Bump Microsoft.AspNetCore.Authentication.JwtBearer, Microsoft.IdentityModel.Tokens and System.IdentityModel.Tokens.Jwt in /Backend #3519
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
…yModel.Tokens and System.IdentityModel.Tokens.Jwt Bumps [Microsoft.AspNetCore.Authentication.JwtBearer](https://github.com/dotnet/aspnetcore), [Microsoft.IdentityModel.Tokens](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet) and [System.IdentityModel.Tokens.Jwt](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet). These dependencies needed to be updated together. Updates `Microsoft.AspNetCore.Authentication.JwtBearer` from 8.0.11 to 8.0.12 - [Release notes](https://github.com/dotnet/aspnetcore/releases) - [Changelog](https://github.com/dotnet/aspnetcore/blob/main/docs/ReleasePlanning.md) - [Commits](dotnet/aspnetcore@v8.0.11...v8.0.12) Updates `Microsoft.IdentityModel.Tokens` from 7.5.1 to 7.1.2 - [Release notes](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases) - [Changelog](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/blob/dev/CHANGELOG.md) - [Commits](AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@7.5.1...7.1.2) Updates `System.IdentityModel.Tokens.Jwt` from 7.5.1 to 7.1.2 - [Release notes](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases) - [Changelog](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/blob/dev/CHANGELOG.md) - [Commits](AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@7.5.1...7.1.2) --- updated-dependencies: - dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: Microsoft.IdentityModel.Tokens dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: System.IdentityModel.Tokens.Jwt dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
.NET
|
commit c966aa7a28: |
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## master #3519 +/- ##
==========================================
+ Coverage 74.62% 74.67% +0.04%
==========================================
Files 286 286
Lines 11001 11001
Branches 1338 1338
==========================================
+ Hits 8210 8215 +5
+ Misses 2408 2404 -4
+ Partials 383 382 -1
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. |
|
Why do the |
Bumps Microsoft.AspNetCore.Authentication.JwtBearer, Microsoft.IdentityModel.Tokens and System.IdentityModel.Tokens.Jwt. These dependencies needed to be updated together.
Updates
Microsoft.AspNetCore.Authentication.JwtBearerfrom 8.0.11 to 8.0.12Release notes
Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.
Commits
31d685bMerged PR 45643: [internal/release/8.0] Update dependencies from dnceng/inter...6b7b74fMerged PR 45638: [internal/release/8.0] Update dependencies from dnceng/inter...e356c37Merge commit 'dc3b2086feef8e62771254fdfded9d9d8a05346f'dc3b208[release/8.0] (deps): Bump src/submodules/googletest (#59033)91fea27Merge commit '216a41a1dc4940e9d83a761bb0f9c44545d03c44'216a41a[release/8.0] Update dependencies from dotnet/roslyn (#59184)2cea8a7Merge commit 'b8a8e7281e9d8e7e1cfd15c0412906cf7eaecbf8'b8a8e72Fix java discovery in helix-matrix (#59181)0332d22Merge commit 'd86a0b487871fa1a1f800557dfb7102164b772fc'd86a0b4Update dependencies from https://github.com/dotnet/arcade build 20241112.12 (...Updates
Microsoft.IdentityModel.Tokensfrom 7.5.1 to 7.1.2Changelog
Sourced from Microsoft.IdentityModel.Tokens's changelog.
... (truncated)
Commits
a607fa5Merged PR 10669: update version to 7.1.244021bbMerged PR 10664: Update dev branch from public GitHub deva22ab8eMerged PR 10603: Re-enable Jwt sub claim as either Number or String1966c05fixup prefix97888a2Merged PR 10258: Compatibility with 6x for bool claims (#2367)5c1ea4aMerged PR 10241: Update dev to fix the release buildec25d19reduced size for netcorestandard2.1 compression size is larger.b16f758Merged PR 10217: Disable test that set statics.ceeff41Merged PR 10199: Set MaximumDeflateSizee986e22Merged PR 10198: Don't resolve jku claim by defaultUpdates
System.IdentityModel.Tokens.Jwtfrom 7.5.1 to 7.1.2Changelog
Sourced from System.IdentityModel.Tokens.Jwt's changelog.
... (truncated)
Commits
a607fa5Merged PR 10669: update version to 7.1.244021bbMerged PR 10664: Update dev branch from public GitHub deva22ab8eMerged PR 10603: Re-enable Jwt sub claim as either Number or String1966c05fixup prefix97888a2Merged PR 10258: Compatibility with 6x for bool claims (#2367)5c1ea4aMerged PR 10241: Update dev to fix the release buildec25d19reduced size for netcorestandard2.1 compression size is larger.b16f758Merged PR 10217: Disable test that set statics.ceeff41Merged PR 10199: Set MaximumDeflateSizee986e22Merged PR 10198: Don't resolve jku claim by defaultMost Recent Ignore Conditions Applied to This Pull Request
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)This change is