chore(deps): update all non-major dependencies#728
Merged
Conversation
AndreaCuneo
approved these changes
Jun 11, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
12.28.0→12.29.054.1.2→54.2.04.16.0→4.17.03.1.4→3.1.73.0.85→3.0.10210.0.8→10.0.910.0.8→10.0.910.0.8→10.0.910.0.8→10.0.910.0.300→10.0.30110.0.8→10.0.910.0.8→10.0.910.0.8→10.0.910.0.8→10.0.910.0.8→10.0.910.0.8→10.0.910.0.8→10.0.910.0.8→10.0.910.0.8→10.0.910.0.8→10.0.910.0.8→10.0.910.0.8→10.0.910.0.8→10.0.910.0.8→10.0.910.0.8→10.0.94.84.0→4.84.24.84.0→4.84.24.9.0→4.10.08.18.0→8.19.118.5.1→18.6.0170.3.93→170.4.8318.6.2→18.8.03.2.1→3.3.01.3.1→1.4.08.6.6→8.7.010.5.1→10.8.17.2.2→7.2.310.6.0→10.7.01.1.5→1.1.610.1.7→10.2.110.1.7→10.2.110.1.7→10.2.110.1.7→10.2.110.1.7→10.2.110.0.8→10.0.910.0.8→10.0.9Release Notes
Azure/azure-sdk-for-net (Azure.Storage.Blobs)
v12.29.0Compare Source
12.29.0 (2026-06-04)
Features Added
Bugs Fixed
robinrodricks/FluentFTP (FluentFTP)
v54.2.0SanitizeModeProperties to configure type of FTP path sanitization. Sanitizer can be disabled, or throw exceptions, or silently rename FTP paths.FtpSanitizeExceptionwith properties describing the type of sanitization issue, and recommended fixes.DownloadUriBytesoverloads.AsyncFtpClient.Connectignores pre-cancelledCancellationToken.WriteTimeoutsetting to control timeout for FTP write operationsTrackConfigChangesin FTP stream write operations to update stream config based on changed client config. Config changes like timeouts will be applied before the next read/write operation.jstedfast/MailKit (MailKit)
v4.17.0Compare Source
(issue #1996)
and METADATA response parsers to properly handle []'s in the folder name.
(issue #2002)
MessagePack-CSharp/MessagePack-CSharp (MessagePack)
v3.1.7What's Changed
scopedtoMessagePackWriter.Write(ReadOnlySpan<T>)methods by @AArnott in #2271Security release details
This release fixes 3 high severity and 9 moderate severity security vulnerabilities.
High severity advisory fixes
26d4e74GHSA-382j-8mxh-c7x2 Reject invalid DateTime ext lengths for CWE-789b9cb605GHSA-vh6j-jc39-fggf Use iteration for skipping msgpack structures for CWE-674719e690GHSA-hv8m-jj95-wg3x Bound LZ4 input reads for CWE-125Moderage severity advisory fixes
2b5a500GHSA-v72x-2h86-7f8m Guard LZ4 decompression length for CWE-409f093bdcGHSA-qhmf-xw27-6rqr Reject nested typeless blocklist bypass for CWE-502f077798GHSA-2f33-pr97-265q Default MVC input formatter to UntrustedData for CWE-118825a3493GHSA-2x83-8g95-xh59 Limit untrusted ExpandoObject maps for CWE-407b414e6dGHSA-wfr3-xj75-pfwh Guard dynamic union depth for CWE-6740555f07GHSA-w567-gjr2-hm5j Validate Unity blit lengths for CWE-7899b5783aGHSA-cxmj-83gh-fp49 Fix CWE-789 multidimensional array allocation validationf96fcf0GHSA-q2h6-ghwm-5qm8 Use secure lookup comparer for CWE-407b3af7cfGHSA-cj9g-3mj2-g8vv Guard JSON conversion depth for CWE-67466ad089GHSA-cj9g-3mj2-g8vv Avoid JSON separator recursion for CWE-674082ba7dGHSA-cj9g-3mj2-g8vv Guard typeless JSON depth for CWE-674Fixes with no security advisory
fb0fe9fHonor TypeFormatter options hooks for CWE-470c1c06a6Fix WriteRawX methods to advance by written length46c6a0fFix CWE-190 map header length overflowFull Changelog: MessagePack-CSharp/MessagePack-CSharp@v3.1.6...v3.1.7
v3.1.6What's Changed
Full Changelog: MessagePack-CSharp/MessagePack-CSharp@v3.1.5...v3.1.6
v3.1.5What's Changed
Fix Incorrect DateTimeOffset Serializer by @T0PP1ng in #2225New Contributors
Full Changelog: MessagePack-CSharp/MessagePack-CSharp@v3.1.4...v3.1.5
meziantou/Meziantou.Analyzer (Meziantou.Analyzer)
v3.0.102Compare Source
NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.102
What's Changed
Full Changelog: meziantou/Meziantou.Analyzer@3.0.101...3.0.102
v3.0.101Compare Source
NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.101
What's Changed
Full Changelog: meziantou/Meziantou.Analyzer@3.0.100...3.0.101
v3.0.100Compare Source
NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.100
What's Changed
Full Changelog: meziantou/Meziantou.Analyzer@3.0.99...3.0.100
v3.0.99Compare Source
NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.99
What's Changed
Full Changelog: meziantou/Meziantou.Analyzer@3.0.98...3.0.99
v3.0.98Compare Source
NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.98
What's Changed
Full Changelog: meziantou/Meziantou.Analyzer@3.0.97...3.0.98
v3.0.97Compare Source
NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.97
What's Changed
Full Changelog: meziantou/Meziantou.Analyzer@3.0.96...3.0.97
v3.0.96Compare Source
NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.96
Full Changelog: meziantou/Meziantou.Analyzer@3.0.95...3.0.96
v3.0.95Compare Source
NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.95
What's Changed
Full Changelog: meziantou/Meziantou.Analyzer@3.0.94...3.0.95
v3.0.94Compare Source
NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.94
What's Changed
Full Changelog: meziantou/Meziantou.Analyzer@3.0.93...3.0.94
v3.0.93Compare Source
NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.93
What's Changed
Full Changelog: meziantou/Meziantou.Analyzer@3.0.92...3.0.93
v3.0.92Compare Source
NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.92
What's Changed
Full Changelog: meziantou/Meziantou.Analyzer@3.0.91...3.0.92
v3.0.91Compare Source
NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.91
What's Changed
Full Changelog: meziantou/Meziantou.Analyzer@3.0.90...3.0.91
v3.0.90Compare Source
NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.90
What's Changed
else ifchains with reachable prior branches by @Copilot in #1166Full Changelog: meziantou/Meziantou.Analyzer@3.0.89...3.0.90
v3.0.89Compare Source
NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.89
What's Changed
Full Changelog: meziantou/Meziantou.Analyzer@3.0.88...3.0.89
v3.0.88Compare Source
NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.88
What's Changed
Full Changelog: meziantou/Meziantou.Analyzer@3.0.87...3.0.88
v3.0.87Compare Source
NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.87
What's Changed
Full Changelog: meziantou/Meziantou.Analyzer@3.0.86...3.0.87
v3.0.86Compare Source
NuGet package: https://www.nuget.org/packages/Meziantou.Analyzer/3.0.86
What's Changed
Full Changelog: meziantou/Meziantou.Analyzer@3.0.85...3.0.86
dotnet/dotnet (Microsoft.AspNetCore.Authentication.JwtBearer)
v10.0.9AzureAD/microsoft-authentication-library-for-dotnet (Microsoft.Identity.Client)
v4.84.2Compare Source
======
New Features
ManagedIdentityApplication.GetManagedIdentityCapabilitiesAsync(CancellationToken)returning aManagedIdentityCapabilitiesobject that reports the detected managed identitySource, the host'sMaxSupportedBindingStrength(newMtlsBindingStrengthenum:None,Software,KeyGuard), and a derivedIsMtlsPopSupportedByHost. ReplacesGetManagedIdentitySourceAsync()/ManagedIdentitySourceResult. The publicManagedIdentitySource.ImdsV2value is folded intoImds(v1/v2 routing remains internal). #6049user_fic) flow viaAcquireTokenByUserFederatedIdentityCredential(scopes, Guid userObjectId, assertion). #6050WithClaimsFromClient(claimsJson)to forward client-originated claims across managed identity and confidential client flows. #5999WithCertificate(() => x509)(dynamic certificate credential). #5957Changes
CertificateOptions.SendCertificateOverMtls) to the OBO, refresh-token, and authorization-code flows. #6009Microsoft.Identity.Client.KeyAttestationpackage. #6038GetTenantedAuthorityinCiamAuthorityandDstsAuthority. #6001Bug Fixes
WithExtraQueryParametersonManagedIdentityApplicationBuilderbypassing token caching. #6035KnownInstanceMetadataIsUpToDateAsync. #6048v4.84.1Compare Source
What's Changed
New Features
Changes
Bug Fixes
Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@6ff7075...main (AzureAD/microsoft-authentication-library-for-dotnet@6ff7075...main)
AzureAD/microsoft-identity-web (Microsoft.Identity.Web)
v4.10.0Compare Source
New features
WithExtraBodyParametersfluent API for attaching extra body parameters to token acquisition requests. See #3819.IConfidentialClientApplicationProviderextensibility interface andCachePartitionKeysupport for silent token acquisition. See #3822.Bug fixes
Authorityvalues with a clearer exception, steering users to useInstance+TenantIdinstead. See #3805.Behavior changes
Dependencies updates
Microsoft.Kiota.Abstractionsto 1.22.0 for GraphServiceClient. See #3817.uuidand@azure/msal-nodein SidecarAdapter TypeScript test app. See #3826.qsin SidecarAdapter TypeScript test app. See #3829.AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet (Microsoft.IdentityModel.JsonWebTokens)
v8.19.1Compare Source
====
Bug Fixes
JwtSecurityTokenHandlerforIssuerSigningKeyResolverUsingConfigurationto take priority overIssuerSigningKeyResolver, matching the documented contract and the correct behavior already present inJsonWebTokenHandler. See PR #3519.v8.19.0Compare Source
====
New Features
Bug Fixes
jkuclaim. See PR #3481.htucomparison. See PR #3509.microsoft/vstest (Microsoft.NET.Test.Sdk)
v18.6.0What's Changed
Changes to tests and infra
Configuration
📅 Schedule: (in timezone Europe/Rome)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.