Bump Microsoft.Identity.Web.UI from 4.10.0 to 4.11.0

[dependabot]

Updated Microsoft.Identity.Web.UI from 4.10.0 to 4.11.0.

Release notes

Sourced from Microsoft.Identity.Web.UI's releases.

4.11.0

What's Changed

• Bump vitest from 3.2.4 to 4.1.0 in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump vitest from 3.2.4 to 4.1.0 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3836
• Bump MSAL.NET to 4.84.2 and align OWIN binding redirects by @​gladjohn with @​Copilot in Bump MSAL.NET to 4.84.2 and align OWIN binding redirects AzureAD/microsoft-identity-web#3844
• docs(design): devex proposal for mTLS PoP on Managed Identity and FIC by @​gladjohn in docs(design): devex proposal for mTLS PoP on Managed Identity and FIC AzureAD/microsoft-identity-web#3832
• Prevent OpenIdConnectMiddlewareDiagnostics from logging sensitive values by @​iarekk in Prevent OpenIdConnectMiddlewareDiagnostics from logging sensitive values AzureAD/microsoft-identity-web#3850
• Add MSI mTLS PoP support: pure MI + FIC-with-MI (impl for devex #​3832) by @​gladjohn in Add MSI mTLS PoP support: pure MI + FIC-with-MI (impl for devex #3832) AzureAD/microsoft-identity-web#3839
• docs(design): devex proposal for Bearer tokens with bound credentials by @​gladjohn in docs(design): devex proposal for Bearer tokens with bound credentials AzureAD/microsoft-identity-web#3833
• Add bound-credential support for Bearer tokens (cert + mTLS) by @​gladjohn in Add bound-credential support for Bearer tokens (cert + mTLS) AzureAD/microsoft-identity-web#3835
• Upgrade IdWeb Sidecar to .NET 10 (LTS) by @​soodt in Upgrade IdWeb Sidecar to .NET 10 (LTS) AzureAD/microsoft-identity-web#3841
• MTLS Without Tokens Support - MicrosoftIdentityMessageHandler Support by @​tlupes in MTLS Without Tokens Support - MicrosoftIdentityMessageHandler Support AzureAD/microsoft-identity-web#3815
• fix: include isTokenBinding in CCA cache key to prevent bearer/PoP collision by @​gladjohn in fix: include isTokenBinding in CCA cache key to prevent bearer/PoP collision AzureAD/microsoft-identity-web#3867
• Test + doc: x-ms-tokenboundauth header for AKV mTLS PoP via ExtraHeaderParameters by @​gladjohn in Test + doc: x-ms-tokenboundauth header for AKV mTLS PoP via ExtraHeaderParameters AzureAD/microsoft-identity-web#3864
• Add mTLS PoP Copilot skill (certificate, MSI, FIC) by @​gladjohn in Add mTLS PoP Copilot skill (certificate, MSI, FIC) AzureAD/microsoft-identity-web#3872
• Fix CVE-2026-48109: Pin MessagePack to patched version 2.5.301 by @​soodt in Fix CVE-2026-48109: Pin MessagePack to patched version 2.5.301 AzureAD/microsoft-identity-web#3865
• Sidecar: gate agent identity parameters behind AllowOverrides by @​iNinja in Sidecar: gate agent identity parameters behind AllowOverrides AzureAD/microsoft-identity-web#3871
• Bump System.Formats.Asn1 base version to 10.0.2 by @​iarekk in Bump System.Formats.Asn1 base version to 10.0.2 AzureAD/microsoft-identity-web#3875
• Bump Microsoft.IdentityModel.* from 8.18.0 to 8.19.1 by @​iarekk in Bump Microsoft.IdentityModel.* from 8.18.0 to 8.19.1 AzureAD/microsoft-identity-web#3879
• Use IIdentityLogger for MSAL logging in TokenAcquisition and ManagedIdentityClientAssertion (#​3820) by @​neha-bhargava in Use IIdentityLogger for MSAL logging in TokenAcquisition and ManagedIdentityClientAssertion (#3820) AzureAD/microsoft-identity-web#3880
• Update Microsoft.Identity.Abstractions to 12.2.0 and MSAL to 4.85.0 by @​neha-bhargava in Update Microsoft.Identity.Abstractions to 12.2.0 and MSAL to 4.85.0 AzureAD/microsoft-identity-web#3881
• Surface MSAL AuthenticationResultMetadata + exception details on AcquireTokenResult by @​neha-bhargava in Surface MSAL AuthenticationResultMetadata + exception details on AcquireTokenResult AzureAD/microsoft-identity-web#3856
• Flow outgoing request to header providers via AcquireTokenOptions by @​neha-bhargava in Flow outgoing request to header providers via AcquireTokenOptions AzureAD/microsoft-identity-web#3876
• Throw on Authority vs Instance/TenantId conflict (OIDC + MSAL parity) by @​iarekk in Throw on Authority vs Instance/TenantId conflict (OIDC + MSAL parity) AzureAD/microsoft-identity-web#3873
• Delete .github/workflows/evergreen.yml by @​bgavrilMS in Delete .github/workflows/evergreen.yml AzureAD/microsoft-identity-web#3803
• Add comprehensive authority configuration and precedence documentation by @​jmprieur with @​Copilot in Add comprehensive authority configuration and precedence documentation AzureAD/microsoft-identity-web#3617
• Bump js-yaml from 4.1.1 to 4.2.0 in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump js-yaml from 4.1.1 to 4.2.0 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3862
• Move authority docs into docs/authority-configuration/ subfolder by @​iarekk in Move authority docs into docs/authority-configuration/ subfolder AzureAD/microsoft-identity-web#3885
• Revert "Throw on Authority vs Instance/TenantId conflict (#​3873)" by @​iarekk in Revert "Throw on Authority vs Instance/TenantId conflict (#3873)" AzureAD/microsoft-identity-web#3888
• Update Microsoft.Identity.Client to 4.85.1 by @​neha-bhargava in Update Microsoft.Identity.Client to 4.85.1 AzureAD/microsoft-identity-web#3889
• Enable E2E test coverage on internal Azure DevOps pipelines by @​gladjohn in Enable E2E test coverage on internal Azure DevOps pipelines AzureAD/microsoft-identity-web#3883
• Bump esbuild and tsx in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump esbuild and tsx in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3859
• Skip AcquireTokenWithMtlsPop test: AAD westus3 test slice returns Bearer by @​neha-bhargava in Skip AcquireTokenWithMtlsPop test: AAD westus3 test slice returns Bearer AzureAD/microsoft-identity-web#3892

New Contributors

• @​iarekk made their first contribution in Prevent OpenIdConnectMiddlewareDiagnostics from logging sensitive values AzureAD/microsoft-identity-web#3850
• @​soodt made their first contribution in Upgrade IdWeb Sidecar to .NET 10 (LTS) AzureAD/microsoft-identity-web#3841

Full Changelog: AzureAD/microsoft-identity-web@4.10.0...4.11.0

Commits viewable in compare view.

[mergify]

Automatically approving dependabot

[mergify]

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

• Queue this pull request