Skip to content

chore(deps): update all non-major dependencies#728

Merged
renovate[bot] merged 1 commit into
masterfrom
renovate/all-minor-patch
Jun 11, 2026
Merged

chore(deps): update all non-major dependencies#728
renovate[bot] merged 1 commit into
masterfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Jun 11, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change OpenSSF
Azure.Storage.Blobs (source) nuget minor 12.28.012.29.0 OpenSSF Scorecard
FluentFTP nuget minor 54.1.254.2.0 OpenSSF Scorecard
MailKit (source) nuget minor 4.16.04.17.0 OpenSSF Scorecard
MessagePack nuget patch 3.1.43.1.7 OpenSSF Scorecard
Meziantou.Analyzer nuget patch 3.0.853.0.102 OpenSSF Scorecard
Microsoft.AspNetCore.Authentication.JwtBearer (source) nuget patch 10.0.810.0.9 OpenSSF Scorecard
Microsoft.AspNetCore.DataProtection (source) nuget patch 10.0.810.0.9 OpenSSF Scorecard
Microsoft.AspNetCore.Mvc.NewtonsoftJson (source) nuget patch 10.0.810.0.9 OpenSSF Scorecard
Microsoft.AspNetCore.TestHost (source) nuget patch 10.0.810.0.9 OpenSSF Scorecard
Microsoft.CodeAnalysis.NetAnalyzers (source) nuget patch 10.0.30010.0.301 OpenSSF Scorecard
Microsoft.Extensions.Caching.Abstractions (source) nuget patch 10.0.810.0.9 OpenSSF Scorecard
Microsoft.Extensions.Configuration (source) nuget patch 10.0.810.0.9 OpenSSF Scorecard
Microsoft.Extensions.Configuration.Abstractions (source) nuget patch 10.0.810.0.9 OpenSSF Scorecard
Microsoft.Extensions.Configuration.CommandLine (source) nuget patch 10.0.810.0.9 OpenSSF Scorecard
Microsoft.Extensions.Configuration.EnvironmentVariables (source) nuget patch 10.0.810.0.9 OpenSSF Scorecard
Microsoft.Extensions.Configuration.Json (source) nuget patch 10.0.810.0.9 OpenSSF Scorecard
Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore (source) nuget patch 10.0.810.0.9 OpenSSF Scorecard
Microsoft.Extensions.Hosting (source) nuget patch 10.0.810.0.9 OpenSSF Scorecard
Microsoft.Extensions.Hosting.Abstractions (source) nuget patch 10.0.810.0.9 OpenSSF Scorecard
Microsoft.Extensions.Logging.Abstractions (source) nuget patch 10.0.810.0.9 OpenSSF Scorecard
Microsoft.Extensions.Logging.AzureAppServices (source) nuget patch 10.0.810.0.9 OpenSSF Scorecard
Microsoft.Extensions.Logging.Console (source) nuget patch 10.0.810.0.9 OpenSSF Scorecard
Microsoft.Extensions.ObjectPool (source) nuget patch 10.0.810.0.9 OpenSSF Scorecard
Microsoft.Extensions.Options (source) nuget patch 10.0.810.0.9 OpenSSF Scorecard
Microsoft.Extensions.Options.ConfigurationExtensions (source) nuget patch 10.0.810.0.9 OpenSSF Scorecard
Microsoft.Identity.Client (source) nuget patch 4.84.04.84.2 OpenSSF Scorecard
Microsoft.Identity.Client.Extensions.Msal (source) nuget patch 4.84.04.84.2 OpenSSF Scorecard
Microsoft.Identity.Web nuget minor 4.9.04.10.0 OpenSSF Scorecard
Microsoft.IdentityModel.JsonWebTokens nuget minor 8.18.08.19.1 OpenSSF Scorecard
Microsoft.NET.Test.Sdk nuget minor 18.5.118.6.0 OpenSSF Scorecard
Microsoft.SqlServer.DacFx nuget minor 170.3.93170.4.83 OpenSSF Scorecard
Microsoft.Testing.Extensions.CodeCoverage nuget minor 18.6.218.8.0 OpenSSF Scorecard
NodaTime.Serialization.JsonNet (source) nuget minor 3.2.13.3.0 OpenSSF Scorecard
NodaTime.Serialization.SystemTextJson (source) nuget minor 1.3.11.4.0 OpenSSF Scorecard
Polly nuget minor 8.6.68.7.0 OpenSSF Scorecard
Polyfill nuget minor 10.5.110.8.1 OpenSSF Scorecard
RavenDB.Client (source) nuget patch 7.2.27.2.3 OpenSSF Scorecard
Rebus.AzureServiceBus (source) nuget minor 10.6.010.7.0 OpenSSF Scorecard
Slack.Webhooks nuget patch 1.1.51.1.6 OpenSSF Scorecard
Swashbuckle.AspNetCore.Annotations nuget minor 10.1.710.2.1 OpenSSF Scorecard
Swashbuckle.AspNetCore.Newtonsoft nuget minor 10.1.710.2.1 OpenSSF Scorecard
Swashbuckle.AspNetCore.Swagger nuget minor 10.1.710.2.1 OpenSSF Scorecard
Swashbuckle.AspNetCore.SwaggerGen nuget minor 10.1.710.2.1 OpenSSF Scorecard
Swashbuckle.AspNetCore.SwaggerUI nuget minor 10.1.710.2.1 OpenSSF Scorecard
System.Configuration.ConfigurationManager (source) nuget patch 10.0.810.0.9 OpenSSF Scorecard
System.Security.Cryptography.Xml (source) nuget patch 10.0.810.0.9 OpenSSF Scorecard

Release Notes

Azure/azure-sdk-for-net (Azure.Storage.Blobs)

v12.29.0

Compare Source

12.29.0 (2026-06-04)

Features Added
  • Includes all features from 12.29.0-beta.1
Bugs Fixed
  • Added validation for length-prefixed fields when parsing Blob Query responses to prevent excessive memory allocation from malformed or untrusted payloads.
robinrodricks/FluentFTP (FluentFTP)

v54.2.0

  • FTP Security
    • New: SanitizeMode Properties to configure type of FTP path sanitization. Sanitizer can be disabled, or throw exceptions, or silently rename FTP paths.
    • New: FtpSanitizeException with properties describing the type of sanitization issue, and recommended fixes.
    • Fix: Prevent FTP credentials in URI from being logged in both DownloadUriBytes overloads.
  • FTP Connection
    • Fix: AsyncFtpClient.Connect ignores pre-cancelled CancellationToken.
  • FTP Protocol
    • New: Add a WriteTimeout setting to control timeout for FTP write operations
    • Fix: Add TrackConfigChanges in FTP stream write operations to update stream config based on changed client config. Config changes like timeouts will be applied before the next read/write operation.
jstedfast/MailKit (MailKit)

v4.17.0

Compare Source

  • Updated nullability of ImapClient.Inbox (which will never return null).
    (issue #​1996)
  • Fixed IMAP's logic for ACL, LISTRIGHTS, MYRIGHTS, QUOTAROOT, QUOTA,
    and METADATA response parsers to properly handle []'s in the folder name.
    (issue #​2002)
  • Updated System.Threading.Tasks.Extensions to v4.6.3.
  • Updated System.Formats.Asn1 to v10.0.0 (instead of 10.0.2) for .NET 10.
  • Bumped MimeKit dependency to 4.17.0.
  • Code quality improvements.
MessagePack-CSharp/MessagePack-CSharp (MessagePack)

v3.1.7

What's Changed

Security release details

This release fixes 3 high severity and 9 moderate severity security vulnerabilities.

High severity advisory fixes
Moderage severity advisory fixes
Fixes with no security advisory
  • fb0fe9f Honor TypeFormatter options hooks for CWE-470
  • c1c06a6 Fix WriteRawX methods to advance by written length
  • 46c6a0f Fix CWE-190 map header length overflow

Full Changelog: MessagePack-CSharp/MessagePack-CSharp@v3.1.6...v3.1.7

v3.1.6

What's Changed

Full Changelog: MessagePack-CSharp/MessagePack-CSharp@v3.1.5...v3.1.6

v3.1.5

What's Changed

New Contributors

Full Changelog: MessagePack-CSharp/MessagePack-CSharp@v3.1.4...v3.1.5

meziantou/Meziantou.Analyzer (Meziantou.Analyzer)

v3.0.102

Compare Source

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.102

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.101...3.0.102

v3.0.101

Compare Source

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.101

What's Changed

  • Enhance NamedParameterAnalyzer to ignore Volatile.Read and Volatile.Write methods; add corresponding tests by @​meziantou in #​1178

Full Changelog: meziantou/Meziantou.Analyzer@3.0.100...3.0.101

v3.0.100

Compare Source

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.100

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.99...3.0.100

v3.0.99

Compare Source

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.99

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.98...3.0.99

v3.0.98

Compare Source

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.98

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.97...3.0.98

v3.0.97

Compare Source

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.97

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.96...3.0.97

v3.0.96

Compare Source

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.96

Full Changelog: meziantou/Meziantou.Analyzer@3.0.95...3.0.96

v3.0.95

Compare Source

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.95

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.94...3.0.95

v3.0.94

Compare Source

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.94

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.93...3.0.94

v3.0.93

Compare Source

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.93

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.92...3.0.93

v3.0.92

Compare Source

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.92

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.91...3.0.92

v3.0.91

Compare Source

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.91

What's Changed

  • Fix MA0003 Fix All producing invalid named-argument rewrites in multi-argument calls by @​Copilot in #​1168

Full Changelog: meziantou/Meziantou.Analyzer@3.0.90...3.0.91

v3.0.90

Compare Source

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.90

What's Changed

  • Fix MA0071 false positive for else if chains with reachable prior branches by @​Copilot in #​1166

Full Changelog: meziantou/Meziantou.Analyzer@3.0.89...3.0.90

v3.0.89

Compare Source

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.89

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.88...3.0.89

v3.0.88

Compare Source

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.88

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.87...3.0.88

v3.0.87

Compare Source

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.87

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.86...3.0.87

v3.0.86

Compare Source

NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.86

What's Changed

Full Changelog: meziantou/Meziantou.Analyzer@3.0.85...3.0.86

dotnet/dotnet (Microsoft.AspNetCore.Authentication.JwtBearer)

v10.0.9

AzureAD/microsoft-authentication-library-for-dotnet (Microsoft.Identity.Client)

v4.84.2

Compare Source

======

New Features
  • Added ManagedIdentityApplication.GetManagedIdentityCapabilitiesAsync(CancellationToken) returning a ManagedIdentityCapabilities object that reports the detected managed identity Source, the host's MaxSupportedBindingStrength (new MtlsBindingStrength enum: None, Software, KeyGuard), and a derived IsMtlsPopSupportedByHost. Replaces GetManagedIdentitySourceAsync()/ManagedIdentitySourceResult. The public ManagedIdentitySource.ImdsV2 value is folded into Imds (v1/v2 routing remains internal). #​6049
  • Added OID-based user identification to the User Federated Identity Credential (user_fic) flow via AcquireTokenByUserFederatedIdentityCredential(scopes, Guid userObjectId, assertion). #​6050
  • Added WithClaimsFromClient(claimsJson) to forward client-originated claims across managed identity and confidential client flows. #​5999
  • Added mTLS PoP support for WithCertificate(() => x509) (dynamic certificate credential). #​5957
  • Added opt-in token-acquisition metrics covering both successful and failed attempts. #​6004
Changes
  • Extended mTLS bearer transport (CertificateOptions.SendCertificateOverMtls) to the OBO, refresh-token, and authorization-code flows. #​6009
  • General Availability of the Microsoft.Identity.Client.KeyAttestation package. #​6038
  • Managed identity now probes IMDSv2 first and the preview latch was removed. #​6041
  • Updated NativeInterop baseline and corrected devapp version ranges. #​6045
  • Simplified GetTenantedAuthority in CiamAuthority and DstsAuthority. #​6001
Bug Fixes
  • Fixed WithExtraQueryParameters on ManagedIdentityApplicationBuilder bypassing token caching. #​6035
  • Guarded HTTP status codes on discovery endpoints in KnownInstanceMetadataIsUpToDateAsync. #​6048
  • Detect orphaned KeyGuard certificates via public-key modulus comparison. #​6020

v4.84.1

Compare Source

What's Changed

New Features

  • Added WithReservedScopes and WithCachePartitionKey public API extensions in #​6014
  • Added IAuthenticationOperation3 interface for CDT + mTLS PoP composition in #​5996
  • Added MsalRemainingTokenLifetime histogram metric for token expiry tracking in #​5920

Changes

  • Removed [Obsolete] attribute from WithExtraBodyParameters extension method in #​6006
  • Replaced ConcurrentHashSet with ConcurrentDictionary<T, byte> in #​5975

Bug Fixes

  • Fixed WithTenantId not honoring MSA tenant GUID when specified at request level in #​5958
  • Fixed OBO cache returning multiple_matching_tokens_detected when attributed tokens share a partition in #​5993

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@6ff7075...main (AzureAD/microsoft-authentication-library-for-dotnet@6ff7075...main)

AzureAD/microsoft-identity-web (Microsoft.Identity.Web)

v4.10.0

Compare Source

New features
  • Add WithExtraBodyParameters fluent API for attaching extra body parameters to token acquisition requests. See #​3819.
  • Add IConfidentialClientApplicationProvider extensibility interface and CachePartitionKey support for silent token acquisition. See #​3822.
Bug fixes
  • Redirect URI sanitization in authorization scenarios; centralize redirect URI validation in a shared helper. See #​3825.
  • Reject dSTS-shaped Authority values with a clearer exception, steering users to use Instance + TenantId instead. See #​3805.
  • Improve regex handling and adding length/timeout safeguards for SameSite User Agent. See #​3811.
Behavior changes
  • B2C OpenID Connect event handler: LRU cache for issuer address. Issuer address lookups in the B2C OIDC event handler are now cached with an LRU cache, improving performance for repeated lookups. See #​3821.
Dependencies updates
  • Update MSAL.NET to 4.84.1. See #​3822.
  • Pin Microsoft.Kiota.Abstractions to 1.22.0 for GraphServiceClient. See #​3817.
  • Bump uuid and @azure/msal-node in SidecarAdapter TypeScript test app. See #​3826.
  • Bump qs in SidecarAdapter TypeScript test app. See #​3829.
AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet (Microsoft.IdentityModel.JsonWebTokens)

v8.19.1

Compare Source

====

Bug Fixes

  • Update JwtSecurityTokenHandler for IssuerSigningKeyResolverUsingConfiguration to take priority over IssuerSigningKeyResolver, matching the documented contract and the correct behavior already present in JsonWebTokenHandler. See PR #​3519.

v8.19.0

Compare Source

====

New Features

  • Add ML-DSA (FIPS 204) post-quantum signature support. See PR #​3479.
  • Cache custom crypto providers in CryptoProviderFactory. See PR #​3489.

Bug Fixes

  • Disable automatic redirects on default HttpClient for JKU retrieval. See PR #​3494.
  • Adjust rented buffer handling in claim set parsing. See PR #​3493.
  • Tidy null handling in SAML conditions validation. See PR #​3491.
  • Improve validation of jku claim. See PR #​3481.
  • Limit telemetry algorithm dimension cardinality. See PR #​3490.
  • Add defensive copy of collections in ValidationParameters. See PR #​3492.
  • Update TokenValidationParameter copy constructor to make a deep copy. See PR #​3488.
  • Update to fail-closed when replay protection isn't configured and other DPoP hardening. See PR #​3505.
  • Apply RFC 3986 section 6.2.2 normalization to DPoP htu comparison. See PR #​3509.
microsoft/vstest (Microsoft.NET.Test.Sdk)

v18.6.0

What's Changed

Changes to tests and infra

Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone Europe/Rome)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from a team as a code owner June 11, 2026 12:16
@renovate renovate Bot enabled auto-merge June 11, 2026 12:16
@renovate renovate Bot merged commit ed67e46 into master Jun 11, 2026
8 checks passed
@renovate renovate Bot deleted the renovate/all-minor-patch branch June 11, 2026 15:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant