Skip to content

Conversation

@projectorigin-renovate
Copy link
Contributor

@projectorigin-renovate projectorigin-renovate bot commented Oct 2, 2025

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
Microsoft.AspNetCore.Authentication.JwtBearer (source) nuget major 9.0.810.0.1
Microsoft.AspNetCore.TestHost (source) nuget major 9.0.810.0.1
Microsoft.Extensions.Diagnostics.Testing (source) nuget major 9.8.010.1.0
Microsoft.Extensions.Options.ConfigurationExtensions (source) nuget major 9.0.810.0.1
Microsoft.Identity.Web nuget major 3.14.04.2.0
Microsoft.NET.Test.Sdk nuget major 17.14.118.0.1
Npgsql nuget major 9.0.310.0.1
Npgsql.OpenTelemetry nuget major 9.0.310.0.1
Serilog.AspNetCore nuget major 9.0.010.0.0
Swashbuckle.AspNetCore nuget major 9.0.410.1.0
Swashbuckle.AspNetCore.Annotations nuget major 9.0.410.1.0

Release Notes

dotnet/extensions (Microsoft.Extensions.Diagnostics.Testing)

v10.0.0

What's Changed
New Contributors

Full Changelog: dotnet/extensions@v9.10.0...v10.0.0

v9.10.0

What's Changed

New Contributors

Full Changelog: dotnet/extensions@v9.9.0...v9.10.0

v9.9.0

Highlights

AI
  • Abstractions for remote MCP servers; response/approval flow support via new experimental types
  • Function approvals via new experimental types (e.g., ApprovalRequiredAIFunction, user input/approval request & response content).
  • Reasoning text streaming for OpenAI Responses ChatClient streaming.
  • AIFunction split into a base class to improve extensibility.
  • IChatReducer moved to Microsoft.Extensions.AI.Abstractions.
  • Updated to OpenAI 2.4.0 and genai standard convention 1.37.
  • Coalescing logic now treats ChatMessage.Role changes as new messages.
  • GetResponseAsync<T> now reads only the last message (bug fix).
  • OpenTelemetry ChatClient/EmbeddingGenerator logs raw additional properties (no key mangling).
  • Fixed empty annotated text chunk handling in streaming with OpenAI Assistants.
Telemetry & Diagnostics
  • HTTP diagnostics log query string params with proper redaction (emitted on url.query).
  • server.address telemetry emits host only (per OpenTelemetry semantic conventions).
  • Heuristics added to detect well-known model hosts.
  • Resource monitoring can consider Environment.CpuUsage.

New Contributors

Full Changelog: dotnet/extensions@v9.8.0...v9.9.0

AzureAD/microsoft-identity-web (Microsoft.Identity.Web)

v4.2.0

Compare Source

New features
  • Added CAE claims support for FIC + Managed Identity. See #​3647 for details.
  • Added AddMicrosoftIdentityMessageHandler extension methods for IHttpClientBuilder. See #​3649 for details.
Bug fixes
  • Fixed tenant not being propagated in credential FIC acquisition. See #​3633 for details.
  • Fixed ForAgentIdentity hardcoded 'AzureAd' ConfigurationSection to respect AuthenticationOptionsName. See #​3635 for details.
  • Fixed GetTokenAcquirer to propagate MicrosoftEntraApplicationOptions properties. See #​3651 for details.
  • Added meaningful error message when identity configuration is missing. See #​3637 for details.
Dependencies updates
  • Update Microsoft.Identity.Abstractions to version 10.0.0.
  • Bump express from 5.1.0 to 5.2.0 in /tests/DevApps/SidecarAdapter/typescript. #​3636
  • Bump jws from 3.2.2 to 3.2.3 in /tests/DevApps/SidecarAdapter/typescript. #​3641
Fundamentals
  • Update support policy. #​3656
  • Update agent identity coordinates in E2E tests after deauth. #​3640
  • Update E2E agent identity configuration to new tenant. #​3646

v4.1.1

Compare Source

Bug fixes
  • Authority-only configuration parsing improvements: Early parsing of Authority into Instance/TenantId and defensive fallback in PrepareAuthorityInstanceForMsal. Behavior is backward compatible; Authority is still ignored when Instance/TenantId explicitly provided—now surfaced via a warning. See #​3612.
New features
  • Added warning diagnostics for conflicting Authority vs Instance/TenantId: Emitting a single structured warning when both styles are provided. See #​3611.
Fundamentals
  • Expanded authority test matrix: Coverage for AAD (v1/v2), B2C (/tfp/ normalization, policy path), CIAM (PreserveAuthority), query parameters, scheme-less forms, and conflict scenarios. See #​3610.

v4.1.0

Compare Source

=========

New features
Dependencies updates
  • Bump MSAL.NET to version 4.79.2 and handle changes to deprecated WithExtraQueryParameters APIs. #​3583
  • Update Microsoft.IdentityModel and Abstractions versions. #​3604
  • Update coverlet.collector to 6.0.4. #​3587
  • Update package validation baseline version to 4.0.0. #​3589
  • Bump js-yaml from 4.1.0 to 4.1.1 in /tests/DevApps/SidecarAdapter/typescript. #​3595
Entra ID SDK sidecar
  • Restrict hosts to localhost for sidecar. #​3579
  • Update http file to match endpoints. #​3555
  • Revise sidecar issue template for Entra ID. #​3577
Documentation
  • Update README to include Entra SDK container info. #​3578
Fundamentals
  • Include NET 9.0 in template-install-dependencies. #​3593
  • Fix CodeQL alerts. #​3591
  • Suppression file is needed. #​3592

v4.0.1

Compare Source

=========

Bugs fixes

  • Correctly compute Application Key when credential usage fails. #​3487
  • Fix bugs where agent user identities didn't work with non-default authentication schemes. #​3487

Fundamentals

  • Update .net version to CG compliance #​3487

Entra ID SDK sidecar

  • Configure Sidecar to default AllowWebApiToBeAuthorizedByACL to true as the container doesn't do authZ #​3487

v4.0.0

=========

Breaking Changes

Removed support for .NET 6.0 and .NET 7.0 - Microsoft Identity Web 4.0.0 no longer targets .NET 6.0 and .NET 7.0, following Microsoft's support lifecycle. The supported target frameworks are now .NET 8.0, .NET 9.0, .NET Framework 4.6.2, .NET Framework 4.7.2, and .NET Standard 2.0.

New features
  • Various improvements to performance logging, authentication, and credential loading capabilities.
  • Bumped MSAL.NET to 4.77.1
  • Added credential description extensibility. For details, see #​3487
  • Added a new CerticateObserverAction type: SuccessfullyUsed and support for multiple certificate observers for improved certificate lifecycle management and telemetry. See #​3505
  • Add specification of OID (in addition to upn) when requesting an authorization header for Agent User Identity. See #​3513
  • Added ClaimsPrincipal and ClaimsIdentity extension methods for agent identity detection in web APIs enabling developers to easily detect agent identities and retrieve parent agent blueprint from token claims. See #​3515
  • Added MicrosoftIdentityMessageHandler for flexible HttpClient authentication. Provides composable alternative to DownstreamApi with per-request authentication configuration. Supports WWW-Authenticate challenge handling. See #​3503
  • Support for multiple certificate observers. See #​3506
  • The Microsoft.Identity.Web.Sidecar will provide a container solution for validation and token acquisition in any-language. See #​3524
Bug Fixes
  • Fixed TokenAcquirerFactory null reference when AppContext.BaseDirectory is root path. See #​3443
  • Fixed IDW10405 error when using managed identity with common tenant. See #​3415
  • Removed hard dependency on IConfiguration in OidcIdpSignedAssertionLoader. See #​3414
Fundamentals
  • Various improvements to .NET support and dependency optimizations.
  • Added doc for Agent identities. See Agent identities
  • Combined and fixed test collections. See #​3472
  • Migrate repository agent rules from .clinerules to agents.md. See #​3475
  • Add .NET 6.x setup step to dotnetcore.yml workflow, as the default build agents don't have it any longer. See #​3489
  • Renamed NET 7 tests to ThreadingTests for framework independence. See #​3501

v3.14.1

=======

Bug fix

  • Support client secrets with agent user identities. See #​3470 for details.
microsoft/vstest (Microsoft.NET.Test.Sdk)

v18.0.1

What's Changed

Fixing an issue with loading covrun64.dll on systems that have .NET 10 SDK installed: https://learn.microsoft.com/en-us/dotnet/core/compatibility/sdk/10.0/code-coverage-dynamic-native-instrumentation

Internal changes

Full Changelog: microsoft/vstest@v18.0.0...v18.0.1

v18.0.0

What's Changed
Internal fixes and updates
New Contributors

Full Changelog: microsoft/vstest@v17.14.1...v18.0.0

npgsql/npgsql (Npgsql)

v10.0.1

v9.0.4 contains several minor bug fixes.

Milestone issues

Full Changelog: npgsql/npgsql@v10.0.0...v10.0.1

v10.0.0

See the release notes.

The full list of changes is available here.

What's Changed

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@projectorigin-renovate projectorigin-renovate bot enabled auto-merge (squash) October 2, 2025 09:21
@projectorigin-renovate projectorigin-renovate bot changed the title Update dependency Microsoft.NET.Test.Sdk to v18 Update nuget (major) Oct 14, 2025
@sonarqubecloud
Copy link

@projectorigin-renovate projectorigin-renovate bot force-pushed the renovate/major-nuget branch 3 times, most recently from b6ab7e3 to 2c2eb04 Compare November 13, 2025 08:28
@projectorigin-renovate projectorigin-renovate bot force-pushed the renovate/major-nuget branch 3 times, most recently from 86a6324 to bfee32f Compare November 25, 2025 08:29
@projectorigin-renovate projectorigin-renovate bot force-pushed the renovate/major-nuget branch 2 times, most recently from 93eb4e7 to 6676ccd Compare December 19, 2025 08:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant