Skip to content

Bump Microsoft.ApplicationInsights.WorkerService and 11 others - #27

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/nuget/src/IdentityFlow.Clients/nuget-minor-patch-611797e718
Oct 25, 2026
Merged

github-actions[bot] merged 1 commit into
mainfrom
dependabot/nuget/src/IdentityFlow.Clients/nuget-minor-patch-611797e718

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 25, 2026

Copy link
Copy Markdown
Contributor

Updated Microsoft.ApplicationInsights.WorkerService from 3.1.2 to 3.2.0.

Release notes

Sourced from Microsoft.ApplicationInsights.WorkerService's releases.

3.2.0

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore from 10.0.11 to 10.0.13.

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 10.0.11 to 10.0.13.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.InMemory from 10.0.11 to 10.0.13.

Release notes

Sourced from Microsoft.EntityFrameworkCore.InMemory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.SqlServer from 10.0.11 to 10.0.13.

Release notes

Sourced from Microsoft.EntityFrameworkCore.SqlServer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.11 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Http from 10.0.11 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.Http's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Abstractions from 10.0.11 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Options from 10.0.11 to 10.0.13.

Release notes

Sourced from Microsoft.Extensions.Options's releases.

No release notes found for this version range.

Commits viewable in compare view.

Pinned Microsoft.Graph at 6.9.0.

Release notes

Sourced from Microsoft.Graph's releases.

6.9.0

6.9.0 (2026-10-22)

Features

6.8.0

6.8.0 (2026-10-06)

Features

  • generation: update request builders and models (2538962)

6.7.0

6.7.0 (2026-09-15)

Features

Commits viewable in compare view.

Updated Microsoft.Identity.Web from 4.14.2 to 4.16.1.

Release notes

Sourced from Microsoft.Identity.Web's releases.

4.16.1

What's Changed

  • Security fixes and general reliability improvements.

Full Changelog: AzureAD/microsoft-identity-web@4.16.0...4.16.1

4.16.0

What's Changed

Full Changelog: AzureAD/microsoft-identity-web@4.15.0...4.16.0

4.15.0

Federated credentials and proof of possession

  • Federated credential token exchange derives cloud-specific audience and scope metadata from the authority host, with explicit overrides still supported. #​3994
  • The Entra Sidecar /Validate endpoint accepts Signed HTTP Request proof-of-possession tokens for app-only client-credential flows. #​4008
  • Credential Guard key attestation is available through the optional Microsoft.Identity.Web.KeyAttestation package and AddMicrosoftIdentityWebKeyAttestation() registration. #​4004

Authentication and token acquisition

  • EasyAuth app-token acquisition returns an app-only authentication result produced through client credentials. #​4015
  • Graph v4 credentials are attached only to destinations matching the configured absolute HTTPS origin; custom Graph proxy base URLs remain supported. #​4012

Authorization and request validation

  • OWIN web APIs require a non-empty recognized scope or role unless ACL-based authorization is explicitly enabled. #​4006 #​4009
  • Explicitly configured missing scope or app-permission requirements now fail authorization. #​4010
  • Local redirect paths containing control characters are rejected. #​4028

Entra Sidecar reliability and validation

  • Invalid selected AgentUserId values return HTTP 400. #​4011
  • Automatic forwarded-header processing is rejected outside Development when ForwardedHeaders_Enabled=true. #​4018
  • Non-local Host headers are rejected outside Development except on /healthz. #​4023
  • Windows containers use ContainerUser, and ACL authorization defaults are correctly applied to named bearer options. #​4042

Dependency updates

  • Microsoft.Identity.Client and Microsoft.Identity.Client.KeyAttestation: 4.87.0 -> 4.90.0. #​4003 #​3994 #​4052
  • Microsoft.Identity.Abstractions: 12.6.0 -> 12.7.0. #​4020 #​3994

Full changelog: AzureAD/microsoft-identity-web@4.14.2...4.15.0

Commits viewable in compare view.

Updated Microsoft.Identity.Web.UI from 4.14.2 to 4.16.1.

Release notes

Sourced from Microsoft.Identity.Web.UI's releases.

4.16.1

What's Changed

  • Security fixes and general reliability improvements.

Full Changelog: AzureAD/microsoft-identity-web@4.16.0...4.16.1

4.16.0

What's Changed

Full Changelog: AzureAD/microsoft-identity-web@4.15.0...4.16.0

4.15.0

Federated credentials and proof of possession

  • Federated credential token exchange derives cloud-specific audience and scope metadata from the authority host, with explicit overrides still supported. #​3994
  • The Entra Sidecar /Validate endpoint accepts Signed HTTP Request proof-of-possession tokens for app-only client-credential flows. #​4008
  • Credential Guard key attestation is available through the optional Microsoft.Identity.Web.KeyAttestation package and AddMicrosoftIdentityWebKeyAttestation() registration. #​4004

Authentication and token acquisition

  • EasyAuth app-token acquisition returns an app-only authentication result produced through client credentials. #​4015
  • Graph v4 credentials are attached only to destinations matching the configured absolute HTTPS origin; custom Graph proxy base URLs remain supported. #​4012

Authorization and request validation

  • OWIN web APIs require a non-empty recognized scope or role unless ACL-based authorization is explicitly enabled. #​4006 #​4009
  • Explicitly configured missing scope or app-permission requirements now fail authorization. #​4010
  • Local redirect paths containing control characters are rejected. #​4028

Entra Sidecar reliability and validation

  • Invalid selected AgentUserId values return HTTP 400. #​4011
  • Automatic forwarded-header processing is rejected outside Development when ForwardedHeaders_Enabled=true. #​4018
  • Non-local Host headers are rejected outside Development except on /healthz. #​4023
  • Windows containers use ContainerUser, and ACL authorization defaults are correctly applied to named bearer options. #​4042

Dependency updates

  • Microsoft.Identity.Client and Microsoft.Identity.Client.KeyAttestation: 4.87.0 -> 4.90.0. #​4003 #​3994 #​4052
  • Microsoft.Identity.Abstractions: 12.6.0 -> 12.7.0. #​4020 #​3994

Full changelog: AzureAD/microsoft-identity-web@4.14.2...4.15.0

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Microsoft.ApplicationInsights.WorkerService from 3.1.2 to 3.2.0
Bumps Microsoft.EntityFrameworkCore from 10.0.11 to 10.0.13
Bumps Microsoft.EntityFrameworkCore.Design from 10.0.11 to 10.0.13
Bumps Microsoft.EntityFrameworkCore.InMemory from 10.0.11 to 10.0.13
Bumps Microsoft.EntityFrameworkCore.SqlServer from 10.0.11 to 10.0.13
Bumps Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.11 to 10.0.13
Bumps Microsoft.Extensions.Http from 10.0.11 to 10.0.13
Bumps Microsoft.Extensions.Logging.Abstractions from 10.0.11 to 10.0.13
Bumps Microsoft.Extensions.Options from 10.0.11 to 10.0.13
Bumps Microsoft.Graph from 6.6.0 to 6.9.0
Bumps Microsoft.Identity.Web from 4.14.2 to 4.16.1
Bumps Microsoft.Identity.Web.UI from 4.14.2 to 4.16.1

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Http
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Options
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.EntityFrameworkCore
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.EntityFrameworkCore.Design
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.EntityFrameworkCore.SqlServer
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.ApplicationInsights.WorkerService
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Http
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Options
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Graph
  dependency-version: 6.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Identity.Web
  dependency-version: 4.16.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Identity.Web.UI
  dependency-version: 4.16.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.Extensions.Options
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
- dependency-name: Microsoft.EntityFrameworkCore.InMemory
  dependency-version: 10.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Oct 25, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) October 25, 2026 01:59
@github-actions
github-actions Bot merged commit 4f3aeda into main Oct 25, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants