Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[release/6.x] Bump the identity-dependencies group in /eng/dependabot/independent with 3 updates #6854

Merged
merged 1 commit into from
Jun 18, 2024
Merged

[release/6.x] Bump the identity-dependencies group in /eng/dependabot/independent with 3 updates #6854

merged 1 commit into from
Jun 18, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 18, 2024 •
edited
Loading

Bumps the identity-dependencies group in /eng/dependabot/independent with 3 updates: Azure.Identity, Microsoft.IdentityModel.Tokens and Microsoft.IdentityModel.Validators.

Updates Azure.Identity from 1.11.4 to 1.12.0

Release notes

Sourced from Azure.Identity's releases.

Azure.Identity_1.12.0

1.12.0 (2024-06-17)

Features Added

  • Added AzurePipelinesCredential for authenticating with Azure Pipelines service connections.
  • OnBehalfOfCredential now supports client assertion callbacks for acquiring tokens on behalf of a user.
  • All credentials now support setting RefreshOn value if received from MSAL.
  • ManagedIdentityCredential sets RefreshOn value of half the token lifetime for AccessTokens with an ExpiresOn value greater than 2 hours in the future.
  • ClientAssertionCredentialOptions now supports TokenCachePersistenceOptions for configuring token cache persistence.

Azure.Identity_1.12.0-beta.3

1.12.0-beta.3 (2024-06-11)

Features Added

  • OnBehalfOfCredential now supports client assertion callbacks for acquiring tokens on behalf of a user.
  • All credentials now support setting RefreshOn value if received from MSAL.
  • ManagedIdentityCredential sets RefreshOn value of half the token lifetime for AccessTokens with an ExpiresOn value greater than 2 hours in the future.

Breaking Changes

  • The constructor of AzurePipelinesCredential now includes additional required parameters for the Azure Pipelines service connection.

Bugs Fixed

  • Bug fixes for AzurePipelinesCredential
  • Managed identity bug fixes.
Commits

Updates Microsoft.IdentityModel.Tokens from 7.6.0 to 7.6.1

Release notes

Sourced from Microsoft.IdentityModel.Tokens's releases.

7.6.1

New Features:

  • Add missing metadata parameters to OpenIdConnectConfiguration. See issue #2498 for details.

Bug Fixes:

  • Fix over-reporting of IDX14100. See issue #2058 and PR #2618 for details.
  • JwtRegisteredClaimNames now contains previously missing Standard OpenIdConnect claims. See issue #1598 for details.

Performance Improvements:

  • Reduced allocations in AadIssuerValidator by not using string.Replace where appropriate. See issue #2595 and PR #2597 for more details.
  • No longer for every string claim, calling DateTime.TryParse on each value, whether it is expected to be a DateTime or not. See issue #2615 for details.
Changelog

Sourced from Microsoft.IdentityModel.Tokens's changelog.

7.6.1

New Features:

  • Add missing metadata parameters to OpenIdConnectConfiguration. See issue #2498 for details.

Bug Fixes:

  • Fix over-reporting of IDX14100. See issue #2058 and PR #2618 for details.
  • JwtRegisteredClaimNames now contains previously missing Standard OpenIdConnect claims. See issue #1598 for details.

Performance Improvements:

  • Reduced allocations in AadIssuerValidator by not using string.Replace where appropriate. See issue #2595 and PR #2597 for more details.
  • No longer for every string claim, calling DateTime.TryParse on each value, whether it is expected to be a DateTime or not. See issue #2615 for details.
Commits

Updates Microsoft.IdentityModel.Validators from 7.6.0 to 7.6.1

Release notes

Sourced from Microsoft.IdentityModel.Validators's releases.

7.6.1

New Features:

  • Add missing metadata parameters to OpenIdConnectConfiguration. See issue #2498 for details.

Bug Fixes:

  • Fix over-reporting of IDX14100. See issue #2058 and PR #2618 for details.
  • JwtRegisteredClaimNames now contains previously missing Standard OpenIdConnect claims. See issue #1598 for details.

Performance Improvements:

  • Reduced allocations in AadIssuerValidator by not using string.Replace where appropriate. See issue #2595 and PR #2597 for more details.
  • No longer for every string claim, calling DateTime.TryParse on each value, whether it is expected to be a DateTime or not. See issue #2615 for details.
Changelog

Sourced from Microsoft.IdentityModel.Validators's changelog.

7.6.1

New Features:

  • Add missing metadata parameters to OpenIdConnectConfiguration. See issue #2498 for details.

Bug Fixes:

  • Fix over-reporting of IDX14100. See issue #2058 and PR #2618 for details.
  • JwtRegisteredClaimNames now contains previously missing Standard OpenIdConnect claims. See issue #1598 for details.

Performance Improvements:

  • Reduced allocations in AadIssuerValidator by not using string.Replace where appropriate. See issue #2595 and PR #2597 for more details.
  • No longer for every string claim, calling DateTime.TryParse on each value, whether it is expected to be a DateTime or not. See issue #2615 for details.
Commits

Updates Microsoft.IdentityModel.Tokens from 7.6.0 to 7.6.1

Release notes

Sourced from Microsoft.IdentityModel.Tokens's releases.

7.6.1

New Features:

  • Add missing metadata parameters to OpenIdConnectConfiguration. See issue #2498 for details.

Bug Fixes:

  • Fix over-reporting of IDX14100. See issue #2058 and PR #2618 for details.
  • JwtRegisteredClaimNames now contains previously missing Standard OpenIdConnect claims. See issue #1598 for details.

Performance Improvements:

  • Reduced allocations in AadIssuerValidator by not using string.Replace where appropriate. See issue #2595 and PR #2597 for more details.
  • No longer for every string claim, calling DateTime.TryParse on each value, whether it is expected to be a DateTime or not. See issue #2615 for details.
Changelog

Sourced from Microsoft.IdentityModel.Tokens's changelog.

7.6.1

New Features:

  • Add missing metadata parameters to OpenIdConnectConfiguration. See issue #2498 for details.

Bug Fixes:

  • Fix over-reporting of IDX14100. See issue #2058 and PR #2618 for details.
  • JwtRegisteredClaimNames now contains previously missing Standard OpenIdConnect claims. See issue #1598 for details.

Performance Improvements:

  • Reduced allocations in AadIssuerValidator by not using string.Replace where appropriate. See issue #2595 and PR #2597 for more details.
  • No longer for every string claim, calling DateTime.TryParse on each value, whether it is expected to be a DateTime or not. See issue #2615 for details.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot requested a review from a team as a code owner June 18, 2024 16:32
@dependabot dependabot bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Jun 18, 2024
schmittjoseph
schmittjoseph previously approved these changes Jun 18, 2024
View reviewed changes
@schmittjoseph schmittjoseph enabled auto-merge (squash) June 18, 2024 22:09
@dependabot
[release/6.x] Bump the identity-dependencies group
aeaf5ba 
Bumps the identity-dependencies group in /eng/dependabot/independent with 3 updates: [Azure.Identity](https://github.com/Azure/azure-sdk-for-net), [Microsoft.IdentityModel.Tokens](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet) and [Microsoft.IdentityModel.Validators](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet).


Updates `Azure.Identity` from 1.11.4 to 1.12.0
- [Release notes](https://github.com/Azure/azure-sdk-for-net/releases)
- [Commits](Azure/azure-sdk-for-net@Azure.Identity_1.11.4...Azure.Identity_1.12.0)

Updates `Microsoft.IdentityModel.Tokens` from 7.6.0 to 7.6.1
- [Release notes](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases)
- [Changelog](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/blob/7.6.1/CHANGELOG.md)
- [Commits](AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@7.6.0...7.6.1)

Updates `Microsoft.IdentityModel.Validators` from 7.6.0 to 7.6.1
- [Release notes](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases)
- [Changelog](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/blob/7.6.1/CHANGELOG.md)
- [Commits](AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@7.6.0...7.6.1)

Updates `Microsoft.IdentityModel.Tokens` from 7.6.0 to 7.6.1
- [Release notes](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases)
- [Changelog](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/blob/7.6.1/CHANGELOG.md)
- [Commits](AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@7.6.0...7.6.1)

---
updated-dependencies:
- dependency-name: Azure.Identity
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: identity-dependencies
- dependency-name: Microsoft.IdentityModel.Tokens
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: identity-dependencies
- dependency-name: Microsoft.IdentityModel.Validators
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: identity-dependencies
- dependency-name: Microsoft.IdentityModel.Tokens
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: identity-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/nuget/eng/dependabot/independent/release/6.x/identity-dependencies-5138a24892 branch from ab4c583 to aeaf5ba Compare June 18, 2024 22:12
@schmittjoseph schmittjoseph merged commit 920f834 into release/6.x Jun 18, 2024
13 checks passed
@schmittjoseph schmittjoseph deleted the dependabot/nuget/eng/dependabot/independent/release/6.x/identity-dependencies-5138a24892 branch June 18, 2024 22:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@schmittjoseph schmittjoseph schmittjoseph approved these changes

Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file .NET Pull requests that update .net code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@schmittjoseph