Skip to content

Update All dependencies (major) #771

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Update All dependencies (major) #771

wants to merge 1 commit into from
+36 −36

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Aug 15, 2025 •
edited
Loading

This PR contains the following updates:

Package Change Age Confidence Type Update
Microsoft.AspNetCore.Authentication.JwtBearer (source) 9.0.7 -> 10.0.0 age confidence nuget major
Microsoft.AspNetCore.Mvc.Testing (source) 9.0.7 -> 10.0.0 age confidence nuget major
Microsoft.AspNetCore.OpenApi (source) 9.0.7 -> 10.0.0 age confidence nuget major
Microsoft.Extensions.Configuration.Abstractions (source) 9.0.7 -> 10.0.0 age confidence nuget major
Microsoft.Extensions.DependencyInjection.Abstractions (source) 9.0.7 -> 10.0.0 age confidence nuget major
Microsoft.Extensions.Hosting.Abstractions (source) 9.0.7 -> 10.0.0 age confidence nuget major
Microsoft.Extensions.Http.Polly (source) 9.0.7 -> 10.0.0 age confidence nuget major
Microsoft.Extensions.Logging.Abstractions (source) 9.0.7 -> 10.0.0 age confidence nuget major
Microsoft.Extensions.Options.ConfigurationExtensions (source) 9.0.7 -> 10.0.0 age confidence nuget major
Microsoft.Identity.Web 3.11.0 -> 4.1.1 age confidence nuget major
Microsoft.NET.Test.Sdk 17.14.1 -> 18.0.1 age confidence nuget major
Npgsql 9.0.3 -> 10.0.0 age confidence nuget major
Npgsql.OpenTelemetry 9.0.3 -> 10.0.0 age confidence nuget major
Serilog.AspNetCore 9.0.0 -> 10.0.0 age confidence nuget major
Serilog.Extensions.Hosting 9.0.0 -> 10.0.0 age confidence nuget major
Swashbuckle.AspNetCore 9.0.3 -> 10.0.1 age confidence nuget major
actions/checkout v4 -> v6 age confidence action major
actions/setup-dotnet v4 -> v5 age confidence action major
github/codeql-action v3 -> v4 age confidence action major

Release Notes

AzureAD/microsoft-identity-web (Microsoft.Identity.Web)

v4.1.1

Compare Source

Bug fixes
  • Authority-only configuration parsing improvements: Early parsing of Authority into Instance/TenantId and defensive fallback in PrepareAuthorityInstanceForMsal. Behavior is backward compatible; Authority is still ignored when Instance/TenantId explicitly provided—now surfaced via a warning. See #​3612.
New features
  • Added warning diagnostics for conflicting Authority vs Instance/TenantId: Emitting a single structured warning when both styles are provided. See #​3611.
Fundamentals
  • Expanded authority test matrix: Coverage for AAD (v1/v2), B2C (/tfp/ normalization, policy path), CIAM (PreserveAuthority), query parameters, scheme-less forms, and conflict scenarios. See #​3610.

v4.1.0

Compare Source

=========

New features
Dependencies updates
  • Bump MSAL.NET to version 4.79.2 and handle changes to deprecated WithExtraQueryParameters APIs. #​3583
  • Update Microsoft.IdentityModel and Abstractions versions. #​3604
  • Update coverlet.collector to 6.0.4. #​3587
  • Update package validation baseline version to 4.0.0. #​3589
  • Bump js-yaml from 4.1.0 to 4.1.1 in /tests/DevApps/SidecarAdapter/typescript. #​3595
Entra ID SDK sidecar
  • Restrict hosts to localhost for sidecar. #​3579
  • Update http file to match endpoints. #​3555
  • Revise sidecar issue template for Entra ID. #​3577
Documentation
  • Update README to include Entra SDK container info. #​3578
Fundamentals
  • Include NET 9.0 in template-install-dependencies. #​3593
  • Fix CodeQL alerts. #​3591
  • Suppression file is needed. #​3592

v4.0.1

Compare Source

=========

Bugs fixes

  • Correctly compute Application Key when credential usage fails. #​3487
  • Fix bugs where agent user identities didn't work with non-default authentication schemes. #​3487

Fundamentals

  • Update .net version to CG compliance #​3487

Entra ID SDK sidecar

  • Configure Sidecar to default AllowWebApiToBeAuthorizedByACL to true as the container doesn't do authZ #​3487

v4.0.0

=========

Breaking Changes

Removed support for .NET 6.0 and .NET 7.0 - Microsoft Identity Web 4.0.0 no longer targets .NET 6.0 and .NET 7.0, following Microsoft's support lifecycle. The supported target frameworks are now .NET 8.0, .NET 9.0, .NET Framework 4.6.2, .NET Framework 4.7.2, and .NET Standard 2.0.

New features
  • Various improvements to performance logging, authentication, and credential loading capabilities.
  • Bumped MSAL.NET to 4.77.1
  • Added credential description extensibility. For details, see #​3487
  • Added a new CerticateObserverAction type: SuccessfullyUsed and support for multiple certificate observers for improved certificate lifecycle management and telemetry. See #​3505
  • Add specification of OID (in addition to upn) when requesting an authorization header for Agent User Identity. See #​3513
  • Added ClaimsPrincipal and ClaimsIdentity extension methods for agent identity detection in web APIs enabling developers to easily detect agent identities and retrieve parent agent blueprint from token claims. See #​3515
  • Added MicrosoftIdentityMessageHandler for flexible HttpClient authentication. Provides composable alternative to DownstreamApi with per-request authentication configuration. Supports WWW-Authenticate challenge handling. See #​3503
  • Support for multiple certificate observers. See #​3506
  • The Microsoft.Identity.Web.Sidecar will provide a container solution for validation and token acquisition in any-language. See #​3524
Bug Fixes
  • Fixed TokenAcquirerFactory null reference when AppContext.BaseDirectory is root path. See #​3443
  • Fixed IDW10405 error when using managed identity with common tenant. See #​3415
  • Removed hard dependency on IConfiguration in OidcIdpSignedAssertionLoader. See #​3414
Fundamentals
  • Various improvements to .NET support and dependency optimizations.
  • Added doc for Agent identities. See Agent identities
  • Combined and fixed test collections. See #​3472
  • Migrate repository agent rules from .clinerules to agents.md. See #​3475
  • Add .NET 6.x setup step to dotnetcore.yml workflow, as the default build agents don't have it any longer. See #​3489
  • Renamed NET 7 tests to ThreadingTests for framework independence. See #​3501

v3.14.1

=======

Bug fix

  • Support client secrets with agent user identities. See #​3470 for details.

v3.14.0

=======

New features

  • Support multi-tenant agent user identities. See #​3461 for details.
  • Id Web now allows for passing of ExtraBodyParameters. See #​3463 for details.

v3.13.2

=======

Dependencies updates
  • Updated MSAL.NET to version 4.76.0

v3.13.1

Compare Source

=======

Dependencies updates
  • Microsoft.IdentityModel updated to version 8.14.0.

v3.13.0

Compare Source

=======

Dependencies updates
  • Microsoft.IdentityModel updated to version 8.13.1.
  • Microsoft.Abstractions updated to version 9.3.0 and using IAuthenticationSchemeInformationProvider from that library, deprecating the interface of the same name in Microsoft.Identity.Web (introduced in 3.12.0).
Bug fixes
  • Fixed an issue with instantiation of TokenAcquirerFactory when AppContext.BaseDirectory is root path. See PR #​3443 for details.
Fundamentals

v3.12.0

Compare Source

=======

Dependencies updates
  • Updated MSAL to version 4.74.1 part of #​3398.

Bug fix

Reload certificates for all client credential based issues to solve the issue that when a bad certificate was installed on the machine and picked up, and subsequently rotated, a service restart was needed for the new certificate to be used. See issue #​3429 and PR #​3430

New features

  • Include the thrown exception in CertificateChangeEventArg. See PR #​3428 for better supportabiliby.
  • Support for Agent User identities. See PR #​3435
microsoft/vstest (Microsoft.NET.Test.Sdk)

v18.0.1

What's Changed

Fixing an issue with loading covrun64.dll on systems that have .NET 10 SDK installed: https://learn.microsoft.com/en-us/dotnet/core/compatibility/sdk/10.0/code-coverage-dynamic-native-instrumentation

Internal changes

Full Changelog: microsoft/vstest@v18.0.0...v18.0.1

v18.0.0

What's Changed

Internal fixes and updates

New Contributors

Full Changelog: microsoft/vstest@v17.14.1...v18.0.0

npgsql/npgsql (Npgsql)

v10.0.0

See the release notes.

The full list of changes is available here.

What's Changed

Configuration

📅 Schedule: Branch creation - "before 7am on Monday,before 7am on Friday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@coderabbitai
Copy link
Contributor

coderabbitai bot commented Aug 15, 2025 •
edited
Loading

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Comment @coderabbitai help to get the list of available commands and usage tips.

@renovate renovate bot force-pushed the renovate/major-all-dependencies branch 3 times, most recently from b2102b7 to b1e953c Compare September 1, 2025 11:44
@renovate renovate bot requested a review from a team as a code owner September 1, 2025 11:44
@renovate renovate bot force-pushed the renovate/major-all-dependencies branch from b1e953c to 2377442 Compare September 3, 2025 05:45
@renovate renovate bot changed the title Update actions/checkout action to v5 Update All dependencies to v5 (major) Sep 3, 2025
@renovate renovate bot force-pushed the renovate/major-all-dependencies branch 4 times, most recently from 26dd259 to ed7f582 Compare September 12, 2025 13:32
@renovate renovate bot force-pushed the renovate/major-all-dependencies branch 3 times, most recently from a58d2fb to 2a39fc3 Compare September 23, 2025 07:13
@renovate renovate bot force-pushed the renovate/major-all-dependencies branch 4 times, most recently from 9c47d05 to e16c1e3 Compare October 2, 2025 10:14
@renovate renovate bot changed the title Update All dependencies to v5 (major) Update All dependencies (major) Oct 2, 2025
@renovate renovate bot force-pushed the renovate/major-all-dependencies branch 2 times, most recently from 8616e8f to b2455af Compare October 13, 2025 19:13
@renovate renovate bot force-pushed the renovate/major-all-dependencies branch 2 times, most recently from 759e8f5 to 36d5e18 Compare October 20, 2025 22:55
@renovate renovate bot force-pushed the renovate/major-all-dependencies branch 3 times, most recently from e05f013 to 3195db3 Compare October 29, 2025 12:58
@renovate renovate bot force-pushed the renovate/major-all-dependencies branch 2 times, most recently from f60ca3a to cb204dc Compare October 31, 2025 13:34
@renovate renovate bot force-pushed the renovate/major-all-dependencies branch 5 times, most recently from fec8000 to 9f52fe2 Compare November 7, 2025 12:45
@renovate renovate bot force-pushed the renovate/major-all-dependencies branch 5 times, most recently from 93ed3c6 to ceacd90 Compare November 17, 2025 08:43
@renovate renovate bot force-pushed the renovate/major-all-dependencies branch 8 times, most recently from 24d620c to 300471f Compare November 25, 2025 02:48
@renovate renovate bot force-pushed the renovate/major-all-dependencies branch from 300471f to 810dca3 Compare November 28, 2025 08:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

kind/dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants