Skip to content

Bump Azure.Core and 31 others - #275

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/UKHO.D365CallbackDistributorStub.API/UKHO.D365CallbackDistributorStub.API.Tests/all-packages-e4083336b5
Open

Bump Azure.Core and 31 others#275
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/UKHO.D365CallbackDistributorStub.API/UKHO.D365CallbackDistributorStub.API.Tests/all-packages-e4083336b5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Contributor

Updated Azure.Core from 1.55.0 to 1.64.0.

Release notes

Sourced from Azure.Core's releases.

1.64.0

1.64.0 (2026-10-26)

Features Added

  • Promoted AKS identity binding support in WorkloadIdentityCredential to general availability. WorkloadIdentityCredentialOptions.IsAzureProxyEnabled no longer requires suppressing experimental diagnostic AZID0002. Identity binding remains opt-in and isn't supported by DefaultAzureCredential or ManagedIdentityCredential.

Bugs Fixed

  • Fixed CA certificate reloads for an already-used Kubernetes token proxy in WorkloadIdentityCredential, so subsequent requests use the new CA without throwing or retaining the old trust configuration.

Commits viewable in compare view.

Updated Azure.Extensions.AspNetCore.Configuration.Secrets from 1.5.1 to 1.5.2.

Release notes

Sourced from Azure.Extensions.AspNetCore.Configuration.Secrets's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Azure.Security.KeyVault.Secrets from 4.11.0 to 4.12.0.

Release notes

Sourced from Azure.Security.KeyVault.Secrets's releases.

4.12.0

4.12.0 (2026-10-27)

Other Changes

  • Regenerated the library for stable Key Vault API version 2026-04-01.

4.12.0-beta.3

4.12.0-beta.3 (2026-10-08)

Bugs Fixed

  • Fixed an issue in the challenge-based authentication policy where a cached authentication challenge accepted with challenge resource verification disabled could be reused by a separate default-strict client without revalidating the challenge resource.
  • Improved authentication challenge resource validation.

4.11.2

4.11.2 (2026-10-02)

Bugs Fixed

  • Fixed handling of claims challenges when the authentication challenge cache is empty or cleared while a request is in flight.
  • Fixed an issue in the challenge-based authentication policy where a cached authentication challenge accepted with challenge resource verification disabled could be reused by a separate default-strict client without revalidating the challenge resource.
  • Improved authentication challenge resource validation.

Commits viewable in compare view.

Pinned Azure.Storage.Blobs at 12.30.1.

Release notes

Sourced from Azure.Storage.Blobs's releases.

12.30.1

12.30.1 (2026-10-05)

Bugs Fixed

  • Fixed AuthenticatedRegionCryptoStream.Dispose() to be idempotent and thread-safe, so the buffer it rents is no longer returned to the shared ArrayPool<byte> more than once when the stream is disposed repeatedly or concurrently. Returning the same array twice allowed unrelated callers to rent the same array instance and corrupt each other's data.

Commits viewable in compare view.

Pinned Azure.Storage.Queues at 12.28.1.

Release notes

Sourced from Azure.Storage.Queues's releases.

12.28.1

12.28.1 (2026-10-05)

Bugs Fixed

  • Fixed AuthenticatedRegionCryptoStream.Dispose() to be idempotent and thread-safe, so the buffer it rents is no longer returned to the shared ArrayPool<byte> more than once when the stream is disposed repeatedly or concurrently. Returning the same array twice allowed unrelated callers to rent the same array instance and corrupt each other's data.

Commits viewable in compare view.

Updated Elastic.Apm from 1.34.1 to 1.36.0.

Release notes

Sourced from Elastic.Apm's releases.

1.36.0

What's Changed

Enhancements

Full Changelog: elastic/apm-agent-dotnet@v1.35.0...v1.36.0

1.35.0

Breaking Changes

[!IMPORTANT]
The OpenTelemetry Bridge no longer subscribes to activity sources whose names begin with Experimental.. On .NET 9 and later the runtime uses that prefix for sources describing connection level work (DNS resolution, socket connect, TLS handshake, HTTP connection setup), and they only emit while a listener is subscribed to them. On .NET 9 and later, transactions which open a new HTTP connection no longer contain DNS lookup, socket connect, TLS client handshake, HTTP connection_setup and HTTP wait_for_connection spans. Applications running on .NET 8 and earlier are unaffected. To restore the previous behavior, set OpenTelemetryBridgeExperimentalSourcesEnabled to true.

The minimum supported MongoDB.Driver version has been raised to 3.9.0. Consumers referencing an earlier version receive a NU1605 build error when upgrading Elastic.Apm.MongoDb to this release. Update your MongoDB.Driver package reference to 3.9.0 or later before upgrading. For more information, check elastic/apm-agent-dotnet#2804.

The Elastic.Apm package now references System.Diagnostics.DiagnosticSource 8.0.1 on .NET Framework targets (net462 and net472). Classic ASP.NET applications that have hand-edited binding redirects for System.Diagnostics.DiagnosticSource in web.config may need to update those redirects. Visual Studio and the MSBuild GenerateBindingRedirects target can regenerate them automatically.

What's Changed

Full Changelog: elastic/apm-agent-dotnet@v1.34.7...v1.35.0

1.34.7

What's Changed

Fixes

New Contributors

Full Changelog: elastic/apm-agent-dotnet@v1.34.6...v1.34.7

1.34.6

What's Changed

Fixes

Full Changelog: elastic/apm-agent-dotnet@v1.34.5...v1.34.6

1.34.5

What's Changed

Fixes

Full Changelog: elastic/apm-agent-dotnet@v1.34.4...v1.34.5

1.34.4

What's Changed

Bug fixes

New Contributors

Full Changelog: elastic/apm-agent-dotnet@v1.34.3...v1.34.4

1.34.3

What's Changed

Bug fixes

Full Changelog: elastic/apm-agent-dotnet@v1.34.2...v1.34.3

1.34.2

What's Changed

Bug fixes

New Contributors

Full Changelog: elastic/apm-agent-dotnet@v1.34.1...v1.34.2

Commits viewable in compare view.

Updated Elastic.Apm.Azure.Storage from 1.34.1 to 1.36.0.

Release notes

Sourced from Elastic.Apm.Azure.Storage's releases.

1.36.0

What's Changed

Enhancements

Full Changelog: elastic/apm-agent-dotnet@v1.35.0...v1.36.0

1.35.0

Breaking Changes

[!IMPORTANT]
The OpenTelemetry Bridge no longer subscribes to activity sources whose names begin with Experimental.. On .NET 9 and later the runtime uses that prefix for sources describing connection level work (DNS resolution, socket connect, TLS handshake, HTTP connection setup), and they only emit while a listener is subscribed to them. On .NET 9 and later, transactions which open a new HTTP connection no longer contain DNS lookup, socket connect, TLS client handshake, HTTP connection_setup and HTTP wait_for_connection spans. Applications running on .NET 8 and earlier are unaffected. To restore the previous behavior, set OpenTelemetryBridgeExperimentalSourcesEnabled to true.

The minimum supported MongoDB.Driver version has been raised to 3.9.0. Consumers referencing an earlier version receive a NU1605 build error when upgrading Elastic.Apm.MongoDb to this release. Update your MongoDB.Driver package reference to 3.9.0 or later before upgrading. For more information, check elastic/apm-agent-dotnet#2804.

The Elastic.Apm package now references System.Diagnostics.DiagnosticSource 8.0.1 on .NET Framework targets (net462 and net472). Classic ASP.NET applications that have hand-edited binding redirects for System.Diagnostics.DiagnosticSource in web.config may need to update those redirects. Visual Studio and the MSBuild GenerateBindingRedirects target can regenerate them automatically.

What's Changed

Full Changelog: elastic/apm-agent-dotnet@v1.34.7...v1.35.0

1.34.7

What's Changed

Fixes

New Contributors

Full Changelog: elastic/apm-agent-dotnet@v1.34.6...v1.34.7

1.34.6

What's Changed

Fixes

Full Changelog: elastic/apm-agent-dotnet@v1.34.5...v1.34.6

1.34.5

What's Changed

Fixes

Full Changelog: elastic/apm-agent-dotnet@v1.34.4...v1.34.5

1.34.4

What's Changed

Bug fixes

New Contributors

Full Changelog: elastic/apm-agent-dotnet@v1.34.3...v1.34.4

1.34.3

What's Changed

Bug fixes

Full Changelog: elastic/apm-agent-dotnet@v1.34.2...v1.34.3

1.34.2

What's Changed

Bug fixes

New Contributors

Full Changelog: elastic/apm-agent-dotnet@v1.34.1...v1.34.2

Commits viewable in compare view.

Updated Elastic.Apm.NetCoreAll from 1.34.1 to 1.36.0.

Release notes

Sourced from Elastic.Apm.NetCoreAll's releases.

1.36.0

What's Changed

Enhancements

Full Changelog: elastic/apm-agent-dotnet@v1.35.0...v1.36.0

1.35.0

Breaking Changes

[!IMPORTANT]
The OpenTelemetry Bridge no longer subscribes to activity sources whose names begin with Experimental.. On .NET 9 and later the runtime uses that prefix for sources describing connection level work (DNS resolution, socket connect, TLS handshake, HTTP connection setup), and they only emit while a listener is subscribed to them. On .NET 9 and later, transactions which open a new HTTP connection no longer contain DNS lookup, socket connect, TLS client handshake, HTTP connection_setup and HTTP wait_for_connection spans. Applications running on .NET 8 and earlier are unaffected. To restore the previous behavior, set OpenTelemetryBridgeExperimentalSourcesEnabled to true.

The minimum supported MongoDB.Driver version has been raised to 3.9.0. Consumers referencing an earlier version receive a NU1605 build error when upgrading Elastic.Apm.MongoDb to this release. Update your MongoDB.Driver package reference to 3.9.0 or later before upgrading. For more information, check elastic/apm-agent-dotnet#2804.

The Elastic.Apm package now references System.Diagnostics.DiagnosticSource 8.0.1 on .NET Framework targets (net462 and net472). Classic ASP.NET applications that have hand-edited binding redirects for System.Diagnostics.DiagnosticSource in web.config may need to update those redirects. Visual Studio and the MSBuild GenerateBindingRedirects target can regenerate them automatically.

What's Changed

Full Changelog: elastic/apm-agent-dotnet@v1.34.7...v1.35.0

1.34.7

What's Changed

Fixes

New Contributors

Full Changelog: elastic/apm-agent-dotnet@v1.34.6...v1.34.7

1.34.6

What's Changed

Fixes

Full Changelog: elastic/apm-agent-dotnet@v1.34.5...v1.34.6

1.34.5

What's Changed

Fixes

Full Changelog: elastic/apm-agent-dotnet@v1.34.4...v1.34.5

1.34.4

What's Changed

Bug fixes

New Contributors

Full Changelog: elastic/apm-agent-dotnet@v1.34.3...v1.34.4

1.34.3

What's Changed

Bug fixes

Full Changelog: elastic/apm-agent-dotnet@v1.34.2...v1.34.3

1.34.2

What's Changed

Bug fixes

New Contributors

Full Changelog: elastic/apm-agent-dotnet@v1.34.1...v1.34.2

Commits viewable in compare view.

Updated Elastic.Clients.Elasticsearch from 9.1.10 to 9.5.3.

Release notes

Sourced from Elastic.Clients.Elasticsearch's releases.

9.5.3

[!WARNING]
This release contains a breaking change in the generated security types. Review the Breaking entry below before upgrading.

What's Changed

Full Changelog: elastic/elasticsearch-net@9.5.2...9.5.3

9.5.2

[!WARNING]
This release contains breaking changes in generated types. Please review the breaking changes listed below before upgrading.

What's Changed

  • Regenerate client by @​flobernd in [9.5] Regenerate client elastic/elasticsearch-net#8990
    • DenseVectorIndexOptions gains the bbq_disk properties AutoCalibrate, Bits, ClusterSize,
      DefaultVisitPercentage and Precondition.
    • DenseVectorIndexOptions.ConfidenceInterval is now marked [Obsolete] (deprecated since 9.5.0).
    • SourceFieldMode gains ColumnarStored (columnar_stored), so index templates and mappings that use the new mode
      no longer fail deserialization.
    • Breaking: InnerRetriever.Normalizer and InnerRetriever.Weight are now optional (ScoreNormalizer? and
      float? instead of required), following the spec change that made normalizer and weight optional on the linear
      retriever's inner retrievers. The [SetsRequiredMembers] constructor no longer takes normalizer and weight
      arguments.
    • Breaking: RoleDescriptor.Global, QueryRole.Global and RoleDescriptorRead.Global now use a single
      GlobalPrivilege instead of a collection, matching the server-side parser, which only accepts an object for the
      global privilege. The Global descriptor methods replace their params array overloads with a single-object
      overload.

Full Changelog: elastic/elasticsearch-net@9.5.1...9.5.2

9.5.1

[!WARNING]
This release contains breaking changes in generated types. Please review the breaking changes listed below before upgrading.

What's Changed

  • Regenerate client by @​flobernd in [9.5] Regenerate client elastic/elasticsearch-net#8957 and [9.5] Regenerate client elastic/elasticsearch-net#8981
    • Transform destinations now accept aliases, each with an optional move_on_creation flag, through the new DestinationAlias type.
    • Request converter sources regenerated to emit the full client invocation.
    • Breaking: KnnRetriever.NumCandidates is now optional (int? instead of required int), following the spec change that made num_candidates optional on the kNN retriever. The [SetsRequiredMembers] constructor no longer takes a numCandidates argument.
    • Breaking: TransformSummary.Dest and UpdateTransformResponse.Dest now use Elastic.Clients.Elasticsearch.TransformManagement.Destination instead of Elastic.Clients.Elasticsearch.Core.Reindex.Destination.
  • Restore delegate caching in IdResolver by @​fresh55 in Restore delegate caching in IdResolver elastic/elasticsearch-net#8973
    • The getter delegate was only cached when resolution failed, so it was rebuilt on every successful call.
    • 100k resolves of the same type improve from 64 ms / 55.2 MB to 3.5 ms / 40 bytes. Partially addresses (#​7664).

Full Changelog: elastic/elasticsearch-net@9.5.0...9.5.1

9.5.0

What's Changed

Initial 9.5.x release.

[!WARNING]
This release regenerates the client against the Elasticsearch 9.5 specification and contains breaking changes. Please review the list below before upgrading.

  • Regenerate client against the Elasticsearch 9.5 specification by @​flobernd in [9.5] Add request-converter code generation (#8612) elastic/elasticsearch-net#8930 and [9.5] Regenerate client elastic/elasticsearch-net#8944
    • New experimental client.Encryption.Reset endpoint, plus a ProjectEncryptionKey indicator on the health report
    • New experimental ES|QL data federation APIs: PutDataSource / GetDataSource / DeleteDataSource and PutDataset / GetDataset / DeleteDataset, with the supporting ESQLDataSource, ESQLDataset and DatasetMapping types
    • New experimental Inference region policy APIs: PutRegionPolicy / GetRegionPolicy / DeleteRegionPolicy
    • New _slice routing parameter (RouteSlice) across the search, get, index, delete, update and bulk APIs, as well as on the multi-search header and the reindex destination
    • FrequentItemSets aggregations now round-trip correctly. The generated variant used an empty discriminator where the converter expected frequent_item_sets, so the property always read back as null
    • Role-template queries in index privileges now deserialize to RoleTemplateQuery. Previously any object-shaped query was unconditionally read as a regular QueryDsl.Query
    • SpanGap and RoleMappingRule.Field variant accessors now return null instead of a default KeyValuePair when the union holds a different variant
    • New enum members: EmbeddingContentType.Audio / .Pdf / .Video, AnthropicTaskType.ChatCompletion, OpenAITaskType.Embedding, and the ClusterPrivilege.ManageReindex / .MonitorReindex values
    • Breaking (mapping): DocValues on 32 property types changes from bool? to Union<bool, DocValuesConfig>? to carry the new doc_values.multi_value setting. The parameterless DocValues() descriptor overload is gone, and reading the property into a bool? no longer compiles. SourceField.Compress and CompressThreshold are removed, and TextIndexPrefixes.MinChars / MaxChars become optional (int?), dropping the two-argument constructor
    • Breaking (ES|QL): the named-parameter arm of Params on EsqlQuery and AsyncQuery changes from KeyValuePair<string, ICollection<FieldValue>> to KeyValuePair<string, Union<ICollection<FieldValue>, ClassifiedNamedParameter>>, which affects every existing named-parameter call site. Both requests also gain a Settings body property
    • Breaking (inference): Rerank now accepts the expanded multimodal request format, so Input becomes Union<ICollection<string>, ICollection<RerankInputObject>>, Query becomes Union<string, RerankInputObject>, and the Input(params string[]) overload is removed. EmbeddingContentObject.Content becomes ICollection<EmbeddingContentObjectItem> and EmbeddingContentObjectContents is gone, OpenAIServiceSettings.ApiKey is now optional, and JinaAIServiceSettings.ElementType is renamed to EmbeddingType
    • Breaking (snapshot): SourceOnlyRepositorySettings is replaced by the ISourceOnlyRepositorySettings variant family with per-backend settings types, constructed through SourceOnlyRepositorySettingsFactory (ForAzure, ForGcs, ForReadOnlyUrl, ForS3, ForSharedFileSystem). SourceOnlyRepository.Settings now takes the interface, and its descriptor overloads are replaced by a factory callback
    • Breaking (security): RoleInfo.Indices changes from IndicesPrivileges to IndicesPrivilegesRead, and role definitions gain DataSourcePrivileges
    • Breaking (stats): GetStats.Time is renamed to GetTime, ShardStats.Indices becomes a dictionary of ShardStats, the DenseVectorOffHeapStats.TotalCenifSize typo is corrected to TotalCenivfSize, and newly required members change the positional constructors of IndexingStats, SearchStats, FlushStats, MappingStats and MachineLearning.Defaults
  • Make custom JSON converters safe for multi-segment readers by @​flobernd in Make custom JSON converters safe for multi-segment readers elastic/elasticsearch-net#8923
    • The hand-written date, duration, stringified and fractional numeric converters no longer fail when the Utf8JsonReader is constructed over a multi-segment ReadOnlySequence<byte>, which unblocks sequence-based deserializers such as a streaming reader over a PipeReader
    • The existing single-segment typed deserialization path is unchanged

New Contributors

Full Changelog: elastic/elasticsearch-net@9.4.2...9.5.0

9.4.2

What's Changed

  • Add plugin-defined (non-exhaustive) variant registry by @​flobernd in Add plugin-defined (non-exhaustive) variant registry elastic/elasticsearch-net#8911
    • Unknown discriminators on variant union families (properties, analyzers, char filters, token filters, tokenizers, repositories, similarity settings, aggregations, queries, etc.) now deserialize into an Unknown* carrier and re-serialize losslessly — no data is dropped for plugin-defined or future variants the client doesn't model
    • Opt into strong typing by registering a CLR type for a discriminator: settings.Variants.Register<IProperty, MyPluginProperty>("my_plugin"); registrations are scoped per client instance and AOT-safe — see the Plugin-defined variant types documentation for details
  • Regenerate client by @​flobernd in [9.4] Regenerate client elastic/elasticsearch-net#8908 and [9.4] Regenerate client elastic/elasticsearch-net#8917
    • Generated Unknown* carrier types for all variant families (properties, analyzers, char filters, token filters, tokenizers, repositories, similarity settings, aggregations, queries, suggesters, rescorers) to support the non-exhaustive variant registry
    • Improved XML documentation coverage across generated client methods, request/response types, and type members that previously had no IntelliSense descriptions

Full Changelog: elastic/elasticsearch-net@9.4.1...9.4.2

9.4.1

What's Changed

  • Regenerate client by @​flobernd in [9.4] Regenerate client elastic/elasticsearch-net#8899 and [9.4] Regenerate client elastic/elasticsearch-net#8907
    • Fixes (de-)serialization of unions with three or more variants — previously, hand-rolled union converters could fail to select the correct variant
    • Search response shape fix in InnerHits: the Fields property is split into Field (single-field selector using Fields) and a new Fields collection of FieldAndFormat — existing usages of InnerHits.Fields = … may need to be retargeted to Field
    • DataStreamLifecycle gains EffectiveRetention and RetentionDeterminedBy; new GlobalRetention and RetentionSource types; GetDataLifecycleResponse now exposes GlobalRetention
    • Reindex rethrottle response now models parent task progress via the new ParentReindexStatus type
    • Inference and _mvt content-type alignment: chat_completion_unified / stream_completion send Content-Type: application/json; _mvt uses the versioned application/vnd.elasticsearch+vnd.mapbox-vector-tile Accept header

Full Changelog: elastic/elasticsearch-net@9.4.0...9.4.1

9.4.0

What's Changed

Initial 9.4.x release.

Full Changelog: elastic/elasticsearch-net@9.3.7...9.4.0

9.3.7

What's Changed

  • Regenerate client by @​flobernd in [9.3] Regenerate client elastic/elasticsearch-net#8898
    • Set explicit ContentType: application/json for ChatCompletionUnified and StreamCompletion streaming inference requests
    • Switch SearchMvt Accept header to application/vnd.elasticsearch+vnd.mapbox-vector-tile (Elasticsearch product-flavored content-type)
    • Bump Elastic.Transport to 0.17.1
    • Document default max_page_search_size values for pivot (500) and latest (5000) transforms

Full Changelog: elastic/elasticsearch-net@9.3.6...9.3.7

9.3.6

What's Changed

Full Changelog: elastic/elasticsearch-net@9.3.5...9.3.6

9.3.5

What's Changed

Full Changelog: elastic/elasticsearch-net@9.3.4...9.3.5

9.3.4

What's Changed

Full Changelog: elastic/elasticsearch-net@9.3.3...9.3.4

9.3.3

What's Changed

Full Changelog: elastic/elasticsearch-net@9.3.2...9.3.3

9.3.2

What's Changed

New Contributors

Full Changelog: elastic/elasticsearch-net@9.3.1...9.3.2

9.3.1

What's Changed

Full Changelog: elastic/elasticsearch-net@9.3.0...9.3.1

9.3.0

What's Changed

Initial 9.3.x release.

Full Changelog: elastic/elasticsearch-net@9.2.3...9.3.0

9.2.3

What's Changed

New Contributors

Full Changelog: elastic/elasticsearch-net@9.2.2...9.2.3

9.2.2

What's Changed

Full Changelog: elastic/elasticsearch-net@9.2.1...9.2.2

9.2.1

What's Changed

Full Changelog: elastic/elasticsearch-net@9.2.0...9.2.1

9.2.0

What's Changed

Initial 9.2 release.

Full Changelog: elastic/elasticsearch-net@9.1.12...9.2.0

9.1.12

What's Changed

Full Changelog: elastic/elasticsearch-net@9.1.11...9.1.12

9.1.11

What's Changed

Full Changelog: elastic/elasticsearch-net@9.1.10...9.1.11

Commits viewable in compare view.

Updated FluentValidation from 12.0.0 to 12.2.0.

Release notes

Sourced from FluentValidation's releases.

12.2.0

Release notes

Please read the upgrade guide if you are moving from 11.x to 12.x

Changes in 12.2.0

  • Add Lithuanian language (#​2350)
  • Add Belarusian language (#​2356)
  • Add GetParentChain() to PropertyChain (#​2358)
  • Fix ArgumentNullException in TestValidationResult when a failure has a null PropertyName (#​2362)
  • Reject an inverted range when the comparer returns a negative other than -1 in RangeValidator (#​2370)
  • Change EnumValidator to work under native AOT (#​2371)
  • Fix PropertyChain.IsChildChainOf for sibling chains that share a name prefix (#​2372)
  • Fix PropertyPath is incorrect in .When() on RuleForEach (#​2363)

Changes in 12.1.0

  • Add Tamil language (#​2334)
  • Add Telugu language (#​2333)
  • Fixes to Japanese translations (#​2340)

Changes in 12.0.0

  • Drops support for netstandard2.0, netstandard2.1, .net 5, .net 6 and .net 7. Minimum supported platform is now .net 8.
  • Add support for dependent rules for custom rules (#​2170)
  • Removes deprecated DI extensions
  • Removes deprecated transform methods (#​2027)
  • Remove the ability to disable the root-model null check (#​2069)
  • Use Zomp.SyncMethodGenerator to clean up internal sync/async code paths and increase performance (#​2136)
  • Add Serbian (Cyrillic) language; rename existing Serbian to Serbian (Latin) (#​2283)

Downloads

Binaries can be downloaded from nuget:

12.1.0

Release notes

Please read the upgrade guide if you are moving from 11.x to 12.x

Changes in 12.1.0

  • Add Tamil language (#​2334)
  • Add Telugu language (#​2333)
  • Fixes to Japanese translations (#​2340)

Changes in 12.0.0

  • Drops support for netstandard2.0, netstandard2.1, .net 5, .net 6 and .net 7. Minimum supported platform is now .net 8.
  • Add support for dependent rules for custom rules (#​2170)
  • Removes deprecated DI extensions
  • Removes deprecated transform methods (#​2027)
  • Remove the ability to disable the root-model null check (#​2069)
  • Use Zomp.SyncMethodGenerator to clean up internal sync/async code paths and increase performance (#​2136)
  • Add Serbian (Cyrillic) language; rename existing Serbian to Serbian (Latin) (#​2283)

Downloads

Binaries can be downloaded from nuget:

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.9 to 10.0.14.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.HeaderPropagation from 10.0.9 to 10.0.14.

Release notes

Sourced from Microsoft.AspNetCore.HeaderPropagation's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.9 to 10.0.14.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Azure.WebJobs from 3.0.42 to 3.0.48.

Release notes

Sourced from Microsoft.Azure.WebJobs's releases.

3.0.46

What's Changed

New Contributors

Full Changelog: Azure/azure-webjobs-sdk@v3.0.45...v3.0.46

3.0.43

What's Changed

New Contributors

Full Changelog: Azure/azure-webjobs-sdk@v3.0.42...v3.0.43

Commits viewable in compare view.

Updated Microsoft.Azure.WebJobs.Extensions.Storage from 5.3.6 to 5.3.10.

Release notes

Sourced from Microsoft.Azure.WebJobs.Extensions.Storage's releases.

5.3.10

5.3.10 (2026-10-09)

Other Changes

Please refer to Microsoft.Azure.WebJobs.Extension.Storage.Blobs and Microsoft.Azure.WebJobs.Extension.Storage.Queues for detailed list of changes.

Commits viewable in compare view.

Updated Microsoft.Azure.WebJobs.Host.Storage from 5.0.1 to 5.0.2.

Release notes

Sourced from Microsoft.Azure.WebJobs.Host.Storage's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Azure.WebJobs.Logging.ApplicationInsights from 3.0.41 to 3.0.48.

Release notes

Sourced from Microsoft.Azure.WebJobs.Logging.ApplicationInsights's releases.

3.0.42

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration from 10.0.9 to 10.0.14.

Release notes

Sourced from Microsoft.Extensions.Configuration's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Binder from 10.0.9 to 10.0.14.

Release notes

Sourced from Microsoft.Extensions.Configuration.Binder's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Json from 10.0.9 to 10.0.14.

Release notes

Sourced from Microsoft.Extensions.Configuration.Json's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions from 10.0.9 to 10.0.14.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Hosting from 10.0.9 to 10.0.14.

Release notes

Sourced from Microsoft.Extensions.Hosting's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Hosting.Abstractions from 10.0.9 to 10.0.14.

Release notes

Sourced from Microsoft.Extensions.Hosting.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Http from 10.0.9 to 10.0.14.

Release notes

Sourced from Microsoft.Extensions.Http's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Http.Polly from 10.0.9 to 10.0.14.

Release notes

Sourced from Microsoft.Extensions.Http.Polly's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.AzureAppServices from 10.0.9 to 10.0.14.

Release notes

Sourced from Microsoft.Extensions.Logging.AzureAppServices's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Console from 10.0.9 to 10.0.14.

Release notes

Sourced from Microsoft.Extensions.Logging.Console's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Identity.Client from 4.85.2 to 4.92.0.

Release notes

Sourced from Microsoft.Identity.Client's releases.

4.92.0

New Features

  • Added COSMIC_LOCATION as a regional auto-detection source, after REGION_NAME and before IMDS. #​6240
  • Added ITokenCacheSnapshotProvider and TokenCacheSnapshot for process-local token-cache capture and restore without repeated JSON serialization. Use V3 serialization for persistence. #​6229

Bug Fixes

  • Fixed certificate private-key attachment on .NET Framework 4.7.2 to support non-exportable CNG keys. #​6244
  • Fixed managed identity KeyGuard attestation endpoint selection to use cloud-specific regional endpoints from IMDS compute metadata. #​6238
  • Fixed Android broker request serialization by registering BrokerRequest in the source-generated JSON serializer context. #​6226

Changes

  • Updated Microsoft.Identity.Client.NativeInterop from 0.20.6 to 0.20.7. #​6230
  • Reduced OpenTelemetry metric-tag allocations using TagList and cached canonical tag-key sets. Custom enrichers should use noncanonical tag names. #​6227

4.91.1

Changes

  • Added opt-in reduced token-acquisition logging: set MSAL_REDUCED_LOGGING=true (or 1) before application construction to move selected routine Information-level diagnostics to Verbose. Existing logging behavior is unchanged by default; acquisition summaries, warnings, and errors remain unchanged. #​6208 #​6224

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.91.0...4.91.1

4.91.0

New Features

  • Made the dynamic certificate provider and confidential-client callbacks (OnMsalServiceFailure, OnCompletion, and OnBackgroundTokenRefreshCompleted) generally available, removing the experimental feature opt-in requirement. #​6216

Bug Fixes

  • Fixed built-in mTLS HttpClient caching to use certificate object identity, ensuring a new certificate instance with a reacquired private-key handle receives a new handler even when its thumbprint is unchanged. #​6217
  • Fixed managed identity WithForceRefresh(true) to re-mint the MSI v2 binding certificate before acquiring a new token, while reusing a valid cached attestation token for the current key. #​6215
  • Fixed system-browser authentication callbacks in Linux containers by adding opt-in IPv4 port-forwarding support through MSAL_ALLOW_SYSTEM_BROWSER_PORT_FORWARDING, disabled by default. #​6186

4.90.1

New Features

  • Added IMsalWsTrustHttpClientFactory, allowing custom HTTP client factories to provide redirect-disabled, credential-policy-aware clients for federation metadata (MEX) and WS-Trust requests. Added MsalError.TooManyRedirects and MsalError.WsTrustCrossOriginRedirectNotSupported for redirect failures. #​6165

Bug Fixes

  • Hardened federation metadata and WS-Trust requests by requiring HTTPS, securely validating redirects, rejecting credential-bearing cross-origin redirects, and limiting redirect chains. #​6165
  • Fixed instance discovery so a custom authority port is not forwarded to the global discovery host, while preserving the port when discovery uses the authority host. #​6155
  • Fixed KeyGuard attestation to send the tenant ID as the MAA client_id metadata value without changing managed-identity client-ID handling or attestation-cache partitioning. #​6200

Changes

  • Updated Microsoft.Azure.Security.KeyGuardAttestation from version 1.1.7 to 1.1.8. #​6202

4.90.0

Changes

  • Updated the KeyGuardAttestation package version to 1.1.7. #​6189

4.89.0

What's Changed

New Contributors

Full Changelog: https://github.com/AzureAD/microsoft-authentication-lib...

Description has been truncated

@dependabot
Bump Azure.Core and 31 others
86c49e1 
Bumps Azure.Core from 1.55.0 to 1.64.0
Bumps Azure.Extensions.AspNetCore.Configuration.Secrets from 1.5.1 to 1.5.2
Bumps Azure.Security.KeyVault.Secrets from 4.11.0 to 4.12.0
Bumps Azure.Storage.Blobs from 12.29.1 to 12.30.1
Bumps Azure.Storage.Queues from 12.27.1 to 12.28.1
Bumps Elastic.Apm from 1.34.1 to 1.36.0
Bumps Elastic.Apm.Azure.Storage from 1.34.1 to 1.36.0
Bumps Elastic.Apm.NetCoreAll from 1.34.1 to 1.36.0
Bumps Elastic.Clients.Elasticsearch from 9.1.10 to 9.5.3
Bumps FluentValidation from 12.0.0 to 12.2.0
Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.9 to 10.0.14
Bumps Microsoft.AspNetCore.HeaderPropagation from 10.0.9 to 10.0.14
Bumps Microsoft.AspNetCore.Mvc.Testing from 10.0.9 to 10.0.14
Bumps Microsoft.Azure.WebJobs from 3.0.42 to 3.0.48
Bumps Microsoft.Azure.WebJobs.Extensions.Storage from 5.3.6 to 5.3.10
Bumps Microsoft.Azure.WebJobs.Host.Storage from 5.0.1 to 5.0.2
Bumps Microsoft.Azure.WebJobs.Logging.ApplicationInsights from 3.0.41 to 3.0.48
Bumps Microsoft.Extensions.Configuration to 10.0.10, 10.0.14
Bumps Microsoft.Extensions.Configuration.Binder from 10.0.9 to 10.0.14
Bumps Microsoft.Extensions.Configuration.Json from 10.0.9 to 10.0.14
Bumps Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions from 10.0.9 to 10.0.14
Bumps Microsoft.Extensions.Hosting from 10.0.9 to 10.0.14
Bumps Microsoft.Extensions.Hosting.Abstractions from 10.0.9 to 10.0.14
Bumps Microsoft.Extensions.Http from 10.0.9 to 10.0.14
Bumps Microsoft.Extensions.Http.Polly from 10.0.9 to 10.0.14
Bumps Microsoft.Extensions.Logging.AzureAppServices from 10.0.9 to 10.0.14
Bumps Microsoft.Extensions.Logging.Console from 10.0.9 to 10.0.14
Bumps Microsoft.Identity.Client from 4.85.2 to 4.92.0
Bumps NUnit from 4.4.0 to 4.6.1
Bumps NUnit.Analyzers from 4.10.0 to 4.15.0
Bumps Serilog from 4.3.0 to 4.4.0
Bumps SharpCompress from 0.49.1 to 0.50.7

---
updated-dependencies:
- dependency-name: Azure.Core
  dependency-version: 1.64.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: NUnit
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: NUnit.Analyzers
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Azure.Extensions.AspNetCore.Configuration.Secrets
  dependency-version: 1.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Azure.Security.KeyVault.Secrets
  dependency-version: 4.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Azure.Storage.Blobs
  dependency-version: 12.30.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Azure.Storage.Queues
  dependency-version: 12.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Elastic.Apm.NetCoreAll
  dependency-version: 1.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Elastic.Clients.Elasticsearch
  dependency-version: 9.5.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: FluentValidation
  dependency-version: 12.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.AspNetCore.HeaderPropagation
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Logging.AzureAppServices
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Identity.Client
  dependency-version: 4.92.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: SharpCompress
  dependency-version: 0.50.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Azure.Storage.Queues
  dependency-version: 12.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Microsoft.AspNetCore.Mvc.Testing
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Configuration
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Configuration.Binder
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Configuration.Json
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: NUnit
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: NUnit.Analyzers
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: FluentValidation
  dependency-version: 12.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.AspNetCore.HeaderPropagation
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Logging.AzureAppServices
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: NUnit
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: NUnit.Analyzers
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: SharpCompress
  dependency-version: 0.50.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: NUnit
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: NUnit.Analyzers
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Azure.Extensions.AspNetCore.Configuration.Secrets
  dependency-version: 1.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Configuration
  dependency-version: 10.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Azure.Security.KeyVault.Secrets
  dependency-version: 4.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Azure.Storage.Queues
  dependency-version: 12.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Elastic.Apm
  dependency-version: 1.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Elastic.Apm.Azure.Storage
  dependency-version: 1.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Microsoft.Azure.WebJobs
  dependency-version: 3.0.48
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Azure.WebJobs.Extensions.Storage
  dependency-version: 5.3.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Azure.WebJobs.Host.Storage
  dependency-version: 5.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Azure.WebJobs.Logging.ApplicationInsights
  dependency-version: 3.0.48
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Configuration
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Configuration.Binder
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Hosting.Abstractions
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Logging.Console
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Http
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Http.Polly
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Serilog
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Diagnostics.HealthChecks.Abstractions
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: Microsoft.Extensions.Http.Polly
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-packages
- dependency-name: NUnit
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
- dependency-name: NUnit.Analyzers
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Nov 1, 2026
@snyk-io-eu

snyk-io-eu Bot commented Nov 1, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues
✅ Licenses 0 0 0 0 0 issues
✅ Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@MuhammadJawad-Mastek MuhammadJawad-Mastek Awaiting requested review from MuhammadJawad-Mastek MuhammadJawad-Mastek is a code owner
@Raj29-Mastek Raj29-Mastek Awaiting requested review from Raj29-Mastek Raj29-Mastek is a code owner
@jaibheem22 jaibheem22 Awaiting requested review from jaibheem22 jaibheem22 is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Milestone

No milestone

0 participants