Skip to content

Bump the nuget group with 1 update #3

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Bump the nuget group with 1 update #3

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Dec 13, 2025 •
edited
Loading

Updated Microsoft.Identity.Web from 3.5.0 to 3.8.2.

Release notes

Sourced from Microsoft.Identity.Web's releases.

3.8.2

3.8.2

  • Updated to Microsoft.Identity.Abstractions 9.0.0

New feature

  • An exception is now thrown if MSAL TokenCacheNotificationArgs indicates that distributed cache is configured when it should not have been. See #​3304.
  • Added support for federated identity credentials with AT_POP. See #​3299.

3.8.1

New features

  • Updated to Microsoft.IdentityModel.* 8.7.0

Bug fixes

  • Pins Microsoft.Extensions.Http dependency version to 3.1.3 for .NET Framework and .NET Standard and uses inbox version for .NET Core. See #​3145.

What's Changed

New Contributors

Full Changelog: AzureAD/microsoft-identity-web@3.8.0...3.8.1

3.8.0

3.8.0

New feature

  • Updated to Microsoft.IdentityModel.* 8.6.1
  • Updated to MSAL.NET 4.69.1
  • Updated the Json Schema to include extensiblity for signed assertion providers. See #​3235
  • Added support for Federation Identity Credential on any OIDC Idp (FIC+OIDC credential provider). See #​3255
  • Support for acquiring token for Federation Managed Identity (FMI). Supports the FmiPath property of AcquireTokenOptions. See #​3247
  • Downstream APIs now support Authorization headers with a custom SAML bearer syntax. See #​3273

Bug fixes

  • TokenAcquirerFactory is now thread safe. See #​3274
  • Fix a bug in the parsing of the token in the authority. See #​3261

Fundamentals

  • Removed old Blazorwasm sample, wasm-tools and added new blazor web API: #​3259, #​3257, #​3254
  • Modified the build so that, in CI/CD internal builds, the NuGet.olg NuGet source is replaced by a managed Nuget source. More verbose information added. See #​3263
  • Fixed CS8602 Warnings in Weather.razor (BlazorApp) – Handle Nullable forecasts and user.Identity. See #​3266,

What's Changed

New Contributors

Full Changelog: AzureAD/microsoft-identity-web@3.7.1...3.8.0

3.7.1

3.7.1

  • Updated to Microsoft.IdentityModel.* 8.5.0

3.7.0

3.7.0

  • Updated to Microsoft.Identity.Abstractions 8.1.0
  • Updated to Microsoft.IdentityModel.* 8.4.0

New Feature

  • IdentityWeb now provides extensibility to DefaultCredentialsLoader so that partner teams, or an SDK on top of IdWeb, can bring their own credential providers. See #​3220 for details.

Bug fixes

  • The merged options are now being passed to MSAL for the CCA ROPC scenario. See #​3207 for details.

What's Changed

Full Changelog: AzureAD/microsoft-identity-web@3.6.2...3.7.0

3.6.2

3.6.2

  • Updated to Microsoft.Identity.Abstractions 8.0.0

Fundamentals

  • Clean-up the tests that were using properties removed in Abstractions 8.0.0. See issue #​3212 for details.

What's Changed

Full Changelog: AzureAD/microsoft-identity-web@3.6.1...3.6.2

3.6.1

3.6.1

  • Updated to Microsoft.Identity.Abstractions 7.2.1

3.6.0

3.6.0

  • Updated to Microsoft.IdentityModel.* 8.3.1
  • Updated to MSAL.NET 4.67.2

Bug fixes

Fundamentals

What's Changed

New Contributors

Full Changelog: AzureAD/microsoft-identity-web@3.5.0...3.6.0

Commits viewable in compare view.

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Dec 13, 2025
@dependabot dependabot bot force-pushed the dependabot/nuget/src/MX.TravelItinerary.Web/nuget-47a77baf30 branch 2 times, most recently from 430012c to 7639c25 Compare December 13, 2025 20:06
@dependabot
Bump the nuget group with 1 update
ba5583e 
Bumps Microsoft.Identity.Web from 3.5.0 to 3.8.2

---
updated-dependencies:
- dependency-name: Microsoft.Identity.Web
  dependency-version: 3.8.2
  dependency-type: direct:production
  dependency-group: nuget
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/nuget/src/MX.TravelItinerary.Web/nuget-47a77baf30 branch from 7639c25 to ba5583e Compare December 14, 2025 10:43
@sonarqubecloud
Copy link

sonarqubecloud bot commented Dec 14, 2025

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants