Skip to content

fix(dotnet): Bump the dependencies group with 6 updates - #705

Merged
Thorstein Løkensgard (loekensgard) merged 1 commit into
mainfrom
dependabot/nuget/dotnet/iworker/Company.Worker1/dependencies-eb61f31fb6
Oct 5, 2026
Merged

fix(dotnet): Bump the dependencies group with 6 updates#705
Thorstein Løkensgard (loekensgard) merged 1 commit into
mainfrom
dependabot/nuget/dotnet/iworker/Company.Worker1/dependencies-eb61f31fb6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026

Copy link
Copy Markdown
Contributor

Updated Intility.Extensions.Logging.Elasticsearch from 3.1.5 to 3.1.7.

Release notes

Sourced from Intility.Extensions.Logging.Elasticsearch's releases.

3.1.7

3.1.7 (2026-09-01)

Bug Fixes

  • set fix: prefix for nuget updates and remve framework pinning for System.Security.Cryptography.Xml (0461672)

3.1.6

3.1.6 (2026-08-04)

Bug Fixes

  • aspnetcore: pin System.Security.Cryptography.Xml to patched versions (6acd35e)

Commits viewable in compare view.

Updated Intility.Extensions.Logging.Sentry from 3.1.5 to 3.1.7.

Release notes

Sourced from Intility.Extensions.Logging.Sentry's releases.

3.1.7

3.1.7 (2026-09-01)

Bug Fixes

  • set fix: prefix for nuget updates and remve framework pinning for System.Security.Cryptography.Xml (0461672)

3.1.6

3.1.6 (2026-08-04)

Bug Fixes

  • aspnetcore: pin System.Security.Cryptography.Xml to patched versions (6acd35e)

Commits viewable in compare view.

Updated Intility.Logging.AspNetCore from 3.1.5 to 3.1.7.

Release notes

Sourced from Intility.Logging.AspNetCore's releases.

3.1.7

3.1.7 (2026-09-01)

Bug Fixes

  • set fix: prefix for nuget updates and remve framework pinning for System.Security.Cryptography.Xml (0461672)

3.1.6

3.1.6 (2026-08-04)

Bug Fixes

  • aspnetcore: pin System.Security.Cryptography.Xml to patched versions (6acd35e)

Commits viewable in compare view.

Updated Microsoft.Extensions.Hosting from 10.0.10 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Hosting's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Identity.Abstractions from 12.6.0 to 12.7.0.

Release notes

Sourced from Microsoft.Identity.Abstractions's releases.

12.7.0

What's Changed

Full Changelog: AzureAD/microsoft-identity-abstractions-for-dotnet@12.6.0...12.7.0

Commits viewable in compare view.

Updated Microsoft.Identity.Web from 4.14.2 to 4.16.0.

Release notes

Sourced from Microsoft.Identity.Web's releases.

4.16.0

What's Changed

Full Changelog: AzureAD/microsoft-identity-web@4.15.0...4.16.0

4.15.0

Federated credentials and proof of possession

  • Federated credential token exchange derives cloud-specific audience and scope metadata from the authority host, with explicit overrides still supported. #​3994
  • The Entra Sidecar /Validate endpoint accepts Signed HTTP Request proof-of-possession tokens for app-only client-credential flows. #​4008
  • Credential Guard key attestation is available through the optional Microsoft.Identity.Web.KeyAttestation package and AddMicrosoftIdentityWebKeyAttestation() registration. #​4004

Authentication and token acquisition

  • EasyAuth app-token acquisition returns an app-only authentication result produced through client credentials. #​4015
  • Graph v4 credentials are attached only to destinations matching the configured absolute HTTPS origin; custom Graph proxy base URLs remain supported. #​4012

Authorization and request validation

  • OWIN web APIs require a non-empty recognized scope or role unless ACL-based authorization is explicitly enabled. #​4006 #​4009
  • Explicitly configured missing scope or app-permission requirements now fail authorization. #​4010
  • Local redirect paths containing control characters are rejected. #​4028

Entra Sidecar reliability and validation

  • Invalid selected AgentUserId values return HTTP 400. #​4011
  • Automatic forwarded-header processing is rejected outside Development when ForwardedHeaders_Enabled=true. #​4018
  • Non-local Host headers are rejected outside Development except on /healthz. #​4023
  • Windows containers use ContainerUser, and ACL authorization defaults are correctly applied to named bearer options. #​4042

Dependency updates

  • Microsoft.Identity.Client and Microsoft.Identity.Client.KeyAttestation: 4.87.0 -> 4.90.0. #​4003 #​3994 #​4052
  • Microsoft.Identity.Abstractions: 12.6.0 -> 12.7.0. #​4020 #​3994

Full changelog: AzureAD/microsoft-identity-web@4.14.2...4.15.0

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
fix(dotnet): Bump the dependencies group with 6 updates
658c9bd 
Bumps Intility.Extensions.Logging.Elasticsearch from 3.1.5 to 3.1.7
Bumps Intility.Extensions.Logging.Sentry from 3.1.5 to 3.1.7
Bumps Intility.Logging.AspNetCore from 3.1.5 to 3.1.7
Bumps Microsoft.Extensions.Hosting from 10.0.10 to 10.0.12
Bumps Microsoft.Identity.Abstractions from 12.6.0 to 12.7.0
Bumps Microsoft.Identity.Web from 4.14.2 to 4.16.0

---
updated-dependencies:
- dependency-name: Intility.Extensions.Logging.Elasticsearch
  dependency-version: 3.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: Intility.Extensions.Logging.Sentry
  dependency-version: 3.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: Intility.Logging.AspNetCore
  dependency-version: 3.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: Microsoft.Identity.Abstractions
  dependency-version: 12.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: Microsoft.Identity.Web
  dependency-version: 4.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Oct 5, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner October 5, 2026 06:06
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .net code labels Oct 5, 2026
@loekensgard
Thorstein Løkensgard (loekensgard) merged commit fde70bd into main Oct 5, 2026
4 checks passed
@loekensgard
Thorstein Løkensgard (loekensgard) deleted the dependabot/nuget/dotnet/iworker/Company.Worker1/dependencies-eb61f31fb6 branch October 5, 2026 06:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@loekensgard