Skip to content

deps(nuget): Bump Microsoft.AspNetCore.Authentication.JwtBearer and 6 others #27

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
dependabot wants to merge 20 commits into from
Closed

deps(nuget): Bump Microsoft.AspNetCore.Authentication.JwtBearer and 6 others #27

dependabot wants to merge 20 commits into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 24, 2025 •
edited
Loading

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 9.0.0 to 9.0.11.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

9.0.11

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.10...v9.0.11

9.0.10

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.9...v9.0.10

9.0.9

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.8...v9.0.9

9.0.7

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.6...v9.0.7

9.0.6

Bug Fixes

  • Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61622)
    The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence forwarded header values, preventing potential spoofing or misrouting issues.

Dependency Updates

  • Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61762)
    Updates the GoogleTest submodule to a newer commit, bringing in the latest improvements and bug fixes from the upstream project.
  • Update dependencies from dotnet/arcade (#​61714)
    Updates internal build and infrastructure dependencies from the dotnet/arcade repository, ensuring compatibility and access to the latest build tools.
  • Update dependencies from dotnet/extensions (#​61571)
    Refreshes dependencies from the dotnet/extensions repository, incorporating the latest features and fixes from the extensions libraries.
  • Update dependencies from dotnet/extensions (#​61877)
    Further updates dependencies from dotnet/extensions, ensuring the project benefits from recent improvements and bug fixes.
  • Update dependencies from dotnet/arcade (#​61892)
    Additional updates to build and infrastructure dependencies from dotnet/arcade, maintaining up-to-date tooling and build processes.

Miscellaneous

  • Update branding to 9.0.6 (#​61831)
    Updates the project version and branding to 9.0.6, reflecting the new release and ensuring version consistency across the codebase.
  • Merging internal commits for release/9.0 (#​61925)
    Incorporates various internal commits into the release/9.0 branch, ensuring that all relevant changes are included in this release.

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: v9.0.5...v9.0.6

9.0.5

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.4...v9.0.5

9.0.4

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.3...v9.0.4

9.0.3

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.2...v9.0.3

9.0.2

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.1...v9.0.2

9.0.1

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.0...v9.0.1

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 9.0.0 to 9.0.11.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

9.0.11

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.10...v9.0.11

9.0.10

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.9...v9.0.10

9.0.9

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.8...v9.0.9

9.0.7

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.6...v9.0.7

9.0.6

Bug Fixes

  • Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61622)
    The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence forwarded header values, preventing potential spoofing or misrouting issues.

Dependency Updates

  • Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61762)
    Updates the GoogleTest submodule to a newer commit, bringing in the latest improvements and bug fixes from the upstream project.
  • Update dependencies from dotnet/arcade (#​61714)
    Updates internal build and infrastructure dependencies from the dotnet/arcade repository, ensuring compatibility and access to the latest build tools.
  • Update dependencies from dotnet/extensions (#​61571)
    Refreshes dependencies from the dotnet/extensions repository, incorporating the latest features and fixes from the extensions libraries.
  • Update dependencies from dotnet/extensions (#​61877)
    Further updates dependencies from dotnet/extensions, ensuring the project benefits from recent improvements and bug fixes.
  • Update dependencies from dotnet/arcade (#​61892)
    Additional updates to build and infrastructure dependencies from dotnet/arcade, maintaining up-to-date tooling and build processes.

Miscellaneous

  • Update branding to 9.0.6 (#​61831)
    Updates the project version and branding to 9.0.6, reflecting the new release and ensuring version consistency across the codebase.
  • Merging internal commits for release/9.0 (#​61925)
    Incorporates various internal commits into the release/9.0 branch, ensuring that all relevant changes are included in this release.

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: v9.0.5...v9.0.6

9.0.5

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.4...v9.0.5

9.0.4

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.3...v9.0.4

9.0.3

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.2...v9.0.3

9.0.2

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.1...v9.0.2

9.0.1

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.0...v9.0.1

Commits viewable in compare view.

Updated Microsoft.AspNetCore.OpenApi from 9.0.0 to 9.0.11.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

9.0.11

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.10...v9.0.11

9.0.10

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.9...v9.0.10

9.0.9

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.8...v9.0.9

9.0.7

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.6...v9.0.7

9.0.6

Bug Fixes

  • Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61622)
    The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence forwarded header values, preventing potential spoofing or misrouting issues.

Dependency Updates

  • Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61762)
    Updates the GoogleTest submodule to a newer commit, bringing in the latest improvements and bug fixes from the upstream project.
  • Update dependencies from dotnet/arcade (#​61714)
    Updates internal build and infrastructure dependencies from the dotnet/arcade repository, ensuring compatibility and access to the latest build tools.
  • Update dependencies from dotnet/extensions (#​61571)
    Refreshes dependencies from the dotnet/extensions repository, incorporating the latest features and fixes from the extensions libraries.
  • Update dependencies from dotnet/extensions (#​61877)
    Further updates dependencies from dotnet/extensions, ensuring the project benefits from recent improvements and bug fixes.
  • Update dependencies from dotnet/arcade (#​61892)
    Additional updates to build and infrastructure dependencies from dotnet/arcade, maintaining up-to-date tooling and build processes.

Miscellaneous

  • Update branding to 9.0.6 (#​61831)
    Updates the project version and branding to 9.0.6, reflecting the new release and ensuring version consistency across the codebase.
  • Merging internal commits for release/9.0 (#​61925)
    Incorporates various internal commits into the release/9.0 branch, ensuring that all relevant changes are included in this release.

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: v9.0.5...v9.0.6

9.0.5

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.4...v9.0.5

9.0.4

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.3...v9.0.4

9.0.3

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.2...v9.0.3

9.0.2

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.1...v9.0.2

9.0.1

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.0...v9.0.1

Commits viewable in compare view.

Pinned Microsoft.Azure.Cosmos at 3.56.0.

Release notes

Sourced from Microsoft.Azure.Cosmos's releases.

3.56.0

3.56.0 - 2025-11-25

Fixed

  • 5550 Owner not found: Fixes substatus code 1003 for item operations when container doesn't exist (Direct mode)

3.56.0-preview.0

3.56.0-preview.0 - 2025-11-14

Fixed

  • 5260 HPK: Fixes Lengthaware normalized EPK comparators as default (only in preview)

3.55.0

3.55.0 - 2025-11-14

Added

  • 5462 [VectorIndexPath]: Adds GA IndexingSearchListSize and VectorIndexShardKey
  • 5470 Change feed: Adds id and pk to ChangeFeedMetadata for delete operations (Default policy excludes Previous for deletes)
  • 5474 Binary Encoding: Adds support to DateTimeOffset type

Fixed

  • 5469 BarrierRequests: Adds 410/LeaseNotFound(1022) fail-fast to cross-region retries by retrying on primary (checks last replica response)
  • 5475 Query: Fixes query advisor prefix url links to use aka.ms
  • 5476 HttpTimeoutPolicy: Fixes QueryPlan retry gaps (Http POST but its Read)
  • 5497 HttpTimeoutPolicy: Fixes PPAF and ThinProxy timeout polices to (6s, 6s, 10s) for both PointReads and NonPointReads

3.55.0-preview.1

3.55.0-preview.0

3.55.0-preview.0 - 2025-10-2

Note: FullTextScore query function now expects string value parameters (e.g., FullTextScore(c.text, 'swim','run')); preview array syntax is no longer supported.

Added

  • 5368 VectorDataType: Adds Support for Float16 Data Type
  • 5411 Hedging: Adds GA for adding hedging via RequestOptions
  • 5412 Hedging: Adds back diagnostics filed Response Region to hedging request diagnostics
  • 5386 Build: Removes System.Net.Http and System.Text.RegularExpressions package references

Fixed

  • 5409 Query: Fixes to not use passthrough context for collections with HPK
  • 5422 Diagnostics: Fixes race condition that can cause InvalidOperationException in CosmosOperationCancelledException.ToString()
  • 5427 PPAF: Fixes issue where setting RequestTimeout to 0 second will cause PPAF dynamic enablement to break

3.54.1

3.54.0

3.54.0 - 2025-10-2

Note: FullTextScore query function now expects string value parameters (e.g., FullTextScore(c.text, 'swim','run')); preview array syntax is no longer supported.

Added

  • 5368 VectorDataType: Adds Support for Float16 Data Type
  • 5411 Hedging: Adds GA for adding hedging via RequestOptions
  • 5412 Hedging: Adds back diagnostics filed Response Region to hedging request diagnostics
  • 5386 Build: Removes System.Net.Http and System.Text.RegularExpressions package references

Fixed

  • 5409 Query: Fixes to not use passthrough context for collections with HPK
  • 5422 Diagnostics: Fixes race condition that can cause InvalidOperationException in CosmosOperationCancelledException.ToString()
  • 5427 PPAF: Fixes issue where setting RequestTimeout to 0 second will cause PPAF dynamic enablement to br...

Description has been truncated

trickpatty and others added 17 commits December 20, 2025 17:04
@trickpatty
Initial commit
6fb19c5
@trickpatty
Enhance README with project details and guidelines
f1d8aa1 
Expanded the README to provide detailed information about the project, including its purpose, design principles, core capabilities, hardware assumptions, licensing, project status, contributing guidelines, and overall philosophy.
@claude
📝 docs: add repository guidelines and community standards
5644a62 
- Add CLAUDE.md with development expectations (DRY, SOLID, DDD, TDD)
- Add CONTRIBUTING.md with GitHub contribution guidelines
- Add CODE_OF_CONDUCT.md based on Contributor Covenant 2.1
- Define conventional commits with Gitmoji standards
- Establish documentation-driven design requirements
@trickpatty
Merge pull request #1 from trickpatty/claude/add-repo-guidelines-zambk
b760e4a
@claude
📝 docs: add comprehensive project documentation with TOGAF EA principles
d21679b 
- Create docs/PROJECT-OVERVIEW.md with complete product specification
  - Executive summary and vision statement
  - Stakeholder personas and role matrix
  - Core UX principles (glanceable, zero-distraction, etc.)
  - Comprehensive functional scope (10 feature areas)
  - Non-functional requirements (reliability, performance, security)

- Create docs/ARCHITECTURE.md with TOGAF-compliant architecture
  - Architecture principles (business, data, application, technology)
  - Business capability model and process maps
  - Data architecture with domain models and storage strategy
  - Application architecture with bounded contexts
  - Technology reference model and platform matrix
  - Security and integration architecture
  - Deployment architecture for self-hosting

- Create docs/ROADMAP.md with phased implementation plan
  - Six development phases from Foundation to Ecosystem
  - Detailed scope items per phase with checklists
  - Dependency map and critical path
  - Risk register for technical and product risks

- Create 7 Architecture Decision Records (ADRs):
  - ADR-001: TypeScript as Primary Language
  - ADR-002: React as UI Framework
  - ADR-003: Local-First Data Architecture
  - ADR-004: Two-Way Sync Initially Google-Only
  - ADR-005: Magic Import Requires Approval
  - ADR-006: Zero-Distraction Design Principle
  - ADR-007: Self-Hosting as Primary Model

- Update CLAUDE.md with TOGAF EA principles and governance
  - Add links to new documentation
  - Add Architecture Development Method (ADM) phases
  - Add core architecture principles (BP, DP, AP, TP)
  - Add architecture governance process
  - Expand scopes for new functional areas
@claude
🏗️ arch: migrate to Azure/.NET/Angular multi-tenant architecture
28badf2 
Major architectural pivot from local-first TypeScript/React to Azure-hosted
multi-tenant SaaS platform:

- Backend: C#/.NET 10 with Clean Architecture
- Web/Display: TypeScript/Angular 19+ with Electron
- Mobile: Native iOS (Swift/SwiftUI) and Android (Kotlin/Compose)
- Cloud: Azure PaaS services (CosmosDB, Functions, App Service, B2C)
- IaC: Bicep with Azure Verified Modules (AVMs)

Updated documentation:
- ARCHITECTURE.md: Complete Azure architecture with data models
- PROJECT-OVERVIEW.md: Multi-tenant deployment model and device linking
- ROADMAP.md: 6-phase implementation plan for new stack
- CLAUDE.md: Updated principles and development commands

New ADRs (ADR-001 through ADR-010):
- .NET 10 backend, Angular web framework, Azure cloud platform
- Native mobile apps, CosmosDB data store, multi-tenant architecture
- Bicep/AVMs for IaC, Magic Import approval, Zero-distraction principle
- Azure AD B2C for identity

Removed superseded ADRs (TypeScript, React, local-first, self-hosting)
@claude
🔐 auth: migrate from Azure AD B2C to in-house passwordless authentica…
d0255a5 
…tion

Replace external identity provider with in-house passwordless-first
authentication system supporting:

- Passkeys (WebAuthn/FIDO2) as primary method
- Hardware security keys (YubiKey, etc.)
- Email OTP / Magic links for passwordless
- Social sign-on (Google, Apple, Microsoft)
- Email/password with MFA as fallback

Updated documentation:
- ADR-010: Complete rewrite for passwordless architecture
- ARCHITECTURE.md: Updated security diagrams and requirements
- ROADMAP.md: Updated auth tasks for passkey integration
- CLAUDE.md: Updated auth scope description

Key benefits:
- Phishing-resistant authentication
- Better UX with biometrics
- No per-authentication costs
- Full control over auth flows
@trickpatty
Merge pull request #2 from trickpatty/claude/project-documentation-B0HNK
debf243
@scott-enableyou
🏗️ infra: implement Phase 0.1 Azure Infrastructure with Bicep AVMs (#3)
3c0c5c7
@scott-enableyou
🏗️ arch: implement Phase 0.2 .NET solution structure (#4)
687d29f
@scott-enableyou
🏗️ arch: implement Phase 0.3 Angular Web Application (#5)
5961431
@scott-enableyou
🔧 chore(dev): implement Phase 0.4 Local Development Environment (#6)
bb7f24b
@scott-enableyou
💚 ci: implement Phase 0.5 CI/CD Pipeline (#7)
0e16907
@scott-enableyou
📝 docs: complete Phase 0.6 Documentation updates (#24)
d2cb0ef
@scott-enableyou
✨ feat(api): implement Phase 1.1 Multi-Tenant API (#25)
e984e8a
@scott-enableyou
✨ feat(linking): implement Phase 1.2 Device Linking (#26)
8539b7d
@dependabot
deps(nuget): Bump Swashbuckle.AspNetCore from 7.2.0 to 10.1.0 (#23)
f3d8617
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 24, 2025

Labels

The following labels could not be found: .net, dependencies, nuget. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot force-pushed the dependabot/nuget/microsoft-17eda5f3e2 branch from 40a2c5f to 522e184 Compare December 24, 2025 01:45
scott-enableyou and others added 2 commits December 23, 2025 23:04
@scott-enableyou
✨ feat(profiles): implement Phase 1.3 Family Member Management (#28)
df5bcea
@dependabot
deps(nuget): Bump Microsoft.AspNetCore.Authentication.JwtBearer and 6…
b5bfc27 
… others

Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 9.0.0 to 9.0.11
Bumps Microsoft.AspNetCore.Mvc.Testing from 9.0.0 to 9.0.11
Bumps Microsoft.AspNetCore.OpenApi from 9.0.0 to 9.0.11
Bumps Microsoft.Azure.Cosmos from 3.46.1 to 3.56.0
Bumps Microsoft.Extensions.Azure from 1.8.0 to 1.13.1
Bumps Microsoft.Extensions.Caching.StackExchangeRedis from 9.0.0 to 9.0.11
Bumps Microsoft.NET.Test.Sdk from 17.12.0 to 17.14.1

---
updated-dependencies:
- dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer
  dependency-version: 9.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft
- dependency-name: Microsoft.AspNetCore.Mvc.Testing
  dependency-version: 9.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 9.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft
- dependency-name: Microsoft.Azure.Cosmos
  dependency-version: 3.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft
- dependency-name: Microsoft.Extensions.Azure
  dependency-version: 1.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft
- dependency-name: Microsoft.Extensions.Caching.StackExchangeRedis
  dependency-version: 9.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 17.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/nuget/microsoft-17eda5f3e2 branch from 522e184 to b5bfc27 Compare December 24, 2025 04:11
@trickpatty trickpatty closed this Dec 24, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 24, 2025

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/nuget/microsoft-17eda5f3e2 branch December 24, 2025 14:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@trickpatty @claude @scott-enableyou