Skip to content

Commit

Permalink
Bump Microsoft.Identity.Web from 2.15.1 to 2.15.3 in /webapi (#534)
Browse files Browse the repository at this point in the history
Bumps
[Microsoft.Identity.Web](https://github.com/AzureAD/microsoft-identity-web)
from 2.15.1 to 2.15.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/AzureAD/microsoft-identity-web/releases">Microsoft.Identity.Web's
releases</a>.</em></p>
<blockquote>
<h1>2.15.3</h1>
<ul>
<li>Update Azure.Identity library to 1.10.2 for CVE-2023-36414.</li>
</ul>
<h3>Bug Fixes:</h3>
<ul>
<li>Microsoft.Identity.Web honors the user-provided value for the cache
expiry for in-memory cache. See <a
href="https://redirect.github.com/AzureAD/microsoft-identity-web/issues/2466">#2466</a>
for details.</li>
</ul>
<h1>2.15.2</h1>
<ul>
<li>For the .NET 8 rc2 target framework, the IdentityModel dependencies
have been updated to Identity.Model.*.7.0.3.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>Fixes a regression introduced in 2.15.0 where the OnTokenValidated
delegates were no longer chained with an await. See issue<a
href="https://redirect.github.com/AzureAD/microsoft-identity-web/issues/2513">#2513</a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/AzureAD/microsoft-identity-web/blob/master/changelog.md">Microsoft.Identity.Web's
changelog</a>.</em></p>
<blockquote>
<h1>2.15.3</h1>
<ul>
<li>Update Azure.Identity library to 1.10.2 for CVE-2023-36414.</li>
</ul>
<h3>Bug Fixes:</h3>
<ul>
<li>Microsoft.Identity.Web honors the user-provided value for the cache
expiry for in-memory cache. See <a
href="https://redirect.github.com/AzureAD/microsoft-identity-web/issues/2466">#2466</a>
for details.</li>
</ul>
<h1>2.15.2</h1>
<ul>
<li>For the .NET 8 rc2 target framework, the IdentityModel dependencies
have been updated to Identity.Model.*.7.0.3.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>Fixes a regression introduced in 2.15.0 where the OnTokenValidated
delegates were no longer chained with an await. See issue<a
href="https://redirect.github.com/AzureAD/microsoft-identity-web/issues/2513">#2513</a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/AzureAD/microsoft-identity-web/commit/36022d48700ae3dae36b705bb43122d30ba20611"><code>36022d4</code></a>
changelog for 2.15.3 release (<a
href="https://redirect.github.com/AzureAD/microsoft-identity-web/issues/2540">#2540</a>)</li>
<li><a
href="https://github.com/AzureAD/microsoft-identity-web/commit/f2474ba1806fb3f1ad84d8b7637ad7ee3ad74064"><code>f2474ba</code></a>
update Azure Identity to 1.10.2 (<a
href="https://redirect.github.com/AzureAD/microsoft-identity-web/issues/2539">#2539</a>)</li>
<li><a
href="https://github.com/AzureAD/microsoft-identity-web/commit/51de97e59e1786ab1815c73e56d304e49a09dbda"><code>51de97e</code></a>
Update in-memory cache expiry to take into account user-provided value
(<a
href="https://redirect.github.com/AzureAD/microsoft-identity-web/issues/2514">#2514</a>)</li>
<li><a
href="https://github.com/AzureAD/microsoft-identity-web/commit/eb5233fdf5a4299a17bc218aeefba67fca2412dd"><code>eb5233f</code></a>
Bump Microsoft.Identity.Client from 4.56.0 to 4.57.0 (<a
href="https://redirect.github.com/AzureAD/microsoft-identity-web/issues/2538">#2538</a>)</li>
<li><a
href="https://github.com/AzureAD/microsoft-identity-web/commit/7e4b725427c8e07bd602793912b922a17b8fd404"><code>7e4b725</code></a>
add link to build and testing doc (<a
href="https://redirect.github.com/AzureAD/microsoft-identity-web/issues/2537">#2537</a>)</li>
<li><a
href="https://github.com/AzureAD/microsoft-identity-web/commit/fdc5734e0340a209ee182587eb8d14441c6ed544"><code>fdc5734</code></a>
Bump Azure.Identity in /tools/app-provisioning-tool/app-provisioning-lib
(<a
href="https://redirect.github.com/AzureAD/microsoft-identity-web/issues/2534">#2534</a>)</li>
<li><a
href="https://github.com/AzureAD/microsoft-identity-web/commit/62d8904cd30e6165c0466fe102c8130e08031e23"><code>62d8904</code></a>
Bump Microsoft.Identity.Web.UI from 2.15.1 to 2.15.2 (<a
href="https://redirect.github.com/AzureAD/microsoft-identity-web/issues/2533">#2533</a>)</li>
<li><a
href="https://github.com/AzureAD/microsoft-identity-web/commit/1155ca1e08a6eaa521dbaac27c6515dced446985"><code>1155ca1</code></a>
Bump Microsoft.Identity.Web.DownstreamApi from 2.15.1 to 2.15.2 (<a
href="https://redirect.github.com/AzureAD/microsoft-identity-web/issues/2532">#2532</a>)</li>
<li><a
href="https://github.com/AzureAD/microsoft-identity-web/commit/24490b2bccc3c15138a0b3ff321a0b20cd62edfd"><code>24490b2</code></a>
Add new contributing.md (<a
href="https://redirect.github.com/AzureAD/microsoft-identity-web/issues/2528">#2528</a>)</li>
<li><a
href="https://github.com/AzureAD/microsoft-identity-web/commit/cbb297a1c8bff8f87ac36d8871b1f5a0232730c9"><code>cbb297a</code></a>
Bump Microsoft.Identity.Web from 2.15.1 to 2.15.2 (<a
href="https://redirect.github.com/AzureAD/microsoft-identity-web/issues/2531">#2531</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/AzureAD/microsoft-identity-web/compare/2.15.1...2.15.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=Microsoft.Identity.Web&package-manager=nuget&previous-version=2.15.1&new-version=2.15.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  • Loading branch information
dependabot[bot] authored Oct 23, 2023
1 parent d948585 commit 8cbc9db
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion webapi/CopilotChatWebApi.csproj
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@
<PackageReference Include="Azure.Extensions.AspNetCore.Configuration.Secrets" Version="1.2.2" />
<PackageReference Include="Microsoft.ApplicationInsights.AspNetCore" Version="2.21.0" />
<PackageReference Include="Microsoft.Azure.Cosmos" Version="3.35.4" />
<PackageReference Include="Microsoft.Identity.Web" Version="2.15.1" />
<PackageReference Include="Microsoft.Identity.Web" Version="2.15.3" />
<PackageReference Include="Microsoft.SemanticKernel" Version="0.24.230918.1-preview" />
<PackageReference Include="Microsoft.SemanticKernel.Connectors.AI.OpenAI" Version="0.24.230918.1-preview" />
<PackageReference Include="Microsoft.SemanticKernel.Connectors.Memory.AzureCognitiveSearch" Version="0.24.230918.1-preview" />
Expand Down

0 comments on commit 8cbc9db

Please sign in to comment.