Bump Microsoft.AspNetCore.Authentication.JwtBearer, Microsoft.IdentityModel.Tokens and System.IdentityModel.Tokens.Jwt in /Backend #3505
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
…yModel.Tokens and System.IdentityModel.Tokens.Jwt Bumps [Microsoft.AspNetCore.Authentication.JwtBearer](https://github.com/dotnet/aspnetcore), [Microsoft.IdentityModel.Tokens](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet) and [System.IdentityModel.Tokens.Jwt](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet). These dependencies needed to be updated together. Updates `Microsoft.AspNetCore.Authentication.JwtBearer` from 8.0.3 to 8.0.11 - [Release notes](https://github.com/dotnet/aspnetcore/releases) - [Changelog](https://github.com/dotnet/aspnetcore/blob/main/docs/ReleasePlanning.md) - [Commits](dotnet/aspnetcore@v8.0.3...v8.0.11) Updates `Microsoft.IdentityModel.Tokens` from 7.5.1 to 7.1.2 - [Release notes](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases) - [Changelog](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/blob/dev/CHANGELOG.md) - [Commits](AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@7.5.1...7.1.2) Updates `System.IdentityModel.Tokens.Jwt` from 7.5.1 to 7.1.2 - [Release notes](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases) - [Changelog](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/blob/dev/CHANGELOG.md) - [Commits](AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@7.5.1...7.1.2) --- updated-dependencies: - dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: Microsoft.IdentityModel.Tokens dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: System.IdentityModel.Tokens.Jwt dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
.NET
|
commit 1ad6b754ba: |
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## master #3505 +/- ##
==========================================
- Coverage 74.71% 74.67% -0.05%
==========================================
Files 285 285
Lines 10996 10996
Branches 1337 1337
==========================================
- Hits 8216 8211 -5
- Misses 2398 2402 +4
- Partials 382 383 +1
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. |
Bumps Microsoft.AspNetCore.Authentication.JwtBearer, Microsoft.IdentityModel.Tokens and System.IdentityModel.Tokens.Jwt. These dependencies needed to be updated together.
Updates
Microsoft.AspNetCore.Authentication.JwtBearerfrom 8.0.3 to 8.0.11Release notes
Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.
... (truncated)
Commits
4757647Merged PR 44074: [internal/release/8.0] Update dependencies from dnceng/inter...809a619Update dependencies from https://dev.azure.com/dnceng/internal/_git/dotnet-ef...8e8ededMerged PR 44051: [internal/release/8.0] Updated NuGet.config - add feed for e...53c99d3[internal/release/8.0] Updated NuGet.config - add feed for efcore 3b21bdbcbb08e05Merged PR 44022: [internal/release/8.0] Update dependencies from dnceng/inter...155b8bfUpdate dependencies from https://dev.azure.com/dnceng/internal/_git/dotnet-ef...cb771e5Merged PR 44008: [internal/release/8.0] Merge from public49c3e20Update dependencies from https://github.com/dotnet/arcade build 20241016.1 (#...fc878b7Merged PR 43936: [internal/release/8.0] Update dependencies from dnceng/inter...4c938aeUpdate dependencies from https://dev.azure.com/dnceng/internal/_git/dotnet-ru...Updates
Microsoft.IdentityModel.Tokensfrom 7.5.1 to 7.1.2Changelog
Sourced from Microsoft.IdentityModel.Tokens's changelog.
... (truncated)
Commits
a607fa5Merged PR 10669: update version to 7.1.244021bbMerged PR 10664: Update dev branch from public GitHub deva22ab8eMerged PR 10603: Re-enable Jwt sub claim as either Number or String1966c05fixup prefix97888a2Merged PR 10258: Compatibility with 6x for bool claims (#2367)5c1ea4aMerged PR 10241: Update dev to fix the release buildec25d19reduced size for netcorestandard2.1 compression size is larger.b16f758Merged PR 10217: Disable test that set statics.ceeff41Merged PR 10199: Set MaximumDeflateSizee986e22Merged PR 10198: Don't resolve jku claim by defaultUpdates
System.IdentityModel.Tokens.Jwtfrom 7.5.1 to 7.1.2Changelog
Sourced from System.IdentityModel.Tokens.Jwt's changelog.
... (truncated)
Commits
a607fa5Merged PR 10669: update version to 7.1.244021bbMerged PR 10664: Update dev branch from public GitHub deva22ab8eMerged PR 10603: Re-enable Jwt sub claim as either Number or String1966c05fixup prefix97888a2Merged PR 10258: Compatibility with 6x for bool claims (#2367)5c1ea4aMerged PR 10241: Update dev to fix the release buildec25d19reduced size for netcorestandard2.1 compression size is larger.b16f758Merged PR 10217: Disable test that set statics.ceeff41Merged PR 10199: Set MaximumDeflateSizee986e22Merged PR 10198: Don't resolve jku claim by defaultMost Recent Ignore Conditions Applied to This Pull Request
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Note: Dependabot was ignoring updates to this dependency, but since you've updated it yourself we've started tracking it for you again. 🤖
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)This change is