Skip to content

Bump the all-packages group with 18 updates#513

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/nuget/UKHO.ExchangeSetService.API/UKHO.ExchangeSetService.API.FunctionalTests/all-packages-1762eac819
Open

Bump the all-packages group with 18 updates#513
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/nuget/UKHO.ExchangeSetService.API/UKHO.ExchangeSetService.API.FunctionalTests/all-packages-1762eac819

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 1, 2026

Updated Azure.Identity from 1.17.1 to 1.18.0.

Release notes

Sourced from Azure.Identity's releases.

1.18.0

1.18.0 (2026-02-25)

Features Added

  • Added experimental Microsoft.Extensions.Configuration and Microsoft.Extensions.DependencyInjection integration for Azure SDK clients. For details, see the Configuration and Dependency Injection documentation.

  • The WorkloadIdentityCredentialOptions.IsAzureProxyEnabled property, which enables Azure Kubernetes token proxy mode, is only available in beta releases of this package.

  • AzureDeveloperCliCredential now parses JSON error output from azd auth token to extract clean error messages instead of including raw JSON in exceptions. Error messages like {"type":"consoleMessage","data":{"message":"ERROR: fetching token: ..."}} are now displayed as ERROR: fetching token: ....

1.18.0-beta.3

1.18.0-beta.3 (2026-02-20)

Breaking Changes

  • Renamed WorkloadIdentityCredentialOptions.IsAzureKubernetesTokenProxyEnabled to IsAzureProxyEnabled to follow .NET naming conventions for boolean properties.

Bugs Fixed

  • Fixed a NullReferenceException that occurred during X509Chain validation on Linux when using the Identity Bindings feature.

  • Disabled MSAL's internal retry logic for ConfidentialClientApplication and PublicClientApplication to prevent double retries when combined with Azure SDK's retry policy. Only the configured Azure SDK retry policy is applied, avoiding unexpected additional retry attempts.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 8.0.23 to 8.0.24.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

8.0.24

Release

Commits viewable in compare view.

Updated Microsoft.AspNetCore.HeaderPropagation from 8.0.23 to 8.0.24.

Release notes

Sourced from Microsoft.AspNetCore.HeaderPropagation's releases.

8.0.24

Release

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.NewtonsoftJson from 8.0.23 to 8.0.24.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.NewtonsoftJson's releases.

8.0.24

Release

Commits viewable in compare view.

Updated Microsoft.Azure.WebJobs.Logging.ApplicationInsights from 3.0.44 to 3.0.45.

Release notes

Sourced from Microsoft.Azure.WebJobs.Logging.ApplicationInsights's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration from 9.0.12 to 9.0.13.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

9.0.13

Release

What's Changed

Full Changelog: dotnet/runtime@v9.0.12...v9.0.13

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Binder from 9.0.12 to 9.0.13.

Release notes

Sourced from Microsoft.Extensions.Configuration.Binder's releases.

9.0.13

Release

What's Changed

Full Changelog: dotnet/runtime@v9.0.12...v9.0.13

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Json from 9.0.12 to 9.0.13.

Release notes

Sourced from Microsoft.Extensions.Configuration.Json's releases.

9.0.13

Release

What's Changed

Full Changelog: dotnet/runtime@v9.0.12...v9.0.13

Commits viewable in compare view.

Updated Microsoft.Extensions.Http.Polly from 9.0.12 to 9.0.13.

Release notes

Sourced from Microsoft.Extensions.Http.Polly's releases.

9.0.13

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.12...v9.0.13)

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.AzureAppServices from 8.0.23 to 8.0.24.

Release notes

Sourced from Microsoft.Extensions.Logging.AzureAppServices's releases.

8.0.24

Release

Commits viewable in compare view.

Updated Microsoft.Identity.Client from 4.81.0 to 4.82.1.

Release notes

Sourced from Microsoft.Identity.Client's releases.

4.82.1

Bug Fixes

  • Remove experimental flag requirement from IAuthenticationOperation #​5699
  • Add security warning to ICustomWebUi documentation #​5704

Changes

  • Adds support for implicit mTLS (Mutual TLS) transport for client assertion delegates #​5670

4.82.0

4.82.0

Highlights

This release expands extensibility for confidential-client authentication (certificates + client assertions), adds additional sovereign cloud environments, and hardens security-sensitive flows (mTLS PoP and system browser auth) with clearer validation and safer defaults.

Features

  • Certificate-based confidential client extensibility: Introduced CertificateOptions and updated WithCertificate extensibility APIs to accept it, including support for passing sendX5C configuration through the options model. (#​5655)
  • Sovereign cloud support: Added instance discovery / authority validation support for Bleu (France), Delos (Germany), and GovSG (Singapore) cloud environments. (#​5671)
  • Client assertion customization: Added WithExtraClientAssertionClaims on AcquireTokenForClientParameterBuilder to enable supplying additional signed claims in client assertions (intended for advanced scenarios and higher-level libraries). (#​5650)
  • mTLS PoP guardrails: Added validation and explicit error handling when mTLS PoP is requested for unsupported environments and/or non-login.* hosts. (#​5684)
  • System browser hardening: Added response_mode=form_post support for the default system browser (loopback) flow. MSAL will enforce form_post and process the authorization response from POST data. (#​5678)

Changes

  • Key Attestation packaging rename: Microsoft.Identity.Client.MtlsPop renamed to Microsoft.Identity.Client.KeyAttestation (assembly/package naming update). (#​5653)

Commits viewable in compare view.

Updated Microsoft.IdentityModel.Logging from 8.15.0 to 8.16.0.

Release notes

Sourced from Microsoft.IdentityModel.Logging's releases.

8.16.0

New Features

  • Add telemetry around signature validation. See PR #​3415 for details.

Fundamentals

  • Fix FileVersion format to use two-digit year and day of year. See PR #​3389 for details.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.0.1 to 18.3.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.3.0

What's Changed

Internal fixes and updates

New Contributors

Commits viewable in compare view.

Updated NUnit from 4.4.0 to 4.5.0.

Release notes

Sourced from NUnit's releases.

4.5.0

See release notes for details.

Commits viewable in compare view.

Updated Serilog from 4.3.0 to 4.3.1.

Release notes

Sourced from Serilog's releases.

4.3.1

What's Changed

New Contributors

Full Changelog: serilog/serilog@v4.3.0...v4.3.1

Commits viewable in compare view.

Updated System.IdentityModel.Tokens.Jwt from 8.15.0 to 8.16.0.

Release notes

Sourced from System.IdentityModel.Tokens.Jwt's releases.

8.16.0

New Features

  • Add telemetry around signature validation. See PR #​3415 for details.

Fundamentals

  • Fix FileVersion format to use two-digit year and day of year. See PR #​3389 for details.

Commits viewable in compare view.

Updated System.Text.Encoding.CodePages from 9.0.12 to 9.0.13.

Release notes

Sourced from System.Text.Encoding.CodePages's releases.

9.0.13

Release

What's Changed

Full Changelog: dotnet/runtime@v9.0.12...v9.0.13

Commits viewable in compare view.

Updated System.Text.Json from 9.0.12 to 9.0.13.

Release notes

Sourced from System.Text.Json's releases.

9.0.13

Release

What's Changed

Full Changelog: dotnet/runtime@v9.0.12...v9.0.13

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Azure.Identity from 1.17.1 to 1.18.0
Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 8.0.23 to 8.0.24
Bumps Microsoft.AspNetCore.HeaderPropagation from 8.0.23 to 8.0.24
Bumps Microsoft.AspNetCore.Mvc.NewtonsoftJson from 8.0.23 to 8.0.24
Bumps Microsoft.Azure.WebJobs.Logging.ApplicationInsights from 3.0.44 to 3.0.45
Bumps Microsoft.Extensions.Configuration from 9.0.12 to 9.0.13
Bumps Microsoft.Extensions.Configuration.Binder from 9.0.12 to 9.0.13
Bumps Microsoft.Extensions.Configuration.Json from 9.0.12 to 9.0.13
Bumps Microsoft.Extensions.Http.Polly from 9.0.12 to 9.0.13
Bumps Microsoft.Extensions.Logging.AzureAppServices from 8.0.23 to 8.0.24
Bumps Microsoft.Identity.Client from 4.81.0 to 4.82.1
Bumps Microsoft.IdentityModel.Logging from 8.15.0 to 8.16.0
Bumps Microsoft.NET.Test.Sdk from 18.0.1 to 18.3.0
Bumps NUnit from 4.4.0 to 4.5.0
Bumps Serilog from 4.3.0 to 4.3.1
Bumps System.IdentityModel.Tokens.Jwt from 8.15.0 to 8.16.0
Bumps System.Text.Encoding.CodePages from 9.0.12 to 9.0.13
Bumps System.Text.Json from 9.0.12 to 9.0.13

---
updated-dependencies:
- dependency-name: Azure.Identity
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer
  dependency-version: 8.0.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.AspNetCore.HeaderPropagation
  dependency-version: 8.0.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.AspNetCore.HeaderPropagation
  dependency-version: 8.0.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.AspNetCore.Mvc.NewtonsoftJson
  dependency-version: 8.0.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Azure.WebJobs.Logging.ApplicationInsights
  dependency-version: 3.0.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Configuration
  dependency-version: 9.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Configuration.Binder
  dependency-version: 9.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Configuration.Json
  dependency-version: 9.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: System.Text.Json
  dependency-version: 9.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Http.Polly
  dependency-version: 9.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Logging.AzureAppServices
  dependency-version: 8.0.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Identity.Client
  dependency-version: 4.82.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Microsoft.IdentityModel.Logging
  dependency-version: 8.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: NUnit
  dependency-version: 4.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: NUnit
  dependency-version: 4.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: NUnit
  dependency-version: 4.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: NUnit
  dependency-version: 4.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Serilog
  dependency-version: 4.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: System.IdentityModel.Tokens.Jwt
  dependency-version: 8.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: System.Text.Encoding.CodePages
  dependency-version: 9.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: System.Text.Json
  dependency-version: 9.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Mar 1, 2026
@dependabot dependabot bot requested review from a team and rockydevnet as code owners March 1, 2026 14:45
@dependabot dependabot bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Mar 1, 2026
@snyk-io-eu
Copy link

snyk-io-eu bot commented Mar 1, 2026

Snyk checks have passed. No issues have been found so far.

Status Scanner Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Licenses 0 0 0 0 0 issues
Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants