Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Bump Microsoft.Identity.Web from 2.15.1 to 2.15.3 in /webapi (#534)
Bumps [Microsoft.Identity.Web](https://github.com/AzureAD/microsoft-identity-web) from 2.15.1 to 2.15.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/AzureAD/microsoft-identity-web/releases">Microsoft.Identity.Web's releases</a>.</em></p> <blockquote> <h1>2.15.3</h1> <ul> <li>Update Azure.Identity library to 1.10.2 for CVE-2023-36414.</li> </ul> <h3>Bug Fixes:</h3> <ul> <li>Microsoft.Identity.Web honors the user-provided value for the cache expiry for in-memory cache. See <a href="https://redirect.github.com/AzureAD/microsoft-identity-web/issues/2466">#2466</a> for details.</li> </ul> <h1>2.15.2</h1> <ul> <li>For the .NET 8 rc2 target framework, the IdentityModel dependencies have been updated to Identity.Model.*.7.0.3.</li> </ul> <h3>Bug Fixes</h3> <ul> <li>Fixes a regression introduced in 2.15.0 where the OnTokenValidated delegates were no longer chained with an await. See issue<a href="https://redirect.github.com/AzureAD/microsoft-identity-web/issues/2513">#2513</a>.</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/AzureAD/microsoft-identity-web/blob/master/changelog.md">Microsoft.Identity.Web's changelog</a>.</em></p> <blockquote> <h1>2.15.3</h1> <ul> <li>Update Azure.Identity library to 1.10.2 for CVE-2023-36414.</li> </ul> <h3>Bug Fixes:</h3> <ul> <li>Microsoft.Identity.Web honors the user-provided value for the cache expiry for in-memory cache. See <a href="https://redirect.github.com/AzureAD/microsoft-identity-web/issues/2466">#2466</a> for details.</li> </ul> <h1>2.15.2</h1> <ul> <li>For the .NET 8 rc2 target framework, the IdentityModel dependencies have been updated to Identity.Model.*.7.0.3.</li> </ul> <h3>Bug Fixes</h3> <ul> <li>Fixes a regression introduced in 2.15.0 where the OnTokenValidated delegates were no longer chained with an await. See issue<a href="https://redirect.github.com/AzureAD/microsoft-identity-web/issues/2513">#2513</a>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/AzureAD/microsoft-identity-web/commit/36022d48700ae3dae36b705bb43122d30ba20611"><code>36022d4</code></a> changelog for 2.15.3 release (<a href="https://redirect.github.com/AzureAD/microsoft-identity-web/issues/2540">#2540</a>)</li> <li><a href="https://github.com/AzureAD/microsoft-identity-web/commit/f2474ba1806fb3f1ad84d8b7637ad7ee3ad74064"><code>f2474ba</code></a> update Azure Identity to 1.10.2 (<a href="https://redirect.github.com/AzureAD/microsoft-identity-web/issues/2539">#2539</a>)</li> <li><a href="https://github.com/AzureAD/microsoft-identity-web/commit/51de97e59e1786ab1815c73e56d304e49a09dbda"><code>51de97e</code></a> Update in-memory cache expiry to take into account user-provided value (<a href="https://redirect.github.com/AzureAD/microsoft-identity-web/issues/2514">#2514</a>)</li> <li><a href="https://github.com/AzureAD/microsoft-identity-web/commit/eb5233fdf5a4299a17bc218aeefba67fca2412dd"><code>eb5233f</code></a> Bump Microsoft.Identity.Client from 4.56.0 to 4.57.0 (<a href="https://redirect.github.com/AzureAD/microsoft-identity-web/issues/2538">#2538</a>)</li> <li><a href="https://github.com/AzureAD/microsoft-identity-web/commit/7e4b725427c8e07bd602793912b922a17b8fd404"><code>7e4b725</code></a> add link to build and testing doc (<a href="https://redirect.github.com/AzureAD/microsoft-identity-web/issues/2537">#2537</a>)</li> <li><a href="https://github.com/AzureAD/microsoft-identity-web/commit/fdc5734e0340a209ee182587eb8d14441c6ed544"><code>fdc5734</code></a> Bump Azure.Identity in /tools/app-provisioning-tool/app-provisioning-lib (<a href="https://redirect.github.com/AzureAD/microsoft-identity-web/issues/2534">#2534</a>)</li> <li><a href="https://github.com/AzureAD/microsoft-identity-web/commit/62d8904cd30e6165c0466fe102c8130e08031e23"><code>62d8904</code></a> Bump Microsoft.Identity.Web.UI from 2.15.1 to 2.15.2 (<a href="https://redirect.github.com/AzureAD/microsoft-identity-web/issues/2533">#2533</a>)</li> <li><a href="https://github.com/AzureAD/microsoft-identity-web/commit/1155ca1e08a6eaa521dbaac27c6515dced446985"><code>1155ca1</code></a> Bump Microsoft.Identity.Web.DownstreamApi from 2.15.1 to 2.15.2 (<a href="https://redirect.github.com/AzureAD/microsoft-identity-web/issues/2532">#2532</a>)</li> <li><a href="https://github.com/AzureAD/microsoft-identity-web/commit/24490b2bccc3c15138a0b3ff321a0b20cd62edfd"><code>24490b2</code></a> Add new contributing.md (<a href="https://redirect.github.com/AzureAD/microsoft-identity-web/issues/2528">#2528</a>)</li> <li><a href="https://github.com/AzureAD/microsoft-identity-web/commit/cbb297a1c8bff8f87ac36d8871b1f5a0232730c9"><code>cbb297a</code></a> Bump Microsoft.Identity.Web from 2.15.1 to 2.15.2 (<a href="https://redirect.github.com/AzureAD/microsoft-identity-web/issues/2531">#2531</a>)</li> <li>Additional commits viewable in <a href="https://github.com/AzureAD/microsoft-identity-web/compare/2.15.1...2.15.3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=Microsoft.Identity.Web&package-manager=nuget&previous-version=2.15.1&new-version=2.15.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
- Loading branch information