Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Dec 2, 2025

Updated Azure.Identity from 1.11.3 to 1.12.0.

Release notes

Sourced from Azure.Identity's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Azure.Identity from 1.11.3 to 1.17.1.

Release notes

Sourced from Azure.Identity's releases.

1.17.1

1.17.1 (2025-11-18)

Other Changes

  • Updated Microsoft.Identity.Client and Microsoft.Identity.Client.Extensions.Msal dependencies to version 4.78.0.

1.14.0

1.14.0 (2025-11-26)

Features Added

1.13.1

1.13.1 (2025-11-19)

Other Changes

  • Updated Azure.Identity dependency to version 1.17.1

1.13.0

1.13.0 (2025-10-24)

Features Added

Other Changes

  • Upgraded Azure.Core from 1.48.0 to 1.49.0

1.13.0-beta.1

1.13.0-beta.1 (2025-10-22)

Features Added

Commits viewable in compare view.

Updated Microsoft.ApplicationInsights.WorkerService from 2.22.0 to 2.23.0.

Release notes

Sourced from Microsoft.ApplicationInsights.WorkerService's releases.

2.23.0

  • no changes since beta.

2.23.0-beta1

Commits viewable in compare view.

Updated Microsoft.Azure.Functions.Worker from 1.21.0 to 1.24.0.

Release notes

Sourced from Microsoft.Azure.Functions.Worker's releases.

1.24.0

What's Changed

Microsoft.Azure.Functions.Worker (metapackage) 1.24.0

  • Updating Microsoft.Azure.Functions.Worker.Core to 1.20.0
  • Updating Microsoft.Azure.Functions.Worker.Grpc to 1.18.0

Microsoft.Azure.Functions.Worker.Core 1.20.0

  • Updated service registrations for bootstrapping methods to ensure idempotency. (#​2820)

Microsoft.Azure.Functions.Worker.Grpc 1.18.0

  • Changed exception handling in function invocation path to ensure fatal exceptions bubble up. (#​2789)
  • Updated service registrations for bootstrapping methods to ensure idempotency. (#​2820)

1.23.0

What's Changed

Microsoft.Azure.Functions.Worker (metapackage) 1.23.0

  • Updating Microsoft.Azure.Functions.Worker.Core to 1.19.0
  • Updating Microsoft.Azure.Functions.Worker.Grpc to 1.17.0
  • Updating Azure.Core to 1.41.0

Microsoft.Azure.Functions.Worker.Core 1.19.0

  • Updating Azure.Core to 1.41.0

Microsoft.Azure.Functions.Worker.Grpc 1.17.0

  • Updating Azure.Core to 1.41.0

1.22.0

What's Changed

Microsoft.Azure.Functions.Worker (metapackage) 1.22.0

  • Updating Microsoft.Azure.Functions.Worker.Core to 1.18.0

Microsoft.Azure.Functions.Worker.Core 1.18.0

  • Enabling AAD Authentication for ApplicationInsights (#​2217)
  • OpenTelemetry support (#​2395)

Commits viewable in compare view.

Updated Microsoft.Azure.Functions.Worker.ApplicationInsights from 1.2.0 to 1.4.0.

Release notes

Sourced from Microsoft.Azure.Functions.Worker.ApplicationInsights's releases.

1.4.0

What's Changed

Microsoft.Azure.Functions.Worker.ApplicationInsights 1.4.0

  • Updating Azure.Identity to 1.12.0

1.3.3

What's Changed

Microsoft.Azure.Functions.Worker.Extensions.Http.AspNetCore 1.3.3

  • [Bug Fix] Update ContextReference to no longer use a given invocation's cancellation token (#​2931)
    • This bug fix should fix the Request has finished and HttpContext disposed exceptions

1.3.2

Microsoft.Azure.Functions.Worker.Extensions.Http.AspNetCore 1.3.2

  • Fixes a bug that causes invocations to hang when the function throws an unhandled exception (#​2527)

1.3.1

Microsoft.Azure.Functions.Worker.Extensions.Http.AspNetCore 1.3.1

  • Fixes a bug introduced in 1.3.0 related to the handling of HttpResponseData, which caused varying errors for functions using HttpResponseData.

1.3.0

Microsoft.Azure.Functions.Worker.Extensions.Http.AspNetCore 1.3.0

  • Improvements to context coordination/synchronization handling and observability
    • Failure to receive any of the expected context synchronization calls will now result in a TimeoutException thrown with the appropriate exception information. Previously this would block indefinitely and failures here were difficult to diagnose.
    • Debug logs are now emitted in the context coordination calls, improving observability.
  • Introduces fix to properly handle multiple output binding scenarios (#​2322).

Commits viewable in compare view.

Updated Microsoft.Azure.Functions.Worker.Extensions.Http from 3.1.0 to 3.3.0.

Release notes

Sourced from Microsoft.Azure.Functions.Worker.Extensions.Http's releases.

3.3.0

What's Changed

Microsoft.Azure.Functions.Worker.Extensions.Http 3.3.0

  • The 'FromBody' converter now utilizes DeserializeAsync for deserializing JSON content from the request body, enhancing support for asynchronous deserialization. (#​2901)
  • Update DefaultFromBodyConversionFeature to no longer use a given invocation's cancellation token (#​2894)

3.2.0

Microsoft.Azure.Functions.Worker.Extensions.Http 3.2.0

  • Introduces the [HttpResult] attribute. When using custom return types for multiple output bindings with ASP.NET Core integration, you must add the [HttpResult] attribute to the property that provides the result. Existing behavior for multiple output bindings scenarios using HttpResponseData is still preserved (and the attribute is not needed in that case).

Commits viewable in compare view.

Updated Microsoft.Azure.Functions.Worker.Extensions.Http.AspNetCore from 1.2.1 to 1.3.3.

Release notes

Sourced from Microsoft.Azure.Functions.Worker.Extensions.Http.AspNetCore's releases.

1.3.3

What's Changed

Microsoft.Azure.Functions.Worker.Extensions.Http.AspNetCore 1.3.3

  • [Bug Fix] Update ContextReference to no longer use a given invocation's cancellation token (#​2931)
    • This bug fix should fix the Request has finished and HttpContext disposed exceptions

1.3.2

Microsoft.Azure.Functions.Worker.Extensions.Http.AspNetCore 1.3.2

  • Fixes a bug that causes invocations to hang when the function throws an unhandled exception (#​2527)

1.3.1

Microsoft.Azure.Functions.Worker.Extensions.Http.AspNetCore 1.3.1

  • Fixes a bug introduced in 1.3.0 related to the handling of HttpResponseData, which caused varying errors for functions using HttpResponseData.

1.3.0

Microsoft.Azure.Functions.Worker.Extensions.Http.AspNetCore 1.3.0

  • Improvements to context coordination/synchronization handling and observability
    • Failure to receive any of the expected context synchronization calls will now result in a TimeoutException thrown with the appropriate exception information. Previously this would block indefinitely and failures here were difficult to diagnose.
    • Debug logs are now emitted in the context coordination calls, improving observability.
  • Introduces fix to properly handle multiple output binding scenarios (#​2322).

Commits viewable in compare view.

Updated Microsoft.Azure.Functions.Worker.Sdk from 1.17.2 to 1.18.1.

Release notes

Sourced from Microsoft.Azure.Functions.Worker.Sdk's releases.

1.18.1

What's Changed

Microsoft.Azure.Functions.Worker.Sdk 1.18.1

  • Updated Microsoft.Azure.Functions.Worker.Sdk.Generators reference to 1.3.4.

Microsoft.Azure.Functions.Worker.Sdk.Generators 1.3.4

  • Changed FunctionExecutorGenerator to avoid generation of long if/else chains for apps with a large number of functions.

1.18.0

What's Changed

Microsoft.Azure.Functions.Worker.Sdk 1.18.0

  • Fix incorrect function version in build message (#​2606)
  • Fix inner build failures when central package management is enabled (#​2689)
  • Add support to publish a Function App (Flex Consumption) with ZipDeploy (#​2712)
    • Add 'UseBlobContainerDeploy' property to identify when to use OneDeploy publish API endpoint ("<publish_url>/api/publish")
    • Enhance ZipDeploy deployment status logging by appending the 'status_message' (when defined) to the output messages

Microsoft.Azure.Functions.Worker.Sdk.Generators

1.17.4

Microsoft.Azure.Functions.Worker.Sdk 1.17.4

  • Upgrade Microsoft.Azure.Functions.Worker.Sdk.Generators to 1.3.2

Microsoft.Azure.Functions.Worker.Sdk.Generators 1.3.2

  • Enhanced function metadata generation to include $return binding for HTTP trigger functions. (#​1619)
  • Updating generators to fix the namespace conflict with customer code (#​2582)

1.17.3

Microsoft.Azure.Functions.Worker.Sdk 1.17.3

Microsoft.Azure.Functions.Worker.Sdk.Generators 1.3.1

  • ExtensionStartupRunnerGenerator generating code which conflicts with customer code (namespace) (#​2542)

1.17.3-preview2

Microsoft.Azure.Functions.Worker.Sdk 1.17.3-preview2

  • Updating to use Microsoft.NET.Sdk.Functions.Generators 1.3.0 (#​2322)
  • Update legacy generator to handle HttpResultAttribute (#​2342), which is used on HTTP response properties in multiple output-binding scenarios. Example:
public class MyOutputType
{
    [QueueOutput("myQueue")]
    public string Name { get; set; }

    [HttpResult]
    public IActionResult HttpResponse { get; set; }
}

Microsoft.Azure.Functions.Worker.Sdk.Generators 1.3.0

  • Introduces handling for HttpResultAttribute, which is used on HTTP response properties in multiple output-binding scenarios.
  • Fix bug causing compiler error when named arguments in function attributes are array types (#​2344).

Commits viewable in compare view.

Updated Microsoft.Extensions.Azure from 1.7.3 to 1.13.1.

Release notes

Sourced from Microsoft.Extensions.Azure's releases.

1.13.1

1.13.1 (2025-11-19)

Other Changes

  • Updated Azure.Identity dependency to version 1.17.1

1.13.0

1.13.0 (2025-10-24)

Features Added

Other Changes

  • Upgraded Azure.Core from 1.48.0 to 1.49.0

1.13.0-beta.1

1.13.0-beta.1 (2025-10-22)

Features Added

1.11.2

1.11.2 (2025-10-16)

Bugs Fixed

  • Fixed an issue in ArmDeploymentOperationProperties deserialization where StatusCode could be either a string or a number in JSON, causing InvalidOperationException when parsing an integer StatusCode.

1.8.1

1.8.1 (2025-11-10)

Bugs Fixed

  • Fixed an issue with JsonPatch.TryGetValue throwing instead of returning false in some cases.
  • Fixed an issue with JsonPatch decoding special characters in json when using GetString.

1.8.0

1.8.0 (2025-10-31)

Features Added

  • Added ClientRequestId property to PipelineRequest which exposes the value that is used in logging and distributed tracing.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Json from 8.0.0 to 8.0.1.

Release notes

Sourced from Microsoft.Extensions.Configuration.Json's releases.

8.0.1

Release

Commits viewable in compare view.

Updated Microsoft.Extensions.Http from 8.0.0 to 8.0.1.

Release notes

Sourced from Microsoft.Extensions.Http's releases.

8.0.1

Release

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging from 8.0.0 to 8.0.1.

Release notes

Sourced from Microsoft.Extensions.Logging's releases.

8.0.1

Release

Commits viewable in compare view.

Updated Microsoft.IdentityModel.Protocols.OpenIdConnect from 7.5.1 to 7.7.1.

Release notes

Sourced from Microsoft.IdentityModel.Protocols.OpenIdConnect's releases.

7.7.1

7.7.1

Bug Fix

  • Re-add JsonSerializerPrimitives.TryAllStringClaimsAsDateTime which was removed as it is in an internal class, but due to InternalsVisibleTo can lead to a MissingMethodException if IdentityModel versions are not aligned. See PR #​2734 for details.

7.7.0

7.7.0

CVE package updates

CVE-2024-30105

  • A derived ClaimsIdentity where claim retrieval is case-sensitive. The current ClaimsIdentity, in .NET, retrieves claims in a case-insensitive manner which is different than querying the underlying SecurityToken. The new CaseSensitiveClaimsIdentity class provides consistent retrieval logic with SecurityToken. Opt in to the new behavior via an AppContext switch. See PR #​2715 for details.

Performance improvement

7.6.2

7.6.2

Bug Fix:

  • Revert reduced allocations in AadIssuerValidator by not using string.Replace where appropriate due to an index out-of-range error.

7.6.1

7.6.1

New Features:

  • Add missing metadata parameters to OpenIdConnectConfiguration. See issue #​2498 for details.

Bug Fixes:

  • Fix over-reporting of IDX14100. See issue #​2058 and PR #​2618 for details.
  • JwtRegisteredClaimNames now contains previously missing Standard OpenIdConnect claims. See issue #​1598 for details.

Performance Improvements:

  • Reduced allocations in AadIssuerValidator by not using string.Replace where appropriate. See issue #​2595 and PR #​2597 for more details.
  • No longer for every string claim, calling DateTime.TryParse on each value, whether it is expected to be a DateTime or not. See issue #​2615 for details.

7.6.0

7.6.0

New Features:

  • Update JsonWebToken - extract and expose the method that reads the header/payload property values from the reader so it can be overridden in children classes to add any extra own logic. See issues #​2581, #​2583, and #​2495 for details.

Bug Fixes:

  • JWE header algorithm is now compliant to IANA document. See issue #​2089 for details.

Performance Improvements:

  • Reduce the number of internal array allocations that need to happen for each claim set, see PR #​2596.

Fundamentals:

  • Add an AOT compatibility check on each PR to ensure only AOT compatible code is checked-in. See PR #​2598.
  • Update perl scrip for OneBranch build. See PR #​2602.
  • Add langversion 12 to benchmark tests. See PR #​2601.
  • Removed unused build.cmd file. See PR #​2605.
  • Create CodeQL exclusions file. See PR #​2609.
  • Fix variable usage in AOT script. See PR #​2610.
  • Move Microsoft.IdentityModel.Tokens delegates to a new file. See PR #​2606

7.5.2

7.5.2

Bug Fixes:

  • Validate authentication tag length so a JWE with appended characters will not be considered a valid token. See issues #​2201, #​1641, PR #​2569, and IDX10625 Wiki for details. By @​kellyyangsong

Fundamentals:

  • App Context Switches in Identity Model 7x are now documented here. By @​kellyyangsong

Performance Improvements:

  • In .NET 6 or greater, use a temporary buffer to reduce intermediate allocation in VerifyRsa/VerifyECDsa. See PR #​2589 for more details. By @​eerhardt
  • Reduce allocations in ValidateSignature by using a collection expression instead of new List<SecurityKey> { key }, to optimize for the single element case. See PR #​2586 for more details. By @​eerhardt
  • Remove Task allocation in AadIssuerValidator. See PR #​2584 for more details. By @​eerhardt

Commits viewable in compare view.

Updated System.IdentityModel.Tokens.Jwt from 7.5.1 to 7.7.1.

Release notes

Sourced from System.IdentityModel.Tokens.Jwt's releases.

7.7.1

7.7.1

Bug Fix

  • Re-add JsonSerializerPrimitives.TryAllStringClaimsAsDateTime which was removed as it is in an internal class, but due to InternalsVisibleTo can lead to a MissingMethodException if IdentityModel versions are not aligned. See PR #​2734 for details.

7.7.0

7.7.0

CVE package updates

CVE-2024-30105

  • A derived ClaimsIdentity where claim retrieval is case-sensitive. The current ClaimsIdentity, in .NET, retrieves claims in a case-insensitive manner which is different than querying the underlying SecurityToken. The new CaseSensitiveClaimsIdentity class provides consistent retrieval logic with SecurityToken. Opt in to the new behavior via an AppContext switch. See PR #​2715 for details.

Performance improvement

7.6.2

7.6.2

Bug Fix:

  • Revert reduced allocations in AadIssuerValidator by not using string.Replace where appropriate due to an index out-of-range error.

7.6.1

7.6.1

New Features:

  • Add missing metadata parameters to OpenIdConnectConfiguration. See issue #​2498 for details.

Bug Fixes:

  • Fix over-reporting of IDX14100. See issue #​2058 and PR #​2618 for details.
  • JwtRegisteredClaimNames now contains previously missing Standard OpenIdConnect claims. See issue #​1598 for details.

Performance Improvements:

  • Reduced allocations in AadIssuerValidator by not using string.Replace where appropriate. See issue #​2595 and PR #​2597 for more details.
  • No longer for every string claim, calling DateTime.TryParse on each value, whether it is expected to be a DateTime or not. See issue #​2615 for details.

7.6.0

7.6.0

New Features:

  • Update JsonWebToken - extract and expose the method that reads the header/payload property values from the reader so it can be overridden in children classes to add any extra own logic. See issues #​2581, #​2583, and #​2495 for details.

Bug Fixes:

  • JWE header algorithm is now compliant to IANA document. See issue #​2089 for details.

Performance Improvements:

  • Reduce the number of internal array allocations that need to happen for each claim set, see PR #​2596.

Fundamentals:

  • Add an AOT compatibility check on each PR to ensure only AOT compatible code is checked-in. See PR #​2598.
  • Update perl scrip for OneBranch build. See PR #​2602.
  • Add langversion 12 to benchmark tests. See PR #​2601.
  • Removed unused build.cmd file. See PR #​2605.
  • Create CodeQL exclusions file. See PR #​2609.
  • Fix variable usage in AOT script. See PR #​2610.
  • Move Microsoft.IdentityModel.Tokens delegates to a new file. See PR #​2606

7.5.2

7.5.2

Bug Fixes:

  • Validate authentication tag length so a JWE with appended characters will not be considered a valid token. See issues #​2201, #​1641, PR #​2569, and IDX10625 Wiki for details. By @​kellyyangsong

Fundamentals:

  • App Context Switches in Identity Model 7x are now documented here. By @​kellyyangsong

Performance Improvements:

  • In .NET 6 or greater, use a temporary buffer to reduce intermediate allocation in VerifyRsa/VerifyECDsa. See PR #​2589 for more details. By @​eerhardt
  • Reduce allocations in ValidateSignature by using a collection expression instead of new List<SecurityKey> { key }, to optimize for the single element case. See PR #​2586 for more details. By @​eerhardt
  • Remove Task allocation in AadIssuerValidator. See PR #​2584 for more details. By @​eerhardt

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Azure.Identity to 1.12.0, 1.17.1
Bumps Microsoft.ApplicationInsights.WorkerService from 2.22.0 to 2.23.0
Bumps Microsoft.Azure.Functions.Worker from 1.21.0 to 1.24.0
Bumps Microsoft.Azure.Functions.Worker.ApplicationInsights from 1.2.0 to 1.4.0
Bumps Microsoft.Azure.Functions.Worker.Extensions.Http from 3.1.0 to 3.3.0
Bumps Microsoft.Azure.Functions.Worker.Extensions.Http.AspNetCore from 1.2.1 to 1.3.3
Bumps Microsoft.Azure.Functions.Worker.Sdk from 1.17.2 to 1.18.1
Bumps Microsoft.Extensions.Azure from 1.7.3 to 1.13.1
Bumps Microsoft.Extensions.Configuration.Json from 8.0.0 to 8.0.1
Bumps Microsoft.Extensions.Http from 8.0.0 to 8.0.1
Bumps Microsoft.Extensions.Logging from 8.0.0 to 8.0.1
Bumps Microsoft.IdentityModel.Protocols.OpenIdConnect from 7.5.1 to 7.7.1
Bumps System.IdentityModel.Tokens.Jwt from 7.5.1 to 7.7.1

---
updated-dependencies:
- dependency-name: Microsoft.ApplicationInsights.WorkerService
  dependency-version: 2.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft-packages
- dependency-name: Microsoft.Azure.Functions.Worker
  dependency-version: 1.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft-packages
- dependency-name: Azure.Identity
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft-packages
- dependency-name: Microsoft.Azure.Functions.Worker.ApplicationInsights
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft-packages
- dependency-name: Microsoft.Azure.Functions.Worker.Extensions.Http
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft-packages
- dependency-name: Microsoft.Azure.Functions.Worker.Extensions.Http.AspNetCore
  dependency-version: 1.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft-packages
- dependency-name: Microsoft.Azure.Functions.Worker.Sdk
  dependency-version: 1.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft-packages
- dependency-name: Azure.Identity
  dependency-version: 1.17.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft-packages
- dependency-name: Microsoft.Extensions.Azure
  dependency-version: 1.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft-packages
- dependency-name: Microsoft.Extensions.Logging
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-packages
- dependency-name: Microsoft.Extensions.Configuration.Json
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-packages
- dependency-name: Microsoft.Extensions.Http
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-packages
- dependency-name: Microsoft.IdentityModel.Protocols.OpenIdConnect
  dependency-version: 7.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft-packages
- dependency-name: System.IdentityModel.Tokens.Jwt
  dependency-version: 7.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft-packages
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Dec 2, 2025

Labels

The following labels could not be found: azure-functions, dependencies, dotnet, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants