Update All dependencies #767
Open
+52
−52
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Contributor
|
Important Review skippedBot user detected. To trigger a single review, invoke the You can disable this status message by setting the Comment |
renovate
bot
force-pushed
the
renovate/all-dependencies
branch
2 times, most recently
from
9c01164 to
04235e2
Compare
renovate
bot
force-pushed
the
renovate/all-dependencies
branch
4 times, most recently
from
dd7500d to
6d2cd45
Compare
renovate
bot
force-pushed
the
renovate/all-dependencies
branch
5 times, most recently
from
b6e557d to
e84f7a2
Compare
renovate
bot
force-pushed
the
renovate/all-dependencies
branch
4 times, most recently
from
b7268b2 to
d6494ed
Compare
renovate
bot
force-pushed
the
renovate/all-dependencies
branch
2 times, most recently
from
0f54271 to
017eb7e
Compare
renovate
bot
force-pushed
the
renovate/all-dependencies
branch
7 times, most recently
from
8e0c6a9 to
bedb999
Compare
renovate
bot
force-pushed
the
renovate/all-dependencies
branch
3 times, most recently
from
493b362 to
3734643
Compare
renovate
bot
force-pushed
the
renovate/all-dependencies
branch
2 times, most recently
from
b2d4003 to
eae1d80
Compare
renovate
bot
force-pushed
the
renovate/all-dependencies
branch
8 times, most recently
from
8d752dc to
2c719d0
Compare
renovate
bot
force-pushed
the
renovate/all-dependencies
branch
6 times, most recently
from
470339b to
ed125c8
Compare
renovate
bot
force-pushed
the
renovate/all-dependencies
branch
9 times, most recently
from
109a04f to
0c62fab
Compare
renovate
bot
force-pushed
the
renovate/all-dependencies
branch
2 times, most recently
from
0449b8b to
1e1a5bc
Compare
renovate
bot
force-pushed
the
renovate/all-dependencies
branch
from
1e1a5bc to
14e1dc2
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
4.1.2->4.2.21.14.2->1.17.11.4.0->1.5.01.4.0->1.5.01.11.1->1.13.01.4.4->1.6.012.24.0->12.26.01.8.20->1.8.221.8.20->1.8.229.0.7->9.0.119.0.7->9.0.119.0.7->9.0.119.0.7->9.0.119.0.7->9.0.119.0.7->9.0.119.0.7->9.0.119.0.7->9.0.119.0.7->9.0.113.11.0->3.14.18.13.0->8.15.013.0.3->13.0.49.0.3->9.0.49.0.3->9.0.41.12.0->1.14.01.12.0->1.14.01.12.0->1.14.01.12.0->1.14.01.12.0->1.14.05.3.0->5.4.08.6.2->8.6.52.3.0->2.7.04.0.0->4.1.09.0.3->9.0.68.13.0->8.15.09.0.2-alpine3.20->9.0.4-alpine3.209.0.200-alpine3.20->9.0.203-alpine3.203.1.3->3.1.5Release Notes
Azure/azure-sdk-for-net (Azure.Identity)
v1.17.1Compare Source
1.17.1 (2025-11-18)
Other Changes
Microsoft.Identity.ClientandMicrosoft.Identity.Client.Extensions.Msaldependencies to version 4.78.0.v1.17.0Compare Source
1.17.0 (2025-10-07)
Bugs Fixed
WithTenantIdinstead ofWithTenantIdFromAuthorityto prevent malformed Uris to the authority.Other Changes
BrowserCustomizationOptions.UseEmbeddedWebViewproperty. This option requires additional dependencies on Microsoft.Identity.Client.Desktop and is no longer supported. Consider using brokered authentication instead.v1.16.0Compare Source
1.16.0 (2025-09-09)
Features Added
DefaultAzureCredentialconstructor that accepts a custom environment variable name for credential configuration. This provides flexibility beyond the defaultAZURE_TOKEN_CREDENTIALSenvironment variable. The constructor accepts any environment variable name and uses the same credential selection logic as the existingAZURE_TOKEN_CREDENTIALSprocessing.DefaultAzureCredential.DefaultEnvironmentVariableNameconstant property that returns"AZURE_TOKEN_CREDENTIALS"for convenience when referencing the default environment variable name.AzureCliCredential,AzurePowerShellCredential, andAzureDeveloperCliCredentialnow throw anAuthenticationFailedExceptionwhen theTokenRequestContextincludes claims, as these credentials do not support claims challenges. The exception message includes guidance for handling such scenarios.AZURE_TOKEN_CREDENTIALSor the equivalent custom environment variable is configured toManagedIdentityCredential, theDefaultAzureCredentialdoes not issue a probe request and performs retries with exponential backoff.Bugs Fixed
AzureDeveloperCliCredentialhanging when theAZD_DEBUGenvironment variable is set by adding the--no-promptflag to prevent interactive prompts (#52005).BrokerCredentialis now included in the chain whenAZURE_TOKEN_CREDENTIALSis set todev.DefaultAzureCredentialthat caused the credential chain to be constructed incorrectly when using AZURE_TOKEN_CREDENTIALS in combination withDefaultAzureCredentialOptions.Other Changes
BrokerCredentialis now always included in theDefaultAzureCredentialchain. If theAzure.Identity.Brokerpackage is not referenced, an exception will be thrown whenGetTokenis called, making its behavior consistent with the rest of the credentials in the chain.Microsoft.Identity.Clientdependency to version 4.76.0.Microsoft.Identity.Client.Extensions.Msaldependency to version 4.76.0.v1.15.0Compare Source
1.15.0 (2025-08-07)
Breaking Changes
Behavioral Breaking Changes
SharedTokenCacheCredential. The supporting credential (SharedTokenCacheCredential) was a legacy mechanism for authenticating clients using credentials provided to Visual Studio. For brokered authentication, consider usingInteractiveBrowserCredentialinstead. The following changes have been made:SharedTokenCacheCredentialclass is marked as[Obsolete]and[EditorBrowsable(EditorBrowsableState.Never)]SharedTokenCacheCredentialOptionsclass is marked as[Obsolete]and[EditorBrowsable(EditorBrowsableState.Never)]DefaultAzureCredentialOptions.ExcludeSharedTokenCacheCredentialproperty is marked as[Obsolete]and[EditorBrowsable(EditorBrowsableState.Never)]SharedTokenCacheUsernameproperty is marked as[Obsolete]and[EditorBrowsable(EditorBrowsableState.Never)]SharedTokenCacheCredentialis no longer included in theDefaultAzureCredentialauthentication flowBugs Fixed
AdditionallyAllowedTenantsvalues which will now be matched against tenant IDs without case sensitivity, making the authentication more resilient to case differences in tenant IDs returned from WWW-Authenticate challenges (#51693).Other Changes
BrokerAuthenticationCredentialhas been renamed asBrokerCredential.Added the
EditorBrowsable(Never)attribute to propertyVisualStudioCodeTenantIdasTenantIdis preferred. TheVisualStudioCodeTenantIdproperty exists only to provide backwards compatibility.HangfireIO/Hangfire (Hangfire.AspNetCore)
v1.8.22: 1.8.22Release Notes
Hangfire.Core
IGlobalConfiguration.UseNoOpLogProvidermethod to disable logging.Cronclass, add remarks in docs instead.SimpleAssemblyTypeSerializer.IBackgroundProcessingServerinstances on OWIN app shutdown.AspNetShutdownDetectorfor early ASP.NET shutdown detection is not working (regression from 1.7.30).netcoreapp3.1target with thenet8.0one in tests.Hangfire.SqlServer
InvalidCastExceptionwhen creating a background job with Schema 5 (regression from 1.8.15).netcoreapp3.1target with thenet8.0one in tests.Hangfire.AspNetCore
MapHangfireDashboardWithNoAuthorizationFiltersmethod, which does not include local-only filters.MapHangfireDashboardis used and no dispatcher is found.InvalidOperationExceptionupon receiving a request for 'hangfire/bootstrap.min.css.map'.v1.8.21: 1.8.21Release Notes
Hangfire.Core
FailedState.IncludeFileInfoto optionally show/hide line numbers in exceptions in Failed state.BackgroundJobclass always acquires the most currentJobStorage.Currentinstance.RecurringJobclass always acquires the most currentJobStorage.Currentinstance.Hangfire.SqlServer
SqlServerStorageOptions.DisableTransactionScopeoption for .NET Framework targets.AzureAD/microsoft-identity-web (Microsoft.Identity.Web)
v3.14.1=======
Bug fix
v3.14.0=======
New features
v3.13.2=======
Dependencies updates
v3.13.1Compare Source
=======
Dependencies updates
v3.13.0Compare Source
=======
Dependencies updates
Bug fixes
Fundamentals
v3.12.0Compare Source
=======
Dependencies updates
Bug fix
Reload certificates for all client credential based issues to solve the issue that when a bad certificate was installed on the machine and picked up, and subsequently rotated, a service restart was needed for the new certificate to be used. See issue #3429 and PR #3430
New features
AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet (Microsoft.IdentityModel.Protocols.OpenIdConnect)
v8.15.0Compare Source
====
New Features
X509SecurityKeyandJsonWebKeyConverter.ConvertFromX509SecurityKeyExtended
X509SecurityKeyandJsonWebKeyConverter.ConvertFromX509SecurityKeyto support ECDSA keys.See PR #2377 for details.
Bug Fixes
Updated logging to sanitize sensitive values, reducing the risk of inadvertently exposing secrets or PII in logs.
See PR #3316 for details.
SearchValuesImproved the performance of the log sanitization logic introduced earlier by using
SearchValues, making sanitization more efficient in high-throughput scenarios.See PR #3341 for details.
IDX10400Adjusted the
IDX10400test to align with the current behavior and error messaging.See PR #3314 for details.
Fundamentals
Added new tests to validate the set of supported cryptographic algorithms, increasing confidence in algorithm coverage and compatibility.
See PR #3296 for details.
.clinerulestoagents.mdMoved repository agent/AI-assist rules into markdown documentation to make them more visible and easier to maintain.
See PR #3313 for details.
Microsoft.IdentityModel.TestExtensionsfrom Newtonsoft.Json to System.Text.JsonUpdated
Microsoft.IdentityModel.TestExtensionsto useSystem.Text.Jsoninstead ofNewtonsoft.Json, aligning tests with the runtime serialization stack.See PR #3356 for details.
Turned off automated code coverage comments on PRs to reduce noise while retaining coverage data elsewhere.
See PR #3349 for details.
Addressed CodeQL-reported issues to improve security posture and static analysis cleanliness.
See PR #3364 for details.
.NET 10 / SDK and tooling updates
Updated the repository to build and test against .NET 10.0 preview/RC1, ensuring early compatibility with the upcoming runtime.
See PRs #3287, #3357, and #3358 for details.
Ensured consistent use of the
TargetNetNextparameter across build, test, and pack phases so .NET 10.0 tests execute reliably.See PR #3337 for details.
Adjusted project files and CI workflows to correctly target and run on .NET 10.0, including test and pack scenarios.
See PR #3363 for details.
Updated the .NET version references to be compliant with corporate governance (CG) requirements.
See PR #3353 for details.
CoverletCollectorVersionto 6.0.4.See PR #3333 for details.
Microsoft.NET.Test.Sdkto a newer version for improved test reliability and tooling support.See PR #3336 for details.
runTests.ps1to specify dotnet directoryUpdated
runTests.ps1to accept an explicit dotnet directory, improving test execution robustness in environments with multiple SDK installations.See PR #3368 for details.
Iterated on the CI workflow configuration to correctly target the .NET 10 SDK:
dotnetcore.yml.See PR #3335.
See PR #3339 for details.
Documentation
Refreshed
supportPolicy.mdto reflect the latest support policy for IdentityModel.See PR #3367 for details.
v8.14.0Compare Source
====
Bug Fixes
ValidationResultinstead ofOperationResultwhen validating a token in a new experimental validation flow. Additionally removed the dependency on Microsoft.IdentityModel.Abstractions. See #3299 for details.v8.13.1Compare Source
====
Dependencies
Microsoft.IdentityModel now depends on Microsoft.Identity.Abstractions 9.3.0
Bug Fixes
Work related to redesign of IdentityModel's token validation logic #2711
JamesNK/Newtonsoft.Json (Newtonsoft.Json)
v13.0.4Compare Source
npgsql/npgsql (Npgsql)
v9.0.4v9.0.4 contains several minor bug fixes.
Milestone issues
Full Changelog: npgsql/npgsql@v9.0.3...v9.0.4
open-telemetry/opentelemetry-dotnet (OpenTelemetry.Api.ProviderBuilderExtensions)
v1.14.0Release details: 1.14.0
net8.0, the package now depends on version8.0.0of theMicrosoft.Extensions.DependencyInjection.Abstractions,Microsoft.Extensions.Diagnostics.Abstractions,Microsoft.Extensions.Hosting.AbstractionsandMicrosoft.Extensions.Logging.ConfigurationNuGet packages.System.Diagnostics.DiagnosticSourcedependency to10.0.0for all target frameworks.
Microsoft.Extensions.*dependencies to10.0.0for .NET Framework and .NET Standard.
(
.sigstore.json) for digital signatures instead of separate signature(
.sig) and certificate (.pem) files. This requires cosign 3.0 or laterfor verification. See the Digital signing
section for updated verification instructions.
v1.13.1Release details: 1.13.1
1.13.0, the digital signature (.dll-keyless.sig) andcertificate (
.dll-keyless.pem) files were unintentionally omitted from thepublished NuGet packages.
(
net462,netstandard2.0,netstandard2.1,net8.0,net9.0), ensuringthe integrity of DLL verification using Sigstore cosign.
v1.13.0Release details: 1.13.0
OtlpExportProtocol.Grpcnow set the
TE=trailersHTTP request header to improve interoperability.EventNameis now exported by default asEventNameinstead oflogrecord.event.namewhen specified throughILoggeror the experimentallog bridge API.
aloneguid/parquet-dotnet (Parquet.Net)
v5.4.0Compare Source
Improvements
List<List<T>>) in class serializer, by @aloneguid in #612. Thanks @Vannevelj.IAsyncEnumerableserializer withSystem.Linq.AsyncEnumerable, by @Arithmomaniac in #674.Bugs fixed
boolvalues, the results are now consistent, by @Kevin-Ross-ECC in #643.ParquetRowGroupWriter.Dispose()will not throw exceptions as it conflicts withtry/catch/finallyideology. You should callCompleteValidateafter writing all columns instead. Thanks to @rkarim-nnk in #666.App-vNext/Polly (Polly)
v8.6.5Compare Source
TimeoutRejectedExceptionby @martincostello in #2827v8.6.4Compare Source
v8.6.3Compare Source
serilog-contrib/serilog-enrichers-clientinfo (Serilog.Enrichers.ClientInfo)
v2.6.0What's Changed
Microsoft.AspNetCore.Appframework. #33Full Changelog: serilog-contrib/serilog-enrichers-clientinfo@v2.5.0...v2.6.0
v2.5.0What's Changed
Full Changelog: serilog-contrib/serilog-enrichers-clientinfo@v2.4.0...v2.5.0
v2.4.0Full Changelog: serilog-contrib/serilog-enrichers-clientinfo@v2.3.0...v2.4.0
serilog-contrib/serilog-sinks-applicationinsights (Serilog.Sinks.ApplicationInsights)
v4.1.0READMEspelling corrections (@Davidmendoza1987)TelemetryClient.DisposeAsync()(@agehrke)TraceIdandSpanIdsupport @hangy)domaindrivendev/Swashbuckle.AspNetCore (Swashbuckle.AspNetCore)
v9.0.6What's Changed
Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v9.0.5...v9.0.6
v9.0.5What's Changed
Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v9.0.4...v9.0.5
v9.0.4What's Changed
ETagvalues by @martincostello in #3490Accept-Encodingparsing by @martincostello in #3492Accept-Encodingquality by @martincostello in #3493WebHostusage from tests by @martincostello in #3517Configuration
📅 Schedule: Branch creation - "before 7am on Monday,before 7am on Friday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.