Update All dependencies - #1964
Open
renovate[bot] wants to merge 3 commits into
Open
Conversation
renovate
Bot
force-pushed
the
renovate/all-dependencies
branch
from
May 25, 2026 06:57
ef0e8b5 to
d1d08ef
Compare
renovate
Bot
force-pushed
the
renovate/all-dependencies
branch
3 times, most recently
from
May 26, 2026 13:34
8f72549 to
f002c9c
Compare
renovate
Bot
force-pushed
the
renovate/all-dependencies
branch
from
May 26, 2026 23:48
f002c9c to
311f983
Compare
renovate
Bot
force-pushed
the
renovate/all-dependencies
branch
from
May 27, 2026 12:36
311f983 to
4657093
Compare
renovate
Bot
force-pushed
the
renovate/all-dependencies
branch
from
May 27, 2026 13:26
4657093 to
e22e50b
Compare
renovate
Bot
force-pushed
the
renovate/all-dependencies
branch
from
May 27, 2026 18:28
e22e50b to
a05d13d
Compare
renovate
Bot
force-pushed
the
renovate/all-dependencies
branch
from
May 28, 2026 07:56
a05d13d to
203625c
Compare
renovate
Bot
force-pushed
the
renovate/all-dependencies
branch
from
May 29, 2026 06:46
203625c to
10135de
Compare
renovate
Bot
force-pushed
the
renovate/all-dependencies
branch
from
May 29, 2026 08:51
10135de to
4faf4fc
Compare
renovate
Bot
force-pushed
the
renovate/all-dependencies
branch
from
May 30, 2026 14:43
4faf4fc to
fb8b0b8
Compare
renovate
Bot
force-pushed
the
renovate/all-dependencies
branch
from
June 1, 2026 06:10
fb8b0b8 to
617353a
Compare
renovate
Bot
force-pushed
the
renovate/all-dependencies
branch
from
June 1, 2026 08:17
617353a to
4df00e7
Compare
renovate
Bot
force-pushed
the
renovate/all-dependencies
branch
from
June 1, 2026 13:21
4df00e7 to
b1756f1
Compare
renovate
Bot
force-pushed
the
renovate/all-dependencies
branch
from
June 2, 2026 07:34
b1756f1 to
6e6a077
Compare
renovate
Bot
force-pushed
the
renovate/all-dependencies
branch
from
June 11, 2026 08:53
b67e4bc to
c0cc805
Compare
renovate
Bot
force-pushed
the
renovate/all-dependencies
branch
from
June 12, 2026 07:35
c0cc805 to
85fcc07
Compare
renovate
Bot
force-pushed
the
renovate/all-dependencies
branch
from
June 15, 2026 08:22
85fcc07 to
19cbd28
Compare
renovate
Bot
force-pushed
the
renovate/all-dependencies
branch
from
June 16, 2026 07:19
19cbd28 to
ce28b7c
Compare
renovate
Bot
force-pushed
the
renovate/all-dependencies
branch
from
June 16, 2026 18:49
ce28b7c to
4dddc56
Compare
renovate
Bot
force-pushed
the
renovate/all-dependencies
branch
from
June 17, 2026 11:23
4dddc56 to
eda80bb
Compare
renovate
Bot
force-pushed
the
renovate/all-dependencies
branch
from
June 17, 2026 12:21
eda80bb to
f4856c8
Compare
renovate
Bot
force-pushed
the
renovate/all-dependencies
branch
from
June 18, 2026 07:16
f4856c8 to
48795fb
Compare
renovate
Bot
force-pushed
the
renovate/all-dependencies
branch
from
June 18, 2026 09:19
48795fb to
65d8de6
Compare
renovate
Bot
force-pushed
the
renovate/all-dependencies
branch
from
June 18, 2026 11:34
65d8de6 to
50e60f4
Compare
renovate
Bot
force-pushed
the
renovate/all-dependencies
branch
from
June 19, 2026 20:28
50e60f4 to
255896a
Compare
renovate
Bot
force-pushed
the
renovate/all-dependencies
branch
from
June 20, 2026 12:31
255896a to
fe458ff
Compare
renovate
Bot
force-pushed
the
renovate/all-dependencies
branch
from
June 20, 2026 13:31
fe458ff to
bd503f4
Compare
* add AllowForwarding parameter and column * add controller, handler and misc * add composedEmail logic * add scope * try managed identity approach instead of account key approach in env * check generated sas * increase expiration time * add includeAttachmentStorageProvider flag to db query * remove log sas log * persist forwards and update activity log * make userId nullable in db * add forwarded status to correspondences * add unique constraint on correspondence/forwardTo * indicate forwarding in dialog * add constraints and forwardingText * add forwarded status * combine forwardingText and corrBody * more frequent forwardDelivery check * dont send allowforwarding in serviceOwnerLabel * add tests * add requestedSendTime * get minimumAuthLevel on resource and only AllowForwarding on minAuthLevel 0 * add endpoint for AF to check AllowForwarding with new scope * add 10mb attachment constraint and email regex check * more tests * use allSchemes on CanCorrespondenceBeForwarded endpoint * add invalid email tests * add proper response * address coderabbit comments * Fixed API layer for forward Correspondence * Fix docker compose file Redis issue --------- Co-authored-by: Ceredron <roar.mjelde@digdir.no>
In 1.7.0 the Register API's externalUrn is exposed as a typed Party.ExternalUrn property. It therefore no longer lands in JsonExtensionData, which is where PartyExtensions.GetExternalUrn() read it from. Read the typed property instead. The typed value is a FieldValue<NonExhaustive<PartyExternalRefUrn>>, so URN schemes unknown to the package still round-trip verbatim and no behaviour is lost. Without this change the API-provided URN is silently dropped: Person, Organization and SelfIdentifiedUser fall through to the derived-URN construction, and SystemUser — which has no derived path — returns null. The existing tests did not guard this, since the derived URN happens to match the API value for the common party types. Added two tests that separate the code paths: one where the API URN deliberately differs from what would be derived, and one asserting an unknown URN scheme survives. Closes #2072 Co-authored-by: Martin Todorov <> Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
1.5.1→1.5.21.5.0→1.6.01.8.2→1.8.31.8.23→1.8.241.8.23→1.8.2410.0.9→10.0.1110.0.9→10.0.1110.0.9→10.0.112.3.11→2.3.1210.0.9→10.0.1110.0.9→10.0.1110.0.9→10.0.1110.0.9→10.0.1110.0.9→10.0.1110.0.9→10.0.1110.0.9→10.0.1110.7.0→10.9.010.0.9→10.0.1110.0.9→10.0.1110.0.9→10.0.1110.0.9→10.0.1110.0.9→10.0.1110.0.9→10.0.1110.0.9→10.0.114.13.0→4.14.218.7.0→18.9.01.16.0→1.17.01.16.0→1.17.01.16.0→1.17.01.16.0→1.17.01.16.0→1.17.01.16.0→1.17.06.0.3→6.1.06.1.1→6.2.13.0.17→3.1.138.19.1→8.22.0v3.0.0→v3.0.1v1.1.0→v1.2.19.0.34→9.0.37Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
Azure/azure-sdk-for-net (Azure.Extensions.AspNetCore.Configuration.Secrets)
v1.5.2Compare Source
1.5.2 (2026-09-08)
Other Changes
Azure.Coredependency from 1.54.0 to 1.61.0.Azure.Security.KeyVault.Secretsdependency from 4.10.0 to 4.11.0.Microsoft.Extensions.Configurationdependency from 10.0.3 to the serviced 10.0.10 release.HangfireIO/Hangfire (Hangfire.AspNetCore)
v1.8.24: 1.8.24Release Notes
Hangfire.Core
dotnet/dotnet (Microsoft.AspNetCore.Authentication.JwtBearer)
v10.0.11v10.0.10dotnet/extensions (Microsoft.Extensions.Caching.Hybrid)
v10.9.0Version 10.9.0 is headlined by changes in these areas:
RoutingChatClientbase class, withSemanticRoutingChatClientas a concrete semantic-routing implementation. Separately, the abstractFailoverChatClientspecialization and its concreteOrderedFailoverChatClientimplementation add failover routing.Experimental API Changes
New Experimental APIs
EXTEXP0013) #7602MEAI001) #7662What's Changed
AI (
Microsoft.Extensions.AI,Microsoft.Extensions.AI.Abstractions, andMicrosoft.Extensions.AI.OpenAI)Note: Microsoft.Extensions.AI.OpenAI constrains its dependency for OpenAI to 2.12.x, preventing OpenAI updates to 2.13.0+ due to an incompatibility. We expect to release Microsoft.Extensions.AI.OpenAI version 10.9.1 during the week of August 17 to address this issue.
HTTP Resilience and Diagnostics (
Microsoft.Extensions.Http.ResilienceandMicrosoft.Extensions.Http.Diagnostics)ASP.NET Core Extensions (
Microsoft.AspNetCore.Diagnostics.Middleware)Logging Source Generator (
Microsoft.Gen.Logging)AI Evaluation (
Microsoft.Extensions.AI.Evaluation.Reporting)Project Templates (
Microsoft.McpServer.ProjectTemplates)Note: The MCP server project template was migrated to the dotnet/aspnetcore repository, and it is now included in the .NET 10 and .NET 11 SDKs.
Service Discovery (
Microsoft.Extensions.ServiceDiscovery.Dns)Test Improvements
Repository Infrastructure Updates
Acknowledgements
Full Changelog: dotnet/extensions@v10.8.4...v10.9.0
Packages in this release
The
Microsoft.Agents.AI.ProjectTemplatespackage is not included in this release.v10.8.0This release adds new experimental APIs to Microsoft.Extensions.AI.Abstractions and updates the OpenAI dependency to 2.12.0, alongside documentation, test, and repository maintenance.
Experimental API Changes
New Experimental APIs
AIFunctionNameAttributeandAIParameterNameAttribute#7610 by @jozkee (co-authored by @jeffhandley @Copilot)ToolApprovalRequestContent.RequiresConfirmation(MEAI001) #7549 by @javiercn (co-authored by @Copilot)What's Changed
AI
Vector Data
Documentation Updates
Test Improvements
Repository Infrastructure Updates
Acknowledgements
Full Changelog: dotnet/extensions@v10.7.0...v10.8.0
AzureAD/microsoft-identity-web (Microsoft.Identity.Web)
v4.14.2Dependencies updates
Microsoft.IdentityModel.*(Wilson) version to 8.22.0. See #3986.System.Security.Cryptography.Xml8.0.4 (and itsSystem.Security.Cryptography.Pkcs8.0.1 dependency) instead of over-bumping to the 9.0.18 servicing line (CVE-2026-47302, -47304, -50525, -50648). net9.0 (9.0.18) and net10.0 (10.0.10) are unchanged. See #3989.v4.14.1Dependencies updates
Microsoft.IdentityModel.*(Wilson) floor to 8.21.0 to resolve anIDX00001version-mismatch that surfaced when a downstream app (for example MISE) resolves Wilson 8.21.0 while Id.Web floored it at 8.20.0. No API changes. See #3984.v4.14.0Compare Source
New features
MicrosoftIdentityOptions.PartitionAppTokenCacheByAudienceto partition the app token cache by resource/audience. See #3979.TokenAcquisitionExtensionOptions.OnBackgroundTokenRefreshCompleted. See #3973.MicrosoftIdentityOptions.UseFastUnboundedCache; stop short-circuiting the in-memory token cache serialization provider. See #3970.Microsoft.Identity.Web.OidcFIC) now supports mTLS token binding.OidcIdpSignedAssertionProviderreportsSupportsTokenBinding = trueand implementsGetSignedAssertionWithBindingAsync, propagating the exact binding certificate returned by the inner token acquisition together with the OIDC assertion (as aClientSignedAssertion) — no separate binding-certificate credential is configured. This enables two flows: a finalmtls_poptoken (AuthorizationHeaderProviderOptions.ProtocolScheme = "MTLS_POP") and a finalBearertoken whose client assertion isjwt-popover mTLS (UseBoundCredential = trueon the outer OIDCCustomSignedAssertioncredential). It composes with an inner application usingSignedAssertionFromManagedIdentity(three-leg MSI → OIDC → final flow). Tracked in #3851.Bug fixes
UseBoundCredential = true) — for both signed-assertion and certificate credentials — from its otherwise-identical unbound equivalent, so the two configurations no longer collide on the same cached CCA. The certificate-error retry path for app tokens now invalidates the cache entry for the actual request mode (bearer vs mTLS PoP) instead of always the bearer key.Dependencies updates
Microsoft.Identity.Clientto 4.87.0. See #3975.Microsoft.Identity.Abstractionsto 12.6.0. See #3976.System.Security.Cryptography.Xml/System.Security.Cryptography.Pkcsto patched versions (CVE-2026-47302, -47304, -50525, -50648). See #3964.v4.13.2New features
DownstreamApinow honors the newAuthorizationHeaderProviderOptions.OnBeforeAuthHeaderCreationandOnAfterAuthHeaderCreationhooks (Microsoft.Identity.Abstractions12.5.0).OnBeforeAuthHeaderCreationruns before the header is created — use it to shape the request that request-binding protocols (SignedHttpRequestq/h/b) sign — andOnAfterAuthHeaderCreationruns after the header is set, to observe or adjust the finalized request. See #3942.Dependencies updates
Microsoft.Identity.Abstractionsfrom 12.4.0 to 12.5.0 (adds theOnBeforeAuthHeaderCreation/OnAfterAuthHeaderCreationrequest hooks). See #3947.Fundamentals
BaseAuthorizationHeaderProviderandDefaultAuthorizationHeaderProviderdeclareIAuthorizationHeaderProvider2only, since it already extendsIAuthorizationHeaderProvider. See #3942.v4.13.1Bug fixes
DownstreamApi: restoredCustomizeHttpRequestMessageto its documented timing — it runs after the authorization header (including theAuthorizationheader) is set, just before the request is sent. #3902 had moved it before header creation (to flow the finalized request for request-binding), which regressed callers that read the header in the callback — they sawnull. See #3943.microsoft/vstest (Microsoft.NET.Test.Sdk)
v18.9.0What's Changed
New Contributors
Full Changelog: microsoft/vstest@v18.8.0...v18.9.0
v18.8.1What's Changed
Full Changelog: microsoft/vstest@v18.8.0...v18.8.1
v18.8.0What's Changed
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.