Bump the all-dependencies group with 5 updates by dependabot[bot] · Pull Request #2102 · OfficeDev/Microsoft-Teams-Samples

Bot Framework DotNet SDK has reached end-of-life. This is the last planned release. This project will no longer be updated or maintained. Customers using this SDK will not be disrupted. However, the SDK will no longer be supported through service tickets in the Azure portal and will not receive product updates.

To build agents with your choice of AI services, orchestration, and knowledge, consider using the Microsoft 365 Agents SDK. The Agents SDK is GA and has support for C#, JavaScript or Python. You can learn more about the Agents SDK at aka.ms/agents. If you're looking for a SaaS-based agent platform, consider Microsoft Copilot Studio. If you have an existing bot built with the Bot Framework SDK, you can update your bot to the Agents SDK. You can review the core changes and updates at Bot Framework SDK to Agents SDK migration guidance here. Support tickets for the Bot Framework SDK will no longer be serviced as of December 31, 2025.

4.23.0 What's Changed

[#6768] CosmosDBKeyEscape.TruncateKeyIfNeeded return different value after compiled by @ceciliaavila in [#6768] CosmosDBKeyEscape.TruncateKeyIfNeeded return different value after compiled microsoft/botbuilder-dotnet#6860
fix: [#6861]TeamsSSOTokenExchangeMiddleware.DeduplicatedTokenExchangeIdAsync fails on BlobStorage ETag validation by @JhontSouth in fix: [#6861]TeamsSSOTokenExchangeMiddleware.DeduplicatedTokenExchangeIdAsync fails on BlobStorage ETag validation microsoft/botbuilder-dotnet#6867
Bump the nuget group across 9 directories with 1 update by @dependabot in Bump the nuget group across 9 directories with 1 update microsoft/botbuilder-dotnet#6859
fix: Disable telemetry adaptive sampling by @JhontSouth in fix: Disable telemetry adaptive sampling microsoft/botbuilder-dotnet#6849
Suppressed general exception warning by @tracyboehrer in Suppressed general exception warning microsoft/botbuilder-dotnet#6851
Bumped dependencies for System.Text.Json alert by @tracyboehrer in Bumped dependencies for System.Text.Json alert microsoft/botbuilder-dotnet#6864
Add obsolete tag to MsalServiceClientCredentialsFactory class by @ceciliaavila in Add obsolete tag to MsalServiceClientCredentialsFactory class microsoft/botbuilder-dotnet#6866
fix:[#6877] Bot is not accepting v2 tokens from Bot Framework Emulator - Single Tenant Bots by @JhontSouth in fix:[#6877] Bot is not accepting v2 tokens from Bot Framework Emulator - Single Tenant Bots microsoft/botbuilder-dotnet#6879
Port PVA unit tests by @ceciliaavila in Port PVA unit tests microsoft/botbuilder-dotnet#6868
Disable manual component injection since it is injected by @tracyboehrer in Disable manual component injection since it is injected microsoft/botbuilder-dotnet#6880
Fix create parity issue github action by @sw-joelmut in Fix create parity issue github action microsoft/botbuilder-dotnet#6881

Full Changelog: microsoft/botbuilder-dotnet@4.22.9...4.23.0

4.22.9 What's Changed

Fix Attachment issue when it has a MemoryStream instance in [#6771] Fix Attachment issue when it has a MemoryStream instance microsoft/botbuilder-dotnet#6850
Disable telemetry adaptive sampling in fix: Disable telemetry adaptive sampling microsoft/botbuilder-dotnet#6849
SkillDialog.InterceptOAuthCardsAsync doesn't support CloudAdapter in [#6841] SkillDialog.InterceptOAuthCardsAsync doesn't support CloudAdapter microsoft/botbuilder-dotnet#6848

4.22.8

This is the September 2024 release of the DotNet Bot Framework SDK.

What's Changed

Fix for Skills endorsement check in Fix for Skills endorsement check microsoft/botbuilder-dotnet#6846
Federated Credentials (Microsoft tenant only) in Federated Credentials microsoft/botbuilder-dotnet#6838
Remove .Net Core 3.1 from projects in [#6741] Remove .Net Core 3.1 from projects microsoft/botbuilder-dotnet#6819
Update packages to latest version that support .NET 6 in [#6825] Update packages to latest version that support .NET 6 microsoft/botbuilder-dotnet#6840
SM02211 issue alert in fix: Avoid SM02211 issue alert microsoft/botbuilder-dotnet#6843

This release also adds the correct PublicKeyToken back to the assemblies. This does not appear as a PR since it was a build pipeline issue.

4.22.7

This is the June 2024 release of the Bot Framework DotNet SDK. This release contains security and authorization fixes.

What's Changed

Microsoft.Identity.Client bump by @tracyboehrer in Microsoft.Identity.Client bump microsoft/botbuilder-dotnet#6800
Corrected Authority in MsalServiceClientCredentialsFactory by @tracyboehrer in Corrected Authority in MsalServiceClientCredentialsFactory microsoft/botbuilder-dotnet#6802
CertificateServiceClientCredentialsFactory handles public, Gov, and private clouds by @tracyboehrer in CertificateServiceClientCredentialsFactory handles public, Gov, and private clouds microsoft/botbuilder-dotnet#6806
fix: [#6758] Update to version 3 of the Azure Cosmos DB .NET SDK by @JhontSouth in fix: [#6758] Update to version 3 of the Azure Cosmos DB .NET SDK microsoft/botbuilder-dotnet#6796
Add Microsoft.AdaptiveExpressions.Core, fork of AdaptiveExpressions on System.Text.Json (and AOT compatible) by @jevansaks in Add Microsoft.AdaptiveExpressions.Core, fork of AdaptiveExpressions on System.Text.Json (and AOT compatible) microsoft/botbuilder-dotnet#6783
AdaptiveExpression.Core package rename by @tracyboehrer in AdaptiveExpression.Core package rename microsoft/botbuilder-dotnet#6807
AdaptiveExpression.Core framework by @tracyboehrer in AdaptiveExpression.Core framework microsoft/botbuilder-dotnet#6808
AdaptiveExpression.Core duplicated icon.png by @tracyboehrer in AdaptiveExpression.Core duplicated icon.png microsoft/botbuilder-dotnet#6809

4.22.4

This is the May 2024 Bot Framework DotNet SDK patch release. This release contains security fixes, .Net 8, and authentication improvements.

What's Changed

Microsoft.Identity.Client bump by @tracyboehrer in Microsoft.Identity.Client bump microsoft/botbuilder-dotnet#6779
[#6741] Update projects to .Net 8 by @ceciliaavila in [#6741] Update projects to .Net 8 microsoft/botbuilder-dotnet#6760
[#6741] Update functional test pipelines to .NET8 by @ceciliaavila in [#6741] Update functional test pipelines to .NET8 microsoft/botbuilder-dotnet#6761
[#6741] Update generators templates and VSIX to .Net 8 by @sw-joelmut in [#6741] Update generators templates and VSIX to .Net 8 microsoft/botbuilder-dotnet#6762
fix: Add Audience for Certificate auth to work with Skills by @sw-joelmut in fix: Add Audience for Certificate auth to work with Skills microsoft/botbuilder-dotnet#6794
Fix error when building activity with non-string text by @ceciliaavila in Fix error when building activity with non-string text microsoft/botbuilder-dotnet#6753
feat: Support Single Tenant authentication through BotFramework-Emulator by @JhontSouth in feat: Support Single Tenant authentication through BotFramework-Emulator microsoft/botbuilder-dotnet#6769
New LGTM suppression syntax - BlobsStorage by @tracyboehrer in New LGTM suppression syntax - BlobsStorage microsoft/botbuilder-dotnet#6782
Logging UnauthorizedAccessException in BotFrameworkHttpAdapter by @tracyboehrer in Logging UnauthorizedAccessException in BotFrameworkHttpAdapter microsoft/botbuilder-dotnet#6784
Added messages for all UnauthorizedAccessException by @tracyboehrer in Added messages for all UnauthorizedAccessException microsoft/botbuilder-dotnet#6786
Converting to new CodeQL suppression syntax by @gandiddi in Converting to new CodeQL suppression syntax microsoft/botbuilder-dotnet#6787
fix: [#6792] Composer Bot with QnA Intent recognized triggers duplicate QnA queries by @sw-joelmut in fix: [#6792] Composer Bot with QnA Intent recognized triggers duplicate QnA queries microsoft/botbuilder-dotnet#6793

Full Changelog: microsoft/botbuilder-dotnet@4.22.3...4.22.4

4.22.3

This is the April 2024 DotNet SDK patch release. This version contains minor bug fixes and security updates.

What's Changed

Microsoft.IdentityModel.Protocols.OpenIdConnect bump in Microsoft.IdentityModel.Protocols.OpenIdConnect bump microsoft/botbuilder-dotnet#6756
Update TimeoutException message in Update TimeoutException message microsoft/botbuilder-dotnet#6773
The ShowTypingMiddleware throws System.ObjectDisposedException when an exception occurs in the bot in fix: [#6752] The ShowTypingMiddleware throws System.ObjectDisposedException when an exception occurs in the bot microsoft/botbuilder-dotnet#6772
Move SaveAllChanges method from SetProperty to OAuthInput in fix: [#6746] Move SaveAllChanges method from SetProperty to OAuthInput microsoft/botbuilder-dotnet#6757
Fix error when building activity with non-string text in Fix error when building activity with non-string text microsoft/botbuilder-dotnet#6753

4.22.2

This is the second February 2024 patch release to correct LU parsing issues and a security fix.

What's Changed

Fix LU parser rules to support all comments in a file by @sw-joelmut in Fix LU parser rules to support all comments in a file microsoft/botbuilder-dotnet#6744
Updated NuGet.Packaging by @tracyboehrer in Updated NuGet.Packaging microsoft/botbuilder-dotnet#6749

4.22.1

This is the February 2024 4.22.1 release for the DotNet SDK. This contains bug fixes.

What's Changed

Manually adding zh-CN and zh-TW to LanguagePolicy in Manually adding zh-CN and zh-TW to LanguagePolicy microsoft/botbuilder-dotnet#6745
Typing middleware not working as expected in teams as well as web chat channel in fix: [#6697] Typing middleware not working as expected in teams as well as web chat channel microsoft/botbuilder-dotnet#6743

4.22.0

This is the January 2024 4.22.0 release for the DotNet SDK. This contains a security fixes Sharepoint support, and ASE improvements.

What's Changed

feat: Add ASE channel validation in feat: Add Ase channel validation. microsoft/botbuilder-dotnet#6718
feat: Include HEAD method to http requests in feat: Include HEAD method to http requests microsoft/botbuilder-dotnet#6713
feat: Support for SharePoint (Viva) Adaptive Card Extension in feat: Support for SharePoint (Viva) Adaptive Card Extension microsoft/botbuilder-dotnet#6695
feat: Add isVisible property to AceData in feat: Add IsVisible property to AceData microsoft/botbuilder-dotnet#6730
fix: USGovSingleTenant OAuthEndpoint in fix: USGovSingleTenant OAuthEndpoint microsoft/botbuilder-dotnet#6714
bump: System.IdentityModel.Tokens.Jwt in System.IdentityModel.Tokens.Jwt bump microsoft/botbuilder-dotnet#6731
Fix a json serializer bug in Fix a json serializer bug. microsoft/botbuilder-dotnet#6722
Add obsolete warning to Orchestrator classes in Add obsolete warning to Orchestrator classes microsoft/botbuilder-dotnet#6711

4.21.1

This is the October 2023 patch release for the Bot Framework DotNet SDK.

What's Changed

fix: [#6683] Timeout issue when using DLASE by @sw-joelmut in fix: [#6683] Timeout issue when using DLASE microsoft/botbuilder-dotnet#6696
Support SN+I authentication with AAD by @mikeus-hanzlik in Support SN+I authentication with AAD microsoft/botbuilder-dotnet#6694
Add sendx5c parameter to Certificate factory class by @ceciliaavila in Add sendx5c parameter to Certificate factory class microsoft/botbuilder-dotnet#6699
[#6643] WithManagedIdentity is experimental and not exist in Microsoft.Identity.Client 4.51.0 by @sw-joelmut in [#6643] WithManagedIdentity is experimental and not exist in Microsoft.Identity.Client 4.51.0 microsoft/botbuilder-dotnet#6686
[#6651] Replace TestFramework package to remove ADAL dependencies by @ceciliaavila in [#6651] Replace TestFramework package to remove ADAL dependencies microsoft/botbuilder-dotnet#6690

Full Changelog: microsoft/botbuilder-dotnet@4.21.0...4.21.1

4.21.0

Welcome to the September 2023 minor release of the Bot Framework SDK.

What's Changed

Teams

Support Bot new invoke type: config by @yingduyingdu in Support Bot new invoke type: config microsoft/botbuilder-dotnet#6632
[Teams] Add support for meeting participants added/removed events by @ceciliaavila in [Teams] Add support for meeting participants added/removed events microsoft/botbuilder-dotnet#6677
Implementation of Teams batch APIs by @ceciliaavila in Implementation of Teams batch APIs microsoft/botbuilder-dotnet#6655

Other

Add WithAuthority to MSAL client application builder by @sw-joelmut in Add WithAuthority to MSAL client application builder microsoft/botbuilder-dotnet#6671
Drop ADAL to unblock pipeline by @Danieladu in Drop ADAL to unblock pipeline microsoft/botbuilder-dotnet#6687
Resolve concurrency issues in InterfaceConverter's ReadJson method by @ramfattah in Resolve concurrency issues in InterfaceConverter's ReadJson method microsoft/botbuilder-dotnet#6681
Use LRUCache in ExpressionParser for efficient memory usage by @ramfattah in Use LRUCache in ExpressionParser for efficient memory usage microsoft/botbuilder-dotnet#6667
Upgrade ANTLR to version 4.11.1 in Microsoft.Bot.Builder.Parsers.LU project by @ceciliaavila in Upgrade ANTLR to version 4.11.1 in Microsoft.Bot.Builder.Parsers.LU project microsoft/botbuilder-dotnet#6670
Updated stray Microsoft.Rest.ClientRuntime dependency by @tracyboehrer in Updated stray Microsoft.Rest.ClientRuntime dependency microsoft/botbuilder-dotnet#6675
#6673 - Fix of SNI auth not working in Cert based authentication by @mikeus-hanzlik in #6673 - Fix of SNI auth not working in Cert based authentication microsoft/botbuilder-dotnet#6676
Update JwtTokenExtractor.cs by @xieofxie in Update JwtTokenExtractor.cs microsoft/botbuilder-dotnet#6685
Updated NuGet.Packaging by @tracyboehrer in Updated NuGet.Packaging microsoft/botbuilder-dotnet#6652
fix: cleanup streaming high-perf logs by @stevengum in fix: cleanup streaming high-perf logs microsoft/botbuilder-dotnet#6650
Explicitly adding 3.1 to test steps. by @tracyboehrer in Explicitly adding 3.1 to test steps. microsoft/botbuilder-dotnet#6666
Microsoft.Rest.ClientRuntime from 2.3.21 to 2.3.24 by @tracyboehrer in Microsoft.Rest.ClientRuntime from 2.3.21 to 2.3.24 microsoft/botbuilder-dotnet#6662
[#6642] Handle null content by @ceciliaavila in [#6642] Handle null content microsoft/botbuilder-dotnet#6654
[#6644] Remove BotFrameworkAdapter Obsolete annotation by @ceciliaavila in [#6644] Remove BotFrameworkAdapter Obsolete annotation microsoft/botbuilder-dotnet#6648
Adding Microsoft SECURITY.MD by @microsoft-github-policy-service in Adding Microsoft SECURITY.MD microsoft/botbuilder-dotnet#6639

New Contributors

@microsoft-github-policy-service made their first contribution in Adding Microsoft SECURITY.MD microsoft/botbuilder-dotnet#6639
@mikeus-hanzlik made their first contribution in #6673 - Fix of SNI auth not working in Cert based authentication microsoft/botbuilder-dotnet#6676

Full Changelog: microsoft/botbuilder-dotnet@4.20.0...4.21.0

4.20.1

Welcome to the July 2023 patch release of the Bot Framework SDK.

What's Changed

Add WithAuthority to MSAL client application builder in Add WithAuthority to MSAL client application builder microsoft/botbuilder-dotnet#6671
Upgrade ANTLR to version 4.11.1 in Microsoft.Bot.Builder.Parsers.LU project in Upgrade ANTLR to version 4.11.1 in Microsoft.Bot.Builder.Parsers.LU project microsoft/botbuilder-dotnet#6670
Use LRUCache in ExpressionParser for efficient memory usage in Use LRUCache in ExpressionParser for efficient memory usage microsoft/botbuilder-dotnet#6667
Updated NuGet.Packaging in Updated NuGet.Packaging microsoft/botbuilder-dotnet#6652
Microsoft.Rest.ClientRuntime from 2.3.21 to 2.3.24 in Microsoft.Rest.ClientRuntime from 2.3.21 to 2.3.24 microsoft/botbuilder-dotnet#6662

4.20.0

This is the June 2023 release of the DotNet SDK. This release contains Teams features and bug/security fixes.

What's Changed

Teams

Support MeetingTabIconSurface in Meeting Notification API by @yingduyingdu in Support MeetingTabIconSurface in Meeting Notification API microsoft/botbuilder-dotnet#6621
Add support for Teams Adaptive cards in QnA Dialog by @anishprasad01 in Add support for Teams Adaptive cards in QnA Dialog microsoft/botbuilder-dotnet#6625
[#6086] Teams is adding support for suggested actions in 1-1 chats by @ceciliaavila in [#6086] Teams is adding support for suggested actions in 1-1 chats microsoft/botbuilder-dotnet#6607
Fix class structure for meeting notification feature extensibility by @yingduyingdu in Fix class structure for meeting notification feature extensibility microsoft/botbuilder-dotnet#6579
[#6596] TeamsChannelData need OnBehalfOf by @ceciliaavila in [#6596] TeamsChannelData need OnBehalfOf microsoft/botbuilder-dotnet#6609

Other

[#6589] Default to MSAL and eliminate ADAL without breaking changes by @sw-joelmut in [#6589] Default to MSAL and eliminate ADAL without breaking changes microsoft/botbuilder-dotnet#6605
Fix cast issue in SendHandoffActivity action by @ceciliaavila in Fix cast issue in SendHandoffActivity action microsoft/botbuilder-dotnet#6575
[#6563] Expired JWT token exception not being handled by @erquirogasw in [#6563] Expired JWT token exception not being handled microsoft/botbuilder-dotnet#6572
Added log to ProcessAsync method in CloudAdapter.cs. by @erquirogasw in Added log to ProcessAsync method in CloudAdapter.cs. microsoft/botbuilder-dotnet#6587
[#6582, #6584] Incorrect serialization of state when using Blob or CosmosDB storage in v4.19.x by @sw-joelmut in [#6582, #6584] Incorrect serialization of state when using Blob or CosmosDB storage in v4.19.x microsoft/botbuilder-dotnet#6585
Removed MyGet instructions by @tracyboehrer in Removed MyGet instructions microsoft/botbuilder-dotnet#6588
[#6591] Concurrency issue with TimeZoneConverter by @ceciliaavila in [#6591] Concurrency issue with TimeZoneConverter microsoft/botbuilder-dotnet#6593
Disabled warning CA1507 in Parsers.LU by @tracyboehrer in Disabled warning CA1507 in Parsers.LU microsoft/botbuilder-dotnet#6600
[#6590] Error while saving bot state to azure blob storage by @sw-joelmut in [#6590] Error while saving bot state to azure blob storage microsoft/botbuilder-dotnet#6595
[#6558] Update to ANTLR 4.11 to compensate for breaking changes between versions by @sw-joelmut in [#6558] Update to ANTLR 4.11 to compensate for breaking changes between versions microsoft/botbuilder-dotnet#6586
Bump minimatch and replace in /libraries/Swagger by @dependabot in Bump minimatch and replace in /libraries/Swagger microsoft/botbuilder-dotnet#6601
fix: Custom Question Answering in MS Teams by @anishprasad01 in fix: Custom Question Answering in MS Teams microsoft/botbuilder-dotnet#6603
[#6616] Telemetry not logging ActivityID and ConversationID by @erquirogasw in [#6616] Telemetry not logging ActivityID and ConversationID microsoft/botbuilder-dotnet#6620
USER scope variable values do not transfer to skill when SSO is configured by @ceciliaavila in USER scope variable values do not transfer to skill when SSO is configured microsoft/botbuilder-dotnet#6612
[#6560] Allow TokenCredential authentication in CosmosDbPartitionedStorage by @ceciliaavila in [#6560] Allow TokenCredential authentication in CosmosDbPartitionedStorage microsoft/botbuilder-dotnet#6614
[#5820] Outgoing Activity Locale being Overwritten by @ceciliaavila in [#5820] Outgoing Activity Locale being Overwritten microsoft/botbuilder-dotnet#6629
[#6624] port: [#4452][#4456][#4460][botframework-streaming] Should reject pending requests on disconnection by @ceciliaavila in [#6624] port: [#4452][#4456][#4460][botframework-streaming] Should reject pending requests on disconnection microsoft/botbuilder-dotnet#6627
[#5577] BotFrameworkClientImpl.PostActivityAsync() doesn't support null fromBotId and toBotId values by @ceciliaavila in [#5577] BotFrameworkClientImpl.PostActivityAsync() doesn't support null fromBotId and toBotId values microsoft/botbuilder-dotnet#6626
[#6588] UserId not being passed to AzureDiagnostics by @sw-joelmut in [#6588] UserId not being passed to AzureDiagnostics microsoft/botbuilder-dotnet#6623
[#6628] port [#4449] CloudAdapter always builds Connector with MicrosoftAppCredentials (never CertificateAppCredentials) -- certificate auth flow broken by @sw-joelmut in [#6628] port [#4449] CloudAdapter always builds Connector with MicrosoftAppCredentials (never CertificateAppCredentials) -- certificate auth flow broken microsoft/botbuilder-dotnet#6631
[#6346] Add Azure Storage (BlobStorage.cs) using a managed identity by @ceciliaavila in [#6346] Add Azure Storage (BlobStorage.cs) using a managed identity microsoft/botbuilder-dotnet#6636
Allow sending GET requests with a body by @ceciliaavila in Allow sending GET requests with a body microsoft/botbuilder-dotnet#6633

New Contributors

@erquirogasw made their first contribution in [#6563] Expired JWT token exception not being handled microsoft/botbuilder-dotnet#6572

Full Changelog: microsoft/botbuilder-dotnet@4.19.0...4.20.0

4.19.3

Welcome to the February 2023 patch release of the Bot Framework SDK.

What's Changed

Concurrency issue with TimeZoneConverter #6593

4.19.2

Welcome to the February 2023 patch release of the Bot Framework SDK.

What's Changed

Teams

Fix class structure for meeting notification feature extensibility #6579

Other

Incorrect serialization of state when using Blob or CosmosDB storage #6585
Added log to ProcessAsync method in CloudAdapter #6587

4.19.1

Welcome to the January 2023 patch release of the Bot Framework SDK. This release has been focused on bug fixes.

What's Changed

Fix cast issue in SendHandoffActivity action #6575
Expired JWT token exception not being handled #6572

Full Changelog: microsoft/botbuilder-dotnet@4.19.0...4.19.1

4.19.0

Welcome to the January 2023 release of the Bot Framework SDK. This release has been focused on bug fixes and general improvements.

What's Changed

Teams

Support Teams message edit, message soft delete, message undelete activities by @yingduyingdu in Support Teams message edit, message soft delete, message undelete activities microsoft/botbuilder-dotnet#6564
Support bot sdk dot net for targeted meeting notification by @yingduyingdu in Support bot sdk dot net for targeted meeting notification microsoft/botbuilder-dotnet#6570

Other

Fix CodeQL alert SM01507: Client-side URL redirect by @ceciliaavila in Fix CodeQL alert SM01507: Client-side URL redirect microsoft/botbuilder-dotnet#6538
Added tsaoptions.json by @tracyboehrer in Added tsaoptions.json microsoft/botbuilder-dotnet#6539
Corrected TSAEnabled key case by @tracyboehrer in Corrected TSAEnabled key case microsoft/botbuilder-dotnet#6541
[#6511] CodeQL alert SM02200: Weak hmacs - Suppress alert for WebexClientWrapper by @ceciliaavila in [#6511] CodeQL alert SM02200: Weak hmacs - Suppress alert for WebexClientWrapper microsoft/botbuilder-dotnet#6540
[#6542] Applying BotMessageSerializerSettings.MaxDepth doesn't seem to work by @ceciliaavila in [#6542] Applying BotMessageSerializerSettings.MaxDepth doesn't seem to work microsoft/botbuilder-dotnet#6546
Fix CodeQL SM02211 alert by @sw-joelmut in Fix CodeQL SM02211 alert microsoft/botbuilder-dotnet#6548
[#6512] CodeQL alert SM00431: Information exposure through an exception by @sw-joelmut in [#6512] CodeQL alert SM00431: Information exposure through an exception microsoft/botbuilder-dotnet#6544
Fix CodeQL alert SM03926: Security sensitive JsonWebTokenHandler validations are disabled by @ceciliaavila in Fix CodeQL alert SM03926: Security sensitive JsonWebTokenHandler validations are disabled microsoft/botbuilder-dotnet#6550
Fix CodeQL SM02211 alert - SerializationBinder by @sw-joelmut in Fix CodeQL SM02211 alert - SerializationBinder microsoft/botbuilder-dotnet#6549
Removed some lingering NewtonSoft <13 references by @tracyboehrer in Removed some lingering NewtonSoft <13 references microsoft/botbuilder-dotnet#6556
[#6510] Suppress CodeQL SM03926 alerts by @ceciliaavila in [#6510] Suppress CodeQL SM03926 alerts microsoft/botbuilder-dotnet#6555
[#6531] Prompt validation of confirm prompt in chatbot is not working for newly added language by @ceciliaavila in [#6531] Prompt validation of confirm prompt in chatbot is not working for newly added language microsoft/botbuilder-dotnet#6554
[CodeQL] Fix remaining SM00431 alerts by @ceciliaavila in [CodeQL] Fix remaining SM00431 alerts microsoft/botbuilder-dotnet#6561
Update ESRP signing task to v2 by @BruceHaley in Update ESRP signing task to v2 microsoft/botbuilder-dotnet#6566

New Contributors

@yingduyingdu made their first contribution in Support Teams message edit, message soft delete, message undelete activities microsoft/botbuilder-dotnet#6564

Full Changelog: microsoft/botbuilder-dotnet@4.18.1...4.19.0

Commits viewable in compare view.

Updated Microsoft.Graph from 5.76.0 to 5.105.0.

Release notes

Sourced from Microsoft.Graph's releases.

5.105.0 5.105.0 (2026-04-24)

Features

generation: update request builders and models (143504b)

5.104.0 5.104.0 (2026-04-16)

Features

generation: update request builders and models (bacd780)

5.103.0 5.103.0 (2026-02-19)

Features

generation: update request builders and models (bf1a051)

5.102.0 5.102.0 (2026-02-05)

Features

generation: update request builders and models (#3061) (77fcc69)

5.101.0 5.101.0 (2026-01-22)

Features

generation: update request builders and models (#3058) (89a25f1)

5.100.0 5.100.0 (2026-01-06)

Features

generation: update request builders and models (35267bd)

5.99.0 5.99.0 (2025-12-17)

Features

generation: update request builders and models (b2cf8ee)

5.98.0 5.98.0 (2025-12-03)

Features

generation: update request builders and models (#3038) (3099dbf)

5.97.0 5.97.0 (2025-11-18)

Features

generation: update request builders and models (c7d3d3d)

5.96.0 5.96.0 (2025-11-06)

Features

generation: update request builders and models (#3026) (10a5d6a)

5.95.0 5.95.0 (2025-10-21)

Features

generation: update request builders and models (bd116ee)
generation: update request builders and models (5e39ec0)

5.94.0 5.94.0 (2025-10-03)

Features

generation: update request builders and models (dc5ef6e)

5.93.0 5.93.0 (2025-09-16)

Features

generation: update request builders and models (fc94f58)

5.92.0 5.92.0 (2025-09-10)

Features

generation: update request builders and models (#2990) (8591b7f)

5.91.0 5.91.0 (2025-08-20)

Features

generation: update request builders and models (e7d67e4)

Bug Fixes

build trigger (#2976) (4658040)

5.90.0 5.90.0 (2025-08-12)

Features

generation: update request builders and models (4abd52c)

5.89.0 5.89.0 (2025-08-05)

Features

generation: update request builders and models (929e730)

5.88.0 5.88.0 (2025-07-30)

Features

generation: update request builders and models (419e244)

5.87.0 5.87.0 (2025-07-22)

Features

generation: update request builders and models (efdf651)

5.86.0 5.86.0 (2025-07-16)

Features

generation: update request builders and models (4724c72)

5.85.0 5.85.0 (2025-07-08)

Features

generation: update request builders and models (18f2ddf)

5.84.0 5.84.0 (2025-07-01)

Features

generation: update request builders and models (f75b95f)

5.83.0 5.83.0 (2025-06-24)

Features

generation: update request builders and models (956a3a3)

5.82.0 5.82.0 (2025-06-17)

Features

generation: update request builders and models (16a7b10)

5.81.0 5.81.0 (2025-06-10)

Features

generation: update request builders and models (c882f34)

5.79.0 5.79.0 (2025-05-20)

Features

generation: update request builders and models (16da103)

Bug Fixes

wrong type for drive items versions (b97f17b)

5.78.0 5.78.0 (2025-05-13)

Features

generation: update request builders and models (b70825f)

5.77.0 5.77.0 (2025-04-15)

Features

generation: update request builders and models (7ce6ebc)

Commits viewable in compare view.

Updated Microsoft.Identity.Client from 4.48.0 to 4.84.0.

Release notes

Sourced from Microsoft.Identity.Client's releases.

4.83.3

New Features

Added support for User Federated Identity Credential (UserFIC) scenarios through the IByUserFederatedIdentityCredential interface and user_fic grant type. #5802

Changes

Updated NativeInterop to version 0.20.3. #5866

Bug Fixes

Fixed response handling in HttpListenerInterceptor.cs to ensure the full response is properly closed. #5478
Fixed macOS detection to include maccatalyst target in desktop platform checks.#5882

Infrastructure & Dependencies

Extracted reusable MSAL test infrastructure into Microsoft.Identity.Lab.API. #5864

4.83.1

Bug Fixes

Fixed IMDS endpoint cache not being reset during test cleanup [Bug] ImdsManagedIdentitySource.s_cachedBaseEndpoint was never cleared by ApplicationBase.ResetStateForTest() AzureAD/microsoft-authentication-library-for-dotnet#5830

4.83.0

New Features

Agent Skills: Added Agent Skills catalog with complete coverage of both Confidential Client Authentication and mTLS PoP flows #5733
mTLS PoP Skills Guide: Added comprehensive guide for GitHub Copilot Chat covering MSAL.NET authentication, mTLS Proof of Possession, and Federated Identity Credentials #5790

Changes

Credential Guard Attestation: Integrated native DLL handling for Credential Guard attestation with centralized versioning #5674

Bug Fixes

IMDSv2 mTLS Auto-Recovery: Implemented automatic recovery from SCHANNEL handshake failures by evicting cached certificates and re-minting #5761
Managed Identity Fallback Behavior: Restored classic fallback behavior in MSAL MI unless GetManagedIdentitySourceAsync() is explicitly invoked #5815
Attestation Token Expiration: Exposed expires_on field in attestation tokens for better token lifecycle management #5741
Service Fabric API Version: Updated Service Fabric managed identity API version from 2019-07-01-preview to 2020-05-01 #5781
Cached Token Validation: Enhanced ValidateCachedTokenAsync to work properly with multiple APIs beyond the initial scope #5764
Client Credentials Tenant ID: Updated result to properly pass tenant ID in client credentials flow #5754
Experimental Flag Removal: Removed experimental flag requirement from IAuthenticationOperation and WithAuthenticationExtension #5699
OpenTelemetry Exception Handling: Expanded OTel exception handling for Azure Functions compatibility #5720
ICustomWebUi Security Warning: Added security warnings to ICustomWebUi documentation #5704

Infrastructure & Dependencies

GitHub Actions Workflow: Added GitHub Actions workflow for Managed Identity WebAPI automated build and deployment to Azure #5751
.NET SDK Security Update: Updated .NET SDK from version 8.0.415 to 8.0.418 to address high severity security vulnerabilities #5779 #5783

4.82.1

Bug Fixes

Remove experimental flag requirement from IAuthenticationOperation #5699
Add security warning to ICustomWebUi documentation #5704

Changes

Adds support for implicit mTLS (Mutual TLS) transport for client assertion delegates #5670

4.82.0

Highlights

This release expands extensibility for confidential-client authentication (certificates + client assertions), adds additional sovereign cloud environments, and hardens security-sensitive flows (mTLS PoP and system browser auth) with clearer validation and safer defaults.

Features

Certificate-based confidential client extensibility: Introduced CertificateOptions and updated WithCertificate extensibility APIs to accept it, including support for passing sendX5C configuration through the options model. (#5655)
Sovereign cloud support: Added instance discovery / authority validation support for Bleu (France), Delos (Germany), and GovSG (Singapore) cloud environments. (#5671)
Client assertion customization: Added WithExtraClientAssertionClaims on AcquireTokenForClientParameterBuilder to enable supplying additional signed claims in client assertions (intended for advanced scenarios and higher-level libraries). (#5650)
mTLS PoP guardrails: Added validation and explicit error handling when mTLS PoP is requested for unsupported environments and/or non-login.* hosts. (#5684)
System browser hardening: Added response_mode=form_post support for the default system browser (loopback) flow. MSAL will enforce form_post and process the authorization response from POST data. (#5678)

Changes

Key Attestation packaging rename: Microsoft.Identity.Client.MtlsPop renamed to Microsoft.Identity.Client.KeyAttestation (assembly/package naming update). (#5653)

4.81.0 What's Changed

Expose API SendX5C from ROPC CCA flow by @neha-bhargava in Expose API SendX5C from ROPC CCA flow AzureAD/microsoft-authentication-library-for-dotnet#5635
Refactor and simplify Microsoft.Identity.Test.LabInfrastructure by @Avery-Dunn in Refactor and simplify Microsoft.Identity.Test.LabInfrastructure AzureAD/microsoft-authentication-library-for-dotnet#5631
Remove Headers from MsalServiceException.ToString() to prevent logging sensitive data by @Copilot in Remove Headers from MsalServiceException.ToString() to prevent logging sensitive data AzureAD/microsoft-authentication-library-for-dotnet#5642

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.80.0...4.81.0

4.80.0

Features

Added extensibility APIs—WithCertificate, OnMsalServiceFailure, and OnCompletion—to enable callback handling for certificate injection, retry on MSAL service failure events, and completion notifications #5573
Extend IAuthenticationOperation interface with Async methods in IAuthenticationOperation2 #5376
Enable IAuthenticationOperation2 to reject MSAL cached tokens and fetch new ones from ESTS #5567

Changes

IMDS Source Detection Logic Improvement #5602
Update DesktopOsHelper.IsMac to work properly on .NET 10 + macOS 26 #5541

Bug Fixes

Fix KeyNotFoundException during retry when headers lack correlation ID #5617
Implement Service Exception for IMDS Probe #5615

4.79.2 What's Changed

Bump winsdk dependency by @bgavrilMS in Bump winsdk dependency AzureAD/microsoft-authentication-library-for-dotnet#5575
ImdsV2 probe does not fire when .WithMtlsProofOfPossesstion is not used by @Robbie-Microsoft in ImdsV2 probe does not fire when .WithMtlsProofOfPossesstion is not used AzureAD/microsoft-authentication-library-for-dotnet#5579
Downgrade System.Formats.Asn1 to match ID web by @Avery-Dunn in Downgrade System.Formats.Asn1 to match ID web AzureAD/microsoft-authentication-library-for-dotnet#5583

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.79.0...4.79.2

4.79.0 What's Changed

Fix instance discovery bug 5546 by @bgavrilMS in Fix instance discovery bug 5546 AzureAD/microsoft-authentication-library-for-dotnet#5549
Managed Identity IMDSv2 and new support APIs (ResetForTest, GetSourceAsync) by @Robbie-Microsoft in Managed Identity IMDSv2 and new support APIs (ResetForTest, GetSourceAsync) AzureAD/microsoft-authentication-library-for-dotnet#5501
Bearer Requests should Fallback to IMDS in Preview by @gladjohn in Bearer Requests should Fallback to IMDS in Preview AzureAD/microsoft-authentication-library-for-dotnet#5562
Updating MSAL to send client info = 2 on client credential flow by @trwalke in Updating MSAL to send client info = 2 on client credential flow AzureAD/microsoft-authentication-library-for-dotnet#5529
Make IMsalMtlsHttpClientFactory interface public by @cpp11nullptr in Make IMsalMtlsHttpClientFactory interface public AzureAD/microsoft-authentication-library-for-dotnet#5559
Mark WithClientAssertion API as experimental by @gladjohn in Mark WithClientAssertion API as experimental AzureAD/microsoft-authentication-library-for-dotnet#5551
Adjust WithExtraQueryParameters APIs and cache key behavior by @Avery-Dunn in Adjust WithExtraQueryParameters APIs and cache key behavior AzureAD/microsoft-authentication-library-for-dotnet#5536

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.78.0...4.79.0

4.78.0

Changes

Update SDK version from 8.0.404 to 8.0.415. #5543
Hide / deprecate some obscure APIs. #5484

Bug Fixes

Support Android edge-to-edge. #5499
Android broker does not support ADFS authority. #5522

4.77.1 What's Changed

Fix prototype code to address CodeQL by @bgavrilMS in Fix prototype code to address CodeQL AzureAD/microsoft-authentication-library-for-dotnet#5472
Update CHANGELOG.md for MSAL 4.77.0 by @gladjohn in Update CHANGELOG.md for MSAL 4.77.0 AzureAD/microsoft-authentication-library-for-dotnet#5473
Mark project as AOT compatible for net 8 by @neha-bhargava in Mark project as AOT compatible for net 8 AzureAD/microsoft-authentication-library-for-dotnet#5458
Update public api for MSAL Release 4.77.0 by @gladjohn in Update public api for MSAL Release 4.77.0 AzureAD/microsoft-authentication-library-for-dotnet#5471
Adjust issuer validation to accept differing paths by @Avery-Dunn in Adjust issuer validation to accept differing paths AzureAD/microsoft-authentication-library-for-dotnet#5466
Added better error message for OIDC error by @trwalke in Added better error message for OIDC error AzureAD/microsoft-authentication-library-for-dotnet#5433
Remove failing test project from solution to prevent build breaks. by @MZOLN in Remove failing test project from solution to prevent build breaks. AzureAD/microsoft-authentication-library-for-dotnet#5481
Fix MSB3277 “WindowsBase” conflicts in dev apps by enabling WPF build ref by @gladjohn in Fix MSB3277 “WindowsBase” conflicts in dev apps by enabling WPF build ref AzureAD/microsoft-authentication-library-for-dotnet#5482
Remove some flaky tests that were just an overkill by @gladjohn in Remove some flaky tests that were just an overkill AzureAD/microsoft-authentication-library-for-dotnet#5486
Remove dupe ropc b2c tests by @gladjohn in Remove dupe ropc b2c tests AzureAD/microsoft-authentication-library-for-dotnet#5487
Revert changes made for Http2 by @neha-bhargava in Revert changes made for Http2 AzureAD/microsoft-authentication-library-for-dotnet#5462

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.77.0...4.77.1

4.77.0

4.76.0 What's Changed

Removal of ExperimentalFeatures flag on WithMtlsProofOfPossession API: by @gladjohn in Removal of ExperimentalFeatures flag on WithMtlsProofOfPossession API: AzureAD/microsoft-authentication-library-for-dotnet#5402
#5400 Fixing issue that leads to multiple active access tokens in the cache for non-tenanted oidc authority by @andkorsh in #5400 Fixing issue that leads to multiple active access tokens in the cache for non-tenanted oidc authority AzureAD/microsoft-authentication-library-for-dotnet#5401
Add Service Fabric token revocation support by @gladjohn in Add Service Fabric token revocation support AzureAD/microsoft-authentication-library-for-dotnet#5421
Update NativeInterop package version to 0.19.4 by @ashok672 in Update NativeInterop package version to 0.19.4 AzureAD/microsoft-authentication-library-for-dotnet#5434
Adding WithExtraBodyParameters api by @trwalke in Adding WithExtraBodyParameters api AzureAD/microsoft-authentication-library-for-dotnet#5389
Enable mTLS Proof‑of‑Possession for Client‑Assertion Delegates by @gladjohn in Enable mTLS Proof‑of‑Possession for Client‑Assertion Delegates AzureAD/microsoft-authentication-library-for-dotnet#5409

New Contributors

@andkorsh made their first contribution in #5400 Fixing issue that leads to multiple active access tokens in the cache for non-tenanted oidc authority AzureAD/microsoft-authentication-library-for-dotnet#5401

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.74.1...4.76.0

4.74.1

Bug fixes

When you configure MSAL with WithOidcAuthority(), the library now confirms that the issuer returned by the OIDC discovery endpoint matches the expected authority (including CIAM patterns) and throws an exception if it does not. Add issuer validation when making call to OIDC endpoint AzureAD/microsoft-authentication-library-for-dotnet#5358
Re-expose public AuthenticationResult constructor. A public, test-friendly constructor of AuthenticationResult was inadvertently hidden behind [Obsolete] and [EditorBrowsable(Never)]. The constructor is now publicly available again. [Bug] AuthenticationResult has no public constructor AzureAD/microsoft-authentication-library-for-dotnet#5392

4.74.0

Features

Deprecate ROPC flow in Public Client Applications Deprecate ROPC flow AzureAD/microsoft-authentication-library-for-dotnet#5355.
AuthenticationResult exposes a new BindingCertificate property that returns the X.509 certificate bound to the access token in mTLS-PoP scenarios. [Feature Request] Return mTLS Client certificate as part of the AuthenticationResult AzureAD/microsoft-authentication-library-for-dotnet#5370.

Bug fixes

MSAL now honors the DEFAULT_IDENTITY_CLIENT_ID environment variable when acquiring tokens from Azure Machine Learning managed-identity endpoint. [Feature Request] Support for new Azure ML Managed Identity AzureAD/microsoft-authentication-library-for-dotnet#5350.

4.73.1 What's Changed

Deprecate AcquireTokenByIntegratedWindowsAuth API by @ashok672 in Deprecate AcquireTokenByIntegratedWindowsAuth API AzureAD/microsoft-authentication-library-for-dotnet#5345
Update native interop to 0.19.2 by @fengga in Update native interop to 0.19.2 AzureAD/microsoft-authentication-library-for-dotnet#5362
update the deprecated openURL(:) api to openURL(:options:completionHandler) by @DharshanBJ in update the deprecated openURL(:) api to openURL(:options:completionHandler) AzureAD/microsoft-authentication-library-for-dotnet#5354

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.73.0...4.73.1

4.73.0 What's Changed

Add mac broker console app support by @fengga in Add mac broker console app support AzureAD/microsoft-authentication-library-for-dotnet#5274
Use HTTP 2 on .NET where possible by @bgavrilMS in Use HTTP 2 on .NET AzureAD/microsoft-authentication-library-for-dotnet#5314
Expose access token cache count by @bgavrilMS in Expose access token cache count AzureAD/microsoft-authentication-library-for-dotnet#5330
Add an extensibility API - WithFmiPathForClientAssertion … by @bgavrilMS in Fix #5342 - add an extensibility API - WithFmiPathForClientAssertion … AzureAD/microsoft-authentication-library-for-dotnet#5347
Hide ListOperatingSystemAccounts in intellisense by @ashok672 in Hide ListOperatingSystemAccounts in intellisense AzureAD/microsoft-authentication-library-for-dotnet#5304
Reworked retry policy functionality & Created IMDS retry policy by @Robbie-Microsoft in Reworked retry policy functionality & Created IMDS retry policy AzureAD/microsoft-authentication-library-for-dotnet#5231

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.72.1...4.73.0

4.72.1

Bug Fixes

Ensure instance of IMsalHttpClientFactory passed by the user is used for managed identity flows that do not require cert validation. See Issue #5286
Fix a URL typo in the API comments. See [Engineering task] fix typo microsfoftonline AzureAD/microsoft-authentication-library-for-dotnet#5277

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.72.0...4.72.1

4.72.0

Features

Added MacOs Broker support. See Issue #5051

Bug Fixes

Ensure additional cache parameters are persisted in cache serializationIssue #5261

4.71.1

Bug Fixes

Pass the validate function to the http manager. See Issue #5242
Change the resource id param for IMDS. See Issue #5238

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.71.0...4.71.1

4.71.0

Bug Fixes

Enable the Service Fabric flow to get a httpClient from the factory with ssl validation callback. See Issue #5220

Full changelog: 4.70.2 .. 4.71.0

4.70.2 What's Changed

Updated MSIv1 Token Revocation's token_sha256_to_refresh param to use sha256's HEX representation by @gladjohn in Update MSIv1 Token Revocation's token_sha256_to_refresh param to use sha256's HEX representation AzureAD/microsoft-authentication-library-for-dotnet#5229

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.70.1...4.70.2

4.70.1 What's Changed

Fix Machine Learning Source to Use "clientid" Instead of "client_id" by @gladjohn in Fix Machine Learning Source to Use "clientid" Instead of "client_id" AzureAD/microsoft-authentication-library-for-dotnet#5193
Fixing IsCommonOrOrganizationsTenant check to not return true for consumers by @trwalke in Fixing IsCommonOrOrganizationsTenant check to not return true for consumers AzureAD/microsoft-authentication-library-for-dotnet#5195
Fix logger message to accurately reflect skipCache condition by @gladjohn in Fix logger message to accurately reflect skipCache condition AzureAD/microsoft-authentication-library-for-dotnet#5201
Removing experimental feature Flag from WithFmiPath by @trwalke in Removing experimental feature Flag from WithFmiPath AzureAD/microsoft-authentication-library-for-dotnet#5206
Fix for 5223 - env var to disable ESTS-R by @bgavrilMS in Fix for 5223 - env var to disable ESTS-R AzureAD/microsoft-authentication-library-for-dotnet#5224

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.70.0...4.70.1

4.70.0

Features

Added a .WithAccessTokenSha256ToRefresh() method to AcquireTokenForClientParameterBuilder for ConfidentialClientApplication, allowing finer control over token refresh scenarios. Issue #5111, PR #5179
Added TokenCacheNotificationArgs.NoDistributedCacheUseReason in order to indicate that the configured serialized cache should not be a distributed cache to prevent issues when acquiring tokens. Issue #5199

Bug Fixes

Removed invalid tenant checks (/organizations or /common) in MTLS flows for AAD/dSTS authorities. Issue #5093
Fixed an issue where specifying a null service config region in MTLS scenarios did not correctly throw an exception. Issue #5181

4.69.1

Features

Enabled broker support on the Linux platform. See Issue #5086
Added a WithCertificate(..., bool associateTokensWithCertificateSerialNumber) overload to enable the use of the certificate's serial number as part of the cache key for tokens. Issue #5150

Bug Fixes

MSAL will now stop replacing "%20" with "+" since it is obsolete. See Issue #5061
Exposed client capabilities in AssertionRequestOptions for MSI FIC scenarios Issue #4948
Added the missing claims in SignedAssertion when using the AssertionRequestOptions Delegate Issue #5143

4.68.0

Features

Added WithFmiPath() api to support FMI scenarios in MSAL. See Issue #5110
MSAL will now pass Client sku and Version to MsalRuntime for MSAL Runtime's client telemetry. See Issue #5103

Bug Fixes

Reordered the condition for ManagedIdentitySource.MachineLearning to be checked after ManagedIdentitySource.AppService instead of before it. See Issue #5077
Improved Managed Identity Source Detection Logging for Debugging. See Issue #5097
When a 404 error occurs, MSAL will now include the endpoint and authority URLs in the exception message for better debugging. See Issue #4769
MSAL will now set UseShellExecute to false in OpenLinuxBrowser. See Issue #5075
Fixed a threading exception when using ExtraQueryParameters. See Issue #5108

4.67.2

Bug Fixes

Fixed an issue with Managed Identity source detection where Azure ML was prioritized incorrectly over Azure App Service, causing token acquisition failures. See Bug #5077

4.67.1

Bug Fixes

Added support for Azure Machine Learning (Azure ML) Managed Identity (MSI) to address missing functionality for token acquisition in Azure Machine Learning environments. See Bug #4984

4.67.0

New Features

MSAL.NET now supports acquiring token for Client Credentials flow with a Subject Name Issuer (SNI) certificate over Mutual TLS (mTLS) for first-party applications. See Issue #4986
Bumped NET SDK from net6 to net8, aligning MSAL.NET with the latest .NET standards and features. See Feature Request #5025
Public API analyzer integrated to enhance API compliance and stability. See Feature Request #4931

Bug Fixes

Improved AcquireTokenSilent logging and handling of Family of Client IDs (FOCI). See Bug #4988
Fixed issues where DurationTotalInMs in AuthenticationResultMetadata differed from Stopwatch measurements. See Bug #4895
Resolved incorrect computation of OTel durations in L1 cache and during the creation of POP tokens. See Bug #5036
Addressed an issue where AbstractAcquireTokenParameterBuilder<T>.WithAdfsAuthority threw exceptions when the tenant ID was null and the authority host URI ended in /adfs. See Bug #4860
Fixed a parsing issue in Managed Identity to align with Azure.Identity's behavior for handling invalid JSON responses. See Bug #5016

Deprecated

Removed MSAL v3 migration aids. See Remove #4987

4.66.2

Bug Fixes

Fixed a bug where MSAL .NET fails to launch the iOS broker on IOS 18.0.1. See Issue #4958

4.66.1

Bug Fixes

Fixed a bug where MSAL .NET fails to correctly handle the expires_on field for Managed Identity tokens in ISO 8601 format. This fix ensures accurate parsing of ISO 8601 date-time formats during token acquisition. See Issue #4963

4.66.0

New Features

Enabled extended functionality in the MSAL authentication flow through the implementation of IAuthenticationOperation. This allows for custom extensions in the authentication flow by providing an authentication operation interface. See Issue #4956
MSAL.NET will now opt-in to regional ESTS when the environment variable MSAL_FORCE_REGION is set (e.g., MSAL_FORCE_REGION=eastus). This automatically directs MSAL to use the specified region for token acquisition. If the region is explicitly set to "DisableMsalForceRegion", MSAL will not opt-in to regional ESTS. Use of the WithAzureRegion(xyz) API takes precedence over the environment variable. See Issue #4930

4.65.2-Preview

Refactored CDT Prototype
Moved prototype to separate folder
Removed dependency on MSAL internals

4.65.0

New Features

Update telemetry to include the caller SDK details. See Issue #4863
MSAL.Net now exposes an API to enable developers to cache additional values in the token response. See Issue #4922
Managed identity .WithClaims() and .WithClientCapabilities() APIs are now generally available. See Issue #4921

Bug Fixes

-...

Description has been truncated

Bumps Microsoft.AspNetCore.Mvc.NewtonsoftJson from 6.0.11 to 6.0.36 Bumps Microsoft.Bot.Builder.Integration.AspNet.Core from 4.18.1 to 4.23.1 Bumps Microsoft.Graph from 5.76.0 to 5.105.0 Bumps Microsoft.Identity.Client from 4.48.0 to 4.84.0 Bumps Microsoft.VisualStudio.Web.CodeGeneration.Design from 6.0.10 to 6.0.18 --- updated-dependencies: - dependency-name: Microsoft.AspNetCore.Mvc.NewtonsoftJson dependency-version: 6.0.36 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: Microsoft.Bot.Builder.Integration.AspNet.Core dependency-version: 4.23.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: Microsoft.Graph dependency-version: 5.105.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: Microsoft.Identity.Client dependency-version: 4.84.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: Microsoft.VisualStudio.Web.CodeGeneration.Design dependency-version: 6.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-05-14T07:48:46Z

Superseded by #2104.

dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels May 14, 2026

dependabot Bot mentioned this pull request May 14, 2026

Bump the all-dependencies group with 4 updates #2084

Closed

dependabot Bot closed this May 14, 2026

dependabot Bot deleted the dependabot/nuget/samples/TeamsJS/graph-app-installation-lifecycle/csharp/AppInstallation/all-dependencies-c9d90b6d2f branch May 14, 2026 07:48

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the all-dependencies group with 5 updates#2102

Bump the all-dependencies group with 5 updates#2102
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/samples/TeamsJS/graph-app-installation-lifecycle/csharp/AppInstallation/all-dependencies-c9d90b6d2f

dependabot Bot commented on behalf of github May 14, 2026

Uh oh!

dependabot Bot commented on behalf of github May 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 14, 2026

6.0.36

What's Changed

6.0.35

6.0.33

6.0.32

6.0.31

6.0.30

6.0.29

6.0.28

6.0.26

6.0.25

What's Changed

6.0.24

6.0.23

6.0.22

6.0.21

4.23.1

Final Release of Bot Framework DotNet SDK

4.23.0

What's Changed

4.22.9

What's Changed

4.22.8

What's Changed

4.22.7

What's Changed

4.22.4

What's Changed

4.22.3

What's Changed

4.22.2

What's Changed

4.22.1

What's Changed

4.22.0

What's Changed

4.21.1

What's Changed

4.21.0

What's Changed

Teams

Other

New Contributors

4.20.1

What's Changed

4.20.0

What's Changed

Teams

Other

New Contributors

4.19.3

What's Changed

4.19.2

What's Changed

Teams

Other

4.19.1

What's Changed

4.19.0

What's Changed

Teams

Other

New Contributors

5.105.0

5.105.0 (2026-04-24)

Features

5.104.0

5.104.0 (2026-04-16)

Features

5.103.0

5.103.0 (2026-02-19)

Features

5.102.0

5.102.0 (2026-02-05)

Features

5.101.0

5.101.0 (2026-01-22)

Features