Skip to content

chore(deps): Bump Microsoft.IdentityModel.Protocols.OpenIdConnect and 3 others #161

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 23, 2025

Updated Microsoft.IdentityModel.Protocols.OpenIdConnect from 8.12.1 to 8.13.0.

Release notes

Sourced from Microsoft.IdentityModel.Protocols.OpenIdConnect's releases.

8.13.0

8.13.0

Fundamentals

  • CaseSensitiveClaimsIdentity.SecurityToken setter is now protected internal (was internal). See PR #​3278 for details.
  • Update .NET SDK version to 9.0.108 used when building or running the code. See PR #​3274 for details.
  • Update RsaSecurityKey.cs to replace the Pkcs1 padding by Pss from HasPrivateKey check. See #​3280 for details.

What's Changed

New Contributors

Full Changelog: AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@8.12.1...8.13.0

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 16.9.4 to 17.14.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

17.14.1

What's Changed

Full Changelog: microsoft/vstest@v17.14.0...v17.14.1

17.14.0

What's Changed

.NET versions updated

This version of VS Test upgraded .NET to net8 and net9. All projects targeting net6.0 (or other end-of-life .NET target frameworks) should pin their version of Microsoft.NET.Test.SDK to 17.13.0, or update the projects to net8 or newer. We remain backwards compatible with previous versions of Microsoft.NET.Test.SDK. This change does NOT prevent you from:

  • Updating to the latest VS, and running tests from net6.0 test projects.
  • Updating to the latest .NET SDK, and running tests from net6.0 test projects.

It also has no impact on .NET Framework projects, where we continue targeting .NET Framework 4.6.2.

Changes

Internal version updates and fixes

New Contributors

17.14.0-preview-25107-01

What's Changed

.NET versions updated

This version of VS Test upgraded .NET to net8 and net9. All projects targeting net6.0 (or other end-of-life .NET target frameworks) should pin their version of Microsoft.NET.Test.SDK to 17.13.0, or update the projects to net8 or newer. We remain backwards compatible with previous versions of Microsoft.NET.Test.SDK. This change does NOT prevent you from:

  • Updating to the latest VS, and running tests from net6.0 test projects.
  • Updating to the latest .NET SDK, and running tests from net6.0 test projects.

It also has no impact on .NET Framework projects, where we continue targeting .NET Framework 4.6.2.

Changes

Internal version updates and fixes

Will probably revert before release:

New Contributors

Full Changelog: microsoft/vstest@v17.13.0...v17.14.0-preview-25107-01

17.13.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v17.12.0...v17.13.0

17.12.0

What's Changed

Internal and infrastructure fixes:

Full Changelog: microsoft/vstest@v17.11.1...v17.12.0

17.11.1

What's Changed

Full Changelog: microsoft/vstest@v17.11.0...v17.11.1

17.11.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v17.10.0...v17.11.0-release-24352-06

17.11.0-release-24373-02

What's Changed

Full Changelog: microsoft/vstest@v17.11.0-release-24352-06...v17.11.0-release-24373-02

17.11.0-release-24352-06

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v17.10.0...v17.11.0-release-24352-06

17.10.0

What's Changed

And many infrastructure related changes and updates.

New Contributors

Full Changelog: microsoft/vstest@v17.9.0...v17.10.0

17.10.0-release-24177-07

What's Changed

New Contributors

And many infrastructure related changes to migrate our pipelines to common build system.

Full Changelog: microsoft/vstest@v17.10.0-preview-24080-01...v17.10.0-release-24177-07

17.10.0-preview-24080-01

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v17.9.0-preview-23577-04...v17.10.0-preview-24080-01

17.9.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v17.8.0...v17.9.0

17.9.0-release-23619-01

What's Changed

Full Changelog: microsoft/vstest@v17.9.0-preview-23577-04...v17.9.0-release-23619-01

17.9.0-preview-23577-04

What's Changed

  • Updated VSSDK.BuildTools version by @​cvpoienaru in #​4765
  • Update dump client to latest by @​nohwnd in #​4724
  • Fix staircase in logger by @​nohwnd in #​4756
  • Create a proper MSBuild ToolTask based VSTestTask by @​nohwnd in #​2702
  • Fix CPU is consumed by polling frequently when there is no subscriber by @​nohwnd, @​cvpoienaru in #​4735
  • Remove javascript in HtmlLogger by @​daveMueller in #​4744
  • Update VSIX metadata by @​nohwnd in #​4550
  • Add platform guard by @​dotMorten in #​4737

Full Changelog: microsoft/vstest@v17.9.0-preview-23531-01...v17.9.0-preview-23577-04

17.9.0-preview-23531-01

What's Changed

Full Changelog: microsoft/vstest@v17.9.0-preview-23503-02...v17.9.0-preview-23531-01

17.9.0-preview-23503-02

What's Changed

  • Remove dependency on Nuget.Frameworks by @​nohwnd in #​4693

Full Changelog: microsoft/vstest@v17.8.0-release-23468-02...v17.9.0-preview-23503-02

17.8.0

What's Changed

Full Changelog: microsoft/vstest@v17.7.2...v17.8.0

17.8.0-release-23468-02

What's Changed

  • Upgrade Newtonsoft.Json from 13.0.1 to 13.0.3 by @​mthalman in #​4681

Full Changelog: microsoft/vstest@v17.8.0-preview-23424-02...v17.8.0-release-23468-02

17.8.0-preview-23424-02

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v17.8.0-preview-23371-04...v17.8.0-preview-23424-02

17.8.0-preview-23371-04

Issues Fixed

  • Take System dlls from testhost folder #​4610
  • Simplify naming in ExecutionTests
  • Fix XmlException when writing Html log with certain test names #​4576

Full Changelog: here

Drops

17.7.2

What's Changed

Full Changelog: microsoft/vstest@v17.7.1...v17.7.2

17.7.1

What's Changed

  • Take System dlls from testhost folder to fix running .NET Framework dlls on mono and under VS on Mac in #​4610 by @​Evangelink
  • Fix hangs in parallel execution and discovery in #​4629 by @​nohwnd
  • Fix executable bitness for testhost.x86 in #​4654 by @​nohwnd

Full Changelog: microsoft/vstest@v17.7.0...v17.7.1

17.7.0

⚠️ Microsoft.TestPlatform 17.7.0 nuget package is hidden from Nuget.org, we've encountered an unexpected issue with versioning which prevents it from being used in all AzDO clients. We are working on a fix.

The most pressing issues were all backported to 17.6.1, 17.6.2 and 17.6.3.

Issues fixed (since 17.6.3)

  • Don't print socket transport error in console by @​nohwnd in #​4493 which fixes #​4461
    When testhost crashes, we no longer print the transport error:

     ---> System.Exception: Unable to read data from the transport connection: 
     		An existing connection was forcibly closed by the remote host..
    

    This error is a side-effect or our architecture is almost never the culprit. Instead it leads developers away from the actual issue which is crash of testhost, or datacollector.

  • Pass workloads to proxy managers in #​4422 by @​nohwnd
    Which allows datacollector users to only receive the sources that are currently running in the testhost associated to datacollector, instead of all the sources that have the same target framework.

  • Fix Newtonsoft versions in testhost.deps.json in #​4367 by @​nohwnd
    testhost.runtimeconfig.json files that we ship with testhost contained an old version of Newtonsoft.Json. The version in this file does not have an effect on execution, but some compliance tools statically analyze it and report possible vulnerabilities.

Other fixes:

  • Replacing calls to BuildMultipleAssemblyPath when passing only one source in acceptance tests in #​4358 by @​daveMueller
  • Check for null Path in #​4391 by @​lewing
  • Remove unused variable in #​4425 by @​mthalman
  • Fix execution gets stucks on single netstandard source by @​nohwnd in #​4497 which fixes #​4392
  • TestObject use ConcurrentDictionary instead of Dictionary in #​4450 by @​Evangelink
  • Drop usage of Microsoft.Internal.TestPlatform.Remote in #​4456 by @​Evangelink

Special thanks to @​SimonCropp for the many fixes regarding nullability spelling and code style in #​4518, #​4520, #​4525, #​4526, #​4521, #​4519, #​4522, #​4529 🙇

Full Changelog: microsoft/vstest@v17.6.3...v17.7.0

Drops

  • Microsoft.TestPlatform.ObjectModel : v17.7.0

17.7.0-preview-23364-03

Issues Fixed

  • Trim away netframework targets in source-build #​4357
  • Re-enable publishing nugets, don't continue on error #​4356
  • Merged PR 30352: arcade into main
  • Merged PR 29591: Onboard to arcade

Full Changelog: here

Drops

17.7.0-preview.23280.1

⚠️ This version of Microsoft.TestPlatform nuget was unlisted on Nuget.org, because it causes issues when running tests in AzureDevOps, when VSTest installer is used, and configured to pick up the latest preview version (#​4544).


What is new since 17.6.0?

Version 17.7.0 was filled with moving our infrastructure to build via Arcade, which brought us a more unified build experience and better cooperation with other teams in dotnet organization.

This migration brought a major change to our versioning of preview packages, which will no longer follow the 17.6.0-preview-20230223-05 (<version>-preview<date>-<build>).

Fixes

When test run aborts we are no longer printing the connection related error:

System.Exception: One or more errors occurred.
 ---> System.Exception: Unable to read data from the transport connection: An existing connection was forcibly closed by the remote host..
 ---> System.Exception: An existing connection was forcibly closed by the remote host.
   at System.Net.Sockets.NetworkStream.Read(Span`1 buffer)

This error is a common source of confusion, and is not actionable for the user. It simply means that testhost crashed, and the testhost error follows after it, or that logs need to be inspected.

When both --blame-hang and --blame-crash are specified on Windows, and hang dump is triggered then stopping ProcDump is subject to a race condition. Stopping ProcDump too early causes testhost to crash and no dump (nor the hang dump or the crash dump) is generated. This release fixes this issue by waiting for crash dump to finish.

Regressions from 17.5.0 causing crashes of TestHost when .NET Standard dlls, or TestPlatform own dlls are provided for run are fixed, and a list of dlls that are known platform dlls are excluded.

Data collectors consuming the dlls that are run are now provided only paths to dlls that the current testhost is running, rather than all dlls that were provided to the run.

Additional fixes

New Contributors

... (truncated)

17.6.3

Issues Fixed

  • [rel/17.6] Update version to 17.6.3 by @​nohwnd in #​4555
  • [rel/17.6] Disable pre-start of testhosts by @​nohwnd in #​4554

Full Changelog: microsoft/vstest@v17.6.2...v17.6.3

Artifacts

  • TestPlatform vsix: 17.6.3
  • Microsoft.TestPlatform.ObjectModel : 17.6.3

17.6.2

Fixes

This patch addresses the problems that were introduced in 17.6.0 that happen when running on AzDo with the default test.dll filter, which includes additional TestPlatform dlls into the run and fails it.

To mitigate this issue we solved the bug in 17.6.1, and added additional exclusions for known assemblies that are coming from TestPlatform and commonly used test adapters, to avoid trying to run tests from those assemblies.

Description and workarounds for this issue are available here: microsoft/vstest#4516

Full Changelog: microsoft/vstest@v17.6.1...v17.6.2

Artifacts
TestPlatform vsix: 17.6.2
Microsoft.TestPlatform.ObjectModel : 17.6.2

17.6.1

Issues Fixed

This is a tiny patch to fixup few latest issues,

Internal updates:

Full Changelog: microsoft/vstest@v17.6.0...v17.6.1

Artifacts

  • TestPlatform vsix: 17.6.1
  • Microsoft.TestPlatform.ObjectModel : 17.6.1

17.6.0

See the release notes here.

17.6.0-preview-20230223-05

See the release notes here.

17.5.0

See the release notes here.

17.5.0-preview-20221221-03

See the release notes here.

17.5.0-preview-20221003-04

See the release notes here.

17.4.1

See the release notes here.

17.4.0

See the release notes here.

17.4.0-preview-20221003-03

See the release notes here.

17.4.0-preview-20220726-02

See the release notes here.

17.4.0-preview-20220707-01

See the release notes here.

17.3.3

See the release notes here.

17.3.2

See the release notes here.

17.3.1

See the release notes here.

17.3.0

See the release notes here.

17.3.0-preview-20220612-01

See the release notes here.

17.3.0-preview-20220530-08

See the release notes here.

17.3.0-preview-20220426-02

See the release notes here.

17.2.1

See the release notes here.

17.2.0

See the release notes here.

17.2.0-preview-20220401-08

See the release notes here.

17.2.0-preview-20220401-07

See the release notes here.

17.2.0-preview-20220301-01

See the release notes here.

17.2.0-preview-20220131-20

See the release notes here.

17.1.0

See the release notes here.

17.1.0-release-20220113-05

See the release notes here.

17.1.0-preview-20211130-02

See the release notes here.

17.1.0-preview-20211109-03

See the release notes here.

17.0.2

See the release notes here.

17.0.0

See the release notes here.

16.11.0

See the release notes here.

16.10.0

See the release notes here.

16.10.0-release-20210429-01

See the release notes here.

16.10.0-release-20210422-02

See the release notes here.

16.10.0-release-20210330-02

See the release notes here.

16.10.0-release-20210329-03

See the release notes here.

16.10.0-preview-20210219-03

See the release notes here.

Commits viewable in compare view.

Updated System.Text.Encodings.Web from 8.0.0 to 9.0.7.

Release notes

Sourced from System.Text.Encodings.Web's releases.

9.0.7

Release

What's Changed

Full Changelog: dotnet/runtime@v9.0.6...v9.0.7

9.0.6

Bug Fixes

  • Read messages from binlog if process output is missing build finished message (#​114676)
    Improves reliability of the WebAssembly build process by reading messages from the binlog when the process output does not contain the expected build finished message, preventing build failures in certain scenarios.

  • Fix debugger app hangs related to thread exit (#​114917)
    Resolves an issue where applications could hang during debugging when threads exit, ensuring smoother debugging experiences and preventing deadlocks.

  • [Mono] Workaround MSVC miscompiling sgen_clz (#​114903)
    Addresses a compiler miscompilation issue in MSVC affecting the Mono garbage collector, improving runtime stability and correctness on affected platforms.

  • Do not set the salt or info if they are NULL for OpenSSL HKDF (#​114877)
    Fixes a cryptographic issue by ensuring that the salt or info parameters are not set when they are NULL in OpenSSL HKDF, preventing potential errors or unexpected behavior in key derivation.

  • [Test Only] Fix Idn tests (#​115032)
    Corrects issues in Internationalized Domain Name (Idn) tests, ensuring accurate and reliable test results for domain name handling.

  • JIT: revised fix for fp division issue in profile synthesis (#​115026)
    Provides a more robust fix for floating-point division issues in JIT profile synthesis, improving numerical accuracy and preventing incorrect calculations.

  • Handle OSSL 3.4 change to SAN:othername formatting (#​115361)
    Updates certificate handling to accommodate changes in Subject Alternative Name (SAN) formatting introduced in OpenSSL 3.4, ensuring compatibility and correct parsing of certificates.

  • [Mono] Fix c11 ARM64 atomics to issue full memory barrier (#​115635)
    Fixes atomic operations on ARM64 in Mono to issue a full memory barrier, ensuring correct synchronization and preventing subtle concurrency bugs.

Performance Improvements

  • [WinHTTP] Certificate caching on WinHttpHandler to eliminate extra call to Custom Certificate Validation (#​114678)
    Improves HTTP performance by caching certificates in WinHttpHandler, reducing redundant calls to custom certificate validation and speeding up secure connections.

  • Improve distribute_free_regions (#​115167)
    Optimizes memory management by enhancing the algorithm for distributing free memory regions, leading to better memory utilization and potentially improved application performance.

Technical Improvements

  • Strip trailing slash from source dir for cmake4 (#​114905)
    Refines build scripts by removing trailing slashes from source directories when using CMake 4, preventing potential build path issues and improving build reliability.

  • Don't expose TrustedCertificatesDirectory() and StartNewTlsSessionContext() to NetFx (#​114995)
    Restricts certain internal APIs from being exposed to .NET Framework, reducing surface area and preventing unintended usage.

  • Add support for more libicu versions (#​115376)
    Expands compatibility by supporting additional versions of the International Components for Unicode (ICU) library, enhancing globalization features across more environments.

Infrastructure

  • Run outerloop pipeline only for release branches, not staging/preview (#​115011)
    Optimizes CI/CD resources by limiting the outerloop pipeline to run only on release branches, reducing unnecessary test runs and speeding up development workflows.

... (truncated)

9.0.5

Release

What's Changed

9.0.4

Release

What's Changed

Description has been truncated

… 3 others

Bumps Microsoft.IdentityModel.Protocols.OpenIdConnect from 8.12.1 to 8.13.0
Bumps Microsoft.NET.Test.Sdk from 16.9.4 to 17.14.1
Bumps System.Text.Encodings.Web from 8.0.0 to 9.0.7
Bumps xunit.runner.visualstudio from 2.4.3 to 3.1.3

---
updated-dependencies:
- dependency-name: Microsoft.IdentityModel.Protocols.OpenIdConnect
  dependency-version: 8.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 17.14.1
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: System.Text.Encodings.Web
  dependency-version: 9.0.7
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: xunit.runner.visualstudio
  dependency-version: 3.1.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 23, 2025

Reviewers

The following teams could not be added as reviewers: dx-sdks-approver. Either the team does not exist or it does not have the correct permissions to be added as a reviewer.

Assignees

The following users could not be added as assignees: auth0/dx-sdks-approver. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Labels

The following labels could not be found: nuget. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 23, 2025

The reviewers field in the dependabot.yml file will be removed soon. Please use the code owners file to specify reviewers for Dependabot PRs. For more information, see this blog post.

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jul 23, 2025
@dependabot dependabot bot requested a review from a team as a code owner July 23, 2025 01:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants