Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 1, 2025

Bumps Microsoft.Extensions.Logging.Abstractions and Microsoft.IdentityModel.Tokens. These dependencies needed to be updated together.
Updates Microsoft.Extensions.Logging.Abstractions from 9.0.4 to 8.0.2

Commits
  • 1381d5e Merge in 'release/8.0' changes
  • c987e4f [release/8.0] Fix Options Source Gen RangeAttribute Thread Safety (#97110)
  • 441c91d Merge in 'release/8.0' changes
  • c93800e Merge pull request #97065 from carlossanlop/release/8.0-staging
  • c2d2bb3 Merge branch 'release/8.0' into release/8.0-staging
  • 6d35e39 [release/8.0-staging] UInt64.CreateSaturating<Int128> truncates instead of sa...
  • 96b0a55 [release/8.0-staging] macOS: Set certificate as a dependency of private key h...
  • 85c2772 [release/8.0] Fix server-side OCSP stapling on Linux (#96838)
  • 683da71 [release/8.0-staging] Gen0 segment should always be reported as Gen0 for DacH...
  • f9d0a7b [release/8.0-staging] Fix Crossgen2 PDB generation (again) (#96566)
  • Additional commits viewable in compare view

Updates Microsoft.IdentityModel.Tokens from 8.7.0 to 8.9.0

Release notes

Sourced from Microsoft.IdentityModel.Tokens's releases.

8.9.0

Bug Fixes

New Features

Fundamentals

8.8.0

New Features

  • Adds the ability for the metadata refresh to be done as a blocking call, as per 8.0.1 behavior. This is done through the Switch.Microsoft.IdentityModel.UpdateConfigAsBlocking switch. If set, configuration calls will be blocking when metadata is updated, otherwise, if token arrive with a new signing keys, validation errors will be returned to the caller. See PR #3193 for details.
  • Identity.Model updates some log and error messages (IDX10214, IDX10215). If the information is needed for debugging purposes, it can be reverted via the Switch.Microsoft.IdentityModel.DoNotScrubExceptions AppContextSwitch. See PR #3195 and https://aka.ms/identitymodel/app-context-switches for details.
  • Change all plain object locks to System.Thread.Lock objects for .NET 9 or greater. See PRs #3185 and #3189 for details.
Changelog

Sourced from Microsoft.IdentityModel.Tokens's changelog.

8.9.0

Bug Fixes

New Features

  • Introduced a new delegate for reading custom token payload values on JsonWebToken. See #2981.
  • Added an overload for ReadJsonWebToken to take a ReadOnlyMemory. See #3205.

Fundamentals

  • Utilized IList to avoid enumerator allocation during audience validation. See #3204.

8.8.0

New Features

  • Adds the ability for the metadata refresh to be done as a blocking call, as per 8.0.1 behavior. This is done through the Switch.Microsoft.IdentityModel.UpdateConfigAsBlocking switch. If set, configuration calls will be blocking when metadata is updated, otherwise, if token arrive with a new signing keys, validation errors will be returned to the caller. See PR #3193 for details.
  • Identity.Model updates some log and error messages (IDX10214, IDX10215). If the information is needed for debugging purposes, it can be reverted via the Switch.Microsoft.IdentityModel.DoNotScrubExceptions AppContextSwitch. See PR #3195 and https://aka.ms/identitymodel/app-context-switches for details.
  • Change all plain object locks to System.Thread.Lock objects for .NET 9 or greater. See PRs #3185 and #3189 for details.
Commits

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

…Model.Tokens

Bumps [Microsoft.Extensions.Logging.Abstractions](https://github.com/dotnet/runtime) and [Microsoft.IdentityModel.Tokens](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet). These dependencies needed to be updated together.

Updates `Microsoft.Extensions.Logging.Abstractions` from 9.0.4 to 8.0.2
- [Release notes](https://github.com/dotnet/runtime/releases)
- [Commits](dotnet/runtime@v9.0.4...v8.0.2)

Updates `Microsoft.IdentityModel.Tokens` from 8.7.0 to 8.9.0
- [Release notes](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases)
- [Changelog](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/blob/dev/CHANGELOG.md)
- [Commits](AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.7.0...8.9.0)

---
updated-dependencies:
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: Microsoft.IdentityModel.Tokens
  dependency-version: 8.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels May 1, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant