest from 56efe39 to 73a63ea dotnet/aspnetcore#65586
• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#65581
• [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#65621
• [release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#65615
• Merging internal commits for release/8.0 by @​vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#65730

Full Changelog: dotnet/aspnetcore@v8.0.25...v8.0.26

8.0.25

Release

What's Changed

• Update branding to 8.0.25 by @​vseanreesermsft in Update branding to 8.0.25 dotnet/aspnetcore#65293
• [release/8.0] (deps): Bump src/submodules/googletest from 9156d4c to 56efe39 by @​dependabot[bot] in [release/8.0] (deps): Bump src/submodules/googletest from 9156d4c to 56efe39 dotnet/aspnetcore#65289
• [release/8.0] Add support for hotfix branding by @​mmitche in [release/8.0] Add support for hotfix branding dotnet/aspnetcore#65252
• [release/8.0] Remove package baseline infrastructure by @​Copilot in [release/8.0] Remove package baseline infrastructure dotnet/aspnetcore#65209
• [release/8.0] Set network isolation policy for aspnetcore-ci by @​github-actions[bot] in [release/8.0] Set network isolation policy for aspnetcore-ci dotnet/aspnetcore#65173
• [release/8.0] Fix URL format for JDK download on linux by @​github-actions[bot] in [release/8.0] Fix URL format for JDK download on linux dotnet/aspnetcore#65076
• [release/8.0] Disable parallel restore for Grpc JsonTranscoding by @​github-actions[bot] in [release/8.0] Disable parallel restore for Grpc JsonTranscoding dotnet/aspnetcore#65073
• [release/8.0] Update Ubuntu queue to 22.04 by @​github-actions[bot] in [release/8.0] Update Ubuntu queue to 22.04 dotnet/aspnetcore#65299
• [release/8.0] Re-enable Nuget Audit by @​wtgodbe in [release/8.0] Re-enable Nuget Audit dotnet/aspnetcore#65328
• [release/8.0] Don't use netcoreapp2.1 in dotnet-getdocument by @​wtgodbe in [release/8.0] Don't use netcoreapp2.1 in dotnet-getdocument dotnet/aspnetcore#65331
• [release/8.0] Update AzureIdentityVersion to 1.11.4 by @​wtgodbe in [release/8.0] Update AzureIdentityVersion to 1.11.4 dotnet/aspnetcore#65332
• [release/8.0] Disable parallel restore for linker tests by @​wtgodbe in [release/8.0] Disable parallel restore for linker tests dotnet/aspnetcore#65375
• Merging internal commits for release/8.0 by @​vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#65382
• [release/8.0] Switch to non-preview 2022 queue by @​github-actions[bot] in [release/8.0] Switch to non-preview 2022 queue dotnet/aspnetcore#65413

Full Changelog: dotnet/aspnetcore@v8.0.24...v8.0.25

8.0.24

Release

8.0.23

Release

What's Changed

https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-january-2026-servicing-updates/#release-changelogs

8.0.22

Release

What's Changed

• Update branding to 8.0.22 by @​vseanreesermsft in Update branding to 8.0.22 dotnet/aspnetcore#63949
• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#63664
• [release/8.0] (http2): Lower WINDOWS_UPDATE received on (half)closed stream to stream abortion by @​DeagleGross in [release/8.0] (http2): Lower WINDOWS_UPDATE received on (half)closed stream to stream abortion dotnet/aspnetcore#63903
• [release/8.0] (deps): Bump src/submodules/googletest from eb2d85e to 9706f75 by @​dependabot[bot] in [release/8.0] (deps): Bump src/submodules/googletest from eb2d85e to 9706f75 dotnet/aspnetcore#63893
• [release/8.0] Fixed devtools url used for debug with chrome and edge by @​github-actions[bot] in [release/8.0] Fixed devtools url used for debug with chrome and edge dotnet/aspnetcore#62080
• [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#63665
• [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#63957
• Merging internal commits for release/8.0 by @​vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#64035
• Mark productVersion.txt as shipping artifact in 8.0 by @​Copilot in Mark productVersion.txt as shipping artifact in 8.0 dotnet/aspnetcore#64067
• Revert log level severity for unknown proxy in ForwardedHeadersMiddleware by @​BrennanConroy in Revert log level severity for unknown proxy in ForwardedHeadersMiddleware dotnet/aspnetcore#64090

Full Changelog: dotnet/aspnetcore@v8.0.21...v8.0.22

8.0.21

Release

What's Changed

• Update branding to 8.0.21 by @​vseanreesermsft in Update branding to 8.0.21 dotnet/aspnetcore#63509
• [release/8.0] (deps): Bump src/submodules/googletest from 373af2e to eb2d85e by @​dependabot[bot] in [release/8.0] (deps): Bump src/submodules/googletest from 373af2e to eb2d85e dotnet/aspnetcore#63500
• [release/8.0] Make duplicate deb/rpm packages so we can sign them with the new PMC key by @​github-actions[bot] in [release/8.0] Make duplicate deb/rpm packages so we can sign them with the new PMC key dotnet/aspnetcore#63250
• [release/8.0] Extend Unofficial 1ES template in IdentityModel nightly tests job by @​github-actions[bot] in [release/8.0] Extend Unofficial 1ES template in IdentityModel nightly tests job dotnet/aspnetcore#63466
• [release/8.0] Quarantine ResponseBody_WriteContentLength_PassedThrough by @​github-actions[bot] in [release/8.0] Quarantine ResponseBody_WriteContentLength_PassedThrough dotnet/aspnetcore#63534
• [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#63261
• [release/8.0] Use wait assert in flaky tests by @​ilonatommy in [release/8.0] Use wait assert in flaky tests dotnet/aspnetcore#63565
• [release/8.0] Update Microsoft.Build versions by @​github-actions[bot] in [release/8.0] Update Microsoft.Build versions dotnet/aspnetcore#62507
• Merging internal commits for release/8.0 by @​vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#63603
• backport(8.0): Fix runtime architecture detection logic in ANCM by @​DeagleGross in backport(8.0): Fix runtime architecture detection logic in ANCM dotnet/aspnetcore#63706

Full Changelog: dotnet/aspnetcore@v8.0.20...v8.0.21

8.0.20

Release

What's Changed

• Update branding to 8.0.20 by @​vseanreesermsft in Update branding to 8.0.20 dotnet/aspnetcore#63106
• [release/8.0] (deps): Bump src/submodules/googletest from c67de11 to 373af2e by @​dependabot[bot] in [release/8.0] (deps): Bump src/submodules/googletest from c67de11 to 373af2e dotnet/aspnetcore#63038
• [release/8.0] Dispose the certificate chain elements with the chain by @​MackinnonBuck in [release/8.0] Dispose the certificate chain elements with the chain dotnet/aspnetcore#62994
• [release/8.0] Update SignalR Redis tests to use internal Docker Hub mirror by @​github-actions[bot] in [release/8.0] Update SignalR Redis tests to use internal Docker Hub mirror dotnet/aspnetcore#63117
• [release/8.0] [SignalR] Don't throw for message headers in Java client by @​github-actions[bot] in [release/8.0] [SignalR] Don't throw for message headers in Java client dotnet/aspnetcore#62784
• Merging internal commits for release/8.0 by @​vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#63152
• [release/8.0] Update dependencies from dotnet/extensions by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#63188
• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#63189

Full Changelog: dotnet/aspnetcore@v8.0.19...v8.0.20

8.0.18

Release

What's Changed

• Update branding to 8.0.18 by @​vseanreesermsft in Update branding to 8.0.18 dotnet/aspnetcore#62241
• [release/8.0] Update Alpine helix references by @​github-actions in [release/8.0] Update Alpine helix references dotnet/aspnetcore#62243
• [release/8.0] (deps): Bump src/submodules/googletest from 04ee1b4 to e9092b1 by @​dependabot in [release/8.0] (deps): Bump src/submodules/googletest from 04ee1b4 to e9092b1 dotnet/aspnetcore#62201
• [8.0] Delete src/arcade directory by @​akoeplinger in [8.0] Delete src/arcade directory dotnet/aspnetcore#61994
• [Backport 8.0] [IIS] Manually parse exe bitness (#​61894) by @​BrennanConroy in [Backport 8.0] [IIS] Manually parse exe bitness (#61894) dotnet/aspnetcore#62037
• [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#62006
• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#61944
• [release/8.0] Associate tagged keys with entries so replacements are not evicted by @​github-actions in [release/8.0] Associate tagged keys with entries so replacements are not evicted dotnet/aspnetcore#62247
• [release/8.0] Block test that is failing after switching to latest-chrome by @​github-actions in [release/8.0] Block test that is failing after switching to latest-chrome dotnet/aspnetcore#62284
• backport(net8.0): http.sys on-demand TLS client hello retrieval by @​DeagleGross in backport(net8.0): http.sys on-demand TLS client hello retrieval dotnet/aspnetcore#62290
• Merging internal commits for release/8.0 by @​vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#62302

Full Changelog: dotnet/aspnetcore@v8.0.17...v8.0.18

8.0.17

Bug Fixes

• Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61623)
  The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

• Update dependencies from dotnet/arcade (#​61832)
  This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.

• Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61761)
  The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

• Update branding to 8.0.17 (#​61830)
  The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.

• Merging internal commits for release/8.0 (#​61924)
  This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.

---

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: dotnet/aspnetcore@v8.0.16...v8.0.17

8.0.16

Release

What's Changed

• Update branding to 8.0.16 by @​vseanreesermsft in Update branding to 8.0.16 dotnet/aspnetcore#61283
• [release/8.0] (deps): Bump src/submodules/googletest from 24a9e94 to 52204f7 by @​dependabot in [release/8.0] (deps): Bump src/submodules/googletest from 24a9e94 to 52204f7 dotnet/aspnetcore#61260
• [release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#61281
• [release/8.0] Upgrade to Ubuntu 22 by @​wtgodbe in [release/8.0] Upgrade to Ubuntu 22 dotnet/aspnetcore#61216
• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#60901
• [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#60926
• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#61404
• Merging internal commits for release/8.0 by @​vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#61398
• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#61411
• Revert "Revert "[release/8.0] Update remnants of azureedge.net"" by @​wtgodbe in Revert "Revert "[release/8.0] Update remnants of azureedge.net"" dotnet/aspnetcore#60352
• [release/8.0] Fix preserving messages for stateful reconnect with backplane by @​BrennanConroy in [release/8.0] Fix preserving messages for stateful reconnect with backplane dotnet/aspnetcore#61375
• [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#61442
• fetch TLS client hello message from HTTP.SYS by @​BrennanConroy in fetch TLS client hello message from HTTP.SYS dotnet/aspnetcore#61494

Full Changelog: dotnet/aspnetcore@v8.0.15...v8.0.16

8.0.15

Release

What's Changed

• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#60355
• Update branding to 8.0.15 by @​vseanreesermsft in Update branding to 8.0.15 dotnet/aspnetcore#60784
• Add partitioned to cookie for SignalR browser testing by @​BrennanConroy in Add partitioned to cookie for SignalR browser testing dotnet/aspnetcore#60728
• [release/8.0] (deps): Bump src/submodules/googletest from e235eb3 to 24a9e94 by @​dependabot in [release/8.0] (deps): Bump src/submodules/googletest from e235eb3 to 24a9e94 dotnet/aspnetcore#60677
• Merging internal commits for release/8.0 by @​vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#60879

Full Changelog: dotnet/aspnetcore@v8.0.14...v8.0.15

Commits viewable in compare view.

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Overview

Severity	Count
CRITICAL	0
WARNING	0
SUGGESTION	0

The Change

Single-line semantic patch: bumps Microsoft.AspNetCore.Authentication.JwtBearer from 8.0.14 to 8.0.27 in examples/Web/api/WebAPI.csproj:33. The package is an active dependency (imported in Startup.cs, Security/PassthroughAuthentication.cs, DTO/TokenResponse.cs). Version 8.0.27 is a routine patch-level upstream release; no breaking API surface introduced between 8.0.14 and 8.0.27 that would affect this codebase.

---

Other Observations (not in diff)

The following are pre-existing issues in unchanged files and cannot receive inline comments.

File	Line	Severity	Issue
src/Soulseek.csproj	22	WARNING	Release DocumentationFile is hardcoded to netstandard2.0/Soulseek.xml, but the project multi-targets netstandard2.1;netstandard2.0 (line 3). Documentation for netstandard2.1 will silently be omitted from the Release-nuget package build. Fix: accept $(TargetFramework) substitution, e.g. <DocumentationFile>bin\Release\$(TargetFramework)\Soulseek.xml</DocumentationFile>, or set two distinct DocumentatonFile entries per target.
src/Soulseek.csproj	17	WARNING	Same issue as above but for the Debug configuration.
analyzers/Soulseek.CouncilAnalyzers/Soulseek.CouncilAnalyzers.csproj	14	WARNING	<PackageReference Include="Microsoft.CodeAnalysis.Analyzers" Version="5.3.0-2.25625.1" uses a floating pre-release version without a lock. Until the upstream publishes a stable 5.3.x release this reference could resolve inconsistently on other machines or CI. Consider either pinning to a known stable tag or adding an explicit lock-source directive.

---

Files Reviewed (1 file changed)

• examples/Web/api/WebAPI.csproj — changed; no issues
• src/Soulseek.csproj — contextual review; observations in Other Observations
• analyzers/Soulseek.CouncilAnalyzers/Soulseek.CouncilAnalyzers.csproj — contextual review; observation in Other Observations
• examples/Web/api/Startup.cs — usage confirmation
• examples/Web/api/Security/PassthroughAuthentication.cs — usage confirmation
• examples/Web/api/DTO/TokenResponse.cs — usage confirmation

---

_{Reviewed by step-3.5-flash · 182,312 tokens}