chore: Bump the minor-and-patch group with 9 updates

[dependabot]

Updated Azure.Identity from 1.17.2 to 1.21.0.

Release notes

Sourced from Azure.Identity's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated FluentAssertions from 7.0.0 to 7.2.2.

Release notes

Sourced from FluentAssertions's releases.

7.2.2

What's Changed

Fixes

• Fix a formatting exception when "{}" is used as a dictionary key by @​dennisdoomen in Backport bug fixes to v7 fluentassertions/fluentassertions#3173
• Ensured WithTracing is safe when used with BeEquivalentTo globally by @​dennisdoomen in Backport bug fixes to v7 fluentassertions/fluentassertions#3173
• Fix formatting exception when comparing strings containing braces by @​dennisdoomen in Backport bug fixes to v7 fluentassertions/fluentassertions#3173
• Backport AssertionResultSet fixes from fluentassertions#​3100 by @​jnyrup in Backport bug fixes to v7 fluentassertions/fluentassertions#3173

Building

• Bump F# to 8.0 to compile with .NET 11 SDK by @​jnyrup in Backport bug fixes to v7 fluentassertions/fluentassertions#3173

Full Changelog: fluentassertions/fluentassertions@7.2.1...7.2.2

7.2.1

What's Changed

Fixes

• Prevent a crash while formatting a collection with nested empty collections by @​dennisdoomen in Prevent a crash while formatting a collection with nested empty collections fluentassertions/fluentassertions#3150

Full Changelog: fluentassertions/fluentassertions@7.2.0...7.2.1

7.2.0

What's Changed

Improvements

• Improve failure message for string assertions when checking for equality by @​vbreuss in Improve failure message for string assertions when checking for equality fluentassertions/fluentassertions#2972
• Add [NotNull] attribute on the Should() method for object assertions by @​0xced in Add [NotNull] attribute on the Should() method for object assertions fluentassertions/fluentassertions#2987

Fixes

• Fixed a regression in which CompleteWithinAsync treated a canceled task as an exception by @​dennisdoomen in Fixed a regression in which CompleteWithinAsync treated a canceled task as an exception fluentassertions/fluentassertions#2853

Others

• Backport updates to pipelines by @​jnyrup in Backport updates to pipelines fluentassertions/fluentassertions#3001

Full Changelog: fluentassertions/fluentassertions@7.1.0...7.2.0

7.1.0

What's Changed

Improvements

• Backport TUnit to v7 by @​dennisdoomen in Backport TUnit to v7 fluentassertions/fluentassertions#2971
• Backport xUnit 3 support by @​dennisdoomen in Backport xUnit 3 support fluentassertions/fluentassertions#2970

Others

• Bump all dependencies by @​dennisdoomen in Bump all dependencies fluentassertions/fluentassertions#2962

Full Changelog: fluentassertions/fluentassertions@7.0.0...7.1.0

Commits viewable in compare view.

Updated Mapster from 10.0.7 to 10.0.10.

Release notes

Sourced from Mapster's releases.

10.0.9

What's Changed

• test: ensure Compile skips open generic mapping rules (#​925) by @​wyf027 in test: ensure Compile skips open generic mapping rules (#925) MapsterMapper/Mapster#965
• fix: ProjectToType nullable navigation to record DTO ctor (#​898) by @​wyf027 in fix: ProjectToType nullable navigation to record DTO ctor (#898) MapsterMapper/Mapster#971
• fix: support CompileProjection with Include on abstract types (#​801) by @​wyf027 in fix: support CompileProjection with Include on abstract types (#801) MapsterMapper/Mapster#977
• PR #​976 + Update + Fix mapping NonNullable ValueType to NullableValueType by @​wyf027 and @​DocSvartz in PR #976 + Update + Fix mapping NonNullable ValueType to NullableValueType  MapsterMapper/Mapster#986
• fix: cast inherited MapWith results to derived destinations (#​947) by @​wyf027 in fix: cast inherited MapWith results to derived destinations (#947) MapsterMapper/Mapster#976
• fix: drop null check by @​DocSvartz in fix: drop null check MapsterMapper/Mapster#989
• Fix dependency for Mapster.EFCore TFM Net 8.0 by @​DocSvartz in Fix dependency for Mapster.EFCore TFM Net 8.0 MapsterMapper/Mapster#988

Full Changelog: MapsterMapper/Mapster@v10.0.8...v10.0.9

10.0.8

What's Changed

• feat: add Flattening mapping for all source type by @​DocSvartz in feat: add Flattening mapping for all source type MapsterMapper/Mapster#916
• fix IsNotSelfCreation detect by @​DocSvartz in fix IsNotSelfCreation detect MapsterMapper/Mapster#919
• fix race condition when mapping to Record used IgnoreNullValues by @​DocSvartz in fix race condition when mapping to Record used IgnoreNullValues MapsterMapper/Mapster#923
• fix IgnoreNonMapped member collector #​924 by @​DocSvartz in fix IgnoreNonMapped member collector #924 MapsterMapper/Mapster#929
• Fix: #​928 - not creation abstract destination if souce is null by @​DocSvartz in Fix: #928 - not creation abstract destination if souce is null MapsterMapper/Mapster#933
• fix: #​927 add skip if destination member is not setter by @​DocSvartz in fix: #927 add skip if destination member is not setter MapsterMapper/Mapster#934
• fix: #​925 - Compile config with open generic is not throw exception by @​DocSvartz in fix: #925 - Compile config with open generic is not throw exception MapsterMapper/Mapster#935
• feat: #​938 - Add DirectAssignmentForSameType() by @​DocSvartz in feat: #938 - Add DirectAssignmentForSameType() MapsterMapper/Mapster#941
• fix: #​925 disable Compile check for open generic configs by @​DocSvartz in fix: #925 disable Compile check for open generic configs MapsterMapper/Mapster#942
• Refactoring fix #​903 and fix #​943 by @​DocSvartz in Refactoring fix #903 and fix #943 MapsterMapper/Mapster#945
• Actualize benchmark by @​Qyperion in Actualize benchmark MapsterMapper/Mapster#946
• Fix docs: split datatype.md to specific types of topics by @​DocSvartz in Fix docs: split datatype.md to specific types of topics MapsterMapper/Mapster#914
• [Go to v10.0.8] - update Docs by @​DocSvartz in [Go to v10.0.8] - update Docs MapsterMapper/Mapster#948
• [Go to v10.0.8] - fix mapster version in benchmark result by @​DocSvartz in [Go to v10.0.8] - fix mapster version in benchmark result MapsterMapper/Mapster#949
• feat - add Ignored Remove by @​DocSvartz in feat - add Ignored Remove MapsterMapper/Mapster#956
• fix: #​954 fix mapping optional ValueType params by @​DocSvartz in fix: #954 fix mapping optional ValueType params MapsterMapper/Mapster#957
• test: cover MapToTarget for types with read-only base properties (#​918) by @​leno23 in test: cover MapToTarget for types with read-only base properties (#918) MapsterMapper/Mapster#972
• feat: add CustomResolvers support from Custom Source by @​DocSvartz in feat: add CustomResolvers support from Custom Source MapsterMapper/Mapster#981

New Contributors

• @​Qyperion made their first contribution in Actualize benchmark MapsterMapper/Mapster#946
• @​leno23 made their first contribution in test: cover MapToTarget for types with read-only base properties (#918) MapsterMapper/Mapster#972

Full Changelog: MapsterMapper/Mapster@10.0.7...v10.0.8

10.0.8-pre07

What's Changed

• Actualize benchmark by @​Qyperion in Actualize benchmark MapsterMapper/Mapster#946
• Fix docs: split datatype.md to specific types of topics by @​DocSvartz in Fix docs: split datatype.md to specific types of topics MapsterMapper/Mapster#914
• [Go to v10.0.8] - update Docs by @​DocSvartz in [Go to v10.0.8] - update Docs MapsterMapper/Mapster#948
• [Go to v10.0.8] - fix mapster version in benchmark result by @​DocSvartz in [Go to v10.0.8] - fix mapster version in benchmark result MapsterMapper/Mapster#949
• feat - add Ignored Remove by @​DocSvartz in feat - add Ignored Remove MapsterMapper/Mapster#956
• fix: #​954 fix mapping optional ValueType params by @​DocSvartz in fix: #954 fix mapping optional ValueType params MapsterMapper/Mapster#957
• test: cover MapToTarget for types with read-only base properties (#​918) by @​leno23 in test: cover MapToTarget for types with read-only base properties (#918) MapsterMapper/Mapster#972
• feat: add CustomResolvers support from Custom Source by @​DocSvartz in feat: add CustomResolvers support from Custom Source MapsterMapper/Mapster#981

New Contributors

• @​Qyperion made their first contribution in Actualize benchmark MapsterMapper/Mapster#946
• @​leno23 made their first contribution in test: cover MapToTarget for types with read-only base properties (#918) MapsterMapper/Mapster#972

Full Changelog: MapsterMapper/Mapster@v10.0.8-pre06...v10.0.8-pre07

10.0.8-pre06

What's Changed

• Refactoring fix #​903 and fix #​943 by @​DocSvartz in Refactoring fix #903 and fix #943 MapsterMapper/Mapster#945

Full Changelog: MapsterMapper/Mapster@v10.0.8-pre05...v10.0.8-pre06

10.0.8-pre05

What's Changed

• feat: #​938 - Add DirectAssignmentForSameType() by @​DocSvartz in feat: #938 - Add DirectAssignmentForSameType() MapsterMapper/Mapster#941
• fix: #​925 disable Compile check for open generic configs by @​DocSvartz in fix: #925 disable Compile check for open generic configs MapsterMapper/Mapster#942

Full Changelog: MapsterMapper/Mapster@v10.0.8-pre04...v10.0.8-pre05

10.0.8-pre04

What's Changed

• fix IgnoreNonMapped member collector #​924 by @​DocSvartz in fix IgnoreNonMapped member collector #924 MapsterMapper/Mapster#929
• Fix: #​928 - not creation abstract destination if souce is null by @​DocSvartz in Fix: #928 - not creation abstract destination if souce is null MapsterMapper/Mapster#933
• fix: #​927 add skip if destination member is not setter by @​DocSvartz in fix: #927 add skip if destination member is not setter MapsterMapper/Mapster#934
• fix: #​925 - Compile config with open generic is not throw exception by @​DocSvartz in fix: #925 - Compile config with open generic is not throw exception MapsterMapper/Mapster#935

Full Changelog: MapsterMapper/Mapster@v10.0.8-pre03...v10.0.8-pre04

10.0.8-pre03

What's Changed

• fix race condition when mapping to Record used IgnoreNullValues by @​DocSvartz in fix race condition when mapping to Record used IgnoreNullValues MapsterMapper/Mapster#923

Full Changelog: MapsterMapper/Mapster@v10.0.8-pre02...v10.0.8-pre03

10.0.8-pre02

What's Changed

• fix IsNotSelfCreation detect by @​DocSvartz in fix IsNotSelfCreation detect MapsterMapper/Mapster#919

Full Changelog: MapsterMapper/Mapster@v10.0.8-pre01...v10.0.8-pre02

10.0.8-pre01

What's Changed

• feat: add Flattening mapping for all source type by @​DocSvartz in feat: add Flattening mapping for all source type MapsterMapper/Mapster#916

Full Changelog: MapsterMapper/Mapster@10.0.7...v10.0.8-pre01

Commits viewable in compare view.

Updated Microsoft.Identity.Client from 4.84.2 to 4.85.2.

Release notes

Sourced from Microsoft.Identity.Client's releases.

4.85.2

What's Changed

• Delegate IMDSv2 mTLS-PoP token leg to internal TokenClient exchange (MSIv2 WithClaimsFromClient) by @​Robbie-Microsoft in Delegate IMDSv2 mTLS-PoP token leg to internal TokenClient exchange (MSIv2 WithClaimsFromClient) AzureAD/microsoft-authentication-library-for-dotnet#6070
• Enforce mTLS PoP minimum binding strength for Managed Identity (#​6049 Phase 2) by @​Robbie-Microsoft in Enforce mTLS PoP minimum binding strength for Managed Identity (#6049 Phase 2) AzureAD/microsoft-authentication-library-for-dotnet#6059
• Add refresh token cache partitioning support by @​iNinja in Add refresh token cache partitioning support AzureAD/microsoft-authentication-library-for-dotnet#6077
• Detach ImdsV2ManagedIdentitySource from AbstractManagedIdentity (refused-bequest cleanup) by @​Robbie-Microsoft in Detach ImdsV2ManagedIdentitySource from AbstractManagedIdentity (refused-bequest cleanup) AzureAD/microsoft-authentication-library-for-dotnet#6089

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.85.1...4.85.2

4.85.1

What's Changed

• Migrate OBO tests from old lab to ID4SLAB1 by @​RyAuld in Migrate OBO tests from old lab to ID4SLAB1 AzureAD/microsoft-authentication-library-for-dotnet#6021
• Mark regional SNI mTLS PoP test inconclusive on AAD test-slice Bearer downgrade by @​neha-bhargava in Mark regional SNI mTLS PoP test inconclusive on AAD test-slice Bearer downgrade AzureAD/microsoft-authentication-library-for-dotnet#6084
• Expose canonical tag names per-metric by @​ssmelov in Expose canonical tag names per-metric AzureAD/microsoft-authentication-library-for-dotnet#6076

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.85.0...4.85.1

4.85.0

What's Changed

• Fix proactive token refresh bypassing cancellation, leading to unbounded semaphore wait by @​jayesh-a-shah in Fix proactive token refresh bypassing cancellation, leading to unbounded semaphore wait AzureAD/microsoft-authentication-library-for-dotnet#6054
• Add GovFr, GovDe, GovSg to AzureCloudInstance enum by @​bgavrilMS in Add GovFr, GovDe, GovSg to AzureCloudInstance enum AzureAD/microsoft-authentication-library-for-dotnet#6023
• Take home account from request, if not available elsewhere. by @​yowl in Take home account from request, if not available elsewhere. AzureAD/microsoft-authentication-library-for-dotnet#5657
• Validate Azure region format to prevent region poisoning (fixes #​6060) by @​Robbie-Microsoft in Validate Azure region format to prevent region poisoning (fixes #6060) AzureAD/microsoft-authentication-library-for-dotnet#6061
• Promote MsalServiceException.SubError to public by @​neha-bhargava in Promote MsalServiceException.SubError to public AzureAD/microsoft-authentication-library-for-dotnet#6063
• Migrate region discovery to IMDS /compute JSON endpoint (#​6039) by @​Robbie-Microsoft in Migrate region discovery to IMDS /compute JSON endpoint (#6039) AzureAD/microsoft-authentication-library-for-dotnet#6057
• fix: Service Fabric MI sends principalId for ObjectId; reject ClientId/ResourceId (mirror of #​6066) by @​neha-bhargava in fix: Service Fabric MI sends principalId for ObjectId; reject ClientId/ResourceId (mirror of #6066) AzureAD/microsoft-authentication-library-for-dotnet#6069
• Exclude caller SDK telemetry from access token cache keys by @​bgavrilMS in Exclude caller SDK telemetry from access token cache keys AzureAD/microsoft-authentication-library-for-dotnet#6074
• Add MSAL.NET telemetry enrichment by @​ssmelov in Add MSAL.NET telemetry enrichment AzureAD/microsoft-authentication-library-for-dotnet#6071

New Contributors

• @​jayesh-a-shah made their first contribution in Fix proactive token refresh bypassing cancellation, leading to unbounded semaphore wait AzureAD/microsoft-authentication-library-for-dotnet#6054
• @​yowl made their first contribution in Take home account from request, if not available elsewhere. AzureAD/microsoft-authentication-library-for-dotnet#5657

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.84.2...4.85.0

Commits viewable in compare view.

Updated Microsoft.Identity.Web from 4.10.0 to 4.12.2.

Release notes

Sourced from Microsoft.Identity.Web's releases.

4.12.2

Bug fixes

• Make the Microsoft.Identity.Client.KeyAttestation dependency conditional on modern .NET (.NETCoreApp) targets. It transitively pulls the native-only Microsoft.Azure.Security.KeyGuardAttestation package, which ships no .NET Framework/netstandard-compatible assets and broke NuGet restore for .NET Framework (packages.config) projects. Microsoft.Identity.Web.Certificateless now multi-targets, and .NET Framework consumers use the netstandard2.0 asset without this dependency. See #​3894.

4.12.1

Bug fixes

• Preserve ManagedIdentity when converting AcquireTokenOptions to TokenAcquisitionOptions in TokenAcquirer. Previously the ITokenAcquirer.GetTokenForAppAsync / GetTokenForUserAsync paths silently dropped ManagedIdentity and fell back to the confidential-client path, breaking managed-identity mTLS PoP (e.g. MISE Native). See #​3914.

Behavior changes

• Sidecar: outbound HTTP redirects suppressed by default. The sidecar no longer follows outbound HTTP redirects; a new opt-in Sidecar:AllowOutboundRedirects flag (default false) restores the previous behavior. See #​3906.
• Sidecar: per-request isolation of downstream API options. Downstream API options resolved from the singleton IOptionsMonitor are now cloned per request (including fresh ExtraParameters / ExtraHeaderParameters / ExtraQueryParameters dictionaries), preventing request-scoped values from leaking across requests or racing under concurrency. See #​3919.

Fundamentals

• Build the solution in the PR pipeline before running tests. See #​3911.
• Restore OWIN 5.7.1 packages from the internal IDDP feed in the PR pipeline. See #​3912.
• Run the PR pipeline on the Wilson pool so integration/E2E tests can access the lab KeyVault. See #​3913.

4.12.0

New features

• Implement IAuthorizationHeaderProvider2 (from Microsoft.Identity.Abstractions 12.3.0) on DefaultAuthorizationHeaderProvider and the public BaseAuthorizationHeaderProvider, exposing the metadata-rich CreateAuthorizationHeaderInformation* surface (returning OperationResult<AuthorizationHeaderInformation, AuthorizationHeaderError>) with binding-certificate propagation. DownstreamApi and MicrosoftIdentityMessageHandler now prefer IAuthorizationHeaderProvider2 for mTLS PoP and soft-deprecate the bound-only IBoundAuthorizationHeaderProvider path (kept as a fallback for source/binary compatibility). See #​3899.
• Populate TokenAcquisitionMetadata.ExpiresOn on AcquireTokenResult from the MSAL AuthenticationResult.ExpiresOn value. See #​3905.

Bug fixes

• Finalize the DownstreamApi request (headers, query parameters, content, and customizations) before creating the authorization header, adding Authorization only after signing so request-binding providers do not include it in their signed material. See #​3902.

Dependencies updates

• Update Microsoft.Identity.Abstractions to 12.4.0. See #​3899, #​3905.
• Update MSAL.NET (Microsoft.Identity.Client / Microsoft.Identity.Client.KeyAttestation) to 4.85.2. See #​3896.
• Update Microsoft.IdentityModel.Protocols.WsFederation (Microsoft.Identity.Web.OWIN) to 5.7.1. See #​3900.

4.11.0

What's Changed

• Bump vitest from 3.2.4 to 4.1.0 in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump vitest from 3.2.4 to 4.1.0 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3836
• Bump MSAL.NET to 4.84.2 and align OWIN binding redirects by @​gladjohn with @​Copilot in Bump MSAL.NET to 4.84.2 and align OWIN binding redirects AzureAD/microsoft-identity-web#3844
• docs(design): devex proposal for mTLS PoP on Managed Identity and FIC by @​gladjohn in docs(design): devex proposal for mTLS PoP on Managed Identity and FIC AzureAD/microsoft-identity-web#3832
• Prevent OpenIdConnectMiddlewareDiagnostics from logging sensitive values by @​iarekk in Prevent OpenIdConnectMiddlewareDiagnostics from logging sensitive values AzureAD/microsoft-identity-web#3850
• Add MSI mTLS PoP support: pure MI + FIC-with-MI (impl for devex #​3832) by @​gladjohn in Add MSI mTLS PoP support: pure MI + FIC-with-MI (impl for devex #3832) AzureAD/microsoft-identity-web#3839
• docs(design): devex proposal for Bearer tokens with bound credentials by @​gladjohn in docs(design): devex proposal for Bearer tokens with bound credentials AzureAD/microsoft-identity-web#3833
• Add bound-credential support for Bearer tokens (cert + mTLS) by @​gladjohn in Add bound-credential support for Bearer tokens (cert + mTLS) AzureAD/microsoft-identity-web#3835
• Upgrade IdWeb Sidecar to .NET 10 (LTS) by @​soodt in Upgrade IdWeb Sidecar to .NET 10 (LTS) AzureAD/microsoft-identity-web#3841
• MTLS Without Tokens Support - MicrosoftIdentityMessageHandler Support by @​tlupes in MTLS Without Tokens Support - MicrosoftIdentityMessageHandler Support AzureAD/microsoft-identity-web#3815
• fix: include isTokenBinding in CCA cache key to prevent bearer/PoP collision by @​gladjohn in fix: include isTokenBinding in CCA cache key to prevent bearer/PoP collision AzureAD/microsoft-identity-web#3867
• Test + doc: x-ms-tokenboundauth header for AKV mTLS PoP via ExtraHeaderParameters by @​gladjohn in Test + doc: x-ms-tokenboundauth header for AKV mTLS PoP via ExtraHeaderParameters AzureAD/microsoft-identity-web#3864
• Add mTLS PoP Copilot skill (certificate, MSI, FIC) by @​gladjohn in Add mTLS PoP Copilot skill (certificate, MSI, FIC) AzureAD/microsoft-identity-web#3872
• Fix CVE-2026-48109: Pin MessagePack to patched version 2.5.301 by @​soodt in Fix CVE-2026-48109: Pin MessagePack to patched version 2.5.301 AzureAD/microsoft-identity-web#3865
• Sidecar: gate agent identity parameters behind AllowOverrides by @​iNinja in Sidecar: gate agent identity parameters behind AllowOverrides AzureAD/microsoft-identity-web#3871
• Bump System.Formats.Asn1 base version to 10.0.2 by @​iarekk in Bump System.Formats.Asn1 base version to 10.0.2 AzureAD/microsoft-identity-web#3875
• Bump Microsoft.IdentityModel.* from 8.18.0 to 8.19.1 by @​iarekk in Bump Microsoft.IdentityModel.* from 8.18.0 to 8.19.1 AzureAD/microsoft-identity-web#3879
• Use IIdentityLogger for MSAL logging in TokenAcquisition and ManagedIdentityClientAssertion (#​3820) by @​neha-bhargava in Use IIdentityLogger for MSAL logging in TokenAcquisition and ManagedIdentityClientAssertion (#3820) AzureAD/microsoft-identity-web#3880
• Update Microsoft.Identity.Abstractions to 12.2.0 and MSAL to 4.85.0 by @​neha-bhargava in Update Microsoft.Identity.Abstractions to 12.2.0 and MSAL to 4.85.0 AzureAD/microsoft-identity-web#3881
• Surface MSAL AuthenticationResultMetadata + exception details on AcquireTokenResult by @​neha-bhargava in Surface MSAL AuthenticationResultMetadata + exception details on AcquireTokenResult AzureAD/microsoft-identity-web#3856
• Flow outgoing request to header providers via AcquireTokenOptions by @​neha-bhargava in Flow outgoing request to header providers via AcquireTokenOptions AzureAD/microsoft-identity-web#3876
• Throw on Authority vs Instance/TenantId conflict (OIDC + MSAL parity) by @​iarekk in Throw on Authority vs Instance/TenantId conflict (OIDC + MSAL parity) AzureAD/microsoft-identity-web#3873
• Delete .github/workflows/evergreen.yml by @​bgavrilMS in Delete .github/workflows/evergreen.yml AzureAD/microsoft-identity-web#3803
• Add comprehensive authority configuration and precedence documentation by @​jmprieur with @​Copilot in Add comprehensive authority configuration and precedence documentation AzureAD/microsoft-identity-web#3617
• Bump js-yaml from 4.1.1 to 4.2.0 in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump js-yaml from 4.1.1 to 4.2.0 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3862
• Move authority docs into docs/authority-configuration/ subfolder by @​iarekk in Move authority docs into docs/authority-configuration/ subfolder AzureAD/microsoft-identity-web#3885
• Revert "Throw on Authority vs Instance/TenantId conflict (#​3873)" by @​iarekk in Revert "Throw on Authority vs Instance/TenantId conflict (#3873)" AzureAD/microsoft-identity-web#3888
• Update Microsoft.Identity.Client to 4.85.1 by @​neha-bhargava in Update Microsoft.Identity.Client to 4.85.1 AzureAD/microsoft-identity-web#3889
• Enable E2E test coverage on internal Azure DevOps pipelines by @​gladjohn in Enable E2E test coverage on internal Azure DevOps pipelines AzureAD/microsoft-identity-web#3883
• Bump esbuild and tsx in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump esbuild and tsx in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3859
• Skip AcquireTokenWithMtlsPop test: AAD westus3 test slice returns Bearer by @​neha-bhargava in Skip AcquireTokenWithMtlsPop test: AAD westus3 test slice returns Bearer AzureAD/microsoft-identity-web#3892

New Contributors

• @​iarekk made their first contribution in Prevent OpenIdConnectMiddlewareDiagnostics from logging sensitive values AzureAD/microsoft-identity-web#3850
• @​soodt made their first contribution in Upgrade IdWeb Sidecar to .NET 10 (LTS) AzureAD/microsoft-identity-web#3841

Full Changelog: AzureAD/microsoft-identity-web@4.10.0...4.11.0

Commits viewable in compare view.

Updated Microsoft.OpenApi from 1.6.22 to 1.6.29.

Release notes

Sourced from Microsoft.OpenApi's releases.

1.6.29

1.6.29 (2026-04-14)

Bug Fixes

• hidi: update Microsoft.OpenApi.OData to 1.7.6 (11ba851)
• hidi: update Microsoft.OpenApi.OData to 1.7.6 (f596327), closes #​2813

1.6.28

1.6.28 (2025-10-06)

Bug Fixes

• Improve server creation and URL handling logic to maintain port (a15c50e)
• missing deserialization for header content property in 3.0 (7c65a49)
• missing deserialization for header content property in 3.0 (e256d29)

1.6.27

1.6.27 (2025-10-02)

Bug Fixes

• typo in encoding allow reserved deserialization (6eeca52)
• typo in encoding allow reserved deserialization (3fadb7d)

1.6.26

1.6.26 (2025-09-19)

Bug Fixes

• OpenApiEncoding explode default value when using form style (09b5a28)

1.6.25

1.6.25 (2025-08-22)

Bug Fixes

• missing examples when one example is with an empty array. (4697af4)

1.6.24

1.6.24 (2025-04-01)

Bug Fixes

• a flaky behaviour for format property serialization (e072790)
• a flaky behaviour for format property serialization (4d06f86)
• null reference on alternate keys during hidi transform (17247ed)
• null reference on alternate keys during hidi transform (55f0f54)

1.6.23

Changes:

• #​2020: fix: reverts to a regular variable for the tag value
• #​2018: fix/ci hidi gh upload to v1
• #​2013: chore: bumps version for releasing
• #​2012: chore/hidi maintenance
• #​2011: feat: bumps v3 patch version to 3.0.4
• #​2010: ci: fixes hidi gh release
• #​2007: security: bumps STJ version to fix security vulnerabilities

This list of changes was auto generated.

Commits viewable in compare view.

Updated OpenTelemetry.Instrumentation.AspNetCore from 1.15.2 to 1.16.0.

Release notes

Sourced from OpenTelemetry.Instrumentation.AspNetCore's releases.

1.16.0

• NuGet: OpenTelemetry.Extensions.AWS v1.16.0

  • Fix sampling behaviour to be compatible with .NET 11.
    (#​4396)

  • Updated OpenTelemetry core component version(s) to 1.16.0.
    (#​4487)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Instrumentation.AWS v1.16.0

  • Add instrumentation scope version and schema URL to metrics and traces.
    (#​4063)

  • Pass AWS attribute values to created meters as tags.
    (#​4063)

  • Capture SNS TopicArn as the aws.sns.topic.arn span attribute.
    (#​4043)

  • Add cloud.region attribute to all AWS SDK client spans.
    (#​4043)

  • Add messaging attributes for AWS SNS and SQS.
    (#​4043)

  • BREAKING: Update latest AWS Semantic Conventions to 1.40.0.
    (#​4043)

  • Fix suppression scope leakage when SuppressDownstreamInstrumentation is
    enabled.
    (#​4304)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Instrumentation.AWSLambda v1.16.0

  • Update System.Text.Json for netstandard2.0 to 8.0.5.
    (#​4154)

  • Add instrumentation scope version and schema URL to traces.
    (#​4063)

  See CHANGELOG for details.

1.16.0-beta.1

• NuGet: OpenTelemetry.Instrumentation.ServiceFabricRemoting v1.16.0-beta.1

  • Raised the minimum required version of Microsoft.ServiceFabric.Actors and
    Microsoft.ServiceFabric.Services.Remoting from 7.1.2448 to 8.4.268, as the
    7.1 Service Fabric runtime is going out of support.
    (#​4510)

  • Updated OpenTelemetry core component version(s) to 1.16.0.
    (#​4487)

  See CHANGELOG for details.

1.16.0-alpha.1

• NuGet: OpenTelemetry.Instrumentation.EventCounters v1.16.0-alpha.1

  • Fixed OnEventWritten processing events from EventSources that were not
    configured via AddEventSources.
    (#​4031)

  • Updated OpenTelemetry core component version(s) to 1.16.0.
    (#​4487)

  See CHANGELOG for details.

Commits viewable in compare view.

Updated OpenTelemetry.Instrumentation.Http from 1.15.1 to 1.16.0.

Release notes

Sourced from OpenTelemetry.Instrumentation.Http's releases.

1.16.0

• NuGet: OpenTelemetry.Extensions.AWS v1.16.0

  • Fix sampling behaviour to be compatible with .NET 11.
    (#​4396)

  • Updated OpenTelemetry core component version(s) to 1.16.0.
    (#​4487)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Instrumentation.AWS v1.16.0

  • Add instrumentation scope version and schema URL to metrics and traces.
    (#​4063)

  • Pass AWS attribute values to created meters as tags.
    (#​4063)

  • Capture SNS TopicArn as the aws.sns.topic.arn span attribute.
    (#​4043)

  • Add cloud.region attribute to all AWS SDK client spans.
    (#​4043)

  • Add messaging attributes for AWS SNS and SQS.
    (#​4043)

  • BREAKING: Update latest AWS Semantic Conventions to 1.40.0.
    (#​4043)

  • Fix suppression scope leakage when SuppressDownstreamInstrumentation is
    enabled.
    (#​4304)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Instrumentation.AWSLambda v1.16.0

  • Update System.Text.Json for netstandard2.0 to 8.0.5.
    (#​4154)

  • Add instrumentation scope version and schema URL to traces.
    (#​4063)

  See CHANGELOG for details.

1.16.0-beta.1

• NuGet: OpenTelemetry.Instrumentation.ServiceFabricRemoting v1.16.0-beta.1

  • Raised the minimum required version of Microsoft.ServiceFabric.Actors and
    Microsoft.ServiceFabric.Services.Remoting from 7.1.2448 to 8.4.268, as the
    7.1 Service Fabric runtime is going out of support.
    (#​4510)

  • Updated OpenTelemetry core component version(s) to 1.16.0.
    (#​4487)

  See CHANGELOG for details.

1.16.0-alpha.1

• NuGet: OpenTelemetry.Instrumentation.EventCounters v1.16.0-alpha.1

  • Fixed OnEventWritten processing events from EventSources that were not
    configured via AddEventSources.
    (#​4031)

  • Updated OpenTelemetry core component version(s) to 1.16.0.
    (#​4487)

  See CHANGELOG for details.

1.15.2

• NuGet: OpenTelemetry.Exporter.Geneva v1.15.2

  • Updated OpenTelemetry core component version(s) to 1.15.3.
    (#​4166)

  See CHANGELOG for details.

Commits viewable in compare view.

Updated xunit.runner.visualstudio from 3.1.4 to 3.1.5.

Release notes

Sourced from xunit.runner.visualstudio's releases.

3.1.5

Release notes: https://xunit.net/releases/visualstudio/3.1.5

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions