chore: bump the all group across 1 directory with 2 updates by dependabot[bot] · Pull Request #1536 · Azure/azure-workload-identity

dependabot · 2025-01-20T19:24:43Z

Bumps the all group with 2 updates in the /examples/msal-net/akvdotnet directory: Azure.Security.KeyVault.Secrets and Microsoft.Identity.Client.

Updates Azure.Security.KeyVault.Secrets from 4.5.0 to 4.7.0

Commits

48f989c [DocumentIntelligence] Default authentication to Token Credential (#46448)
2cbb460 [Key Vault] Prepare release for CAE feature (#46599)
d5abc28 fix package dependency (#46609)
59c2c7a Fixed DM Lib Shares dependency (#46603)
bb73175 Prepare for October GA release (#46600)
e499bcc [EngSys] Bump package versions (#46595)
eee60a1 DM Lib beta release (#46596)
fabfa6c Added the ability to provision AOAI as an optional component (#46570)
8a252ab Update test-resources.bicep (#46573)
dcfb2ef fix(playwighttesting): Removed cancellationToken from SetupAsync method since...
Additional commits viewable in compare view

Updates Microsoft.Identity.Client from 4.60.4 to 4.67.2

Release notes

Sourced from Microsoft.Identity.Client's releases.

4.67.2

Bug Fixes

Fixed an issue with Managed Identity source detection where Azure ML was prioritized incorrectly over Azure App Service, causing token acquisition failures. See [Bug #5077](AzureAD/microsoft-authentication-library-for-dotnet#5077)

4.67.1

Bug Fixes

Added support for Azure Machine Learning (Azure ML) Managed Identity (MSI) to address missing functionality for token acquisition in Azure Machine Learning environments. See [Bug #4984](AzureAD/microsoft-authentication-library-for-dotnet#4984)

4.67.0

New Features

MSAL.NET now supports acquiring token for Client Credentials flow with a Subject Name Issuer (SNI) certificate over Mutual TLS (mTLS) for first-party applications. See [Issue #4986](AzureAD/microsoft-authentication-library-for-dotnet#4986)

Bumped NET SDK from net6 to net8, aligning MSAL.NET with the latest .NET standards and features. See [Feature Request #5025](AzureAD/microsoft-authentication-library-for-dotnet#5025)

Public API analyzer integrated to enhance API compliance and stability. See [Feature Request #4931](AzureAD/microsoft-authentication-library-for-dotnet#4931)

Bug Fixes

Improved AcquireTokenSilent logging and handling of Family of Client IDs (FOCI). See [Bug #4988](AzureAD/microsoft-authentication-library-for-dotnet#4988)

Fixed issues where DurationTotalInMs in AuthenticationResultMetadata differed from Stopwatch measurements. See [Bug #4895](AzureAD/microsoft-authentication-library-for-dotnet#4895)

Resolved incorrect computation of OTel durations in L1 cache and during the creation of POP tokens. See [Bug #5036](AzureAD/microsoft-authentication-library-for-dotnet#5036)

Addressed an issue where AbstractAcquireTokenParameterBuilder<T>.WithAdfsAuthority threw exceptions when the tenant ID was null and the authority host URI ended in /adfs. See [Bug #4860](AzureAD/microsoft-authentication-library-for-dotnet#4860)

Fixed a parsing issue in Managed Identity to align with Azure.Identity's behavior for handling invalid JSON responses. See [Bug #5016](AzureAD/microsoft-authentication-library-for-dotnet#5016)

Deprecated

Removed MSAL v3 migration aids. See [Remove #4987](AzureAD/microsoft-authentication-library-for-dotnet#4987)

4.66.2

Bug Fixes

Fixed a bug where MSAL .NET fails to launch the iOS broker on IOS 18.0.1. See [Issue #4958](AzureAD/microsoft-authentication-library-for-dotnet#4958)

4.66.1

Bug Fixes

Fixed a bug where MSAL .NET fails to correctly handle the expires_on field for Managed Identity tokens in ISO 8601 format. This fix ensures accurate parsing of ISO 8601 date-time formats during token acquisition. See [Issue #4963](AzureAD/microsoft-authentication-library-for-dotnet#4963)

4.66.0

New Features

Enabled extended functionality in the MSAL authentication flow through the implementation of IAuthenticationOperation. This allows for custom extensions in the authentication flow by providing an authentication operation interface. See [Issue #4956](AzureAD/microsoft-authentication-library-for-dotnet#4956)

MSAL.NET will now opt-in to regional ESTS when the environment variable MSAL_FORCE_REGION is set (e.g., MSAL_FORCE_REGION=eastus). This automatically directs MSAL to use the specified region for token acquisition. If the region is explicitly set to "DisableMsalForceRegion", MSAL will not opt-in to regional ESTS. Use of the WithAzureRegion(xyz) API takes precedence over the environment variable. See [Issue #4930](AzureAD/microsoft-authentication-library-for-dotnet#4930)

4.65.2-Preview

Refactored CDT Prototype

Moved prototype to separate folder

Removed dependency on MSAL internals

4.65.0

New Features

Update telemetry to include the caller SDK details. See [Issue #4863](AzureAD/microsoft-authentication-library-for-dotnet#4863)

MSAL.Net now exposes an API to enable developers to cache additional values in the token response. See [Issue #4922](AzureAD/microsoft-authentication-library-for-dotnet#4922)

Managed identity .WithClaims() and .WithClientCapabilities() APIs are now generally available. See [Issue #4921](AzureAD/microsoft-authentication-library-for-dotnet#4921)

... (truncated)

Changelog

Sourced from Microsoft.Identity.Client's changelog.

4.67.2

Bug Fixes

Fixed an issue with Managed Identity source detection where Azure ML was prioritized incorrectly over Azure App Service, causing token acquisition failures. See [Bug #5077](AzureAD/microsoft-authentication-library-for-dotnet#5077)

4.67.1

Bug Fixes

Added support for Azure Machine Learning (Azure ML) Managed Identity (MSI) to address missing functionality for token acquisition in Azure Machine Learning environments. See [Bug #4984](AzureAD/microsoft-authentication-library-for-dotnet#4984)

4.67.0

New Features

MSAL.NET now supports acquiring token for Client Credentials flow with a Subject Name Issuer (SNI) certificate over Mutual TLS (mTLS) for first-party applications. See [Issue #4986](AzureAD/microsoft-authentication-library-for-dotnet#4986)

Bumped NET SDK from net6 to net8, aligning MSAL.NET with the latest .NET standards and features. See [Feature Request #5025](AzureAD/microsoft-authentication-library-for-dotnet#5025)

Public API analyzer integrated to enhance API compliance and stability. See [Feature Request #4931](AzureAD/microsoft-authentication-library-for-dotnet#4931)

Bug Fixes

Improved AcquireTokenSilent logging and handling of Family of Client IDs (FOCI). See [Bug #4988](AzureAD/microsoft-authentication-library-for-dotnet#4988)

Fixed issues where DurationTotalInMs in AuthenticationResultMetadata differed from Stopwatch measurements. See [Bug #4895](AzureAD/microsoft-authentication-library-for-dotnet#4895)

Resolved incorrect computation of OTel durations in L1 cache and during the creation of POP tokens. See [Bug #5036](AzureAD/microsoft-authentication-library-for-dotnet#5036)

Addressed an issue where AbstractAcquireTokenParameterBuilder<T>.WithAdfsAuthority threw exceptions when the tenant ID was null and the authority host URI ended in /adfs. See [Bug #4860](AzureAD/microsoft-authentication-library-for-dotnet#4860)

Fixed a parsing issue in Managed Identity to align with Azure.Identity's behavior for handling invalid JSON responses. See [Bug #5016](AzureAD/microsoft-authentication-library-for-dotnet#5016)

Deprecated

Removed MSAL v3 migration aids. See [Remove #4987](AzureAD/microsoft-authentication-library-for-dotnet#4987)

4.66.2

Bug Fixes

Fixed a bug where MSAL .NET fails to launch the iOS broker on IOS 18.0.1. See [Issue #4958](AzureAD/microsoft-authentication-library-for-dotnet#4958)

4.66.1

Bug Fixes

Fixed a bug where MSAL .NET fails to correctly handle the expires_on field for Managed Identity tokens in ISO 8601 format. This fix ensures accurate parsing of ISO 8601 date-time formats during token acquisition. See [Issue #4963](AzureAD/microsoft-authentication-library-for-dotnet#4963)

4.66.0

New Features

Enabled extended functionality in the MSAL authentication flow through the implementation of IAuthenticationOperation. This allows for custom extensions in the authentication flow by providing an authentication operation interface. See [Issue #4956](AzureAD/microsoft-authentication-library-for-dotnet#4956)

MSAL.NET will now opt-in to regional ESTS when the environment variable MSAL_FORCE_REGION is set (e.g., MSAL_FORCE_REGION=eastus). This automatically directs MSAL to use the specified region for token acquisition. If the region is explicitly set to "DisableMsalForceRegion", MSAL will not opt-in to regional ESTS. Use of the WithAzureRegion(xyz) API takes precedence over the environment variable. See [Issue #4930](AzureAD/microsoft-authentication-library-for-dotnet#4930)

4.65.0

New Features

Update telemetry to include the caller SDK details. See [Issue #4863](AzureAD/microsoft-authentication-library-for-dotnet#4863)

MSAL.Net now exposes an API to enable developers to cache additional values in the token response. See [Issue #4922](AzureAD/microsoft-authentication-library-for-dotnet#4922)

Managed identity .WithClaims() and .WithClientCapabilities() APIs are now generally available. See [Issue #4921](AzureAD/microsoft-authentication-library-for-dotnet#4921)

... (truncated)

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group with 2 updates in the /examples/msal-net/akvdotnet directory: [Azure.Security.KeyVault.Secrets](https://github.com/Azure/azure-sdk-for-net) and [Microsoft.Identity.Client](https://github.com/AzureAD/microsoft-authentication-library-for-dotnet). Updates `Azure.Security.KeyVault.Secrets` from 4.5.0 to 4.7.0 - [Release notes](https://github.com/Azure/azure-sdk-for-net/releases) - [Commits](Azure/azure-sdk-for-net@Azure.Security.KeyVault.Secrets_4.5.0...Azure.Security.KeyVault.Secrets_4.7.0) Updates `Microsoft.Identity.Client` from 4.60.4 to 4.67.2 - [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/releases) - [Changelog](https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/blob/main/CHANGELOG.md) - [Commits](https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/commits/4.67.2) --- updated-dependencies: - dependency-name: Azure.Security.KeyVault.Secrets dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: Microsoft.Identity.Client dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-01-27T20:09:38Z

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

dependabot · 2025-02-10T20:06:01Z