Bump the nuget-dependencies group with 4 updates

[dependabot]

Updated Azure.Monitor.OpenTelemetry.Exporter from 1.8.2 to 1.8.3.

Release notes

Sourced from Azure.Monitor.OpenTelemetry.Exporter's releases.

1.8.3

1.8.3 (2026-07-24)

Bugs Fixed

• Hardened ingestion and Live Metrics redirect handling to reject untrusted destinations before replaying telemetry or caching the redirect. Redirect targets must now use HTTPS and match an approved Azure Monitor trust boundary, preventing credentials and telemetry from being forwarded to attacker-controlled endpoints.
  (#​61244)

Other Changes

• Customer SDK stats are now on by default; opt out with APPLICATIONINSIGHTS_SDKSTATS_DISABLED=true. dropCode/retryCode dimension values now use the spec's SCREAMING_SNAKE_CASE (e.g. CLIENT_EXCEPTION).

Commits viewable in compare view.

Updated Microsoft.Identity.Client from 4.86.1 to 4.87.0.

Release notes

Sourced from Microsoft.Identity.Client's releases.

4.87.0

What's Changed

• Expose MsalServiceException.ErrorCodesForLogging for diagnostics in #​6138
• Expose WithOtelTagsEnricher for managed identity requests in #​6144
• Forward OpenTelemetry tags enricher to the client-assertion callback in #​6142
• Add client-side opaque-token log scrubber in #​6119
• Populate ExecutionResult.Exception for non-MSAL failures in #​6139
• Use PSS padding in KeyGuard liveness probe (CodeQL SM03799) in #​6141
• Remove managed identity support from WithClaimsFromClient (confidential-client only) in #​6113
• Remove experimental features from client setup in #​6143
• Update Azure Arc managed identity API version from 2019-11-01 to 2020-06-01 in #​6130

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.86.1...4.87.0

Commits viewable in compare view.

Updated Microsoft.Identity.Client.Extensions.Msal from 4.86.1 to 4.87.0.

Release notes

Sourced from Microsoft.Identity.Client.Extensions.Msal's releases.

4.87.0

What's Changed

• Expose MsalServiceException.ErrorCodesForLogging for diagnostics in #​6138
• Expose WithOtelTagsEnricher for managed identity requests in #​6144
• Forward OpenTelemetry tags enricher to the client-assertion callback in #​6142
• Add client-side opaque-token log scrubber in #​6119
• Populate ExecutionResult.Exception for non-MSAL failures in #​6139
• Use PSS padding in KeyGuard liveness probe (CodeQL SM03799) in #​6141
• Remove managed identity support from WithClaimsFromClient (confidential-client only) in #​6113
• Remove experimental features from client setup in #​6143
• Update Azure Arc managed identity API version from 2019-11-01 to 2020-06-01 in #​6130

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.86.1...4.87.0

Commits viewable in compare view.

Updated Microsoft.IdentityModel.Abstractions from 8.20.0 to 8.21.0.

Release notes

Sourced from Microsoft.IdentityModel.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions