Skip to content

[release/8.0] Update Microsoft Identity Web package versions to 3.15.1#67164

Merged
wtgodbe merged 1 commit into
release/8.0from
wtgodbe/IDWeb8
Jun 11, 2026
Merged

[release/8.0] Update Microsoft Identity Web package versions to 3.15.1#67164
wtgodbe merged 1 commit into
release/8.0from
wtgodbe/IDWeb8

Conversation

@wtgodbe

@wtgodbe wtgodbe commented Jun 11, 2026

Copy link
Copy Markdown
Member

Lifts Microsoft.Kiota.Abstractions transitive dependency to a non-vulnerable version, fixes a CG alert

Copilot AI review requested due to automatic review settings June 11, 2026 19:51
@wtgodbe wtgodbe requested review from a team and dotnet-maestro-bot as code owners June 11, 2026 19:51
@wtgodbe wtgodbe added the tell-mode Indicates a PR which is being merged during tell-mode label Jun 11, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the centrally-managed Microsoft Identity Web package versions in eng/Versions.props for the release/8.0 branch, aligning the project templates’ dependency graph with a newer Microsoft Identity Web release to address a vulnerable transitive dependency (CG alert).

Changes:

  • Bumped Microsoft.Identity.Web package version properties from 3.2.0 to 3.15.1.
  • Kept the related Identity Web package versions (GraphServiceClient, UI, DownstreamApi) in sync at the same version.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@github-actions github-actions Bot added the area-infrastructure Includes: MSBuild projects/targets, build scripts, CI, Installers and shared framework label Jun 11, 2026
@dotnet-policy-service

Copy link
Copy Markdown
Contributor

Hey @dotnet/aspnet-build, looks like this PR is something you want to take a look at.

@wtgodbe wtgodbe merged commit 93eca98 into release/8.0 Jun 11, 2026
24 of 26 checks passed
@wtgodbe wtgodbe deleted the wtgodbe/IDWeb8 branch June 11, 2026 23:04
This was referenced Jul 14, 2026
This was referenced Jul 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area-infrastructure Includes: MSBuild projects/targets, build scripts, CI, Installers and shared framework tell-mode Indicates a PR which is being merged during tell-mode

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants