Update nuget non-major dependencies by renovate[bot] · Pull Request #1169 · Altinn/altinn-authorization

renovate · 2024-11-07T02:12:02Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
Altinn.Authorization.ABAC	`0.0.8` → `0.1.1`
Altinn.Authorization.ProblemDetails	`3.0.1` → `3.3.0`
Altinn.Authorization.ProblemDetails.Abstractions	`3.0.1` → `3.3.0`
Altinn.Common.AccessToken	`4.5.3` → `4.5.5`
Altinn.Common.AccessTokenClient	`3.0.9` → `3.2.2`
Altinn.Common.PEP	`4.0.0` → `4.2.3`
Altinn.Platform.Storage.Interface	`4.0.3` → `4.6.0`
Altinn.Swashbuckle	`2.1.1` → `2.4.1`
Altinn.Urn	`2.5.1` → `2.7.0`
Altinn.Urn.Swashbuckle	`2.5.1` → `2.7.0`
Azure.Identity (source)	`1.13.1` → `1.19.0`
Azure.Security.KeyVault.Certificates (source)	`4.7.0` → `4.8.0`
Azure.Security.KeyVault.Secrets (source)	`4.7.0` → `4.9.0`
Azure.Storage.Blobs (source)	`12.22.2` → `12.27.0`
Azure.Storage.Queues (source)	`12.20.1` → `12.25.0`
DotNet.ReproducibleBuilds	`1.2.25` → `1.2.39`
FluentAssertions (source)	`6.12.1` → `6.12.2`
JWTCookieAuthentication	`4.0.1` → `4.0.4`
MSTest.TestFramework	`3.6.2` → `3.11.1`
Microsoft.ApplicationInsights (source)	`2.22.0` → `2.23.0`
Microsoft.ApplicationInsights.AspNetCore (source)	`2.22.0` → `2.23.0`
Microsoft.AspNetCore.Mvc.NewtonsoftJson (source)	`6.0.35` → `6.0.36`
Microsoft.AspNetCore.Mvc.Testing (source)	`8.0.10` → `8.0.25`
Microsoft.Azure.WebJobs.Extensions.Storage (source)	`5.3.2` → `5.3.8`
Microsoft.FeatureManagement	`4.0.0` → `4.4.0`
Microsoft.IdentityModel.Protocols.OpenIdConnect	`8.3.0` → `8.16.0`
Microsoft.NET.Test.Sdk	`17.12.0` → `17.14.1`
Microsoft.NET.Test.Sdk	`17.11.1` → `17.14.1`
Npgsql	`8.0.5` → `8.0.9`
Swashbuckle.AspNetCore.Filters	`8.0.2` → `8.0.3`
System.Text.Json (source)	`8.0.5` → `8.0.6`
coverlet.collector	`6.0.2` → `6.0.4`

Release Notes

Altinn/altinn-authorization-utils (Altinn.Authorization.ProblemDetails)

`v3.3.0`: Altinn.Authorization.ProblemDetails: v3.3.0

Compare Source

Features

add MultipleProblemDetails (#263) (397ae08)

`v3.2.2`: Altinn.Authorization.ProblemDetails: v3.2.2

Compare Source

Bug Fixes

include more details in ProblemInstanceException (#228) (5fe0f72)

`v3.2.1`: Altinn.Authorization.ProblemDetails: v3.2.1

Compare Source

Bug Fixes

add ProblemInstanceException constructor overloads (#175) (95b8a0b)

`v3.2.0`: Altinn.Authorization.ProblemDetails: v3.2.0

Compare Source

Features

add ProblemInstanceException (#172) (7bed62f)

`v3.1.0`: Altinn.Authorization.ProblemDetails: v3.1.0

Compare Source

Features

upgrade to .NET 9 (#166) (867c940)

Altinn/altinn-accesstoken (Altinn.Common.AccessToken)

`v4.5.5`

Compare Source

What's Changed

chore(deps): update dependency microsoft.identitymodel.protocols.openidconnect to 8.3.0 by @renovate in #121

`v4.5.4`

Compare Source

What's Changed

chore(deps): update dependency microsoft.identitymodel.protocols.openidconnect to 8.2.0 by @renovate in #114

Full Changelog: Altinn/altinn-accesstoken@Altinn.Common.AccessToken-4.5.3...Altinn.Common.AccessToken-4.5.4

Azure/azure-sdk-for-net (Azure.Identity)

`v1.19.0`

Compare Source

1.19.0 (2026-03-11)

Features Added

Added support in ClientCertificateCredential to specify a path in the form of cert:/StoreLocation/StoreName/Thumbprint to refer to a certificate in the platform certificate store - such as the Windows Certificate Store on Windows, and the KeyChain on MacOS - instead of a file on disk. For example to load a certificate from the "My" store in the "CurrentUser" location use the path cert:/CurrentUser/My/E661583E8FABEF4C0BEF694CBC41C28FB81CD870 (A community contribution, courtesy of fowl2).

Other Changes

Updated Microsoft.Identity.Client and Microsoft.Identity.Client.Extensions.Msal dependencies to version 4.83.1.

`v1.18.0`

Compare Source

1.18.0 (2026-02-25)

Features Added

Added experimental Microsoft.Extensions.Configuration and Microsoft.Extensions.DependencyInjection integration for Azure SDK clients. For details, see the Configuration and Dependency Injection documentation.
The WorkloadIdentityCredentialOptions.IsAzureProxyEnabled property, which enables Azure Kubernetes token proxy mode, is only available in beta releases of this package.
AzureDeveloperCliCredential now parses JSON error output from azd auth token to extract clean error messages instead of including raw JSON in exceptions. Error messages like {"type":"consoleMessage","data":{"message":"ERROR: fetching token: ..."}} are now displayed as ERROR: fetching token: ....

`v1.17.1`

Compare Source

1.17.1 (2025-11-18)

Other Changes

Updated Microsoft.Identity.Client and Microsoft.Identity.Client.Extensions.Msal dependencies to version 4.78.0.

`v1.17.0`

Compare Source

1.17.0 (2025-10-07)

Bugs Fixed

TenantId is now configured via MSAL's WithTenantId instead of WithTenantIdFromAuthority to prevent malformed Uris to the authority.

Other Changes

Deprecated BrowserCustomizationOptions.UseEmbeddedWebView property. This option requires additional dependencies on Microsoft.Identity.Client.Desktop and is no longer supported. Consider using brokered authentication instead.

`v1.16.0`

Compare Source

1.16.0 (2025-09-09)

Features Added

Added a new DefaultAzureCredential constructor that accepts a custom environment variable name for credential configuration. This provides flexibility beyond the default AZURE_TOKEN_CREDENTIALS environment variable. The constructor accepts any environment variable name and uses the same credential selection logic as the existing AZURE_TOKEN_CREDENTIALS processing.
Added DefaultAzureCredential.DefaultEnvironmentVariableName constant property that returns "AZURE_TOKEN_CREDENTIALS" for convenience when referencing the default environment variable name.
AzureCliCredential, AzurePowerShellCredential, and AzureDeveloperCliCredential now throw an AuthenticationFailedException when the TokenRequestContext includes claims, as these credentials do not support claims challenges. The exception message includes guidance for handling such scenarios.
When AZURE_TOKEN_CREDENTIALS or the equivalent custom environment variable is configured to ManagedIdentityCredential, the DefaultAzureCredential does not issue a probe request and performs retries with exponential backoff.

Bugs Fixed

Fixed AzureDeveloperCliCredential hanging when the AZD_DEBUG environment variable is set by adding the --no-prompt flag to prevent interactive prompts (#52005).
BrokerCredential is now included in the chain when AZURE_TOKEN_CREDENTIALS is set to dev.
Fixed an issue that prevented ManagedIdentityCredential from utilizing the token cache in Workload Identity Federation environments.
Fixed a bug in DefaultAzureCredential that caused the credential chain to be constructed incorrectly when using AZURE_TOKEN_CREDENTIALS in combination with DefaultAzureCredentialOptions.

Other Changes

The BrokerCredential is now always included in the DefaultAzureCredential chain. If the Azure.Identity.Broker package is not referenced, an exception will be thrown when GetToken is called, making its behavior consistent with the rest of the credentials in the chain.
Updated Microsoft.Identity.Client dependency to version 4.76.0.
Updated Microsoft.Identity.Client.Extensions.Msal dependency to version 4.76.0.

`v1.15.0`

Compare Source

1.15.0 (2025-08-07)

Breaking Changes

Behavioral Breaking Changes

Deprecated SharedTokenCacheCredential. The supporting credential (SharedTokenCacheCredential) was a legacy mechanism for authenticating clients using credentials provided to Visual Studio. For brokered authentication, consider using InteractiveBrowserCredential instead. The following changes have been made:
- SharedTokenCacheCredential class is marked as [Obsolete] and [EditorBrowsable(EditorBrowsableState.Never)]
- SharedTokenCacheCredentialOptions class is marked as [Obsolete] and [EditorBrowsable(EditorBrowsableState.Never)]
- DefaultAzureCredentialOptions.ExcludeSharedTokenCacheCredential property is marked as [Obsolete] and [EditorBrowsable(EditorBrowsableState.Never)]
- SharedTokenCacheUsername property is marked as [Obsolete] and [EditorBrowsable(EditorBrowsableState.Never)]
- SharedTokenCacheCredential is no longer included in the DefaultAzureCredential authentication flow

Bugs Fixed

Tenant ID comparisons in credential options are now case-insensitive. This affects AdditionallyAllowedTenants values which will now be matched against tenant IDs without case sensitivity, making the authentication more resilient to case differences in tenant IDs returned from WWW-Authenticate challenges (#51693).

Other Changes

BrokerAuthenticationCredential has been renamed as BrokerCredential.
Added the EditorBrowsable(Never) attribute to property VisualStudioCodeTenantId as TenantId is preferred. The VisualStudioCodeTenantId property exists only to provide backwards compatibility.

`v1.14.2`

Compare Source

1.14.2 (2025-07-10)

Other changes

Updated Microsoft.Identity.Client dependency to version 4.73.1

`v1.14.1`

Compare Source

1.14.1 (2025-07-08)

Bugs Fixed

Added support in AzurePowerShellCredential for the Az.Accounts 5.0.0+ (Az 14.0.0+) breaking change where Get-AzAccessToken returns PSSecureAccessToken with a SecureString Token property instead of plaintext.

`v1.14.0`

Compare Source

1.14.0 (2025-05-13)

Other Changes

Removed references to Username, Password, AZURE_USERNAME, and AZURE_PASSWORD in XML comments from EnvironmentCredentialOptions and EnvironmentCredential due to lack of MFA support. See MFA enforcement details.
Marked AZURE_USERNAME and AZURE_PASSWORD as obsolete due to lack of MFA support. See MFA enforcement details.
Added support for the AZURE_TOKEN_CREDENTIALS environment variable to DefaultAzureCredential, which allows for choosing between 'deployed service' and 'developer tools' credentials. Valid values are 'dev' for developer tools and 'prod' for deployed service.

`v1.13.2`

Compare Source

1.13.2 (2025-07-18)

Features Added

Make Azure.ResourceManager AOT-compatible.

dotnet/reproducible-builds (DotNet.ReproducibleBuilds)

`v1.2.39`

Additions

Add codes and help links to existing warnings by @MattKotsenas in #68

Removals

Remove unsetting of NetCoreTargetingPackRoot to allow package pruning by @MattKotsenas in #70

Changed

Fix typo in Isolated package description by @austindrenski in #63

Tidying up

Clean up docs by @MattKotsenas in #54
Use latest dotfiles from dotnet new by @MattKotsenas in #56
Delete .sln file and add slngen as dotnet-tool by @MattKotsenas in #57
Bump global.json to 9.0.100 by @MattKotsenas in #55
Convert to Central Package Management (CPM) by @MattKotsenas in #65
Update dependencies by @MattKotsenas in #66
Update to .NET 10 SDK by @MattKotsenas in #67
Update CHANGELOGs for release by @MattKotsenas in #71

New Contributors

@austindrenski made their first contribution in #63

Full Changelog: dotnet/reproducible-builds@v1.2.25...v1.2.39

fluentassertions/fluentassertions (FluentAssertions)

`v6.12.2`

Compare Source

What's Changed

Others

Better support for default interface and explicitly implemented properties by @dennisdoomen in #2794

Full Changelog: fluentassertions/fluentassertions@6.12.1...6.12.2

microsoft/testfx (MSTest.TestFramework)

`v3.11.1`

See the release notes here

`v3.11.0`

See the release notes here

`v3.10.5`

See the release notes here

`v3.10.4`

See the release notes here

`v3.10.3`

See the release notes here

`v3.10.2`

See the release notes here

`v3.10.1`

See the release notes here

`v3.10.0`

See the release notes here

`v3.9.3`

What's Changed

Simpler fix for dotnet test when using retry by @Youssef1313 in #5732. Note that this PR targets rel/3.9 branch. For 3.10, we did a different fix: #5717

See the MSTest changelog here: https://github.com/microsoft/testfx/blob/main/docs/Changelog.md#3.9.3
See the Microsoft.Testing.Platform changelog here: https://github.com/microsoft/testfx/blob/main/docs/Changelog-Platform.md#1.7.3

Full Changelog: microsoft/testfx@v3.9.2...v3.9.3

`v3.9.2`

What's Changed

Fix MSTEST0042 (duplicate data row) false positive with Zero/NegativeZero by @Youssef1313 in #5684
Allow framework authors to use TestCase.FullyQualifiedName as the TestNodeUid by @Youssef1313 in #5658
Ensure TestMethodAttribute.Execute is run on the correct execution context by @Youssef1313 in #5688
Avoid loading System.Threading.Tasks.Extensions when not needed by @Youssef1313 in #5694
Fix UseAsync property in TestMethodAttribute derived classes to use type checks by @Youssef1313 and @Copilot in #5708
Fix UnitTestRunner leaking some test class instances by @Youssef1313 in #5715

See the MSTest changelog here: https://github.com/microsoft/testfx/blob/main/docs/Changelog.md#3.9.2
See the Microsoft.Testing.Platform changelog here: https://github.com/microsoft/testfx/blob/main/docs/Changelog-Platform.md#1.7.2

Full Changelog: microsoft/testfx@v3.9.1...v3.9.2

`v3.9.1`

What's Changed

Make ConditionBaseAttribute.Mode public by @youssef-backport-bot in #5597
Add missing overload for Assert.Throws by @youssef-backport-bot in #5620
Fix System.MissingMethodException for KeyValuePair Deconstruction by @youssef-backport-bot in #5635
Run the whole ExecuteInternal logic under the right execution context by @youssef-backport-bot in #5646
VSTestBridge: Handle TestPropertyAttributes.Trait instead of special casing specific properties by @youssef-backport-bot in #5648

See the MSTest changelog here: https://github.com/microsoft/testfx/blob/main/docs/Changelog.md#3.9.1
See the Microsoft.Testing.Platform changelog here: https://github.com/microsoft/testfx/blob/main/docs/Changelog-Platform.md#1.7.1

Full Changelog: microsoft/testfx@v3.9.0...v3.9.1

`v3.9.0`

In this release we focused a lot on providing fixes for MSTest and Microsoft.Testing.Platform. The most notable new features and fixes are:

MSTest

Allow async test methods for UITestMethod on UWP and WinUI by @Youssef1313 in #5297
Add analyzer for duplicate data row by @Youssef1313 in #5144
Fix ClassCleanup not called when the first test in class is ignored by @Youssef1313 in #5070
Fix writing warnings outside of appdomain by @nohwnd in #5371

Microsoft.Testing.Platform

Add (alpha) Azure DevOps extension to report errors by @nohwnd in #5260
Kill testhost if writing hang dump fails by @Youssef1313 in #5538

We've also improved the dotnet test experience in dotnet SDK, especially around Retry plugin experience, and started dogfooding the experience in our own repository. Please check out how to enable the new dotnet test experience for Microsoft.Testing.Platform in net10 by following this link, and help us dogfood it.

New Contributors

@stan-sz made their first contribution in #5214
@YoshiRulz made their first contribution in #5281
@bjornhellander made their first contribution in #5300

See the MSTest changelog here: https://github.com/microsoft/testfx/blob/main/docs/Changelog.md#3.9.0
See the Microsoft.Testing.Platform changelog here: https://github.com/microsoft/testfx/blob/main/docs/Changelog-Platform.md#1.7.0

Full Changelog: microsoft/testfx@v3.8.3...v3.9.0

`v3.8.3`

See the release notes here

`v3.8.2`

See the release notes here

`v3.8.1`

See the release notes here

`v3.8.0`

See the release notes here

Announcements

This release adds new Assert APIs related to throwing exceptions, collections, and strings. Refer to the changelog for more information.
This release adds support for generic test methods.
This release adds few new analyzers.
We added MSTestAnalysisMode. We encourage you to set this property to at least Recommended.
This release adds RetryAttribute
Microsoft.Testing.Extensions.TrxReport and Microsoft.Testing.Extensions.CodeCoverage are now a dependency of MSTest metapackage

`v3.7.3`

See the release notes here

`v3.7.2`

See the release notes here

`v3.7.1`

See the release notes here

`v3.7.0`

See the release notes here

Announcements

MSTest.Analyzers is now a transitive dependency of MSTest.TestFramework and thus no longer needs to be manually installed.

Note: The only rules enabled by default as warnings, which could potentially cause build errors when updating MSTest, have been carefully selected and thoroughly validated. These rules specifically address real runtime issues related to the usage of MSTest, ensuring that no purely stylistic or low-impact analyzers are enforced by default.

`v3.6.4`

See the release notes here

`v3.6.3`

See the release notes here

Microsoft/ApplicationInsights-dotnet (Microsoft.ApplicationInsights)

`v2.23.0`

Compare Source

no changes since beta.

dotnet/dotnet (Microsoft.AspNetCore.Mvc.Testing)

`v8.0.18`: .NET 8.0.18

You can build .NET 8.0 from the repository by cloning the release tag v8.0.18 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.