Bump the all-packages group with 18 updates#513
Open
dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps Azure.Identity from 1.17.1 to 1.18.0 Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 8.0.23 to 8.0.24 Bumps Microsoft.AspNetCore.HeaderPropagation from 8.0.23 to 8.0.24 Bumps Microsoft.AspNetCore.Mvc.NewtonsoftJson from 8.0.23 to 8.0.24 Bumps Microsoft.Azure.WebJobs.Logging.ApplicationInsights from 3.0.44 to 3.0.45 Bumps Microsoft.Extensions.Configuration from 9.0.12 to 9.0.13 Bumps Microsoft.Extensions.Configuration.Binder from 9.0.12 to 9.0.13 Bumps Microsoft.Extensions.Configuration.Json from 9.0.12 to 9.0.13 Bumps Microsoft.Extensions.Http.Polly from 9.0.12 to 9.0.13 Bumps Microsoft.Extensions.Logging.AzureAppServices from 8.0.23 to 8.0.24 Bumps Microsoft.Identity.Client from 4.81.0 to 4.82.1 Bumps Microsoft.IdentityModel.Logging from 8.15.0 to 8.16.0 Bumps Microsoft.NET.Test.Sdk from 18.0.1 to 18.3.0 Bumps NUnit from 4.4.0 to 4.5.0 Bumps Serilog from 4.3.0 to 4.3.1 Bumps System.IdentityModel.Tokens.Jwt from 8.15.0 to 8.16.0 Bumps System.Text.Encoding.CodePages from 9.0.12 to 9.0.13 Bumps System.Text.Json from 9.0.12 to 9.0.13 --- updated-dependencies: - dependency-name: Azure.Identity dependency-version: 1.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-packages - dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer dependency-version: 8.0.24 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages - dependency-name: Microsoft.AspNetCore.HeaderPropagation dependency-version: 8.0.24 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages - dependency-name: Microsoft.AspNetCore.HeaderPropagation dependency-version: 8.0.24 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages - dependency-name: Microsoft.AspNetCore.Mvc.NewtonsoftJson dependency-version: 8.0.24 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages - dependency-name: Microsoft.Azure.WebJobs.Logging.ApplicationInsights dependency-version: 3.0.45 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages - dependency-name: Microsoft.Extensions.Configuration dependency-version: 9.0.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages - dependency-name: Microsoft.Extensions.Configuration.Binder dependency-version: 9.0.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages - dependency-name: Microsoft.Extensions.Configuration.Json dependency-version: 9.0.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages - dependency-name: System.Text.Json dependency-version: 9.0.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages - dependency-name: Microsoft.Extensions.Http.Polly dependency-version: 9.0.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages - dependency-name: Microsoft.Extensions.Logging.AzureAppServices dependency-version: 8.0.24 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages - dependency-name: Microsoft.Identity.Client dependency-version: 4.82.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-packages - dependency-name: Microsoft.IdentityModel.Logging dependency-version: 8.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-packages - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-packages - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-packages - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-packages - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-packages - dependency-name: NUnit dependency-version: 4.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-packages - dependency-name: NUnit dependency-version: 4.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-packages - dependency-name: NUnit dependency-version: 4.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-packages - dependency-name: NUnit dependency-version: 4.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-packages - dependency-name: Serilog dependency-version: 4.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages - dependency-name: System.IdentityModel.Tokens.Jwt dependency-version: 8.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-packages - dependency-name: System.Text.Encoding.CodePages dependency-version: 9.0.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages - dependency-name: System.Text.Json dependency-version: 9.0.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-packages ... Signed-off-by: dependabot[bot] <[email protected]>
✅ Snyk checks have passed. No issues have been found so far.
💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updated Azure.Identity from 1.17.1 to 1.18.0.
Release notes
Sourced from Azure.Identity's releases.
1.18.0
1.18.0 (2026-02-25)
Features Added
Added experimental
Microsoft.Extensions.ConfigurationandMicrosoft.Extensions.DependencyInjectionintegration for Azure SDK clients. For details, see the Configuration and Dependency Injection documentation.The
WorkloadIdentityCredentialOptions.IsAzureProxyEnabledproperty, which enables Azure Kubernetes token proxy mode, is only available in beta releases of this package.AzureDeveloperCliCredentialnow parses JSON error output fromazd auth tokento extract clean error messages instead of including raw JSON in exceptions. Error messages like{"type":"consoleMessage","data":{"message":"ERROR: fetching token: ..."}}are now displayed asERROR: fetching token: ....1.18.0-beta.3
1.18.0-beta.3 (2026-02-20)
Breaking Changes
WorkloadIdentityCredentialOptions.IsAzureKubernetesTokenProxyEnabledtoIsAzureProxyEnabledto follow .NET naming conventions for boolean properties.Bugs Fixed
Fixed a NullReferenceException that occurred during X509Chain validation on Linux when using the Identity Bindings feature.
Disabled MSAL's internal retry logic for
ConfidentialClientApplicationandPublicClientApplicationto prevent double retries when combined with Azure SDK's retry policy. Only the configured Azure SDK retry policy is applied, avoiding unexpected additional retry attempts.Commits viewable in compare view.
Updated Microsoft.AspNetCore.Authentication.JwtBearer from 8.0.23 to 8.0.24.
Release notes
Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.
8.0.24
Release
Commits viewable in compare view.
Updated Microsoft.AspNetCore.HeaderPropagation from 8.0.23 to 8.0.24.
Release notes
Sourced from Microsoft.AspNetCore.HeaderPropagation's releases.
8.0.24
Release
Commits viewable in compare view.
Updated Microsoft.AspNetCore.Mvc.NewtonsoftJson from 8.0.23 to 8.0.24.
Release notes
Sourced from Microsoft.AspNetCore.Mvc.NewtonsoftJson's releases.
8.0.24
Release
Commits viewable in compare view.
Updated Microsoft.Azure.WebJobs.Logging.ApplicationInsights from 3.0.44 to 3.0.45.
Release notes
Sourced from Microsoft.Azure.WebJobs.Logging.ApplicationInsights's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated Microsoft.Extensions.Configuration from 9.0.12 to 9.0.13.
Release notes
Sourced from Microsoft.Extensions.Configuration's releases.
9.0.13
Release
What's Changed
Full Changelog: dotnet/runtime@v9.0.12...v9.0.13
Commits viewable in compare view.
Updated Microsoft.Extensions.Configuration.Binder from 9.0.12 to 9.0.13.
Release notes
Sourced from Microsoft.Extensions.Configuration.Binder's releases.
9.0.13
Release
What's Changed
Full Changelog: dotnet/runtime@v9.0.12...v9.0.13
Commits viewable in compare view.
Updated Microsoft.Extensions.Configuration.Json from 9.0.12 to 9.0.13.
Release notes
Sourced from Microsoft.Extensions.Configuration.Json's releases.
9.0.13
Release
What's Changed
Full Changelog: dotnet/runtime@v9.0.12...v9.0.13
Commits viewable in compare view.
Updated Microsoft.Extensions.Http.Polly from 9.0.12 to 9.0.13.
Release notes
Sourced from Microsoft.Extensions.Http.Polly's releases.
9.0.13
Release
What's Changed
1b96fa1to9156d4cby @dependabot[bot] in [release/9.0] (deps): Bump src/submodules/googletest from1b96fa1to9156d4cdotnet/aspnetcore#64908Full Changelog: dotnet/aspnetcore@v9.0.12...v9.0.13)
Commits viewable in compare view.
Updated Microsoft.Extensions.Logging.AzureAppServices from 8.0.23 to 8.0.24.
Release notes
Sourced from Microsoft.Extensions.Logging.AzureAppServices's releases.
8.0.24
Release
Commits viewable in compare view.
Updated Microsoft.Identity.Client from 4.81.0 to 4.82.1.
Release notes
Sourced from Microsoft.Identity.Client's releases.
4.82.1
Bug Fixes
Changes
4.82.0
4.82.0
Highlights
This release expands extensibility for confidential-client authentication (certificates + client assertions), adds additional sovereign cloud environments, and hardens security-sensitive flows (mTLS PoP and system browser auth) with clearer validation and safer defaults.
Features
CertificateOptionsand updatedWithCertificateextensibility APIs to accept it, including support for passingsendX5Cconfiguration through the options model. (#5655)WithExtraClientAssertionClaimsonAcquireTokenForClientParameterBuilderto enable supplying additional signed claims in client assertions (intended for advanced scenarios and higher-level libraries). (#5650)login.*hosts. (#5684)response_mode=form_postsupport for the default system browser (loopback) flow. MSAL will enforceform_postand process the authorization response from POST data. (#5678)Changes
Microsoft.Identity.Client.MtlsPoprenamed toMicrosoft.Identity.Client.KeyAttestation(assembly/package naming update). (#5653)Commits viewable in compare view.
Updated Microsoft.IdentityModel.Logging from 8.15.0 to 8.16.0.
Release notes
Sourced from Microsoft.IdentityModel.Logging's releases.
8.16.0
New Features
Fundamentals
Commits viewable in compare view.
Updated Microsoft.NET.Test.Sdk from 18.0.1 to 18.3.0.
Release notes
Sourced from Microsoft.NET.Test.Sdk's releases.
18.3.0
What's Changed
Internal fixes and updates
New Contributors
Commits viewable in compare view.
Updated NUnit from 4.4.0 to 4.5.0.
Release notes
Sourced from NUnit's releases.
4.5.0
See release notes for details.
Commits viewable in compare view.
Updated Serilog from 4.3.0 to 4.3.1.
Release notes
Sourced from Serilog's releases.
4.3.1
What's Changed
New Contributors
Full Changelog: serilog/serilog@v4.3.0...v4.3.1
Commits viewable in compare view.
Updated System.IdentityModel.Tokens.Jwt from 8.15.0 to 8.16.0.
Release notes
Sourced from System.IdentityModel.Tokens.Jwt's releases.
8.16.0
New Features
Fundamentals
Commits viewable in compare view.
Updated System.Text.Encoding.CodePages from 9.0.12 to 9.0.13.
Release notes
Sourced from System.Text.Encoding.CodePages's releases.
9.0.13
Release
What's Changed
Full Changelog: dotnet/runtime@v9.0.12...v9.0.13
Commits viewable in compare view.
Updated System.Text.Json from 9.0.12 to 9.0.13.
Release notes
Sourced from System.Text.Json's releases.
9.0.13
Release
What's Changed
Full Changelog: dotnet/runtime@v9.0.12...v9.0.13
Commits viewable in compare view.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions