Skip to content

Bump the dotnet-minor group with 10 updates - #6

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/nuget/api/Expenn.Api/dotnet-minor-feb9b1a38a
Open

Bump the dotnet-minor group with 10 updates#6
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/nuget/api/Expenn.Api/dotnet-minor-feb9b1a38a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 14, 2026

Copy link
Copy Markdown

Updated AWSSDK.S3 from 3.7.421.1 to 3.7.511.8.

Release notes

Sourced from AWSSDK.S3's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated BCrypt.Net-Next from 4.0.3 to 4.2.0.

Release notes

Sourced from BCrypt.Net-Next's releases.

4.2.0

Full Changelog: BcryptNet/bcrypt.net@v4.1.0...v4.2.0

4.1.0

What's Changed

New Contributors

Full Changelog: BcryptNet/bcrypt.net@4.0.3...v4.1.0

Commits viewable in compare view.

Updated MassTransit from 8.3.6 to 8.5.10.

Release notes

Sourced from MassTransit's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated MassTransit.RabbitMQ from 8.3.6 to 8.5.10.

Release notes

Sourced from MassTransit.RabbitMQ's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 9.0.18 to 9.0.19.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

9.0.19

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.18...v9.0.19

Commits viewable in compare view.

Updated Microsoft.AspNetCore.OpenApi from 9.0.18 to 9.0.19.

Release notes

Sourced from Microsoft.AspNetCore.OpenApi's releases.

9.0.19

Release

What's Changed

Full Changelog: dotnet/aspnetcore@v9.0.18...v9.0.19

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore from 9.0.18 to 9.0.19.

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

9.0.19

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.18...v9.0.19

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 9.0.18 to 9.0.19.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

9.0.19

Release

What's Changed

Full Changelog: dotnet/efcore@v9.0.18...v9.0.19

Commits viewable in compare view.

Updated Microsoft.Identity.Web from 3.8.2 to 3.15.1.

Release notes

Sourced from Microsoft.Identity.Web's releases.

3.15.1

Bug fixes

  • Improve User Agent processing in cookie policy extensions. See PR #​3824 for details.
  • Use LRU cache for issuer address in B2C OpenID Connect event handler to improve performance. See PR #​3823 for details.

Dependencies updates

  • Pin Microsoft.Kiota.Abstractions to 1.22.0 for GraphServiceClient, fixing NU1903 build break caused by the GHSA-7j59-v9qr-6fq9 advisory. See PR #​3818 for details.
  • Pin Microsoft.Kiota.Abstractions to 1.22.0 for GraphServiceClientBeta, fixing the same advisory. See PR #​3827 for details.

Fundamentals

  • Migrate tests to Lab.API 2.x. See PR #​3837 for details.
  • Fix web UI tests. See PR #​3838 for details.

3.15.0

Bug fixes

  • Fix AccountController.Challenge redirect URI validation to reject percent-encoded protocol-relative bypasses (%2F%2F, %5C%2F, etc.) that could be decoded by misconfigured reverse proxies. See #​3785.

Behavior changes

  • DownstreamApi: reserved header filtering. Headers supplied via DownstreamApiOptions.ExtraHeaderParameters whose names match reserved HTTP headers (Authorization, Host, Content-Length, Proxy-Authorization, Sec-, Proxy-, etc.) or duplicate a header the library already set are now silently skipped. A warning-level log entry (ReservedHeaderIgnored / DuplicateHeaderIgnored) is emitted so operators can spot misconfigurations. No exception is thrown. See #​3793.

Dependencies updates

  • Updated MSAL.NET 4.76.0 → 4.83.1
  • Bump System.Security.Cryptography.Pkcs and System.Security.Cryptography.Xml to latest patched versions. See #​3799.

Full Changelog: 3.14.1...3.15.0 (AzureAD/microsoft-identity-web@3.14.1...3.15.0)

3.14.1

3.14.1

Bug fixe

  • Support client secrets with agent user identities. See #​3470 for details.

3.14.0

New features

  • Support multi-tenant agent user identities. See #​3461 for details.
  • Id Web now allows for passing of ExtraBodyParameters. See #​3463 for details.

3.13.1

3.13.1

Dependencies updates

  • Microsoft.IdentityModel updated to version 8.14.0.

3.13.0

3.13.0

Dependencies updates

  • Microsoft.IdentityModel updated to version 8.13.1.
  • Microsoft.Abstractions updated to version 9.3.0 and using IAuthenticationSchemeInformationProvider from that library, deprecating the interface of the same name in Microsoft.Identity.Web (introduced in 3.12.0).

Bug fixes

  • Fixed an issue with instantiation of TokenAcquirerFactory when AppContext.BaseDirectory is root path. See PR #​3443 for details.

Fundamentals

3.12.0

3.12.0

Dependencies updates

  • Updated MSAL to version 4.74.1 part of #​3398.

Bug fix

Reload certificates for all client credential based issues to solve the issue that when a bad certificate was installed on the machine and picked up, and subsequently rotated, a service restart was needed for the new certificate to be used. See issue #​3429 and PR #​3430

New features

  • Include the thrown exception in CertificateChangeEventArg. See PR #​3428 for better supportabiliby.
  • Support for Agent User identities. See PR #​3435

3.11.0

3.11.0

Dependencies updates

  • Updated global.json to the latest .NET 9 runtime framework 9.0.108. See PR #​3422 for details.

Bug fixes

  • Fix IDW10405 error when using managed identity with common tenant. See PR #​3415 for details.
  • Fix OidcIdpSignedAssertionLoader to remove hard dependency on IConfiguration registration. See PR #​3414 for details.

New feature

  • Add support for ExtraHeaderParameters and ExtraQueryParameters properties on DownstreamApiOptions to simplify adding custom headers and query parameters to downstream API requests. See PR #​3413 for details.
  • Add better support for Azure SDK. For details see Readme-Azure and PR #​3416

What's Changed

New Contributors

Full Changelog: AzureAD/microsoft-identity-web@3.10.0...3.11.0

3.10.0

3.10.0

Dependencies updates

  • Updated MSAL to version 4.73.1 (#​3398).
  • Updated global.json to the latest .NET 9 runtime framework 9.0.107 (#​3385).

New feature

  • Added support for Agent Identities (#​3396, #​3402).
    introducing the Microsoft.Identity.Web.AgentIdentities package .

Bug fixes

  • Processed codeQL issues

Fundamentals

  • improved unit tests for OidcFic with the new SignedAssertionFmiPath

3.9.4

3.9.4

Package updates

  • Microsoft.IdentityModel updated to version 8.12.1.

Bug fix

  • Updates the DefaultAuthorizationHeaderProvider to update the AcquireTokenOptions.LongRunningWebApiSessionKey after the token is acquired so that the key can be used in the next OBO call. See PR #​3381 for details.

Fundamentals

  • Update .NET SDK version to 9.0.107 used when building or running the code. See #​3385 for details.
  • Improved test coverage for managed identity flows. See #​3350 for details.

What's Changed

Full Changelog: AzureAD/microsoft-identity-web@3.9.3...3.9.4

3.9.3

3.9.3

Package updates

  • Microsoft.IdentityModel updated to version 8.12.0.

Fundamentals

  • Add .clinerules to help with AI tooling.
  • Update PublicApiAnalyzers and BannedApiAnalyzers to 4.14.0 Upgraded analyzer packages for improved diagnostics and code consistency (in particular delegates are added). For details see #​3379

What's Changed

Full Changelog: AzureAD/microsoft-identity-web@3.9.2...3.9.3

3.9.2

3.9.2

Package updates

Fundamentals:

  • Fix invalid comparisons in prop and csproj files. For details see #​3297.

What's Changed

Full Changelog: AzureAD/microsoft-identity-web@3.9.1...3.9.2

3.9.1

3.9.1

Package updates

  • Microsoft.Identity.Abstractions updated to version 9.1.0.

Fundamentals

  • Fix AoT warnings. For details see #​3366.

What's Changed

Full Changelog: AzureAD/microsoft-identity-web@3.9.0...3.9.1

3.9.0

3.9.0

Package updates

Bug fixes

  • Fixed issue where RequiredScopeOrAppPermission extension method didn’t work with Minimal APIs. See #​3323.
  • Resolved IL warnings from AddDownstreamApis in NativeAOT projects. See #​3355.
  • Ensured AcquireTokenForConfidentialClient correctly passes MSAL exceptions. See #​3345.
  • Prevented null reference when accessing MergedOptions instance. See #​3337.

New feature

  • Added optional login_hint and domain_hint support to AccountController.SignIn endpoint. See #​3244 and #​3348.

Fundamentals

  • Introduced Long-Term Support (LTS) policy. See #​3357.
  • Added tests to validate xms_cc (client capability) forwarding in CCA flows. See #​3349.

External contributions

Thank you @​evan-buss for your contribution and fixing the issue where RequiredScopeOrAppPermission extension method didn’t work with Minimal APIs. See #​3323.
Thank you @​neha-bhargava for your contribution and ensuring AcquireTokenForConfidentialClient correctly passes MSAL exceptions. See #​3345.

3.8.4

3.8.4

Package updates

Bug fixes

  • Fixed the issue where FmiPath was not persisted when copying/reinitializing AcquireTokenOptions. See #​3336.

New feature

Fundamentals

  • Removed System.Text.Json as an explicit dependency for .NET Core targets. See #​3331.

3.8.3

3.8.3

Package updates

New feature

  • TokenAcquistion.cs adds its service provider to the acquisition options. See issue #​3315 for details.

Commits viewable in compare view.

Updated Swashbuckle.AspNetCore from 7.3.1 to 7.3.2.

Release notes

Sourced from Swashbuckle.AspNetCore's releases.

7.3.2

What's Changed

New Contributors

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v7.3.1...v7.3.2

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dotnet-minor group with 10 updates
00e2395 
Bumps AWSSDK.S3 from 3.7.421.1 to 3.7.511.8
Bumps BCrypt.Net-Next from 4.0.3 to 4.2.0
Bumps MassTransit from 8.3.6 to 8.5.10
Bumps MassTransit.RabbitMQ from 8.3.6 to 8.5.10
Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 9.0.18 to 9.0.19
Bumps Microsoft.AspNetCore.OpenApi from 9.0.18 to 9.0.19
Bumps Microsoft.EntityFrameworkCore from 9.0.18 to 9.0.19
Bumps Microsoft.EntityFrameworkCore.Design from 9.0.18 to 9.0.19
Bumps Microsoft.Identity.Web from 3.8.2 to 3.15.1
Bumps Swashbuckle.AspNetCore from 7.3.1 to 7.3.2

---
updated-dependencies:
- dependency-name: AWSSDK.S3
  dependency-version: 3.7.511.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor
- dependency-name: BCrypt.Net-Next
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-minor
- dependency-name: MassTransit
  dependency-version: 8.5.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-minor
- dependency-name: MassTransit.RabbitMQ
  dependency-version: 8.5.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-minor
- dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer
  dependency-version: 9.0.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor
- dependency-name: Microsoft.AspNetCore.OpenApi
  dependency-version: 9.0.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor
- dependency-name: Microsoft.EntityFrameworkCore
  dependency-version: 9.0.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor
- dependency-name: Microsoft.EntityFrameworkCore.Design
  dependency-version: 9.0.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor
- dependency-name: Microsoft.Identity.Web
  dependency-version: 3.15.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dotnet-minor
- dependency-name: Swashbuckle.AspNetCore
  dependency-version: 7.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dotnet-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Aug 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants