chore: Bump the nuget-dependencies group with 25 updates

[dependabot]

Updated coverlet.msbuild from 6.0.4 to 10.0.0.

Release notes

Sourced from coverlet.msbuild's releases.

10.0.0

Improvements

• Unique Report Filenames (coverlet.MTP and AzDO) #​1866
• Add --coverlet-file-prefix option for unique report files #​1869
• Introduce .NET 10 support #​1823

Fixed

• Fix [BUG] Wrong branch rate on IAsyncEnumerable for generic type #​1836
• Fix [BUG] Missing Coverage after moving to MTP #​1843
• Fix [BUG] No coverage reported when targeting .NET Framework with 8.0.1 #​1842
• Fix [BUG] Behavior changes between MTP and Legacy (msbuild) #​1878
• Fix [BUG] Coverlet.MTP - Unable to load coverlet.mtp.appsettings.json #​1880
• Fix [BUG] Coverlet.Collector produces empty report when Mediator.SourceGenerator is referenced #​1718 by https://github.com/yusyd
• Fix [BUG] Crash during instrumentation (Methods using LibraryImport/DllImport have no body) #​1762

Maintenance

• Add comprehensive async method tests and documentation for issue #​1864
• Replace Tmds.ExecFunction Package in coverlet.core.coverage.tests #​1833
• Add net9.0 and net10.0 targets #​1822

Diff between 8.0.1 and 10.0.0

8.0.1

Fixed

• Fix [BUG] TypeInitializationException when targeting .NET Framework #​1818
• Fix [BUG] coverlet.MTP build fails with CS0400 due to developmentDependency=true #​1827

Improvements

• Additional improvements needed for .NET Framework instrumentation type import #​1825

Diff between 8.0.0 and 8.0.1

8.0.0

Special Thanks: A huge thank you to @​Bertk for driving the majority of the work in this release! 🎉

Fixed

• Fix System.CommandLine 2.0 release is available #​1776
• Fix Excluding From Coverage bad defaults from given example #​1764
• Fix branchpoint exclusion for sdk 8.0.407 #​1741
• Fix missing copyright information in NuGet #​1794
• Fix bad default values in documentation #​1764 by https://github.com/cboudereau

Improvements

• Coverlet MTP extension feature #​1788
• Generate SBOM for nuget packages #​1752
• Use multi targets projects for coverlet.collector, coverlet.msbuild.tasks packages #​1742
• Use .NET 8.0 target framework for coverlet.core and remove Newtonsoft.Json #​1733
• Use latest System.CommandLine version #​1660
• Upgraded minimum required .NET SDK and runtime to .NET 8.0 LTS (Long Term Support) (Breaking Change)
• Use xunit.v3 for tests and example code

Diff between 6.0.4 and 8.0.0

Commits viewable in compare view.

Updated Microsoft.ApplicationInsights from 2.23.0 to 3.1.0.

Release notes

Sourced from Microsoft.ApplicationInsights's releases.

3.1.0

Version 3.1.0

• Make TelemetryContext properties public and propagate them via TelemetryClient.
• Add fallback to APPLICATIONINSIGHTS_CONNECTION_STRING environment variable for Base, Web, and NLog packages when connection string is not set via code.
• Update Azure.Monitor.OpenTelemetry.Exporter to 1.7.0. This includes updated mappings for telemetry context.
• Fix OTEL_SDK_DISABLED not being honored when TelemetryConfiguration.DisableTelemetry is set in DI scenarios., #​3157
• Fix TrackAvailability ignoring user-specified Timestamp on AvailabilityTelemetry. The timestamp is now emitted as microsoft.availability.testTimestamp so downstream exporters can use the correct event time.
• Added netstandard2.0 target framework to Microsoft.ApplicationInsights package to support customers with shared libraries targeting netstandard2.0.
• Fix TelemetryClient.Context.Cloud.RoleName set after construction now applies to all telemetry.
• Fix bug where Debug/Trace level logs from TrackTrace API were not emitted to Application Insights
• Fix Track API calls to not mutate the passed in dictionary if it is readonly
• Fix NullReferenceException in TelemetryClient.Flush() and FlushAsync() when called from DI scenarios
• Fix ApplicationVersion ignored: ApplicationInsightsServiceOptions.ApplicationVersion is now applied as service.version on the OpenTelemetry Resource for both AspNetCore and WorkerService packages
• Fix HttpRequestExtensions.UnvalidatedGetHeader always returning empty string instead of the actual header value. Restored max-length enforcement to guard against oversized header values.

3.0.0

• Replaced netstandard2.0 with net8.0 target framework in Microsoft.ApplicationInsights.NLogTarget package.

3.0.0-rc1

• Removed netstandard2.0 target framework from Microsoft.ApplicationInsights, Microsoft.ApplicationInsights.AspNetCore, and Microsoft.ApplicationInsights.WorkerService packages.
• The JavaScript in Microsoft.ApplicationInsights.AspNetCore has been updated to version 10.
• Centralized package version management
• Update OpenTelemetry dependencies, #​3092
  • OpenTelemetry 1.15.0
  • OpenTelemetry.Instrumentation.AspNetCore 1.15.0
  • OpenTelemetry.Instrumentation.AspNet 1.15.1
  • OpenTelemetry.Instrumentation.Http 1.15.0
  • OpenTelemetry.Instrumentation.SqlClient 1.15.0
• Vendored OpenTelemetry.Resources.Azure resource detectors to NETCORE shared folder, replaced package with vendored implementation, #​3093
• Added support to disable telemetry via TelemetryConfiguration.DisableTelemetry
• Removed EnabledAdaptiveSampling and replaced with TracesPerSecond and SamplingRatio
• Added EnableTraceBasedLogsSampler property to ApplicationInsightsServiceOptions for ASP.NET Core and WorkerService packages
• Added support for StorageDirectory and DisableOfflineStorage from TelemetryConfiguration in DI scenarios
• Update Azure.Monitor.OpenTelemetry.Exporter dependency to 1.6.0

3.0.0-beta2

Added

• Automatic configuration binding from "ApplicationInsights" section in appsettings.json for both AspNetCore and WorkerService packages with configuration precedence: environment variables > explicit configuration > appsettings.json
• Added support for Entra ID (Azure Active Directory) authentication using Azure.Core.TokenCredential
• Added Self Diagnostics feature
• Updated the default sampler from Fixed Rate to Rate-Limited Sampling.
• Update Azure Monitor Exporter to 1.6.0-beta.2
• Add comprehensive applicationinsights.config support
• Add properties in TelemetryConfiguration to configure underlying exporter

Bug fix

• Fix TrackMetric(MetricTelemetry) unsupported telemetry type error

3.0.0-beta1

• The following Application Insights packages in this repo now use OpenTelemetry internally. OpenTelemetry is the industry standard for telemetry collection and provides better interoperability with other observability tools.
  • Microsoft.ApplicationInsights
  • Microsoft.ApplicationInsights.AspNetCore
  • Microsoft.ApplicationInsights.WorkerService
  • Microsoft.ApplicationInsights.Web
  • Microsoft.ApplicationInsights.NLogTarget
• Classic APIs of the above packages are preserved; calls are translated to OpenTelemetry telemetry.
• Other packages not listed above (such as certain auto-collectors and logging adapters that were published from this repo previously) will not have future versions published. See BreakingChanges.md for details.

Commits viewable in compare view.

Updated Microsoft.ApplicationInsights.AspNetCore from 2.23.0 to 3.1.0.

Release notes

Sourced from Microsoft.ApplicationInsights.AspNetCore's releases.

3.1.0

Version 3.1.0

• Make TelemetryContext properties public and propagate them via TelemetryClient.
• Add fallback to APPLICATIONINSIGHTS_CONNECTION_STRING environment variable for Base, Web, and NLog packages when connection string is not set via code.
• Update Azure.Monitor.OpenTelemetry.Exporter to 1.7.0. This includes updated mappings for telemetry context.
• Fix OTEL_SDK_DISABLED not being honored when TelemetryConfiguration.DisableTelemetry is set in DI scenarios., #​3157
• Fix TrackAvailability ignoring user-specified Timestamp on AvailabilityTelemetry. The timestamp is now emitted as microsoft.availability.testTimestamp so downstream exporters can use the correct event time.
• Added netstandard2.0 target framework to Microsoft.ApplicationInsights package to support customers with shared libraries targeting netstandard2.0.
• Fix TelemetryClient.Context.Cloud.RoleName set after construction now applies to all telemetry.
• Fix bug where Debug/Trace level logs from TrackTrace API were not emitted to Application Insights
• Fix Track API calls to not mutate the passed in dictionary if it is readonly
• Fix NullReferenceException in TelemetryClient.Flush() and FlushAsync() when called from DI scenarios
• Fix ApplicationVersion ignored: ApplicationInsightsServiceOptions.ApplicationVersion is now applied as service.version on the OpenTelemetry Resource for both AspNetCore and WorkerService packages
• Fix HttpRequestExtensions.UnvalidatedGetHeader always returning empty string instead of the actual header value. Restored max-length enforcement to guard against oversized header values.

3.0.0

• Replaced netstandard2.0 with net8.0 target framework in Microsoft.ApplicationInsights.NLogTarget package.

3.0.0-rc1

• Removed netstandard2.0 target framework from Microsoft.ApplicationInsights, Microsoft.ApplicationInsights.AspNetCore, and Microsoft.ApplicationInsights.WorkerService packages.
• The JavaScript in Microsoft.ApplicationInsights.AspNetCore has been updated to version 10.
• Centralized package version management
• Update OpenTelemetry dependencies, #​3092
  • OpenTelemetry 1.15.0
  • OpenTelemetry.Instrumentation.AspNetCore 1.15.0
  • OpenTelemetry.Instrumentation.AspNet 1.15.1
  • OpenTelemetry.Instrumentation.Http 1.15.0
  • OpenTelemetry.Instrumentation.SqlClient 1.15.0
• Vendored OpenTelemetry.Resources.Azure resource detectors to NETCORE shared folder, replaced package with vendored implementation, #​3093
• Added support to disable telemetry via TelemetryConfiguration.DisableTelemetry
• Removed EnabledAdaptiveSampling and replaced with TracesPerSecond and SamplingRatio
• Added EnableTraceBasedLogsSampler property to ApplicationInsightsServiceOptions for ASP.NET Core and WorkerService packages
• Added support for StorageDirectory and DisableOfflineStorage from TelemetryConfiguration in DI scenarios
• Update Azure.Monitor.OpenTelemetry.Exporter dependency to 1.6.0

3.0.0-beta2

Added

• Automatic configuration binding from "ApplicationInsights" section in appsettings.json for both AspNetCore and WorkerService packages with configuration precedence: environment variables > explicit configuration > appsettings.json
• Added support for Entra ID (Azure Active Directory) authentication using Azure.Core.TokenCredential
• Added Self Diagnostics feature
• Updated the default sampler from Fixed Rate to Rate-Limited Sampling.
• Update Azure Monitor Exporter to 1.6.0-beta.2
• Add comprehensive applicationinsights.config support
• Add properties in TelemetryConfiguration to configure underlying exporter

Bug fix

• Fix TrackMetric(MetricTelemetry) unsupported telemetry type error

3.0.0-beta1

• The following Application Insights packages in this repo now use OpenTelemetry internally. OpenTelemetry is the industry standard for telemetry collection and provides better interoperability with other observability tools.
  • Microsoft.ApplicationInsights
  • Microsoft.ApplicationInsights.AspNetCore
  • Microsoft.ApplicationInsights.WorkerService
  • Microsoft.ApplicationInsights.Web
  • Microsoft.ApplicationInsights.NLogTarget
• Classic APIs of the above packages are preserved; calls are translated to OpenTelemetry telemetry.
• Other packages not listed above (such as certain auto-collectors and logging adapters that were published from this repo previously) will not have future versions published. See BreakingChanges.md for details.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.MicrosoftAccount from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.MicrosoftAccount's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authorization from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Authorization's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Data.Sqlite.Core from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Data.Sqlite.Core's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.InMemory from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.InMemory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Proxies from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Proxies's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Sqlite from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Sqlite's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Logging's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.AzureAppServices from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Logging.AzureAppServices's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Identity.Web from 4.3.0 to 4.8.0.

Release notes

Sourced from Microsoft.Identity.Web's releases.

4.8.0

What's Changed

• Bump flatted from 3.3.3 to 3.4.2 in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump flatted from 3.3.3 to 3.4.2 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3753
• Update changelog.md for ID.Web 4.6.0 by @​bgavrilMS in Update changelog.md for ID.Web 4.6.0 AzureAD/microsoft-identity-web#3756
• Add token binding to MicrosoftIdentityMessageHandler by @​cpp11nullptr in Add token binding to MicrosoftIdentityMessageHandler AzureAD/microsoft-identity-web#3743
• Bump picomatch in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump picomatch in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3759
• Documentation: Clarify managed identity credential types for containerized vs. VM/App Service deployments by @​Copilot in Documentation: Clarify managed identity credential types for containerized vs. VM/App Service deployments AzureAD/microsoft-identity-web#3585
• Bump path-to-regexp from 8.3.0 to 8.4.0 in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump path-to-regexp from 8.3.0 to 8.4.0 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3762
• Upgrade Microsoft Application Insights packages by @​RojaEnnam in Upgrade Microsoft Application Insights packages AzureAD/microsoft-identity-web#3763
• Use Abstractions 12 by @​pmaytak in Use Abstractions 12 AzureAD/microsoft-identity-web#3761
• Post-4.7.0 by @​pmaytak in Post-4.7.0 AzureAD/microsoft-identity-web#3768
• Fix Comp Gov DOTNET-Security-10.0 by @​reginayap8 in Fix Comp Gov DOTNET-Security-10.0 AzureAD/microsoft-identity-web#3769
• Upgrade CodeQL to V4: Fix 10 CodeQL Analysis Warnings and Errors by @​reginayap8 in Upgrade CodeQL to V4: Fix 10 CodeQL Analysis Warnings and Errors AzureAD/microsoft-identity-web#3770
• fix warnings by @​gladjohn in fix warnings AzureAD/microsoft-identity-web#3771
• adding examples for using postgres as a distributed cache by @​JaredMSFT in adding examples for using postgres as a distributed cache AzureAD/microsoft-identity-web#3766
• Suppress AOT configuration-binding SYSLIB warnings in AotCompatibility test app by @​Copilot in Suppress AOT configuration-binding SYSLIB warnings in AotCompatibility test app AzureAD/microsoft-identity-web#3774
• Bump vite from 7.1.11 to 7.3.2 in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump vite from 7.1.11 to 7.3.2 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3772
• Skip legacy B2C local-account Todo UI test in WebAppUiTests by @​Copilot in Skip legacy B2C local-account Todo UI test in WebAppUiTests AzureAD/microsoft-identity-web#3778
• Fix initialization of ConfidentialClientApplicationOptions in MergedOptions by @​cpp11nullptr in Fix initialization of ConfidentialClientApplicationOptions in MergedOptions AzureAD/microsoft-identity-web#3760
• Bump net8/net9/net10 runtime package baselines to patched crypto servicing versions by @​Copilot in Bump net8/net9/net10 runtime package baselines to patched crypto servicing versions AzureAD/microsoft-identity-web#3779
• Fix flaky certificate test failures on CI by @​gladjohn in Fix flaky certificate test failures on CI AzureAD/microsoft-identity-web#3780
• MTLS Without Tokens Support by @​tlupes in MTLS Without Tokens Support - DownstreamApi AzureAD/microsoft-identity-web#3747
• Fix CredentialsProvider DI lifetime mismatch causing startup crash in Development by @​Avery-Dunn in Fix CredentialsProvider DI lifetime mismatch causing startup crash in Development AzureAD/microsoft-identity-web#3783
• Remove unused DataProtection configuration from Sidecar by @​Copilot in Remove unused DataProtection configuration from Sidecar AzureAD/microsoft-identity-web#3776

New Contributors

• @​RojaEnnam made their first contribution in Upgrade Microsoft Application Insights packages AzureAD/microsoft-identity-web#3763
• @​reginayap8 made their first contribution in Fix Comp Gov DOTNET-Security-10.0 AzureAD/microsoft-identity-web#3769
• @​JaredMSFT made their first contribution in adding examples for using postgres as a distributed cache AzureAD/microsoft-identity-web#3766

Full Changelog: AzureAD/microsoft-identity-web@4.6.0...4.8.0

4.7.0

4.7.0

Bug fixes

• Updates to Microsoft.Identity.Abstractions 12.0.0 to revert breaking changes introduced in Abstractions 11.0.0. (On .NET 10 target, Certificate extension method in CredentialDescription was reverted to normal property.) See #​3767.

4.6.0

What's Changed

• Move boilerplate code skills to IdWeb, and add Aspire DevApp demonstrating Blazor authentication components by @​Copilot in Move boilerplate code skills to IdWeb, and add Aspire DevApp demonstrating Blazor authentication components AzureAD/microsoft-identity-web#3721
• Bump MSAL to 4.83.1 and re-enable Managed Identity CAE tests by @​Copilot in Bump MSAL to 4.83.1 and re-enable Managed Identity CAE tests AzureAD/microsoft-identity-web#3746
• Bump Abstractions to 11.2 by @​bgavrilMS in Bump Abstractions to 11.2 AzureAD/microsoft-identity-web#3749
• Update documentation to reference Blazor helpers from Microsoft.Identity.Web package by @​Copilot in Update documentation to reference Blazor helpers from Microsoft.Identity.Web package AzureAD/microsoft-identity-web#3723

Full Changelog: AzureAD/microsoft-identity-web@4.5.0...4.6.0

4.5.0

New features

• Add support for certificate store lookup by subject name. See #​3742.

Dependencies updates

• Bump minimatch in /tests/DevApps/SidecarAdapter/typescript. See #​3739.
• Bump rollup from 4.52.3 to 4.59.0 in /tests/DevApps/SidecarAdapter/typescript. See #​3740.

4.4.0

New features

• Add AOT-compatible web API authentication for .NET 10+. See #​3705 and #​3664.
• Propagate long-running web API session key back to callers in user token acquisition. See #​3728.
• Add OBO event initialization for OBO APIs. See #​3724.
• Add support for calling WithClientClaims flow for token acquisition. See #​3623.
• Add OnBeforeTokenAcquisitionForOnBehalfOf event. See #​3680.

Bug fixes

• Throw InvalidOperationException with actionable message when a custom credential is not registered. See #​3626.
• Fix event firing for InvokeOnBeforeTokenAcquisitionForOnBehalfOfAsync. See #​3717.
• Update OnBeforeTokenAcquisitionForOnBehalfOf to construct ClaimsPrincipal from token. See #​3714.
• Add a retry counter for acquire token and updated tests with a fake secret. See #​3682.
• Fix OBO user error handling. See #​3712.
• Fix override merging for app token (and others). See #​3644.
• Fix certificate reload logic to only trigger on certificate-specific errors. See #​3653.
• Update ROPC flow CCA to pass SendX5C to MSAL. See #​3671.

Dependencies updates

• Bump qs in /tests/DevApps/SidecarAdapter/typescript. See #​3725.
• Downgrade Microsoft.Extensions.Configuration.Binder to 2.1.0 on .NET Framework. See #​3730.
• Update .NET SDK to 10.0.103 to address DOTNET-Security-10.0 vulnerability. See #​3726.
• Upgrade to Microsoft.Identity.Abstractions 11 for AoT compatibility. See #​3699.
• Update to MSAL 4.81.0. See #​3665.

Documentation

• Add documentation for auto-generated session key for long-running OBO session. See #​3729.
• Improve the Aspire doc article and skills. See #​3695.
• Add an article and agent skill to add Entra ID to an Aspire app. See #​3689.
• Fix misleading comment in CertificatelessOptions.ManagedIdentityClientId. See #​3667.
• Add Copilot explore tool functionality. See #​3694.

Fundamentals

• Remove unnecessary warning suppression. See #​3715.
• Migrate labs to Lab.API 2.x (first pass). See #​3710.
• Update Sidecar E2E test constants. See #​3693.
• Fix intermittent failures in CertificatesObserverTests. See #​3687.
• Add validation baseline exclusions. See #​3684.
• Add dSTS integration tests. See #​3677.
• Fix FIC test. See #​3663.
• Update IdentityWeb version, build logic, and validation. See #​3659.

New Contributors

• @​XiaoxinMS2 made their first contribution in Add dSTS integration tests AzureAD/microsoft-identity-web#3677
• @​RyAuld made their first contribution in Fix intermittent failures in CertificatesObserverTests AzureAD/microsoft-identity-web#3687
• @​agocke made their first contribution in Update AOT annotations AzureAD/microsoft-identity-web#3664
• @​MZOLN made their first contribution in Remove unnecessary flag switch that causes official build to break. AzureAD/microsoft-identity-web#3700
• @​christian-posta made their first contribution in Fix override merging for app token (and others) AzureAD/microsoft-identity-web#3644
• @​4gust made their first contribution in Added retry counter for acquire token and modified added a test with … AzureAD/microsoft-identity-web#3682
• @​rayluo made their first contribution in Update OnBeforeTokenAcquisitionForOnBehalfOf event to construct ClaimsPricipal from token AzureAD/microsoft-identity-web#3714

4.4.0-preview.1

New features

• Add AOT-compatible web API authentication for .NET 10+. See #​3705 and #​3664.
• Propagate long-running web API session key back to callers in user token acquisition. See #​3728.
• Add OBO event initialization for OBO APIs. See #​3724.
• Add support for calling WithClientClaims flow for token acquisition. See #​3623.
• Add OnBeforeTokenAcquisitionForOnBehalfOf event. See #​3680.

Bug fixes

• Throw InvalidOperationException with actionable message when a custom credential is not registered. See #​3626.
• Fix event firing for InvokeOnBeforeTokenAcquisitionForOnBehalfOfAsync. See #​3717.
• Update OnBeforeTokenAcquisitionForOnBehalfOf to construct ClaimsPrincipal from token. See #​3714.
• Add a retry counter for acquire token and updated tests with a fake secret. See #​3682.
• Fix OBO user error handling. See #​3712.
• Fix override merging for app token (and others). See #​3644.
• Fix certificate reload logic to only trigger on certificate-specific errors. See #​3653.
• Update ROPC flow CCA to pass SendX5C to MSAL. See #​3671.

Dependencies updates

• Bump qs in /tests/DevApps/SidecarAdapter/typescript. See #​3725.
• Downgrade Microsoft.Extensions.Configuration.Binder to 2.1.0 on .NET Framework. See #​3730.
• Update .NET SDK to 10.0.103 to address DOTNET-Security-10.0 vulnerability. See #​3726.
• Upgrade to Microsoft.Identity.Abstractions 11 for AoT compatibility. See #​3699.
• Update to MSAL 4.81.0. See #​3665.

Documentation

• Add documentation for auto-generated session key for long-running OBO session. See #​3729.
• Improve the Aspire doc article and skills. See #​3695.
• Add an article and agent skill to add Entra ID to an Aspire app. See #​3689.
• Fix misleading comment in CertificatelessOptions.ManagedIdentityClientId. See #​3667.
• Add Copilot explore tool functionality. See #​3694.

Fundamentals

• Remove unnecessary warning suppression. See #​3715.
• Migrate labs to Lab.API 2.x (first pass). See #​3710.
• Update Sidecar E2E test constants. See #​3693.
• Fix intermittent failures in CertificatesObserverTests. See #​3687.
• Add validation baseline exclusions. See #​3684.
• Add dSTS integration tests. See #​3677.
• Fix FIC test. See #​3663.
• Update IdentityWeb version, build logic, and validation. See #​3659.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.0.1 to 18.4.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.4.0

What's Changed

• Add LoongArch64 support by @​stdmnpkg in Add LoongArch64 support microsoft/vstest#15359

• Refactor Condition evaluation by @​Youssef1313 in Refactor Condition evaluation microsoft/vstest#15357

• Adding info on extensions points part 1 by @​nohwnd in Adding info on extensions points part 1 microsoft/vstest#15360

• Add option to ask for uploading code QL before the standard window ends by @​nohwnd in Add option to ask for uploading code QL before the standard window ends microsoft/vstest#15373

• Update runtime versions by @​nohwnd in Update runtime versions microsoft/vstest#15372

• Fix .NET 10 regression for traits by @​Youssef1313 in Fix .NET 10 regression for traits microsoft/vstest#15370

• Update target frameworks to net10.0 and net11.0 by @​dotnet-maestro[bot] in Update target frameworks to net10.0 and net11.0 microsoft/vstest#15349

• Fix names in pipeline matrix so we don't have to align them by @​nohwnd in Fix names in pipeline matrix so we don't have to align them microsoft/vstest#15365

• Update SECURITY.md by @​Youssef1313 in Update SECURITY.md microsoft/vstest#15342

New Contributors

• @​stdmnpkg made their first contribution in Add LoongArch64 support microsoft/vstest#15359

Full Changelog: microsoft/vstest@v18.3.0...v18.4.0

18.3.0

What's Changed

• Fix answer file splitting by @​nohwnd in Fix answer file splitting microsoft/vstest#15306

Internal fixes and updates

• Bump branding to 18.1 by @​nohwnd in Bump branding to 18.1 microsoft/vstest#15286
• Remove stale copy of S.ComponentModel.Composition from testplatform packages by @​ViktorHofer in Remove stale copy of S.ComponentModel.Composition from testplatform packages microsoft/vstest#15287
• Update codeflow metadata to fix backflow by @​premun in Update codeflow metadata to fix backflow microsoft/vstest#15291
• [main] Update dependencies from devdiv/DevDiv/vs-code-coverage by @​dotnet-maestro[bot] in [main] Update dependencies from devdiv/DevDiv/vs-code-coverage microsoft/vstest#15283
• Update Microsoft.Build.Utilities.Core by @​Youssef1313 in Update Microsoft.Build.Utilities.Core microsoft/vstest#15300
• Disable DynamicNative instrumentation by default by @​nohwnd in Disable DynamicNative instrumentation by default microsoft/vstest#15299
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15293
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15302
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15314
• Delete sha1 custom implementation we are not using for a long time by @​nohwnd in Delete sha1 custom implementation we are not using for a long time microsoft/vstest#15313
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15315
• Update branding to 18.3.0 by @​nohwnd in Update branding to 18.3.0 microsoft/vstest#15321
• [main] Update dependencies from devdiv/DevDiv/vs-code-coverage by @​dotnet-maestro[bot] in [main] Update dependencies from devdiv/DevDiv/vs-code-coverage microsoft/vstest#15325
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade microsoft/vstest#15264
• Revert adding dotnet_host_path workaround by @​nohwnd in Revert adding dotnet_host_path workaround microsoft/vstest#15328
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade microsoft/vstest#15338
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15322
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade microsoft/vstest#15343
• Change PreReleaseVersionLabel from 'preview' to 'release' by @​nohwnd in Change PreReleaseVersionLabel from 'preview' to 'release' microsoft/vstest#15352
• [rel/18.3] Update dependencies from devdiv/DevDiv/vs-code-coverage by @​dotnet-maestro[bot] in [rel/18.3] Update dependencies from devdiv/DevDiv/vs-code-coverage microsoft/vstest#15354
• [rel/18.3] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [rel/18.3] Update dependencies from dotnet/arcade microsoft/vstest#15389
• [rel/18.3] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [rel/18.3] Update dependencies from dotnet/arcade microsoft/vstest#15400
• Update build tools to 17.11.48 to be source buildable by @​nohwnd in Update build tools to 17.11.48 to be source buildable microsoft/vstest#15310
• Disable publishing on RTM by @​nohwnd in Disable publishing on RTM microsoft/vstest#15296
• Don't access nuget.org for package feeds by @​nohwnd in Don't access nuget.org for package feeds microsoft/vstest#15316
• No nuget access fix tests by @​nohwnd in No nuget access fix tests microsoft/vstest#15317
• Disable Dependabot updates in dependabot.yml by @​mmitche in Disable Dependabot updates in dependabot.yml microsoft/vstest#15324

New Contributors

• @​premun made their first contribution in Update codeflow metadata to fix backflow microsoft/vstest#15291

Commits viewable in compare view.

Updated Npgsql from 10.0.1 to 10.0.2.

Release notes

Sourced from Npgsql's releases.

10.0.2

v10.0.2 contains several minor bug fixes.

Milestone issues

Full Changelog: npgsql/npgsql@v10.0.1...v10.0.2

Commits viewable in compare view.

Updated Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.0 to 10.0.1.

Release notes

Sourced from Npgsql.EntityFrameworkCore.PostgreSQL's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated NUnit from 4.4.0 to 4.5.1.

Release notes

Sourced from NUnit's releases.

4.5.1

See release notes for details.

4.5.0

See release notes for details.

Commits viewable in compare view.

Updated NUnit3TestAdapter from 6.1.0 to 6.2.0.

Release notes

Sourced from NUnit3TestAdapter's releases.

6.2.0

See release notes

Commits viewable in compare view.

Updated Swashbuckle.AspNetCore from 10.1.1 to 10.1.7.

Release notes

Sourced from Swashbuckle.AspNetCore's releases.

10.1.7

What's Changed

• Support custom data type for DataTypeAttribute by @​tayfunyuksel in Support custom data type for DataTypeAttribute domaindrivendev/Swashbuckle.AspNetCore#3868

New Contributors

• @​tayfunyuksel made their first contribution in Support custom data type for DataTypeAttribute domaindrivendev/Swashbuckle.AspNetCore#3868

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.6...v10.1.7

10.1.6

What's Changed

• Fix handling of duplicate enum values for dictionaries by @​martincostello in Fix handling of duplicate enum values for dictionaries domaindrivendev/Swashbuckle.AspNetCore#3839
• Log exception when app fails to start in CLI by @​ODukhno in Log exception when app fails to start in CLI domaindrivendev/Swashbuckle.AspNetCore#3853
• Fix missing OpenAPI 3.1 $ref properties by @​martincostello in Fix missing OpenAPI 3.1 $ref properties domaindrivendev/Swashbuckle.AspNetCore#3859
• Add description for OpenAPI schema references by @​martincostello in Add description for OpenAPI schema references domaindrivendev/Swashbuckle.AspNetCore#3860

New Contributors

• @​ODukhno made their first contribution in Log exception when app fails to start in CLI domaindrivendev/Swashbuckle.AspNetCore#3853

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.5...v10.1.6

10.1.5

What's Changed

• Bump swagger-ui-dist from 5.31.1 to 5.32.0 in /src/Swashbuckle.AspNetCore.SwaggerUI by @​dependabot in Bump swagger-ui-dist from 5.31.1 to 5.32.0 in /src/Swashbuckle.AspNetCore.SwaggerUI domaindrivendev/Swashbuckle.AspNetCore#3814
• Migrate to actions/attest by @​martincostello in Migrate to actions/attest domaindrivendev/Swashbuckle.AspNetCore#3815
• Disable secrets-outside-env audit by @​martincostello in Disable secrets-outside-env audit domaindrivendev/Swashbuckle.AspNetCore#3823
• Update zizmor to 1.23.1 by @​martincostello in Update zizmor to 1.23.1 domaindrivendev/Swashbuckle.AspNetCore#3825
• Fix null examples by @​jgarciadelanoceda in Fix nullExamples domaindrivendev/Swashbuckle.AspNetCore#3803
• Bump dependencies by @​martincostello in Bump dependencies domaindrivendev/Swashbuckle.AspNetCore#3835

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.4...v10.1.5

10.1.4

What's Changed

• Bump swagger-ui-dist from 5.31.0 to 5.31.1 in /src/Swashbuckle.AspNetCore.SwaggerUI by @​dependabot in Bump swagger-ui-dist from 5.31.0 to 5.31.1 in /src/Swashbuckle.AspNetCore.SwaggerUI domaindrivendev/Swashbuckle.AspNetCore#3792
• Return null on example, as it was with OpenApiNull before by @​jgarciadelanoceda in Return null on example, as it was with OpenApiNull before domaindrivendev/Swashbuckle.AspNetCore#3793

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.3...v10.1.4

10.1.3

What's Changed

• Fix null examples being represented as the string "null" by @​jgarciadelanoceda in Fix null examples being represented as the string null domaindrivendev/Swashbuckle.AspNetCore#3788

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.2...v10.1.3

10.1.2

What's Changed

• Fix browser caching behaviour by @​martincostello in Fix browser caching behaviour domaindrivendev/Swashbuckle.AspNetCore#3772
• Fix document URL serialization by @​martincostello in Fix document URL serialization domaindrivendev/Swashbuckle.AspNetCore#3773

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.1...v10.1.2

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.

[dependabot]

Updated coverlet.msbuild from 6.0.4 to 10.0.0.

Release notes

Sourced from coverlet.msbuild's releases.

10.0.0

Improvements

• Unique Report Filenames (coverlet.MTP and AzDO) #​1866
• Add --coverlet-file-prefix option for unique report files #​1869
• Introduce .NET 10 support #​1823

Fixed

• Fix [BUG] Wrong branch rate on IAsyncEnumerable for generic type #​1836
• Fix [BUG] Missing Coverage after moving to MTP #​1843
• Fix [BUG] No coverage reported when targeting .NET Framework with 8.0.1 #​1842
• Fix [BUG] Behavior changes between MTP and Legacy (msbuild) #​1878
• Fix [BUG] Coverlet.MTP - Unable to load coverlet.mtp.appsettings.json #​1880
• Fix [BUG] Coverlet.Collector produces empty report when Mediator.SourceGenerator is referenced #​1718 by https://github.com/yusyd
• Fix [BUG] Crash during instrumentation (Methods using LibraryImport/DllImport have no body) #​1762

Maintenance

• Add comprehensive async method tests and documentation for issue #​1864
• Replace Tmds.ExecFunction Package in coverlet.core.coverage.tests #​1833
• Add net9.0 and net10.0 targets #​1822

Diff between 8.0.1 and 10.0.0

8.0.1

Fixed

• Fix [BUG] TypeInitializationException when targeting .NET Framework #​1818
• Fix [BUG] coverlet.MTP build fails with CS0400 due to developmentDependency=true #​1827

Improvements

• Additional improvements needed for .NET Framework instrumentation type import #​1825

Diff between 8.0.0 and 8.0.1

8.0.0

Special Thanks: A huge thank you to @​Bertk for driving the majority of the work in this release! 🎉

Fixed

• Fix System.CommandLine 2.0 release is available #​1776
• Fix Excluding From Coverage bad defaults from given example #​1764
• Fix branchpoint exclusion for sdk 8.0.407 #​1741
• Fix missing copyright information in NuGet #​1794
• Fix bad default values in documentation #​1764 by https://github.com/cboudereau

Improvements

• Coverlet MTP extension feature #​1788
• Generate SBOM for nuget packages #​1752
• Use multi targets projects for coverlet.collector, coverlet.msbuild.tasks packages #​1742
• Use .NET 8.0 target framework for coverlet.core and remove Newtonsoft.Json #​1733
• Use latest System.CommandLine version #​1660
• Upgraded minimum required .NET SDK and runtime to .NET 8.0 LTS (Long Term Support) (Breaking Change)
• Use xunit.v3 for tests and example code

Diff between 6.0.4 and 8.0.0

Commits viewable in compare view.

Updated Microsoft.ApplicationInsights from 2.23.0 to 3.1.0.

Release notes

Sourced from Microsoft.ApplicationInsights's releases.

3.1.0

Version 3.1.0

• Make TelemetryContext properties public and propagate them via TelemetryClient.
• Add fallback to APPLICATIONINSIGHTS_CONNECTION_STRING environment variable for Base, Web, and NLog packages when connection string is not set via code.
• Update Azure.Monitor.OpenTelemetry.Exporter to 1.7.0. This includes updated mappings for telemetry context.
• Fix OTEL_SDK_DISABLED not being honored when TelemetryConfiguration.DisableTelemetry is set in DI scenarios., #​3157
• Fix TrackAvailability ignoring user-specified Timestamp on AvailabilityTelemetry. The timestamp is now emitted as microsoft.availability.testTimestamp so downstream exporters can use the correct event time.
• Added netstandard2.0 target framework to Microsoft.ApplicationInsights package to support customers with shared libraries targeting netstandard2.0.
• Fix TelemetryClient.Context.Cloud.RoleName set after construction now applies to all telemetry.
• Fix bug where Debug/Trace level logs from TrackTrace API were not emitted to Application Insights
• Fix Track API calls to not mutate the passed in dictionary if it is readonly
• Fix NullReferenceException in TelemetryClient.Flush() and FlushAsync() when called from DI scenarios
• Fix ApplicationVersion ignored: ApplicationInsightsServiceOptions.ApplicationVersion is now applied as service.version on the OpenTelemetry Resource for both AspNetCore and WorkerService packages
• Fix HttpRequestExtensions.UnvalidatedGetHeader always returning empty string instead of the actual header value. Restored max-length enforcement to guard against oversized header values.

3.0.0

• Replaced netstandard2.0 with net8.0 target framework in Microsoft.ApplicationInsights.NLogTarget package.

3.0.0-rc1

• Removed netstandard2.0 target framework from Microsoft.ApplicationInsights, Microsoft.ApplicationInsights.AspNetCore, and Microsoft.ApplicationInsights.WorkerService packages.
• The JavaScript in Microsoft.ApplicationInsights.AspNetCore has been updated to version 10.
• Centralized package version management
• Update OpenTelemetry dependencies, #​3092
  • OpenTelemetry 1.15.0
  • OpenTelemetry.Instrumentation.AspNetCore 1.15.0
  • OpenTelemetry.Instrumentation.AspNet 1.15.1
  • OpenTelemetry.Instrumentation.Http 1.15.0
  • OpenTelemetry.Instrumentation.SqlClient 1.15.0
• Vendored OpenTelemetry.Resources.Azure resource detectors to NETCORE shared folder, replaced package with vendored implementation, #​3093
• Added support to disable telemetry via TelemetryConfiguration.DisableTelemetry
• Removed EnabledAdaptiveSampling and replaced with TracesPerSecond and SamplingRatio
• Added EnableTraceBasedLogsSampler property to ApplicationInsightsServiceOptions for ASP.NET Core and WorkerService packages
• Added support for StorageDirectory and DisableOfflineStorage from TelemetryConfiguration in DI scenarios
• Update Azure.Monitor.OpenTelemetry.Exporter dependency to 1.6.0

3.0.0-beta2

Added

• Automatic configuration binding from "ApplicationInsights" section in appsettings.json for both AspNetCore and WorkerService packages with configuration precedence: environment variables > explicit configuration > appsettings.json
• Added support for Entra ID (Azure Active Directory) authentication using Azure.Core.TokenCredential
• Added Self Diagnostics feature
• Updated the default sampler from Fixed Rate to Rate-Limited Sampling.
• Update Azure Monitor Exporter to 1.6.0-beta.2
• Add comprehensive applicationinsights.config support
• Add properties in TelemetryConfiguration to configure underlying exporter

Bug fix

• Fix TrackMetric(MetricTelemetry) unsupported telemetry type error

3.0.0-beta1

• The following Application Insights packages in this repo now use OpenTelemetry internally. OpenTelemetry is the industry standard for telemetry collection and provides better interoperability with other observability tools.
  • Microsoft.ApplicationInsights
  • Microsoft.ApplicationInsights.AspNetCore
  • Microsoft.ApplicationInsights.WorkerService
  • Microsoft.ApplicationInsights.Web
  • Microsoft.ApplicationInsights.NLogTarget
• Classic APIs of the above packages are preserved; calls are translated to OpenTelemetry telemetry.
• Other packages not listed above (such as certain auto-collectors and logging adapters that were published from this repo previously) will not have future versions published. See BreakingChanges.md for details.

Commits viewable in compare view.

Updated Microsoft.ApplicationInsights.AspNetCore from 2.23.0 to 3.1.0.

Release notes

Sourced from Microsoft.ApplicationInsights.AspNetCore's releases.

3.1.0

Version 3.1.0

• Make TelemetryContext properties public and propagate them via TelemetryClient.
• Add fallback to APPLICATIONINSIGHTS_CONNECTION_STRING environment variable for Base, Web, and NLog packages when connection string is not set via code.
• Update Azure.Monitor.OpenTelemetry.Exporter to 1.7.0. This includes updated mappings for telemetry context.
• Fix OTEL_SDK_DISABLED not being honored when TelemetryConfiguration.DisableTelemetry is set in DI scenarios., #​3157
• Fix TrackAvailability ignoring user-specified Timestamp on AvailabilityTelemetry. The timestamp is now emitted as microsoft.availability.testTimestamp so downstream exporters can use the correct event time.
• Added netstandard2.0 target framework to Microsoft.ApplicationInsights package to support customers with shared libraries targeting netstandard2.0.
• Fix TelemetryClient.Context.Cloud.RoleName set after construction now applies to all telemetry.
• Fix bug where Debug/Trace level logs from TrackTrace API were not emitted to Application Insights
• Fix Track API calls to not mutate the passed in dictionary if it is readonly
• Fix NullReferenceException in TelemetryClient.Flush() and FlushAsync() when called from DI scenarios
• Fix ApplicationVersion ignored: ApplicationInsightsServiceOptions.ApplicationVersion is now applied as service.version on the OpenTelemetry Resource for both AspNetCore and WorkerService packages
• Fix HttpRequestExtensions.UnvalidatedGetHeader always returning empty string instead of the actual header value. Restored max-length enforcement to guard against oversized header values.

3.0.0

• Replaced netstandard2.0 with net8.0 target framework in Microsoft.ApplicationInsights.NLogTarget package.

3.0.0-rc1

• Removed netstandard2.0 target framework from Microsoft.ApplicationInsights, Microsoft.ApplicationInsights.AspNetCore, and Microsoft.ApplicationInsights.WorkerService packages.
• The JavaScript in Microsoft.ApplicationInsights.AspNetCore has been updated to version 10.
• Centralized package version management
• Update OpenTelemetry dependencies, #​3092
  • OpenTelemetry 1.15.0
  • OpenTelemetry.Instrumentation.AspNetCore 1.15.0
  • OpenTelemetry.Instrumentation.AspNet 1.15.1
  • OpenTelemetry.Instrumentation.Http 1.15.0
  • OpenTelemetry.Instrumentation.SqlClient 1.15.0
• Vendored OpenTelemetry.Resources.Azure resource detectors to NETCORE shared folder, replaced package with vendored implementation, #​3093
• Added support to disable telemetry via TelemetryConfiguration.DisableTelemetry
• Removed EnabledAdaptiveSampling and replaced with TracesPerSecond and SamplingRatio
• Added EnableTraceBasedLogsSampler property to ApplicationInsightsServiceOptions for ASP.NET Core and WorkerService packages
• Added support for StorageDirectory and DisableOfflineStorage from TelemetryConfiguration in DI scenarios
• Update Azure.Monitor.OpenTelemetry.Exporter dependency to 1.6.0

3.0.0-beta2

Added

• Automatic configuration binding from "ApplicationInsights" section in appsettings.json for both AspNetCore and WorkerService packages with configuration precedence: environment variables > explicit configuration > appsettings.json
• Added support for Entra ID (Azure Active Directory) authentication using Azure.Core.TokenCredential
• Added Self Diagnostics feature
• Updated the default sampler from Fixed Rate to Rate-Limited Sampling.
• Update Azure Monitor Exporter to 1.6.0-beta.2
• Add comprehensive applicationinsights.config support
• Add properties in TelemetryConfiguration to configure underlying exporter

Bug fix

• Fix TrackMetric(MetricTelemetry) unsupported telemetry type error

3.0.0-beta1

• The following Application Insights packages in this repo now use OpenTelemetry internally. OpenTelemetry is the industry standard for telemetry collection and provides better interoperability with other observability tools.
  • Microsoft.ApplicationInsights
  • Microsoft.ApplicationInsights.AspNetCore
  • Microsoft.ApplicationInsights.WorkerService
  • Microsoft.ApplicationInsights.Web
  • Microsoft.ApplicationInsights.NLogTarget
• Classic APIs of the above packages are preserved; calls are translated to OpenTelemetry telemetry.
• Other packages not listed above (such as certain auto-collectors and logging adapters that were published from this repo previously) will not have future versions published. See BreakingChanges.md for details.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.MicrosoftAccount from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.MicrosoftAccount's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authorization from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Authorization's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Data.Sqlite.Core from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Data.Sqlite.Core's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.InMemory from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.InMemory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Proxies from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Proxies's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Sqlite from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Sqlite's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Logging's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.AzureAppServices from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Logging.AzureAppServices's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Identity.Web from 4.3.0 to 4.8.0.

Release notes

Sourced from Microsoft.Identity.Web's releases.

4.8.0

What's Changed

• Bump flatted from 3.3.3 to 3.4.2 in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump flatted from 3.3.3 to 3.4.2 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3753
• Update changelog.md for ID.Web 4.6.0 by @​bgavrilMS in Update changelog.md for ID.Web 4.6.0 AzureAD/microsoft-identity-web#3756
• Add token binding to MicrosoftIdentityMessageHandler by @​cpp11nullptr in Add token binding to MicrosoftIdentityMessageHandler AzureAD/microsoft-identity-web#3743
• Bump picomatch in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump picomatch in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3759
• Documentation: Clarify managed identity credential types for containerized vs. VM/App Service deployments by @​Copilot in Documentation: Clarify managed identity credential types for containerized vs. VM/App Service deployments AzureAD/microsoft-identity-web#3585
• Bump path-to-regexp from 8.3.0 to 8.4.0 in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump path-to-regexp from 8.3.0 to 8.4.0 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3762
• Upgrade Microsoft Application Insights packages by @​RojaEnnam in Upgrade Microsoft Application Insights packages AzureAD/microsoft-identity-web#3763
• Use Abstractions 12 by @​pmaytak in Use Abstractions 12 AzureAD/microsoft-identity-web#3761
• Post-4.7.0 by @​pmaytak in Post-4.7.0 AzureAD/microsoft-identity-web#3768
• Fix Comp Gov DOTNET-Security-10.0 by @​reginayap8 in Fix Comp Gov DOTNET-Security-10.0 AzureAD/microsoft-identity-web#3769
• Upgrade CodeQL to V4: Fix 10 CodeQL Analysis Warnings and Errors by @​reginayap8 in Upgrade CodeQL to V4: Fix 10 CodeQL Analysis Warnings and Errors AzureAD/microsoft-identity-web#3770
• fix warnings by @​gladjohn in fix warnings AzureAD/microsoft-identity-web#3771
• adding examples for using postgres as a distributed cache by @​JaredMSFT in adding examples for using postgres as a distributed cache AzureAD/microsoft-identity-web#3766
• Suppress AOT configuration-binding SYSLIB warnings in AotCompatibility test app by @​Copilot in Suppress AOT configuration-binding SYSLIB warnings in AotCompatibility test app AzureAD/microsoft-identity-web#3774
• Bump vite from 7.1.11 to 7.3.2 in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump vite from 7.1.11 to 7.3.2 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3772
• Skip legacy B2C local-account Todo UI test in WebAppUiTests by @​Copilot in Skip legacy B2C local-account Todo UI test in WebAppUiTests AzureAD/microsoft-identity-web#3778
• Fix initialization of ConfidentialClientApplicationOptions in MergedOptions by @​cpp11nullptr in Fix initialization of ConfidentialClientApplicationOptions in MergedOptions AzureAD/microsoft-identity-web#3760
• Bump net8/net9/net10 runtime package baselines to patched crypto servicing versions by @​Copilot in Bump net8/net9/net10 runtime package baselines to patched crypto servicing versions AzureAD/microsoft-identity-web#3779
• Fix flaky certificate test failures on CI by @​gladjohn in Fix flaky certificate test failures on CI AzureAD/microsoft-identity-web#3780
• MTLS Without Tokens Support by @​tlupes in MTLS Without Tokens Support - DownstreamApi AzureAD/microsoft-identity-web#3747
• Fix CredentialsProvider DI lifetime mismatch causing startup crash in Development by @​Avery-Dunn in Fix CredentialsProvider DI lifetime mismatch causing startup crash in Development AzureAD/microsoft-identity-web#3783
• Remove unused DataProtection configuration from Sidecar by @​Copilot in Remove unused DataProtection configuration from Sidecar AzureAD/microsoft-identity-web#3776

New Contributors

• @​RojaEnnam made their first contribution in Upgrade Microsoft Application Insights packages AzureAD/microsoft-identity-web#3763
• @​reginayap8 made their first contribution in Fix Comp Gov DOTNET-Security-10.0 AzureAD/microsoft-identity-web#3769
• @​JaredMSFT made their first contribution in adding examples for using postgres as a distributed cache AzureAD/microsoft-identity-web#3766

Full Changelog: AzureAD/microsoft-identity-web@4.6.0...4.8.0

4.7.0

4.7.0

Bug fixes

• Updates to Microsoft.Identity.Abstractions 12.0.0 to revert breaking changes introduced in Abstractions 11.0.0. (On .NET 10 target, Certificate extension method in CredentialDescription was reverted to normal property.) See #​3767.

4.6.0

What's Changed

• Move boilerplate code skills to IdWeb, and add Aspire DevApp demonstrating Blazor authentication components by @​Copilot in Move boilerplate code skills to IdWeb, and add Aspire DevApp demonstrating Blazor authentication components AzureAD/microsoft-identity-web#3721
• Bump MSAL to 4.83.1 and re-enable Managed Identity CAE tests by @​Copilot in Bump MSAL to 4.83.1 and re-enable Managed Identity CAE tests AzureAD/microsoft-identity-web#3746
• Bump Abstractions to 11.2 by @​bgavrilMS in Bump Abstractions to 11.2 AzureAD/microsoft-identity-web#3749
• Update documentation to reference Blazor helpers from Microsoft.Identity.Web package by @​Copilot in Update documentation to reference Blazor helpers from Microsoft.Identity.Web package AzureAD/microsoft-identity-web#3723

Full Changelog: AzureAD/microsoft-identity-web@4.5.0...4.6.0

4.5.0

New features

• Add support for certificate store lookup by subject name. See #​3742.

Dependencies updates

• Bump minimatch in /tests/DevApps/SidecarAdapter/typescript. See #​3739.
• Bump rollup from 4.52.3 to 4.59.0 in /tests/DevApps/SidecarAdapter/typescript. See #​3740.

4.4.0

New features

• Add AOT-compatible web API authentication for .NET 10+. See #​3705 and #​3664.
• Propagate long-running web API session key back to callers in user token acquisition. See #​3728.
• Add OBO event initialization for OBO APIs. See #​3724.
• Add support for calling WithClientClaims flow for token acquisition. See #​3623.
• Add OnBeforeTokenAcquisitionForOnBehalfOf event. See #​3680.

Bug fixes

• Throw InvalidOperationException with actionable message when a custom credential is not registered. See #​3626.
• Fix event firing for InvokeOnBeforeTokenAcquisitionForOnBehalfOfAsync. See #​3717.
• Update OnBeforeTokenAcquisitionForOnBehalfOf to construct ClaimsPrincipal from token. See #​3714.
• Add a retry counter for acquire token and updated tests with a fake secret. See #​3682.
• Fix OBO user error handling. See #​3712.
• Fix override merging for app token (and others). See #​3644.
• Fix certificate reload logic to only trigger on certificate-specific errors. See #​3653.
• Update ROPC flow CCA to pass SendX5C to MSAL. See #​3671.

Dependencies updates

• Bump qs in /tests/DevApps/SidecarAdapter/typescript. See #​3725.
• Downgrade Microsoft.Extensions.Configuration.Binder to 2.1.0 on .NET Framework. See #​3730.
• Update .NET SDK to 10.0.103 to address DOTNET-Security-10.0 vulnerability. See #​3726.
• Upgrade to Microsoft.Identity.Abstractions 11 for AoT compatibility. See #​3699.
• Update to MSAL 4.81.0. See #​3665.

Documentation

• Add documentation for auto-generated session key for long-running OBO session. See #​3729.
• Improve the Aspire doc article and skills. See #​3695.
• Add an article and agent skill to add Entra ID to an Aspire app. See #​3689.
• Fix misleading comment in CertificatelessOptions.ManagedIdentityClientId. See #​3667.
• Add Copilot explore tool functionality. See #​3694.

Fundamentals

• Remove unnecessary warning suppression. See #​3715.
• Migrate labs to Lab.API 2.x (first pass). See #​3710.
• Update Sidecar E2E test constants. See #​3693.
• Fix intermittent failures in CertificatesObserverTests. See #​3687.
• Add validation baseline exclusions. See #​3684.
• Add dSTS integration tests. See #​3677.
• Fix FIC test. See #​3663.
• Update IdentityWeb version, build logic, and validation. See #​3659.

New Contributors

• @​XiaoxinMS2 made their first contribution in Add dSTS integration tests AzureAD/microsoft-identity-web#3677
• @​RyAuld made their first contribution in Fix intermittent failures in CertificatesObserverTests AzureAD/microsoft-identity-web#3687
• @​agocke made their first contribution in Update AOT annotations AzureAD/microsoft-identity-web#3664
• @​MZOLN made their first contribution in Remove unnecessary flag switch that causes official build to break. AzureAD/microsoft-identity-web#3700
• @​christian-posta made their first contribution in Fix override merging for app token (and others) AzureAD/microsoft-identity-web#3644
• @​4gust made their first contribution in Added retry counter for acquire token and modified added a test with … AzureAD/microsoft-identity-web#3682
• @​rayluo made their first contribution in Update OnBeforeTokenAcquisitionForOnBehalfOf event to construct ClaimsPricipal from token AzureAD/microsoft-identity-web#3714

4.4.0-preview.1

New features

• Add AOT-compatible web API authentication for .NET 10+. See #​3705 and #​3664.
• Propagate long-running web API session key back to callers in user token acquisition. See #​3728.
• Add OBO event initialization for OBO APIs. See #​3724.
• Add support for calling WithClientClaims flow for token acquisition. See #​3623.
• Add OnBeforeTokenAcquisitionForOnBehalfOf event. See #​3680.

Bug fixes

• Throw InvalidOperationException with actionable message when a custom credential is not registered. See #​3626.
• Fix event firing for InvokeOnBeforeTokenAcquisitionForOnBehalfOfAsync. See #​3717.
• Update OnBeforeTokenAcquisitionForOnBehalfOf to construct ClaimsPrincipal from token. See #​3714.
• Add a retry counter for acquire token and updated tests with a fake secret. See #​3682.
• Fix OBO user error handling. See #​3712.
• Fix override merging for app token (and others). See #​3644.
• Fix certificate reload logic to only trigger on certificate-specific errors. See #​3653.
• Update ROPC flow CCA to pass SendX5C to MSAL. See #​3671.

Dependencies updates

• Bump qs in /tests/DevApps/SidecarAdapter/typescript. See #​3725.
• Downgrade Microsoft.Extensions.Configuration.Binder to 2.1.0 on .NET Framework. See #​3730.
• Update .NET SDK to 10.0.103 to address DOTNET-Security-10.0 vulnerability. See #​3726.
• Upgrade to Microsoft.Identity.Abstractions 11 for AoT compatibility. See #​3699.
• Update to MSAL 4.81.0. See #​3665.

Documentation

• Add documentation for auto-generated session key for long-running OBO session. See #​3729.
• Improve the Aspire doc article and skills. See #​3695.
• Add an article and agent skill to add Entra ID to an Aspire app. See #​3689.
• Fix misleading comment in CertificatelessOptions.ManagedIdentityClientId. See #​3667.
• Add Copilot explore tool functionality. See #​3694.

Fundamentals

• Remove unnecessary warning suppression. See #​3715.
• Migrate labs to Lab.API 2.x (first pass). See #​3710.
• Update Sidecar E2E test constants. See #​3693.
• Fix intermittent failures in CertificatesObserverTests. See #​3687.
• Add validation baseline exclusions. See #​3684.
• Add dSTS integration tests. See #​3677.
• Fix FIC test. See #​3663.
• Update IdentityWeb version, build logic, and validation. See #​3659.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.0.1 to 18.4.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.4.0

What's Changed

• Add LoongArch64 support by @​stdmnpkg in Add LoongArch64 support microsoft/vstest#15359

• Refactor Condition evaluation by @​Youssef1313 in Refactor Condition evaluation microsoft/vstest#15357

• Adding info on extensions points part 1 by @​nohwnd in Adding info on extensions points part 1 microsoft/vstest#15360

• Add option to ask for uploading code QL before the standard window ends by @​nohwnd in Add option to ask for uploading code QL before the standard window ends microsoft/vstest#15373

• Update runtime versions by @​nohwnd in Update runtime versions microsoft/vstest#15372

• Fix .NET 10 regression for traits by @​Youssef1313 in Fix .NET 10 regression for traits microsoft/vstest#15370

• Update target frameworks to net10.0 and net11.0 by @​dotnet-maestro[bot] in Update target frameworks to net10.0 and net11.0 microsoft/vstest#15349

• Fix names in pipeline matrix so we don't have to align them by @​nohwnd in Fix names in pipeline matrix so we don't have to align them microsoft/vstest#15365

• Update SECURITY.md by @​Youssef1313 in Update SECURITY.md microsoft/vstest#15342

New Contributors

• @​stdmnpkg made their first contribution in Add LoongArch64 support microsoft/vstest#15359

Full Changelog: microsoft/vstest@v18.3.0...v18.4.0

18.3.0

What's Changed

• Fix answer file splitting by @​nohwnd in Fix answer file splitting microsoft/vstest#15306

Internal fixes and updates

• Bump branding to 18.1 by @​nohwnd in Bump branding to 18.1 microsoft/vstest#15286
• Remove stale copy of S.ComponentModel.Composition from testplatform packages by @​ViktorHofer in Remove stale copy of S.ComponentModel.Composition from testplatform packages microsoft/vstest#15287
• Update codeflow metadata to fix backflow by @​premun in Update codeflow metadata to fix backflow microsoft/vstest#15291
• [main] Update dependencies from devdiv/DevDiv/vs-code-coverage by @​dotnet-maestro[bot] in [main] Update dependencies from devdiv/DevDiv/vs-code-coverage microsoft/vstest#15283
• Update Microsoft.Build.Utilities.Core by @​Youssef1313 in Update Microsoft.Build.Utilities.Core microsoft/vstest#15300
• Disable DynamicNative instrumentation by default by @​nohwnd in Disable DynamicNative instrumentation by default microsoft/vstest#15299
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15293
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15302
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15314
• Delete sha1 custom implementation we are not using for a long time by @​nohwnd in Delete sha1 custom implementation we are not using for a long time microsoft/vstest#15313
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15315
• Update branding to 18.3.0 by @​nohwnd in Update branding to 18.3.0 microsoft/vstest#15321
• [main] Update dependencies from devdiv/DevDiv/vs-code-coverage by @​dotnet-maestro[bot] in [main] Update dependencies from devdiv/DevDiv/vs-code-coverage microsoft/vstest#15325
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade microsoft/vstest#15264
• Revert adding dotnet_host_path workaround by @​nohwnd in Revert adding dotnet_host_path workaround microsoft/vstest#15328
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade microsoft/vstest#15338
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15322
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade microsoft/vstest#15343
• Change PreReleaseVersionLabel from 'preview' to 'release' by @​nohwnd in Change PreReleaseVersionLabel from 'preview' to 'release' microsoft/vstest#15352
• [rel/18.3] Update dependencies from devdiv/DevDiv/vs-code-coverage by @​dotnet-maestro[bot] in [rel/18.3] Update dependencies from devdiv/DevDiv/vs-code-coverage microsoft/vstest#15354
• [rel/18.3] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [rel/18.3] Update dependencies from dotnet/arcade microsoft/vstest#15389
• [rel/18.3] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [rel/18.3] Update dependencies from dotnet/arcade microsoft/vstest#15400
• Update build tools to 17.11.48 to be source buildable by @​nohwnd in Update build tools to 17.11.48 to be source buildable microsoft/vstest#15310
• Disable publishing on RTM by @​nohwnd in Disable publishing on RTM microsoft/vstest#15296
• Don't access nuget.org for package feeds by @​nohwnd in Don't access nuget.org for package feeds microsoft/vstest#15316
• No nuget access fix tests by @​nohwnd in No nuget access fix tests microsoft/vstest#15317
• Disable Dependabot updates in dependabot.yml by @​mmitche in Disable Dependabot updates in dependabot.yml microsoft/vstest#15324

New Contributors

• @​premun made their first contribution in Update codeflow metadata to fix backflow microsoft/vstest#15291

Commits viewable in compare view.

Updated Npgsql from 10.0.1 to 10.0.2.

Release notes

Sourced from Npgsql's releases.

10.0.2

v10.0.2 contains several minor bug fixes.

Milestone issues

Full Changelog: npgsql/npgsql@v10.0.1...v10.0.2

Commits viewable in compare view.

Updated Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.0 to 10.0.1.

Release notes

Sourced from Npgsql.EntityFrameworkCore.PostgreSQL's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated NUnit from 4.4.0 to 4.5.1.

Release notes

Sourced from NUnit's releases.

4.5.1

See release notes for details.

4.5.0

See release notes for details.

Commits viewable in compare view.

Updated NUnit3TestAdapter from 6.1.0 to 6.2.0.

Release notes

Sourced from NUnit3TestAdapter's releases.

6.2.0

See release notes

Commits viewable in compare view.

Updated Swashbuckle.AspNetCore from 10.1.1 to 10.1.7.

Release notes

Sourced from Swashbuckle.AspNetCore's releases.

10.1.7

What's Changed

• Support custom data type for DataTypeAttribute by @​tayfunyuksel in Support custom data type for DataTypeAttribute domaindrivendev/Swashbuckle.AspNetCore#3868

New Contributors

• @​tayfunyuksel made their first contribution in Support custom data type for DataTypeAttribute domaindrivendev/Swashbuckle.AspNetCore#3868

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.6...v10.1.7

10.1.6

What's Changed

• Fix handling of duplicate enum values for dictionaries by @​martincostello in Fix handling of duplicate enum values for dictionaries domaindrivendev/Swashbuckle.AspNetCore#3839
• Log exception when app fails to start in CLI by @​ODukhno in Log exception when app fails to start in CLI domaindrivendev/Swashbuckle.AspNetCore#3853
• Fix missing OpenAPI 3.1 $ref properties by @​martincostello in Fix missing OpenAPI 3.1 $ref properties domaindrivendev/Swashbuckle.AspNetCore#3859
• Add description for OpenAPI schema references by @​martincostello in Add description for OpenAPI schema references domaindrivendev/Swashbuckle.AspNetCore#3860

New Contributors

• @​ODukhno made their first contribution in Log exception when app fails to start in CLI domaindrivendev/Swashbuckle.AspNetCore#3853

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.5...v10.1.6

10.1.5

What's Changed

• Bump swagger-ui-dist from 5.31.1 to 5.32.0 in /src/Swashbuckle.AspNetCore.SwaggerUI by @​dependabot in Bump swagger-ui-dist from 5.31.1 to 5.32.0 in /src/Swashbuckle.AspNetCore.SwaggerUI domaindrivendev/Swashbuckle.AspNetCore#3814
• Migrate to actions/attest by @​martincostello in Migrate to actions/attest domaindrivendev/Swashbuckle.AspNetCore#3815
• Disable secrets-outside-env audit by @​martincostello in Disable secrets-outside-env audit domaindrivendev/Swashbuckle.AspNetCore#3823
• Update zizmor to 1.23.1 by @​martincostello in Update zizmor to 1.23.1 domaindrivendev/Swashbuckle.AspNetCore#3825
• Fix null examples by @​jgarciadelanoceda in Fix nullExamples domaindrivendev/Swashbuckle.AspNetCore#3803
• Bump dependencies by @​martincostello in Bump dependencies domaindrivendev/Swashbuckle.AspNetCore#3835

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.4...v10.1.5

10.1.4

What's Changed

• Bump swagger-ui-dist from 5.31.0 to 5.31.1 in /src/Swashbuckle.AspNetCore.SwaggerUI by @​dependabot in Bump swagger-ui-dist from 5.31.0 to 5.31.1 in /src/Swashbuckle.AspNetCore.SwaggerUI domaindrivendev/Swashbuckle.AspNetCore#3792
• Return null on example, as it was with OpenApiNull before by @​jgarciadelanoceda in Return null on example, as it was with OpenApiNull before domaindrivendev/Swashbuckle.AspNetCore#3793

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.3...v10.1.4

10.1.3

What's Changed

• Fix null examples being represented as the string "null" by @​jgarciadelanoceda in Fix null examples being represented as the string null domaindrivendev/Swashbuckle.AspNetCore#3788

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.2...v10.1.3

10.1.2

What's Changed

• Fix browser caching behaviour by @​martincostello in Fix browser caching behaviour domaindrivendev/Swashbuckle.AspNetCore#3772
• Fix document URL serialization by @​martincostello in Fix document URL serialization domaindrivendev/Swashbuckle.AspNetCore#3773

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.1...v10.1.2

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.

[dependabot]

Updated coverlet.msbuild from 6.0.4 to 10.0.0.

Release notes

Sourced from coverlet.msbuild's releases.

10.0.0

Improvements

• Unique Report Filenames (coverlet.MTP and AzDO) #​1866
• Add --coverlet-file-prefix option for unique report files #​1869
• Introduce .NET 10 support #​1823

Fixed

• Fix [BUG] Wrong branch rate on IAsyncEnumerable for generic type #​1836
• Fix [BUG] Missing Coverage after moving to MTP #​1843
• Fix [BUG] No coverage reported when targeting .NET Framework with 8.0.1 #​1842
• Fix [BUG] Behavior changes between MTP and Legacy (msbuild) #​1878
• Fix [BUG] Coverlet.MTP - Unable to load coverlet.mtp.appsettings.json #​1880
• Fix [BUG] Coverlet.Collector produces empty report when Mediator.SourceGenerator is referenced #​1718 by https://github.com/yusyd
• Fix [BUG] Crash during instrumentation (Methods using LibraryImport/DllImport have no body) #​1762

Maintenance

• Add comprehensive async method tests and documentation for issue #​1864
• Replace Tmds.ExecFunction Package in coverlet.core.coverage.tests #​1833
• Add net9.0 and net10.0 targets #​1822

Diff between 8.0.1 and 10.0.0

8.0.1

Fixed

• Fix [BUG] TypeInitializationException when targeting .NET Framework #​1818
• Fix [BUG] coverlet.MTP build fails with CS0400 due to developmentDependency=true #​1827

Improvements

• Additional improvements needed for .NET Framework instrumentation type import #​1825

Diff between 8.0.0 and 8.0.1

8.0.0

Special Thanks: A huge thank you to @​Bertk for driving the majority of the work in this release! 🎉

Fixed

• Fix System.CommandLine 2.0 release is available #​1776
• Fix Excluding From Coverage bad defaults from given example #​1764
• Fix branchpoint exclusion for sdk 8.0.407 #​1741
• Fix missing copyright information in NuGet #​1794
• Fix bad default values in documentation #​1764 by https://github.com/cboudereau

Improvements

• Coverlet MTP extension feature #​1788
• Generate SBOM for nuget packages #​1752
• Use multi targets projects for coverlet.collector, coverlet.msbuild.tasks packages #​1742
• Use .NET 8.0 target framework for coverlet.core and remove Newtonsoft.Json #​1733
• Use latest System.CommandLine version #​1660
• Upgraded minimum required .NET SDK and runtime to .NET 8.0 LTS (Long Term Support) (Breaking Change)
• Use xunit.v3 for tests and example code

Diff between 6.0.4 and 8.0.0

Commits viewable in compare view.

Updated Microsoft.ApplicationInsights from 2.23.0 to 3.1.0.

Release notes

Sourced from Microsoft.ApplicationInsights's releases.

3.1.0

Version 3.1.0

• Make TelemetryContext properties public and propagate them via TelemetryClient.
• Add fallback to APPLICATIONINSIGHTS_CONNECTION_STRING environment variable for Base, Web, and NLog packages when connection string is not set via code.
• Update Azure.Monitor.OpenTelemetry.Exporter to 1.7.0. This includes updated mappings for telemetry context.
• Fix OTEL_SDK_DISABLED not being honored when TelemetryConfiguration.DisableTelemetry is set in DI scenarios., #​3157
• Fix TrackAvailability ignoring user-specified Timestamp on AvailabilityTelemetry. The timestamp is now emitted as microsoft.availability.testTimestamp so downstream exporters can use the correct event time.
• Added netstandard2.0 target framework to Microsoft.ApplicationInsights package to support customers with shared libraries targeting netstandard2.0.
• Fix TelemetryClient.Context.Cloud.RoleName set after construction now applies to all telemetry.
• Fix bug where Debug/Trace level logs from TrackTrace API were not emitted to Application Insights
• Fix Track API calls to not mutate the passed in dictionary if it is readonly
• Fix NullReferenceException in TelemetryClient.Flush() and FlushAsync() when called from DI scenarios
• Fix ApplicationVersion ignored: ApplicationInsightsServiceOptions.ApplicationVersion is now applied as service.version on the OpenTelemetry Resource for both AspNetCore and WorkerService packages
• Fix HttpRequestExtensions.UnvalidatedGetHeader always returning empty string instead of the actual header value. Restored max-length enforcement to guard against oversized header values.

3.0.0

• Replaced netstandard2.0 with net8.0 target framework in Microsoft.ApplicationInsights.NLogTarget package.

3.0.0-rc1

• Removed netstandard2.0 target framework from Microsoft.ApplicationInsights, Microsoft.ApplicationInsights.AspNetCore, and Microsoft.ApplicationInsights.WorkerService packages.
• The JavaScript in Microsoft.ApplicationInsights.AspNetCore has been updated to version 10.
• Centralized package version management
• Update OpenTelemetry dependencies, #​3092
  • OpenTelemetry 1.15.0
  • OpenTelemetry.Instrumentation.AspNetCore 1.15.0
  • OpenTelemetry.Instrumentation.AspNet 1.15.1
  • OpenTelemetry.Instrumentation.Http 1.15.0
  • OpenTelemetry.Instrumentation.SqlClient 1.15.0
• Vendored OpenTelemetry.Resources.Azure resource detectors to NETCORE shared folder, replaced package with vendored implementation, #​3093
• Added support to disable telemetry via TelemetryConfiguration.DisableTelemetry
• Removed EnabledAdaptiveSampling and replaced with TracesPerSecond and SamplingRatio
• Added EnableTraceBasedLogsSampler property to ApplicationInsightsServiceOptions for ASP.NET Core and WorkerService packages
• Added support for StorageDirectory and DisableOfflineStorage from TelemetryConfiguration in DI scenarios
• Update Azure.Monitor.OpenTelemetry.Exporter dependency to 1.6.0

3.0.0-beta2

Added

• Automatic configuration binding from "ApplicationInsights" section in appsettings.json for both AspNetCore and WorkerService packages with configuration precedence: environment variables > explicit configuration > appsettings.json
• Added support for Entra ID (Azure Active Directory) authentication using Azure.Core.TokenCredential
• Added Self Diagnostics feature
• Updated the default sampler from Fixed Rate to Rate-Limited Sampling.
• Update Azure Monitor Exporter to 1.6.0-beta.2
• Add comprehensive applicationinsights.config support
• Add properties in TelemetryConfiguration to configure underlying exporter

Bug fix

• Fix TrackMetric(MetricTelemetry) unsupported telemetry type error

3.0.0-beta1

• The following Application Insights packages in this repo now use OpenTelemetry internally. OpenTelemetry is the industry standard for telemetry collection and provides better interoperability with other observability tools.
  • Microsoft.ApplicationInsights
  • Microsoft.ApplicationInsights.AspNetCore
  • Microsoft.ApplicationInsights.WorkerService
  • Microsoft.ApplicationInsights.Web
  • Microsoft.ApplicationInsights.NLogTarget
• Classic APIs of the above packages are preserved; calls are translated to OpenTelemetry telemetry.
• Other packages not listed above (such as certain auto-collectors and logging adapters that were published from this repo previously) will not have future versions published. See BreakingChanges.md for details.

Commits viewable in compare view.

Updated Microsoft.ApplicationInsights.AspNetCore from 2.23.0 to 3.1.0.

Release notes

Sourced from Microsoft.ApplicationInsights.AspNetCore's releases.

3.1.0

Version 3.1.0

• Make TelemetryContext properties public and propagate them via TelemetryClient.
• Add fallback to APPLICATIONINSIGHTS_CONNECTION_STRING environment variable for Base, Web, and NLog packages when connection string is not set via code.
• Update Azure.Monitor.OpenTelemetry.Exporter to 1.7.0. This includes updated mappings for telemetry context.
• Fix OTEL_SDK_DISABLED not being honored when TelemetryConfiguration.DisableTelemetry is set in DI scenarios., #​3157
• Fix TrackAvailability ignoring user-specified Timestamp on AvailabilityTelemetry. The timestamp is now emitted as microsoft.availability.testTimestamp so downstream exporters can use the correct event time.
• Added netstandard2.0 target framework to Microsoft.ApplicationInsights package to support customers with shared libraries targeting netstandard2.0.
• Fix TelemetryClient.Context.Cloud.RoleName set after construction now applies to all telemetry.
• Fix bug where Debug/Trace level logs from TrackTrace API were not emitted to Application Insights
• Fix Track API calls to not mutate the passed in dictionary if it is readonly
• Fix NullReferenceException in TelemetryClient.Flush() and FlushAsync() when called from DI scenarios
• Fix ApplicationVersion ignored: ApplicationInsightsServiceOptions.ApplicationVersion is now applied as service.version on the OpenTelemetry Resource for both AspNetCore and WorkerService packages
• Fix HttpRequestExtensions.UnvalidatedGetHeader always returning empty string instead of the actual header value. Restored max-length enforcement to guard against oversized header values.

3.0.0

• Replaced netstandard2.0 with net8.0 target framework in Microsoft.ApplicationInsights.NLogTarget package.

3.0.0-rc1

• Removed netstandard2.0 target framework from Microsoft.ApplicationInsights, Microsoft.ApplicationInsights.AspNetCore, and Microsoft.ApplicationInsights.WorkerService packages.
• The JavaScript in Microsoft.ApplicationInsights.AspNetCore has been updated to version 10.
• Centralized package version management
• Update OpenTelemetry dependencies, #​3092
  • OpenTelemetry 1.15.0
  • OpenTelemetry.Instrumentation.AspNetCore 1.15.0
  • OpenTelemetry.Instrumentation.AspNet 1.15.1
  • OpenTelemetry.Instrumentation.Http 1.15.0
  • OpenTelemetry.Instrumentation.SqlClient 1.15.0
• Vendored OpenTelemetry.Resources.Azure resource detectors to NETCORE shared folder, replaced package with vendored implementation, #​3093
• Added support to disable telemetry via TelemetryConfiguration.DisableTelemetry
• Removed EnabledAdaptiveSampling and replaced with TracesPerSecond and SamplingRatio
• Added EnableTraceBasedLogsSampler property to ApplicationInsightsServiceOptions for ASP.NET Core and WorkerService packages
• Added support for StorageDirectory and DisableOfflineStorage from TelemetryConfiguration in DI scenarios
• Update Azure.Monitor.OpenTelemetry.Exporter dependency to 1.6.0

3.0.0-beta2

Added

• Automatic configuration binding from "ApplicationInsights" section in appsettings.json for both AspNetCore and WorkerService packages with configuration precedence: environment variables > explicit configuration > appsettings.json
• Added support for Entra ID (Azure Active Directory) authentication using Azure.Core.TokenCredential
• Added Self Diagnostics feature
• Updated the default sampler from Fixed Rate to Rate-Limited Sampling.
• Update Azure Monitor Exporter to 1.6.0-beta.2
• Add comprehensive applicationinsights.config support
• Add properties in TelemetryConfiguration to configure underlying exporter

Bug fix

• Fix TrackMetric(MetricTelemetry) unsupported telemetry type error

3.0.0-beta1

• The following Application Insights packages in this repo now use OpenTelemetry internally. OpenTelemetry is the industry standard for telemetry collection and provides better interoperability with other observability tools.
  • Microsoft.ApplicationInsights
  • Microsoft.ApplicationInsights.AspNetCore
  • Microsoft.ApplicationInsights.WorkerService
  • Microsoft.ApplicationInsights.Web
  • Microsoft.ApplicationInsights.NLogTarget
• Classic APIs of the above packages are preserved; calls are translated to OpenTelemetry telemetry.
• Other packages not listed above (such as certain auto-collectors and logging adapters that were published from this repo previously) will not have future versions published. See BreakingChanges.md for details.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.MicrosoftAccount from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.MicrosoftAccount's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authorization from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Authorization's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Data.Sqlite.Core from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Data.Sqlite.Core's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.InMemory from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.InMemory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Proxies from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Proxies's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Sqlite from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Sqlite's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Logging's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.AzureAppServices from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Logging.AzureAppServices's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Identity.Web from 4.3.0 to 4.8.0.

Release notes

Sourced from Microsoft.Identity.Web's releases.

4.8.0

What's Changed

• Bump flatted from 3.3.3 to 3.4.2 in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump flatted from 3.3.3 to 3.4.2 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3753
• Update changelog.md for ID.Web 4.6.0 by @​bgavrilMS in Update changelog.md for ID.Web 4.6.0 AzureAD/microsoft-identity-web#3756
• Add token binding to MicrosoftIdentityMessageHandler by @​cpp11nullptr in Add token binding to MicrosoftIdentityMessageHandler AzureAD/microsoft-identity-web#3743
• Bump picomatch in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump picomatch in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3759
• Documentation: Clarify managed identity credential types for containerized vs. VM/App Service deployments by @​Copilot in Documentation: Clarify managed identity credential types for containerized vs. VM/App Service deployments AzureAD/microsoft-identity-web#3585
• Bump path-to-regexp from 8.3.0 to 8.4.0 in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump path-to-regexp from 8.3.0 to 8.4.0 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3762
• Upgrade Microsoft Application Insights packages by @​RojaEnnam in Upgrade Microsoft Application Insights packages AzureAD/microsoft-identity-web#3763
• Use Abstractions 12 by @​pmaytak in Use Abstractions 12 AzureAD/microsoft-identity-web#3761
• Post-4.7.0 by @​pmaytak in Post-4.7.0 AzureAD/microsoft-identity-web#3768
• Fix Comp Gov DOTNET-Security-10.0 by @​reginayap8 in Fix Comp Gov DOTNET-Security-10.0 AzureAD/microsoft-identity-web#3769
• Upgrade CodeQL to V4: Fix 10 CodeQL Analysis Warnings and Errors by @​reginayap8 in Upgrade CodeQL to V4: Fix 10 CodeQL Analysis Warnings and Errors AzureAD/microsoft-identity-web#3770
• fix warnings by @​gladjohn in fix warnings AzureAD/microsoft-identity-web#3771
• adding examples for using postgres as a distributed cache by @​JaredMSFT in adding examples for using postgres as a distributed cache AzureAD/microsoft-identity-web#3766
• Suppress AOT configuration-binding SYSLIB warnings in AotCompatibility test app by @​Copilot in Suppress AOT configuration-binding SYSLIB warnings in AotCompatibility test app AzureAD/microsoft-identity-web#3774
• Bump vite from 7.1.11 to 7.3.2 in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump vite from 7.1.11 to 7.3.2 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3772
• Skip legacy B2C local-account Todo UI test in WebAppUiTests by @​Copilot in Skip legacy B2C local-account Todo UI test in WebAppUiTests AzureAD/microsoft-identity-web#3778
• Fix initialization of ConfidentialClientApplicationOptions in MergedOptions by @​cpp11nullptr in Fix initialization of ConfidentialClientApplicationOptions in MergedOptions AzureAD/microsoft-identity-web#3760
• Bump net8/net9/net10 runtime package baselines to patched crypto servicing versions by @​Copilot in Bump net8/net9/net10 runtime package baselines to patched crypto servicing versions AzureAD/microsoft-identity-web#3779
• Fix flaky certificate test failures on CI by @​gladjohn in Fix flaky certificate test failures on CI AzureAD/microsoft-identity-web#3780
• MTLS Without Tokens Support by @​tlupes in MTLS Without Tokens Support - DownstreamApi AzureAD/microsoft-identity-web#3747
• Fix CredentialsProvider DI lifetime mismatch causing startup crash in Development by @​Avery-Dunn in Fix CredentialsProvider DI lifetime mismatch causing startup crash in Development AzureAD/microsoft-identity-web#3783
• Remove unused DataProtection configuration from Sidecar by @​Copilot in Remove unused DataProtection configuration from Sidecar AzureAD/microsoft-identity-web#3776

New Contributors

• @​RojaEnnam made their first contribution in Upgrade Microsoft Application Insights packages AzureAD/microsoft-identity-web#3763
• @​reginayap8 made their first contribution in Fix Comp Gov DOTNET-Security-10.0 AzureAD/microsoft-identity-web#3769
• @​JaredMSFT made their first contribution in adding examples for using postgres as a distributed cache AzureAD/microsoft-identity-web#3766

Full Changelog: AzureAD/microsoft-identity-web@4.6.0...4.8.0

4.7.0

4.7.0

Bug fixes

• Updates to Microsoft.Identity.Abstractions 12.0.0 to revert breaking changes introduced in Abstractions 11.0.0. (On .NET 10 target, Certificate extension method in CredentialDescription was reverted to normal property.) See #​3767.

4.6.0

What's Changed

• Move boilerplate code skills to IdWeb, and add Aspire DevApp demonstrating Blazor authentication components by @​Copilot in Move boilerplate code skills to IdWeb, and add Aspire DevApp demonstrating Blazor authentication components AzureAD/microsoft-identity-web#3721
• Bump MSAL to 4.83.1 and re-enable Managed Identity CAE tests by @​Copilot in Bump MSAL to 4.83.1 and re-enable Managed Identity CAE tests AzureAD/microsoft-identity-web#3746
• Bump Abstractions to 11.2 by @​bgavrilMS in Bump Abstractions to 11.2 AzureAD/microsoft-identity-web#3749
• Update documentation to reference Blazor helpers from Microsoft.Identity.Web package by @​Copilot in Update documentation to reference Blazor helpers from Microsoft.Identity.Web package AzureAD/microsoft-identity-web#3723

Full Changelog: AzureAD/microsoft-identity-web@4.5.0...4.6.0

4.5.0

New features

• Add support for certificate store lookup by subject name. See #​3742.

Dependencies updates

• Bump minimatch in /tests/DevApps/SidecarAdapter/typescript. See #​3739.
• Bump rollup from 4.52.3 to 4.59.0 in /tests/DevApps/SidecarAdapter/typescript. See #​3740.

4.4.0

New features

• Add AOT-compatible web API authentication for .NET 10+. See #​3705 and #​3664.
• Propagate long-running web API session key back to callers in user token acquisition. See #​3728.
• Add OBO event initialization for OBO APIs. See #​3724.
• Add support for calling WithClientClaims flow for token acquisition. See #​3623.
• Add OnBeforeTokenAcquisitionForOnBehalfOf event. See #​3680.

Bug fixes

• Throw InvalidOperationException with actionable message when a custom credential is not registered. See #​3626.
• Fix event firing for InvokeOnBeforeTokenAcquisitionForOnBehalfOfAsync. See #​3717.
• Update OnBeforeTokenAcquisitionForOnBehalfOf to construct ClaimsPrincipal from token. See #​3714.
• Add a retry counter for acquire token and updated tests with a fake secret. See #​3682.
• Fix OBO user error handling. See #​3712.
• Fix override merging for app token (and others). See #​3644.
• Fix certificate reload logic to only trigger on certificate-specific errors. See #​3653.
• Update ROPC flow CCA to pass SendX5C to MSAL. See #​3671.

Dependencies updates

• Bump qs in /tests/DevApps/SidecarAdapter/typescript. See #​3725.
• Downgrade Microsoft.Extensions.Configuration.Binder to 2.1.0 on .NET Framework. See #​3730.
• Update .NET SDK to 10.0.103 to address DOTNET-Security-10.0 vulnerability. See #​3726.
• Upgrade to Microsoft.Identity.Abstractions 11 for AoT compatibility. See #​3699.
• Update to MSAL 4.81.0. See #​3665.

Documentation

• Add documentation for auto-generated session key for long-running OBO session. See #​3729.
• Improve the Aspire doc article and skills. See #​3695.
• Add an article and agent skill to add Entra ID to an Aspire app. See #​3689.
• Fix misleading comment in CertificatelessOptions.ManagedIdentityClientId. See #​3667.
• Add Copilot explore tool functionality. See #​3694.

Fundamentals

• Remove unnecessary warning suppression. See #​3715.
• Migrate labs to Lab.API 2.x (first pass). See #​3710.
• Update Sidecar E2E test constants. See #​3693.
• Fix intermittent failures in CertificatesObserverTests. See #​3687.
• Add validation baseline exclusions. See #​3684.
• Add dSTS integration tests. See #​3677.
• Fix FIC test. See #​3663.
• Update IdentityWeb version, build logic, and validation. See #​3659.

New Contributors

• @​XiaoxinMS2 made their first contribution in Add dSTS integration tests AzureAD/microsoft-identity-web#3677
• @​RyAuld made their first contribution in Fix intermittent failures in CertificatesObserverTests AzureAD/microsoft-identity-web#3687
• @​agocke made their first contribution in Update AOT annotations AzureAD/microsoft-identity-web#3664
• @​MZOLN made their first contribution in Remove unnecessary flag switch that causes official build to break. AzureAD/microsoft-identity-web#3700
• @​christian-posta made their first contribution in Fix override merging for app token (and others) AzureAD/microsoft-identity-web#3644
• @​4gust made their first contribution in Added retry counter for acquire token and modified added a test with … AzureAD/microsoft-identity-web#3682
• @​rayluo made their first contribution in Update OnBeforeTokenAcquisitionForOnBehalfOf event to construct ClaimsPricipal from token AzureAD/microsoft-identity-web#3714

4.4.0-preview.1

New features

• Add AOT-compatible web API authentication for .NET 10+. See #​3705 and #​3664.
• Propagate long-running web API session key back to callers in user token acquisition. See #​3728.
• Add OBO event initialization for OBO APIs. See #​3724.
• Add support for calling WithClientClaims flow for token acquisition. See #​3623.
• Add OnBeforeTokenAcquisitionForOnBehalfOf event. See #​3680.

Bug fixes

• Throw InvalidOperationException with actionable message when a custom credential is not registered. See #​3626.
• Fix event firing for InvokeOnBeforeTokenAcquisitionForOnBehalfOfAsync. See #​3717.
• Update OnBeforeTokenAcquisitionForOnBehalfOf to construct ClaimsPrincipal from token. See #​3714.
• Add a retry counter for acquire token and updated tests with a fake secret. See #​3682.
• Fix OBO user error handling. See #​3712.
• Fix override merging for app token (and others). See #​3644.
• Fix certificate reload logic to only trigger on certificate-specific errors. See #​3653.
• Update ROPC flow CCA to pass SendX5C to MSAL. See #​3671.

Dependencies updates

• Bump qs in /tests/DevApps/SidecarAdapter/typescript. See #​3725.
• Downgrade Microsoft.Extensions.Configuration.Binder to 2.1.0 on .NET Framework. See #​3730.
• Update .NET SDK to 10.0.103 to address DOTNET-Security-10.0 vulnerability. See #​3726.
• Upgrade to Microsoft.Identity.Abstractions 11 for AoT compatibility. See #​3699.
• Update to MSAL 4.81.0. See #​3665.

Documentation

• Add documentation for auto-generated session key for long-running OBO session. See #​3729.
• Improve the Aspire doc article and skills. See #​3695.
• Add an article and agent skill to add Entra ID to an Aspire app. See #​3689.
• Fix misleading comment in CertificatelessOptions.ManagedIdentityClientId. See #​3667.
• Add Copilot explore tool functionality. See #​3694.

Fundamentals

• Remove unnecessary warning suppression. See #​3715.
• Migrate labs to Lab.API 2.x (first pass). See #​3710.
• Update Sidecar E2E test constants. See #​3693.
• Fix intermittent failures in CertificatesObserverTests. See #​3687.
• Add validation baseline exclusions. See #​3684.
• Add dSTS integration tests. See #​3677.
• Fix FIC test. See #​3663.
• Update IdentityWeb version, build logic, and validation. See #​3659.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.0.1 to 18.4.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.4.0

What's Changed

• Add LoongArch64 support by @​stdmnpkg in Add LoongArch64 support microsoft/vstest#15359

• Refactor Condition evaluation by @​Youssef1313 in Refactor Condition evaluation microsoft/vstest#15357

• Adding info on extensions points part 1 by @​nohwnd in Adding info on extensions points part 1 microsoft/vstest#15360

• Add option to ask for uploading code QL before the standard window ends by @​nohwnd in Add option to ask for uploading code QL before the standard window ends microsoft/vstest#15373

• Update runtime versions by @​nohwnd in Update runtime versions microsoft/vstest#15372

• Fix .NET 10 regression for traits by @​Youssef1313 in Fix .NET 10 regression for traits microsoft/vstest#15370

• Update target frameworks to net10.0 and net11.0 by @​dotnet-maestro[bot] in Update target frameworks to net10.0 and net11.0 microsoft/vstest#15349

• Fix names in pipeline matrix so we don't have to align them by @​nohwnd in Fix names in pipeline matrix so we don't have to align them microsoft/vstest#15365

• Update SECURITY.md by @​Youssef1313 in Update SECURITY.md microsoft/vstest#15342

New Contributors

• @​stdmnpkg made their first contribution in Add LoongArch64 support microsoft/vstest#15359

Full Changelog: microsoft/vstest@v18.3.0...v18.4.0

18.3.0

What's Changed

• Fix answer file splitting by @​nohwnd in Fix answer file splitting microsoft/vstest#15306

Internal fixes and updates

• Bump branding to 18.1 by @​nohwnd in Bump branding to 18.1 microsoft/vstest#15286
• Remove stale copy of S.ComponentModel.Composition from testplatform packages by @​ViktorHofer in Remove stale copy of S.ComponentModel.Composition from testplatform packages microsoft/vstest#15287
• Update codeflow metadata to fix backflow by @​premun in Update codeflow metadata to fix backflow microsoft/vstest#15291
• [main] Update dependencies from devdiv/DevDiv/vs-code-coverage by @​dotnet-maestro[bot] in [main] Update dependencies from devdiv/DevDiv/vs-code-coverage microsoft/vstest#15283
• Update Microsoft.Build.Utilities.Core by @​Youssef1313 in Update Microsoft.Build.Utilities.Core microsoft/vstest#15300
• Disable DynamicNative instrumentation by default by @​nohwnd in Disable DynamicNative instrumentation by default microsoft/vstest#15299
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15293
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15302
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15314
• Delete sha1 custom implementation we are not using for a long time by @​nohwnd in Delete sha1 custom implementation we are not using for a long time microsoft/vstest#15313
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15315
• Update branding to 18.3.0 by @​nohwnd in Update branding to 18.3.0 microsoft/vstest#15321
• [main] Update dependencies from devdiv/DevDiv/vs-code-coverage by @​dotnet-maestro[bot] in [main] Update dependencies from devdiv/DevDiv/vs-code-coverage microsoft/vstest#15325
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade microsoft/vstest#15264
• Revert adding dotnet_host_path workaround by @​nohwnd in Revert adding dotnet_host_path workaround microsoft/vstest#15328
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade microsoft/vstest#15338
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15322
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade microsoft/vstest#15343
• Change PreReleaseVersionLabel from 'preview' to 'release' by @​nohwnd in Change PreReleaseVersionLabel from 'preview' to 'release' microsoft/vstest#15352
• [rel/18.3] Update dependencies from devdiv/DevDiv/vs-code-coverage by @​dotnet-maestro[bot] in [rel/18.3] Update dependencies from devdiv/DevDiv/vs-code-coverage microsoft/vstest#15354
• [rel/18.3] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [rel/18.3] Update dependencies from dotnet/arcade microsoft/vstest#15389
• [rel/18.3] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [rel/18.3] Update dependencies from dotnet/arcade microsoft/vstest#15400
• Update build tools to 17.11.48 to be source buildable by @​nohwnd in Update build tools to 17.11.48 to be source buildable microsoft/vstest#15310
• Disable publishing on RTM by @​nohwnd in Disable publishing on RTM microsoft/vstest#15296
• Don't access nuget.org for package feeds by @​nohwnd in Don't access nuget.org for package feeds microsoft/vstest#15316
• No nuget access fix tests by @​nohwnd in No nuget access fix tests microsoft/vstest#15317
• Disable Dependabot updates in dependabot.yml by @​mmitche in Disable Dependabot updates in dependabot.yml microsoft/vstest#15324

New Contributors

• @​premun made their first contribution in Update codeflow metadata to fix backflow microsoft/vstest#15291

Commits viewable in compare view.

Updated Npgsql from 10.0.1 to 10.0.2.

Release notes

Sourced from Npgsql's releases.

10.0.2

v10.0.2 contains several minor bug fixes.

Milestone issues

Full Changelog: npgsql/npgsql@v10.0.1...v10.0.2

Commits viewable in compare view.

Updated Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.0 to 10.0.1.

Release notes

Sourced from Npgsql.EntityFrameworkCore.PostgreSQL's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated NUnit from 4.4.0 to 4.5.1.

Release notes

Sourced from NUnit's releases.

4.5.1

See release notes for details.

4.5.0

See release notes for details.

Commits viewable in compare view.

Updated NUnit3TestAdapter from 6.1.0 to 6.2.0.

Release notes

Sourced from NUnit3TestAdapter's releases.

6.2.0

See release notes

Commits viewable in compare view.

Updated Swashbuckle.AspNetCore from 10.1.1 to 10.1.7.

Release notes

Sourced from Swashbuckle.AspNetCore's releases.

10.1.7

What's Changed

• Support custom data type for DataTypeAttribute by @​tayfunyuksel in Support custom data type for DataTypeAttribute domaindrivendev/Swashbuckle.AspNetCore#3868

New Contributors

• @​tayfunyuksel made their first contribution in Support custom data type for DataTypeAttribute domaindrivendev/Swashbuckle.AspNetCore#3868

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.6...v10.1.7

10.1.6

What's Changed

• Fix handling of duplicate enum values for dictionaries by @​martincostello in Fix handling of duplicate enum values for dictionaries domaindrivendev/Swashbuckle.AspNetCore#3839
• Log exception when app fails to start in CLI by @​ODukhno in Log exception when app fails to start in CLI domaindrivendev/Swashbuckle.AspNetCore#3853
• Fix missing OpenAPI 3.1 $ref properties by @​martincostello in Fix missing OpenAPI 3.1 $ref properties domaindrivendev/Swashbuckle.AspNetCore#3859
• Add description for OpenAPI schema references by @​martincostello in Add description for OpenAPI schema references domaindrivendev/Swashbuckle.AspNetCore#3860

New Contributors

• @​ODukhno made their first contribution in Log exception when app fails to start in CLI domaindrivendev/Swashbuckle.AspNetCore#3853

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.5...v10.1.6

10.1.5

What's Changed

• Bump swagger-ui-dist from 5.31.1 to 5.32.0 in /src/Swashbuckle.AspNetCore.SwaggerUI by @​dependabot in Bump swagger-ui-dist from 5.31.1 to 5.32.0 in /src/Swashbuckle.AspNetCore.SwaggerUI domaindrivendev/Swashbuckle.AspNetCore#3814
• Migrate to actions/attest by @​martincostello in Migrate to actions/attest domaindrivendev/Swashbuckle.AspNetCore#3815
• Disable secrets-outside-env audit by @​martincostello in Disable secrets-outside-env audit domaindrivendev/Swashbuckle.AspNetCore#3823
• Update zizmor to 1.23.1 by @​martincostello in Update zizmor to 1.23.1 domaindrivendev/Swashbuckle.AspNetCore#3825
• Fix null examples by @​jgarciadelanoceda in Fix nullExamples domaindrivendev/Swashbuckle.AspNetCore#3803
• Bump dependencies by @​martincostello in Bump dependencies domaindrivendev/Swashbuckle.AspNetCore#3835

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.4...v10.1.5

10.1.4

What's Changed

• Bump swagger-ui-dist from 5.31.0 to 5.31.1 in /src/Swashbuckle.AspNetCore.SwaggerUI by @​dependabot in Bump swagger-ui-dist from 5.31.0 to 5.31.1 in /src/Swashbuckle.AspNetCore.SwaggerUI domaindrivendev/Swashbuckle.AspNetCore#3792
• Return null on example, as it was with OpenApiNull before by @​jgarciadelanoceda in Return null on example, as it was with OpenApiNull before domaindrivendev/Swashbuckle.AspNetCore#3793

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.3...v10.1.4

10.1.3

What's Changed

• Fix null examples being represented as the string "null" by @​jgarciadelanoceda in Fix null examples being represented as the string null domaindrivendev/Swashbuckle.AspNetCore#3788

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.2...v10.1.3

10.1.2

What's Changed

• Fix browser caching behaviour by @​martincostello in Fix browser caching behaviour domaindrivendev/Swashbuckle.AspNetCore#3772
• Fix document URL serialization by @​martincostello in Fix document URL serialization domaindrivendev/Swashbuckle.AspNetCore#3773

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.1...v10.1.2

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.

[dependabot]

Updated coverlet.msbuild from 6.0.4 to 10.0.0.

Release notes

Sourced from coverlet.msbuild's releases.

10.0.0

Improvements

• Unique Report Filenames (coverlet.MTP and AzDO) #​1866
• Add --coverlet-file-prefix option for unique report files #​1869
• Introduce .NET 10 support #​1823

Fixed

• Fix [BUG] Wrong branch rate on IAsyncEnumerable for generic type #​1836
• Fix [BUG] Missing Coverage after moving to MTP #​1843
• Fix [BUG] No coverage reported when targeting .NET Framework with 8.0.1 #​1842
• Fix [BUG] Behavior changes between MTP and Legacy (msbuild) #​1878
• Fix [BUG] Coverlet.MTP - Unable to load coverlet.mtp.appsettings.json #​1880
• Fix [BUG] Coverlet.Collector produces empty report when Mediator.SourceGenerator is referenced #​1718 by https://github.com/yusyd
• Fix [BUG] Crash during instrumentation (Methods using LibraryImport/DllImport have no body) #​1762

Maintenance

• Add comprehensive async method tests and documentation for issue #​1864
• Replace Tmds.ExecFunction Package in coverlet.core.coverage.tests #​1833
• Add net9.0 and net10.0 targets #​1822

Diff between 8.0.1 and 10.0.0

8.0.1

Fixed

• Fix [BUG] TypeInitializationException when targeting .NET Framework #​1818
• Fix [BUG] coverlet.MTP build fails with CS0400 due to developmentDependency=true #​1827

Improvements

• Additional improvements needed for .NET Framework instrumentation type import #​1825

Diff between 8.0.0 and 8.0.1

8.0.0

Special Thanks: A huge thank you to @​Bertk for driving the majority of the work in this release! 🎉

Fixed

• Fix System.CommandLine 2.0 release is available #​1776
• Fix Excluding From Coverage bad defaults from given example #​1764
• Fix branchpoint exclusion for sdk 8.0.407 #​1741
• Fix missing copyright information in NuGet #​1794
• Fix bad default values in documentation #​1764 by https://github.com/cboudereau

Improvements

• Coverlet MTP extension feature #​1788
• Generate SBOM for nuget packages #​1752
• Use multi targets projects for coverlet.collector, coverlet.msbuild.tasks packages #​1742
• Use .NET 8.0 target framework for coverlet.core and remove Newtonsoft.Json #​1733
• Use latest System.CommandLine version #​1660
• Upgraded minimum required .NET SDK and runtime to .NET 8.0 LTS (Long Term Support) (Breaking Change)
• Use xunit.v3 for tests and example code

Diff between 6.0.4 and 8.0.0

Commits viewable in compare view.

Updated Microsoft.ApplicationInsights from 2.23.0 to 3.1.0.

Release notes

Sourced from Microsoft.ApplicationInsights's releases.

3.1.0

Version 3.1.0

• Make TelemetryContext properties public and propagate them via TelemetryClient.
• Add fallback to APPLICATIONINSIGHTS_CONNECTION_STRING environment variable for Base, Web, and NLog packages when connection string is not set via code.
• Update Azure.Monitor.OpenTelemetry.Exporter to 1.7.0. This includes updated mappings for telemetry context.
• Fix OTEL_SDK_DISABLED not being honored when TelemetryConfiguration.DisableTelemetry is set in DI scenarios., #​3157
• Fix TrackAvailability ignoring user-specified Timestamp on AvailabilityTelemetry. The timestamp is now emitted as microsoft.availability.testTimestamp so downstream exporters can use the correct event time.
• Added netstandard2.0 target framework to Microsoft.ApplicationInsights package to support customers with shared libraries targeting netstandard2.0.
• Fix TelemetryClient.Context.Cloud.RoleName set after construction now applies to all telemetry.
• Fix bug where Debug/Trace level logs from TrackTrace API were not emitted to Application Insights
• Fix Track API calls to not mutate the passed in dictionary if it is readonly
• Fix NullReferenceException in TelemetryClient.Flush() and FlushAsync() when called from DI scenarios
• Fix ApplicationVersion ignored: ApplicationInsightsServiceOptions.ApplicationVersion is now applied as service.version on the OpenTelemetry Resource for both AspNetCore and WorkerService packages
• Fix HttpRequestExtensions.UnvalidatedGetHeader always returning empty string instead of the actual header value. Restored max-length enforcement to guard against oversized header values.

3.0.0

• Replaced netstandard2.0 with net8.0 target framework in Microsoft.ApplicationInsights.NLogTarget package.

3.0.0-rc1

• Removed netstandard2.0 target framework from Microsoft.ApplicationInsights, Microsoft.ApplicationInsights.AspNetCore, and Microsoft.ApplicationInsights.WorkerService packages.
• The JavaScript in Microsoft.ApplicationInsights.AspNetCore has been updated to version 10.
• Centralized package version management
• Update OpenTelemetry dependencies, #​3092
  • OpenTelemetry 1.15.0
  • OpenTelemetry.Instrumentation.AspNetCore 1.15.0
  • OpenTelemetry.Instrumentation.AspNet 1.15.1
  • OpenTelemetry.Instrumentation.Http 1.15.0
  • OpenTelemetry.Instrumentation.SqlClient 1.15.0
• Vendored OpenTelemetry.Resources.Azure resource detectors to NETCORE shared folder, replaced package with vendored implementation, #​3093
• Added support to disable telemetry via TelemetryConfiguration.DisableTelemetry
• Removed EnabledAdaptiveSampling and replaced with TracesPerSecond and SamplingRatio
• Added EnableTraceBasedLogsSampler property to ApplicationInsightsServiceOptions for ASP.NET Core and WorkerService packages
• Added support for StorageDirectory and DisableOfflineStorage from TelemetryConfiguration in DI scenarios
• Update Azure.Monitor.OpenTelemetry.Exporter dependency to 1.6.0

3.0.0-beta2

Added

• Automatic configuration binding from "ApplicationInsights" section in appsettings.json for both AspNetCore and WorkerService packages with configuration precedence: environment variables > explicit configuration > appsettings.json
• Added support for Entra ID (Azure Active Directory) authentication using Azure.Core.TokenCredential
• Added Self Diagnostics feature
• Updated the default sampler from Fixed Rate to Rate-Limited Sampling.
• Update Azure Monitor Exporter to 1.6.0-beta.2
• Add comprehensive applicationinsights.config support
• Add properties in TelemetryConfiguration to configure underlying exporter

Bug fix

• Fix TrackMetric(MetricTelemetry) unsupported telemetry type error

3.0.0-beta1

• The following Application Insights packages in this repo now use OpenTelemetry internally. OpenTelemetry is the industry standard for telemetry collection and provides better interoperability with other observability tools.
  • Microsoft.ApplicationInsights
  • Microsoft.ApplicationInsights.AspNetCore
  • Microsoft.ApplicationInsights.WorkerService
  • Microsoft.ApplicationInsights.Web
  • Microsoft.ApplicationInsights.NLogTarget
• Classic APIs of the above packages are preserved; calls are translated to OpenTelemetry telemetry.
• Other packages not listed above (such as certain auto-collectors and logging adapters that were published from this repo previously) will not have future versions published. See BreakingChanges.md for details.

Commits viewable in compare view.

Updated Microsoft.ApplicationInsights.AspNetCore from 2.23.0 to 3.1.0.

Release notes

Sourced from Microsoft.ApplicationInsights.AspNetCore's releases.

3.1.0

Version 3.1.0

• Make TelemetryContext properties public and propagate them via TelemetryClient.
• Add fallback to APPLICATIONINSIGHTS_CONNECTION_STRING environment variable for Base, Web, and NLog packages when connection string is not set via code.
• Update Azure.Monitor.OpenTelemetry.Exporter to 1.7.0. This includes updated mappings for telemetry context.
• Fix OTEL_SDK_DISABLED not being honored when TelemetryConfiguration.DisableTelemetry is set in DI scenarios., #​3157
• Fix TrackAvailability ignoring user-specified Timestamp on AvailabilityTelemetry. The timestamp is now emitted as microsoft.availability.testTimestamp so downstream exporters can use the correct event time.
• Added netstandard2.0 target framework to Microsoft.ApplicationInsights package to support customers with shared libraries targeting netstandard2.0.
• Fix TelemetryClient.Context.Cloud.RoleName set after construction now applies to all telemetry.
• Fix bug where Debug/Trace level logs from TrackTrace API were not emitted to Application Insights
• Fix Track API calls to not mutate the passed in dictionary if it is readonly
• Fix NullReferenceException in TelemetryClient.Flush() and FlushAsync() when called from DI scenarios
• Fix ApplicationVersion ignored: ApplicationInsightsServiceOptions.ApplicationVersion is now applied as service.version on the OpenTelemetry Resource for both AspNetCore and WorkerService packages
• Fix HttpRequestExtensions.UnvalidatedGetHeader always returning empty string instead of the actual header value. Restored max-length enforcement to guard against oversized header values.

3.0.0

• Replaced netstandard2.0 with net8.0 target framework in Microsoft.ApplicationInsights.NLogTarget package.

3.0.0-rc1

• Removed netstandard2.0 target framework from Microsoft.ApplicationInsights, Microsoft.ApplicationInsights.AspNetCore, and Microsoft.ApplicationInsights.WorkerService packages.
• The JavaScript in Microsoft.ApplicationInsights.AspNetCore has been updated to version 10.
• Centralized package version management
• Update OpenTelemetry dependencies, #​3092
  • OpenTelemetry 1.15.0
  • OpenTelemetry.Instrumentation.AspNetCore 1.15.0
  • OpenTelemetry.Instrumentation.AspNet 1.15.1
  • OpenTelemetry.Instrumentation.Http 1.15.0
  • OpenTelemetry.Instrumentation.SqlClient 1.15.0
• Vendored OpenTelemetry.Resources.Azure resource detectors to NETCORE shared folder, replaced package with vendored implementation, #​3093
• Added support to disable telemetry via TelemetryConfiguration.DisableTelemetry
• Removed EnabledAdaptiveSampling and replaced with TracesPerSecond and SamplingRatio
• Added EnableTraceBasedLogsSampler property to ApplicationInsightsServiceOptions for ASP.NET Core and WorkerService packages
• Added support for StorageDirectory and DisableOfflineStorage from TelemetryConfiguration in DI scenarios
• Update Azure.Monitor.OpenTelemetry.Exporter dependency to 1.6.0

3.0.0-beta2

Added

• Automatic configuration binding from "ApplicationInsights" section in appsettings.json for both AspNetCore and WorkerService packages with configuration precedence: environment variables > explicit configuration > appsettings.json
• Added support for Entra ID (Azure Active Directory) authentication using Azure.Core.TokenCredential
• Added Self Diagnostics feature
• Updated the default sampler from Fixed Rate to Rate-Limited Sampling.
• Update Azure Monitor Exporter to 1.6.0-beta.2
• Add comprehensive applicationinsights.config support
• Add properties in TelemetryConfiguration to configure underlying exporter

Bug fix

• Fix TrackMetric(MetricTelemetry) unsupported telemetry type error

3.0.0-beta1

• The following Application Insights packages in this repo now use OpenTelemetry internally. OpenTelemetry is the industry standard for telemetry collection and provides better interoperability with other observability tools.
  • Microsoft.ApplicationInsights
  • Microsoft.ApplicationInsights.AspNetCore
  • Microsoft.ApplicationInsights.WorkerService
  • Microsoft.ApplicationInsights.Web
  • Microsoft.ApplicationInsights.NLogTarget
• Classic APIs of the above packages are preserved; calls are translated to OpenTelemetry telemetry.
• Other packages not listed above (such as certain auto-collectors and logging adapters that were published from this repo previously) will not have future versions published. See BreakingChanges.md for details.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.MicrosoftAccount from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.MicrosoftAccount's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authorization from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Authorization's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Data.Sqlite.Core from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Data.Sqlite.Core's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.InMemory from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.InMemory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Proxies from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Proxies's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Sqlite from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Sqlite's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Logging's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.AzureAppServices from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Logging.AzureAppServices's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Identity.Web from 4.3.0 to 4.8.0.

Release notes

Sourced from Microsoft.Identity.Web's releases.

4.8.0

What's Changed

• Bump flatted from 3.3.3 to 3.4.2 in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump flatted from 3.3.3 to 3.4.2 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3753
• Update changelog.md for ID.Web 4.6.0 by @​bgavrilMS in Update changelog.md for ID.Web 4.6.0 AzureAD/microsoft-identity-web#3756
• Add token binding to MicrosoftIdentityMessageHandler by @​cpp11nullptr in Add token binding to MicrosoftIdentityMessageHandler AzureAD/microsoft-identity-web#3743
• Bump picomatch in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump picomatch in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3759
• Documentation: Clarify managed identity credential types for containerized vs. VM/App Service deployments by @​Copilot in Documentation: Clarify managed identity credential types for containerized vs. VM/App Service deployments AzureAD/microsoft-identity-web#3585
• Bump path-to-regexp from 8.3.0 to 8.4.0 in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump path-to-regexp from 8.3.0 to 8.4.0 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3762
• Upgrade Microsoft Application Insights packages by @​RojaEnnam in Upgrade Microsoft Application Insights packages AzureAD/microsoft-identity-web#3763
• Use Abstractions 12 by @​pmaytak in Use Abstractions 12 AzureAD/microsoft-identity-web#3761
• Post-4.7.0 by @​pmaytak in Post-4.7.0 AzureAD/microsoft-identity-web#3768
• Fix Comp Gov DOTNET-Security-10.0 by @​reginayap8 in Fix Comp Gov DOTNET-Security-10.0 AzureAD/microsoft-identity-web#3769
• Upgrade CodeQL to V4: Fix 10 CodeQL Analysis Warnings and Errors by @​reginayap8 in Upgrade CodeQL to V4: Fix 10 CodeQL Analysis Warnings and Errors AzureAD/microsoft-identity-web#3770
• fix warnings by @​gladjohn in fix warnings AzureAD/microsoft-identity-web#3771
• adding examples for using postgres as a distributed cache by @​JaredMSFT in adding examples for using postgres as a distributed cache AzureAD/microsoft-identity-web#3766
• Suppress AOT configuration-binding SYSLIB warnings in AotCompatibility test app by @​Copilot in Suppress AOT configuration-binding SYSLIB warnings in AotCompatibility test app AzureAD/microsoft-identity-web#3774
• Bump vite from 7.1.11 to 7.3.2 in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump vite from 7.1.11 to 7.3.2 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3772
• Skip legacy B2C local-account Todo UI test in WebAppUiTests by @​Copilot in Skip legacy B2C local-account Todo UI test in WebAppUiTests AzureAD/microsoft-identity-web#3778
• Fix initialization of ConfidentialClientApplicationOptions in MergedOptions by @​cpp11nullptr in Fix initialization of ConfidentialClientApplicationOptions in MergedOptions AzureAD/microsoft-identity-web#3760
• Bump net8/net9/net10 runtime package baselines to patched crypto servicing versions by @​Copilot in Bump net8/net9/net10 runtime package baselines to patched crypto servicing versions AzureAD/microsoft-identity-web#3779
• Fix flaky certificate test failures on CI by @​gladjohn in Fix flaky certificate test failures on CI AzureAD/microsoft-identity-web#3780
• MTLS Without Tokens Support by @​tlupes in MTLS Without Tokens Support - DownstreamApi AzureAD/microsoft-identity-web#3747
• Fix CredentialsProvider DI lifetime mismatch causing startup crash in Development by @​Avery-Dunn in Fix CredentialsProvider DI lifetime mismatch causing startup crash in Development AzureAD/microsoft-identity-web#3783
• Remove unused DataProtection configuration from Sidecar by @​Copilot in Remove unused DataProtection configuration from Sidecar AzureAD/microsoft-identity-web#3776

New Contributors

• @​RojaEnnam made their first contribution in Upgrade Microsoft Application Insights packages AzureAD/microsoft-identity-web#3763
• @​reginayap8 made their first contribution in Fix Comp Gov DOTNET-Security-10.0 AzureAD/microsoft-identity-web#3769
• @​JaredMSFT made their first contribution in adding examples for using postgres as a distributed cache AzureAD/microsoft-identity-web#3766

Full Changelog: AzureAD/microsoft-identity-web@4.6.0...4.8.0

4.7.0

4.7.0

Bug fixes

• Updates to Microsoft.Identity.Abstractions 12.0.0 to revert breaking changes introduced in Abstractions 11.0.0. (On .NET 10 target, Certificate extension method in CredentialDescription was reverted to normal property.) See #​3767.

4.6.0

What's Changed

• Move boilerplate code skills to IdWeb, and add Aspire DevApp demonstrating Blazor authentication components by @​Copilot in Move boilerplate code skills to IdWeb, and add Aspire DevApp demonstrating Blazor authentication components AzureAD/microsoft-identity-web#3721
• Bump MSAL to 4.83.1 and re-enable Managed Identity CAE tests by @​Copilot in Bump MSAL to 4.83.1 and re-enable Managed Identity CAE tests AzureAD/microsoft-identity-web#3746
• Bump Abstractions to 11.2 by @​bgavrilMS in Bump Abstractions to 11.2 AzureAD/microsoft-identity-web#3749
• Update documentation to reference Blazor helpers from Microsoft.Identity.Web package by @​Copilot in Update documentation to reference Blazor helpers from Microsoft.Identity.Web package AzureAD/microsoft-identity-web#3723

Full Changelog: AzureAD/microsoft-identity-web@4.5.0...4.6.0

4.5.0

New features

• Add support for certificate store lookup by subject name. See #​3742.

Dependencies updates

• Bump minimatch in /tests/DevApps/SidecarAdapter/typescript. See #​3739.
• Bump rollup from 4.52.3 to 4.59.0 in /tests/DevApps/SidecarAdapter/typescript. See #​3740.

4.4.0

New features

• Add AOT-compatible web API authentication for .NET 10+. See #​3705 and #​3664.
• Propagate long-running web API session key back to callers in user token acquisition. See #​3728.
• Add OBO event initialization for OBO APIs. See #​3724.
• Add support for calling WithClientClaims flow for token acquisition. See #​3623.
• Add OnBeforeTokenAcquisitionForOnBehalfOf event. See #​3680.

Bug fixes

• Throw InvalidOperationException with actionable message when a custom credential is not registered. See #​3626.
• Fix event firing for InvokeOnBeforeTokenAcquisitionForOnBehalfOfAsync. See #​3717.
• Update OnBeforeTokenAcquisitionForOnBehalfOf to construct ClaimsPrincipal from token. See #​3714.
• Add a retry counter for acquire token and updated tests with a fake secret. See #​3682.
• Fix OBO user error handling. See #​3712.
• Fix override merging for app token (and others). See #​3644.
• Fix certificate reload logic to only trigger on certificate-specific errors. See #​3653.
• Update ROPC flow CCA to pass SendX5C to MSAL. See #​3671.

Dependencies updates

• Bump qs in /tests/DevApps/SidecarAdapter/typescript. See #​3725.
• Downgrade Microsoft.Extensions.Configuration.Binder to 2.1.0 on .NET Framework. See #​3730.
• Update .NET SDK to 10.0.103 to address DOTNET-Security-10.0 vulnerability. See #​3726.
• Upgrade to Microsoft.Identity.Abstractions 11 for AoT compatibility. See #​3699.
• Update to MSAL 4.81.0. See #​3665.

Documentation

• Add documentation for auto-generated session key for long-running OBO session. See #​3729.
• Improve the Aspire doc article and skills. See #​3695.
• Add an article and agent skill to add Entra ID to an Aspire app. See #​3689.
• Fix misleading comment in CertificatelessOptions.ManagedIdentityClientId. See #​3667.
• Add Copilot explore tool functionality. See #​3694.

Fundamentals

• Remove unnecessary warning suppression. See #​3715.
• Migrate labs to Lab.API 2.x (first pass). See #​3710.
• Update Sidecar E2E test constants. See #​3693.
• Fix intermittent failures in CertificatesObserverTests. See #​3687.
• Add validation baseline exclusions. See #​3684.
• Add dSTS integration tests. See #​3677.
• Fix FIC test. See #​3663.
• Update IdentityWeb version, build logic, and validation. See #​3659.

New Contributors

• @​XiaoxinMS2 made their first contribution in Add dSTS integration tests AzureAD/microsoft-identity-web#3677
• @​RyAuld made their first contribution in Fix intermittent failures in CertificatesObserverTests AzureAD/microsoft-identity-web#3687
• @​agocke made their first contribution in Update AOT annotations AzureAD/microsoft-identity-web#3664
• @​MZOLN made their first contribution in Remove unnecessary flag switch that causes official build to break. AzureAD/microsoft-identity-web#3700
• @​christian-posta made their first contribution in Fix override merging for app token (and others) AzureAD/microsoft-identity-web#3644
• @​4gust made their first contribution in Added retry counter for acquire token and modified added a test with … AzureAD/microsoft-identity-web#3682
• @​rayluo made their first contribution in Update OnBeforeTokenAcquisitionForOnBehalfOf event to construct ClaimsPricipal from token AzureAD/microsoft-identity-web#3714

4.4.0-preview.1

New features

• Add AOT-compatible web API authentication for .NET 10+. See #​3705 and #​3664.
• Propagate long-running web API session key back to callers in user token acquisition. See #​3728.
• Add OBO event initialization for OBO APIs. See #​3724.
• Add support for calling WithClientClaims flow for token acquisition. See #​3623.
• Add OnBeforeTokenAcquisitionForOnBehalfOf event. See #​3680.

Bug fixes

• Throw InvalidOperationException with actionable message when a custom credential is not registered. See #​3626.
• Fix event firing for InvokeOnBeforeTokenAcquisitionForOnBehalfOfAsync. See #​3717.
• Update OnBeforeTokenAcquisitionForOnBehalfOf to construct ClaimsPrincipal from token. See #​3714.
• Add a retry counter for acquire token and updated tests with a fake secret. See #​3682.
• Fix OBO user error handling. See #​3712.
• Fix override merging for app token (and others). See #​3644.
• Fix certificate reload logic to only trigger on certificate-specific errors. See #​3653.
• Update ROPC flow CCA to pass SendX5C to MSAL. See #​3671.

Dependencies updates

• Bump qs in /tests/DevApps/SidecarAdapter/typescript. See #​3725.
• Downgrade Microsoft.Extensions.Configuration.Binder to 2.1.0 on .NET Framework. See #​3730.
• Update .NET SDK to 10.0.103 to address DOTNET-Security-10.0 vulnerability. See #​3726.
• Upgrade to Microsoft.Identity.Abstractions 11 for AoT compatibility. See #​3699.
• Update to MSAL 4.81.0. See #​3665.

Documentation

• Add documentation for auto-generated session key for long-running OBO session. See #​3729.
• Improve the Aspire doc article and skills. See #​3695.
• Add an article and agent skill to add Entra ID to an Aspire app. See #​3689.
• Fix misleading comment in CertificatelessOptions.ManagedIdentityClientId. See #​3667.
• Add Copilot explore tool functionality. See #​3694.

Fundamentals

• Remove unnecessary warning suppression. See #​3715.
• Migrate labs to Lab.API 2.x (first pass). See #​3710.
• Update Sidecar E2E test constants. See #​3693.
• Fix intermittent failures in CertificatesObserverTests. See #​3687.
• Add validation baseline exclusions. See #​3684.
• Add dSTS integration tests. See #​3677.
• Fix FIC test. See #​3663.
• Update IdentityWeb version, build logic, and validation. See #​3659.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.0.1 to 18.4.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.4.0

What's Changed

• Add LoongArch64 support by @​stdmnpkg in Add LoongArch64 support microsoft/vstest#15359

• Refactor Condition evaluation by @​Youssef1313 in Refactor Condition evaluation microsoft/vstest#15357

• Adding info on extensions points part 1 by @​nohwnd in Adding info on extensions points part 1 microsoft/vstest#15360

• Add option to ask for uploading code QL before the standard window ends by @​nohwnd in Add option to ask for uploading code QL before the standard window ends microsoft/vstest#15373

• Update runtime versions by @​nohwnd in Update runtime versions microsoft/vstest#15372

• Fix .NET 10 regression for traits by @​Youssef1313 in Fix .NET 10 regression for traits microsoft/vstest#15370

• Update target frameworks to net10.0 and net11.0 by @​dotnet-maestro[bot] in Update target frameworks to net10.0 and net11.0 microsoft/vstest#15349

• Fix names in pipeline matrix so we don't have to align them by @​nohwnd in Fix names in pipeline matrix so we don't have to align them microsoft/vstest#15365

• Update SECURITY.md by @​Youssef1313 in Update SECURITY.md microsoft/vstest#15342

New Contributors

• @​stdmnpkg made their first contribution in Add LoongArch64 support microsoft/vstest#15359

Full Changelog: microsoft/vstest@v18.3.0...v18.4.0

18.3.0

What's Changed

• Fix answer file splitting by @​nohwnd in Fix answer file splitting microsoft/vstest#15306

Internal fixes and updates

• Bump branding to 18.1 by @​nohwnd in Bump branding to 18.1 microsoft/vstest#15286
• Remove stale copy of S.ComponentModel.Composition from testplatform packages by @​ViktorHofer in Remove stale copy of S.ComponentModel.Composition from testplatform packages microsoft/vstest#15287
• Update codeflow metadata to fix backflow by @​premun in Update codeflow metadata to fix backflow microsoft/vstest#15291
• [main] Update dependencies from devdiv/DevDiv/vs-code-coverage by @​dotnet-maestro[bot] in [main] Update dependencies from devdiv/DevDiv/vs-code-coverage microsoft/vstest#15283
• Update Microsoft.Build.Utilities.Core by @​Youssef1313 in Update Microsoft.Build.Utilities.Core microsoft/vstest#15300
• Disable DynamicNative instrumentation by default by @​nohwnd in Disable DynamicNative instrumentation by default microsoft/vstest#15299
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15293
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15302
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15314
• Delete sha1 custom implementation we are not using for a long time by @​nohwnd in Delete sha1 custom implementation we are not using for a long time microsoft/vstest#15313
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15315
• Update branding to 18.3.0 by @​nohwnd in Update branding to 18.3.0 microsoft/vstest#15321
• [main] Update dependencies from devdiv/DevDiv/vs-code-coverage by @​dotnet-maestro[bot] in [main] Update dependencies from devdiv/DevDiv/vs-code-coverage microsoft/vstest#15325
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade microsoft/vstest#15264
• Revert adding dotnet_host_path workaround by @​nohwnd in Revert adding dotnet_host_path workaround microsoft/vstest#15328
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade microsoft/vstest#15338
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15322
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade microsoft/vstest#15343
• Change PreReleaseVersionLabel from 'preview' to 'release' by @​nohwnd in Change PreReleaseVersionLabel from 'preview' to 'release' microsoft/vstest#15352
• [rel/18.3] Update dependencies from devdiv/DevDiv/vs-code-coverage by @​dotnet-maestro[bot] in [rel/18.3] Update dependencies from devdiv/DevDiv/vs-code-coverage microsoft/vstest#15354
• [rel/18.3] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [rel/18.3] Update dependencies from dotnet/arcade microsoft/vstest#15389
• [rel/18.3] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [rel/18.3] Update dependencies from dotnet/arcade microsoft/vstest#15400
• Update build tools to 17.11.48 to be source buildable by @​nohwnd in Update build tools to 17.11.48 to be source buildable microsoft/vstest#15310
• Disable publishing on RTM by @​nohwnd in Disable publishing on RTM microsoft/vstest#15296
• Don't access nuget.org for package feeds by @​nohwnd in Don't access nuget.org for package feeds microsoft/vstest#15316
• No nuget access fix tests by @​nohwnd in No nuget access fix tests microsoft/vstest#15317
• Disable Dependabot updates in dependabot.yml by @​mmitche in Disable Dependabot updates in dependabot.yml microsoft/vstest#15324

New Contributors

• @​premun made their first contribution in Update codeflow metadata to fix backflow microsoft/vstest#15291

Commits viewable in compare view.

Updated Npgsql from 10.0.1 to 10.0.2.

Release notes

Sourced from Npgsql's releases.

10.0.2

v10.0.2 contains several minor bug fixes.

Milestone issues

Full Changelog: npgsql/npgsql@v10.0.1...v10.0.2

Commits viewable in compare view.

Updated Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.0 to 10.0.1.

Release notes

Sourced from Npgsql.EntityFrameworkCore.PostgreSQL's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated NUnit from 4.4.0 to 4.5.1.

Release notes

Sourced from NUnit's releases.

4.5.1

See release notes for details.

4.5.0

See release notes for details.

Commits viewable in compare view.

Updated NUnit3TestAdapter from 6.1.0 to 6.2.0.

Release notes

Sourced from NUnit3TestAdapter's releases.

6.2.0

See release notes

Commits viewable in compare view.

Updated Swashbuckle.AspNetCore from 10.1.1 to 10.1.7.

Release notes

Sourced from Swashbuckle.AspNetCore's releases.

10.1.7

What's Changed

• Support custom data type for DataTypeAttribute by @​tayfunyuksel in Support custom data type for DataTypeAttribute domaindrivendev/Swashbuckle.AspNetCore#3868

New Contributors

• @​tayfunyuksel made their first contribution in Support custom data type for DataTypeAttribute domaindrivendev/Swashbuckle.AspNetCore#3868

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.6...v10.1.7

10.1.6

What's Changed

• Fix handling of duplicate enum values for dictionaries by @​martincostello in Fix handling of duplicate enum values for dictionaries domaindrivendev/Swashbuckle.AspNetCore#3839
• Log exception when app fails to start in CLI by @​ODukhno in Log exception when app fails to start in CLI domaindrivendev/Swashbuckle.AspNetCore#3853
• Fix missing OpenAPI 3.1 $ref properties by @​martincostello in Fix missing OpenAPI 3.1 $ref properties domaindrivendev/Swashbuckle.AspNetCore#3859
• Add description for OpenAPI schema references by @​martincostello in Add description for OpenAPI schema references domaindrivendev/Swashbuckle.AspNetCore#3860

New Contributors

• @​ODukhno made their first contribution in Log exception when app fails to start in CLI domaindrivendev/Swashbuckle.AspNetCore#3853

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.5...v10.1.6

10.1.5

What's Changed

• Bump swagger-ui-dist from 5.31.1 to 5.32.0 in /src/Swashbuckle.AspNetCore.SwaggerUI by @​dependabot in Bump swagger-ui-dist from 5.31.1 to 5.32.0 in /src/Swashbuckle.AspNetCore.SwaggerUI domaindrivendev/Swashbuckle.AspNetCore#3814
• Migrate to actions/attest by @​martincostello in Migrate to actions/attest domaindrivendev/Swashbuckle.AspNetCore#3815
• Disable secrets-outside-env audit by @​martincostello in Disable secrets-outside-env audit domaindrivendev/Swashbuckle.AspNetCore#3823
• Update zizmor to 1.23.1 by @​martincostello in Update zizmor to 1.23.1 domaindrivendev/Swashbuckle.AspNetCore#3825
• Fix null examples by @​jgarciadelanoceda in Fix nullExamples domaindrivendev/Swashbuckle.AspNetCore#3803
• Bump dependencies by @​martincostello in Bump dependencies domaindrivendev/Swashbuckle.AspNetCore#3835

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.4...v10.1.5

10.1.4

What's Changed

• Bump swagger-ui-dist from 5.31.0 to 5.31.1 in /src/Swashbuckle.AspNetCore.SwaggerUI by @​dependabot in Bump swagger-ui-dist from 5.31.0 to 5.31.1 in /src/Swashbuckle.AspNetCore.SwaggerUI domaindrivendev/Swashbuckle.AspNetCore#3792
• Return null on example, as it was with OpenApiNull before by @​jgarciadelanoceda in Return null on example, as it was with OpenApiNull before domaindrivendev/Swashbuckle.AspNetCore#3793

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.3...v10.1.4

10.1.3

What's Changed

• Fix null examples being represented as the string "null" by @​jgarciadelanoceda in Fix null examples being represented as the string null domaindrivendev/Swashbuckle.AspNetCore#3788

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.2...v10.1.3

10.1.2

What's Changed

• Fix browser caching behaviour by @​martincostello in Fix browser caching behaviour domaindrivendev/Swashbuckle.AspNetCore#3772
• Fix document URL serialization by @​martincostello in Fix document URL serialization domaindrivendev/Swashbuckle.AspNetCore#3773

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.1...v10.1.2

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.

[dependabot]

Updated coverlet.msbuild from 6.0.4 to 10.0.0.

Release notes

Sourced from coverlet.msbuild's releases.

10.0.0

Improvements

• Unique Report Filenames (coverlet.MTP and AzDO) #​1866
• Add --coverlet-file-prefix option for unique report files #​1869
• Introduce .NET 10 support #​1823

Fixed

• Fix [BUG] Wrong branch rate on IAsyncEnumerable for generic type #​1836
• Fix [BUG] Missing Coverage after moving to MTP #​1843
• Fix [BUG] No coverage reported when targeting .NET Framework with 8.0.1 #​1842
• Fix [BUG] Behavior changes between MTP and Legacy (msbuild) #​1878
• Fix [BUG] Coverlet.MTP - Unable to load coverlet.mtp.appsettings.json #​1880
• Fix [BUG] Coverlet.Collector produces empty report when Mediator.SourceGenerator is referenced #​1718 by https://github.com/yusyd
• Fix [BUG] Crash during instrumentation (Methods using LibraryImport/DllImport have no body) #​1762

Maintenance

• Add comprehensive async method tests and documentation for issue #​1864
• Replace Tmds.ExecFunction Package in coverlet.core.coverage.tests #​1833
• Add net9.0 and net10.0 targets #​1822

Diff between 8.0.1 and 10.0.0

8.0.1

Fixed

• Fix [BUG] TypeInitializationException when targeting .NET Framework #​1818
• Fix [BUG] coverlet.MTP build fails with CS0400 due to developmentDependency=true #​1827

Improvements

• Additional improvements needed for .NET Framework instrumentation type import #​1825

Diff between 8.0.0 and 8.0.1

8.0.0

Special Thanks: A huge thank you to @​Bertk for driving the majority of the work in this release! 🎉

Fixed

• Fix System.CommandLine 2.0 release is available #​1776
• Fix Excluding From Coverage bad defaults from given example #​1764
• Fix branchpoint exclusion for sdk 8.0.407 #​1741
• Fix missing copyright information in NuGet #​1794
• Fix bad default values in documentation #​1764 by https://github.com/cboudereau

Improvements

• Coverlet MTP extension feature #​1788
• Generate SBOM for nuget packages #​1752
• Use multi targets projects for coverlet.collector, coverlet.msbuild.tasks packages #​1742
• Use .NET 8.0 target framework for coverlet.core and remove Newtonsoft.Json #​1733
• Use latest System.CommandLine version #​1660
• Upgraded minimum required .NET SDK and runtime to .NET 8.0 LTS (Long Term Support) (Breaking Change)
• Use xunit.v3 for tests and example code

Diff between 6.0.4 and 8.0.0

Commits viewable in compare view.

Updated Microsoft.ApplicationInsights from 2.23.0 to 3.1.0.

Release notes

Sourced from Microsoft.ApplicationInsights's releases.

3.1.0

Version 3.1.0

• Make TelemetryContext properties public and propagate them via TelemetryClient.
• Add fallback to APPLICATIONINSIGHTS_CONNECTION_STRING environment variable for Base, Web, and NLog packages when connection string is not set via code.
• Update Azure.Monitor.OpenTelemetry.Exporter to 1.7.0. This includes updated mappings for telemetry context.
• Fix OTEL_SDK_DISABLED not being honored when TelemetryConfiguration.DisableTelemetry is set in DI scenarios., #​3157
• Fix TrackAvailability ignoring user-specified Timestamp on AvailabilityTelemetry. The timestamp is now emitted as microsoft.availability.testTimestamp so downstream exporters can use the correct event time.
• Added netstandard2.0 target framework to Microsoft.ApplicationInsights package to support customers with shared libraries targeting netstandard2.0.
• Fix TelemetryClient.Context.Cloud.RoleName set after construction now applies to all telemetry.
• Fix bug where Debug/Trace level logs from TrackTrace API were not emitted to Application Insights
• Fix Track API calls to not mutate the passed in dictionary if it is readonly
• Fix NullReferenceException in TelemetryClient.Flush() and FlushAsync() when called from DI scenarios
• Fix ApplicationVersion ignored: ApplicationInsightsServiceOptions.ApplicationVersion is now applied as service.version on the OpenTelemetry Resource for both AspNetCore and WorkerService packages
• Fix HttpRequestExtensions.UnvalidatedGetHeader always returning empty string instead of the actual header value. Restored max-length enforcement to guard against oversized header values.

3.0.0

• Replaced netstandard2.0 with net8.0 target framework in Microsoft.ApplicationInsights.NLogTarget package.

3.0.0-rc1

• Removed netstandard2.0 target framework from Microsoft.ApplicationInsights, Microsoft.ApplicationInsights.AspNetCore, and Microsoft.ApplicationInsights.WorkerService packages.
• The JavaScript in Microsoft.ApplicationInsights.AspNetCore has been updated to version 10.
• Centralized package version management
• Update OpenTelemetry dependencies, #​3092
  • OpenTelemetry 1.15.0
  • OpenTelemetry.Instrumentation.AspNetCore 1.15.0
  • OpenTelemetry.Instrumentation.AspNet 1.15.1
  • OpenTelemetry.Instrumentation.Http 1.15.0
  • OpenTelemetry.Instrumentation.SqlClient 1.15.0
• Vendored OpenTelemetry.Resources.Azure resource detectors to NETCORE shared folder, replaced package with vendored implementation, #​3093
• Added support to disable telemetry via TelemetryConfiguration.DisableTelemetry
• Removed EnabledAdaptiveSampling and replaced with TracesPerSecond and SamplingRatio
• Added EnableTraceBasedLogsSampler property to ApplicationInsightsServiceOptions for ASP.NET Core and WorkerService packages
• Added support for StorageDirectory and DisableOfflineStorage from TelemetryConfiguration in DI scenarios
• Update Azure.Monitor.OpenTelemetry.Exporter dependency to 1.6.0

3.0.0-beta2

Added

• Automatic configuration binding from "ApplicationInsights" section in appsettings.json for both AspNetCore and WorkerService packages with configuration precedence: environment variables > explicit configuration > appsettings.json
• Added support for Entra ID (Azure Active Directory) authentication using Azure.Core.TokenCredential
• Added Self Diagnostics feature
• Updated the default sampler from Fixed Rate to Rate-Limited Sampling.
• Update Azure Monitor Exporter to 1.6.0-beta.2
• Add comprehensive applicationinsights.config support
• Add properties in TelemetryConfiguration to configure underlying exporter

Bug fix

• Fix TrackMetric(MetricTelemetry) unsupported telemetry type error

3.0.0-beta1

• The following Application Insights packages in this repo now use OpenTelemetry internally. OpenTelemetry is the industry standard for telemetry collection and provides better interoperability with other observability tools.
  • Microsoft.ApplicationInsights
  • Microsoft.ApplicationInsights.AspNetCore
  • Microsoft.ApplicationInsights.WorkerService
  • Microsoft.ApplicationInsights.Web
  • Microsoft.ApplicationInsights.NLogTarget
• Classic APIs of the above packages are preserved; calls are translated to OpenTelemetry telemetry.
• Other packages not listed above (such as certain auto-collectors and logging adapters that were published from this repo previously) will not have future versions published. See BreakingChanges.md for details.

Commits viewable in compare view.

Updated Microsoft.ApplicationInsights.AspNetCore from 2.23.0 to 3.1.0.

Release notes

Sourced from Microsoft.ApplicationInsights.AspNetCore's releases.

3.1.0

Version 3.1.0

• Make TelemetryContext properties public and propagate them via TelemetryClient.
• Add fallback to APPLICATIONINSIGHTS_CONNECTION_STRING environment variable for Base, Web, and NLog packages when connection string is not set via code.
• Update Azure.Monitor.OpenTelemetry.Exporter to 1.7.0. This includes updated mappings for telemetry context.
• Fix OTEL_SDK_DISABLED not being honored when TelemetryConfiguration.DisableTelemetry is set in DI scenarios., #​3157
• Fix TrackAvailability ignoring user-specified Timestamp on AvailabilityTelemetry. The timestamp is now emitted as microsoft.availability.testTimestamp so downstream exporters can use the correct event time.
• Added netstandard2.0 target framework to Microsoft.ApplicationInsights package to support customers with shared libraries targeting netstandard2.0.
• Fix TelemetryClient.Context.Cloud.RoleName set after construction now applies to all telemetry.
• Fix bug where Debug/Trace level logs from TrackTrace API were not emitted to Application Insights
• Fix Track API calls to not mutate the passed in dictionary if it is readonly
• Fix NullReferenceException in TelemetryClient.Flush() and FlushAsync() when called from DI scenarios
• Fix ApplicationVersion ignored: ApplicationInsightsServiceOptions.ApplicationVersion is now applied as service.version on the OpenTelemetry Resource for both AspNetCore and WorkerService packages
• Fix HttpRequestExtensions.UnvalidatedGetHeader always returning empty string instead of the actual header value. Restored max-length enforcement to guard against oversized header values.

3.0.0

• Replaced netstandard2.0 with net8.0 target framework in Microsoft.ApplicationInsights.NLogTarget package.

3.0.0-rc1

• Removed netstandard2.0 target framework from Microsoft.ApplicationInsights, Microsoft.ApplicationInsights.AspNetCore, and Microsoft.ApplicationInsights.WorkerService packages.
• The JavaScript in Microsoft.ApplicationInsights.AspNetCore has been updated to version 10.
• Centralized package version management
• Update OpenTelemetry dependencies, #​3092
  • OpenTelemetry 1.15.0
  • OpenTelemetry.Instrumentation.AspNetCore 1.15.0
  • OpenTelemetry.Instrumentation.AspNet 1.15.1
  • OpenTelemetry.Instrumentation.Http 1.15.0
  • OpenTelemetry.Instrumentation.SqlClient 1.15.0
• Vendored OpenTelemetry.Resources.Azure resource detectors to NETCORE shared folder, replaced package with vendored implementation, #​3093
• Added support to disable telemetry via TelemetryConfiguration.DisableTelemetry
• Removed EnabledAdaptiveSampling and replaced with TracesPerSecond and SamplingRatio
• Added EnableTraceBasedLogsSampler property to ApplicationInsightsServiceOptions for ASP.NET Core and WorkerService packages
• Added support for StorageDirectory and DisableOfflineStorage from TelemetryConfiguration in DI scenarios
• Update Azure.Monitor.OpenTelemetry.Exporter dependency to 1.6.0

3.0.0-beta2

Added

• Automatic configuration binding from "ApplicationInsights" section in appsettings.json for both AspNetCore and WorkerService packages with configuration precedence: environment variables > explicit configuration > appsettings.json
• Added support for Entra ID (Azure Active Directory) authentication using Azure.Core.TokenCredential
• Added Self Diagnostics feature
• Updated the default sampler from Fixed Rate to Rate-Limited Sampling.
• Update Azure Monitor Exporter to 1.6.0-beta.2
• Add comprehensive applicationinsights.config support
• Add properties in TelemetryConfiguration to configure underlying exporter

Bug fix

• Fix TrackMetric(MetricTelemetry) unsupported telemetry type error

3.0.0-beta1

• The following Application Insights packages in this repo now use OpenTelemetry internally. OpenTelemetry is the industry standard for telemetry collection and provides better interoperability with other observability tools.
  • Microsoft.ApplicationInsights
  • Microsoft.ApplicationInsights.AspNetCore
  • Microsoft.ApplicationInsights.WorkerService
  • Microsoft.ApplicationInsights.Web
  • Microsoft.ApplicationInsights.NLogTarget
• Classic APIs of the above packages are preserved; calls are translated to OpenTelemetry telemetry.
• Other packages not listed above (such as certain auto-collectors and logging adapters that were published from this repo previously) will not have future versions published. See BreakingChanges.md for details.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.MicrosoftAccount from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.MicrosoftAccount's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authorization from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Authorization's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Data.Sqlite.Core from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Data.Sqlite.Core's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.InMemory from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.InMemory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Proxies from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Proxies's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Sqlite from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Sqlite's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Logging's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.AzureAppServices from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Logging.AzureAppServices's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Identity.Web from 4.3.0 to 4.8.0.

Release notes

Sourced from Microsoft.Identity.Web's releases.

4.8.0

What's Changed

• Bump flatted from 3.3.3 to 3.4.2 in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump flatted from 3.3.3 to 3.4.2 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3753
• Update changelog.md for ID.Web 4.6.0 by @​bgavrilMS in Update changelog.md for ID.Web 4.6.0 AzureAD/microsoft-identity-web#3756
• Add token binding to MicrosoftIdentityMessageHandler by @​cpp11nullptr in Add token binding to MicrosoftIdentityMessageHandler AzureAD/microsoft-identity-web#3743
• Bump picomatch in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump picomatch in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3759
• Documentation: Clarify managed identity credential types for containerized vs. VM/App Service deployments by @​Copilot in Documentation: Clarify managed identity credential types for containerized vs. VM/App Service deployments AzureAD/microsoft-identity-web#3585
• Bump path-to-regexp from 8.3.0 to 8.4.0 in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump path-to-regexp from 8.3.0 to 8.4.0 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3762
• Upgrade Microsoft Application Insights packages by @​RojaEnnam in Upgrade Microsoft Application Insights packages AzureAD/microsoft-identity-web#3763
• Use Abstractions 12 by @​pmaytak in Use Abstractions 12 AzureAD/microsoft-identity-web#3761
• Post-4.7.0 by @​pmaytak in Post-4.7.0 AzureAD/microsoft-identity-web#3768
• Fix Comp Gov DOTNET-Security-10.0 by @​reginayap8 in Fix Comp Gov DOTNET-Security-10.0 AzureAD/microsoft-identity-web#3769
• Upgrade CodeQL to V4: Fix 10 CodeQL Analysis Warnings and Errors by @​reginayap8 in Upgrade CodeQL to V4: Fix 10 CodeQL Analysis Warnings and Errors AzureAD/microsoft-identity-web#3770
• fix warnings by @​gladjohn in fix warnings AzureAD/microsoft-identity-web#3771
• adding examples for using postgres as a distributed cache by @​JaredMSFT in adding examples for using postgres as a distributed cache AzureAD/microsoft-identity-web#3766
• Suppress AOT configuration-binding SYSLIB warnings in AotCompatibility test app by @​Copilot in Suppress AOT configuration-binding SYSLIB warnings in AotCompatibility test app AzureAD/microsoft-identity-web#3774
• Bump vite from 7.1.11 to 7.3.2 in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump vite from 7.1.11 to 7.3.2 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3772
• Skip legacy B2C local-account Todo UI test in WebAppUiTests by @​Copilot in Skip legacy B2C local-account Todo UI test in WebAppUiTests AzureAD/microsoft-identity-web#3778
• Fix initialization of ConfidentialClientApplicationOptions in MergedOptions by @​cpp11nullptr in Fix initialization of ConfidentialClientApplicationOptions in MergedOptions AzureAD/microsoft-identity-web#3760
• Bump net8/net9/net10 runtime package baselines to patched crypto servicing versions by @​Copilot in Bump net8/net9/net10 runtime package baselines to patched crypto servicing versions AzureAD/microsoft-identity-web#3779
• Fix flaky certificate test failures on CI by @​gladjohn in Fix flaky certificate test failures on CI AzureAD/microsoft-identity-web#3780
• MTLS Without Tokens Support by @​tlupes in MTLS Without Tokens Support - DownstreamApi AzureAD/microsoft-identity-web#3747
• Fix CredentialsProvider DI lifetime mismatch causing startup crash in Development by @​Avery-Dunn in Fix CredentialsProvider DI lifetime mismatch causing startup crash in Development AzureAD/microsoft-identity-web#3783
• Remove unused DataProtection configuration from Sidecar by @​Copilot in Remove unused DataProtection configuration from Sidecar AzureAD/microsoft-identity-web#3776

New Contributors

• @​RojaEnnam made their first contribution in Upgrade Microsoft Application Insights packages AzureAD/microsoft-identity-web#3763
• @​reginayap8 made their first contribution in Fix Comp Gov DOTNET-Security-10.0 AzureAD/microsoft-identity-web#3769
• @​JaredMSFT made their first contribution in adding examples for using postgres as a distributed cache AzureAD/microsoft-identity-web#3766

Full Changelog: AzureAD/microsoft-identity-web@4.6.0...4.8.0

4.7.0

4.7.0

Bug fixes

• Updates to Microsoft.Identity.Abstractions 12.0.0 to revert breaking changes introduced in Abstractions 11.0.0. (On .NET 10 target, Certificate extension method in CredentialDescription was reverted to normal property.) See #​3767.

4.6.0

What's Changed

• Move boilerplate code skills to IdWeb, and add Aspire DevApp demonstrating Blazor authentication components by @​Copilot in Move boilerplate code skills to IdWeb, and add Aspire DevApp demonstrating Blazor authentication components AzureAD/microsoft-identity-web#3721
• Bump MSAL to 4.83.1 and re-enable Managed Identity CAE tests by @​Copilot in Bump MSAL to 4.83.1 and re-enable Managed Identity CAE tests AzureAD/microsoft-identity-web#3746
• Bump Abstractions to 11.2 by @​bgavrilMS in Bump Abstractions to 11.2 AzureAD/microsoft-identity-web#3749
• Update documentation to reference Blazor helpers from Microsoft.Identity.Web package by @​Copilot in Update documentation to reference Blazor helpers from Microsoft.Identity.Web package AzureAD/microsoft-identity-web#3723

Full Changelog: AzureAD/microsoft-identity-web@4.5.0...4.6.0

4.5.0

New features

• Add support for certificate store lookup by subject name. See #​3742.

Dependencies updates

• Bump minimatch in /tests/DevApps/SidecarAdapter/typescript. See #​3739.
• Bump rollup from 4.52.3 to 4.59.0 in /tests/DevApps/SidecarAdapter/typescript. See #​3740.

4.4.0

New features

• Add AOT-compatible web API authentication for .NET 10+. See #​3705 and #​3664.
• Propagate long-running web API session key back to callers in user token acquisition. See #​3728.
• Add OBO event initialization for OBO APIs. See #​3724.
• Add support for calling WithClientClaims flow for token acquisition. See #​3623.
• Add OnBeforeTokenAcquisitionForOnBehalfOf event. See #​3680.

Bug fixes

• Throw InvalidOperationException with actionable message when a custom credential is not registered. See #​3626.
• Fix event firing for InvokeOnBeforeTokenAcquisitionForOnBehalfOfAsync. See #​3717.
• Update OnBeforeTokenAcquisitionForOnBehalfOf to construct ClaimsPrincipal from token. See #​3714.
• Add a retry counter for acquire token and updated tests with a fake secret. See #​3682.
• Fix OBO user error handling. See #​3712.
• Fix override merging for app token (and others). See #​3644.
• Fix certificate reload logic to only trigger on certificate-specific errors. See #​3653.
• Update ROPC flow CCA to pass SendX5C to MSAL. See #​3671.

Dependencies updates

• Bump qs in /tests/DevApps/SidecarAdapter/typescript. See #​3725.
• Downgrade Microsoft.Extensions.Configuration.Binder to 2.1.0 on .NET Framework. See #​3730.
• Update .NET SDK to 10.0.103 to address DOTNET-Security-10.0 vulnerability. See #​3726.
• Upgrade to Microsoft.Identity.Abstractions 11 for AoT compatibility. See #​3699.
• Update to MSAL 4.81.0. See #​3665.

Documentation

• Add documentation for auto-generated session key for long-running OBO session. See #​3729.
• Improve the Aspire doc article and skills. See #​3695.
• Add an article and agent skill to add Entra ID to an Aspire app. See #​3689.
• Fix misleading comment in CertificatelessOptions.ManagedIdentityClientId. See #​3667.
• Add Copilot explore tool functionality. See #​3694.

Fundamentals

• Remove unnecessary warning suppression. See #​3715.
• Migrate labs to Lab.API 2.x (first pass). See #​3710.
• Update Sidecar E2E test constants. See #​3693.
• Fix intermittent failures in CertificatesObserverTests. See #​3687.
• Add validation baseline exclusions. See #​3684.
• Add dSTS integration tests. See #​3677.
• Fix FIC test. See #​3663.
• Update IdentityWeb version, build logic, and validation. See #​3659.

New Contributors

• @​XiaoxinMS2 made their first contribution in Add dSTS integration tests AzureAD/microsoft-identity-web#3677
• @​RyAuld made their first contribution in Fix intermittent failures in CertificatesObserverTests AzureAD/microsoft-identity-web#3687
• @​agocke made their first contribution in Update AOT annotations AzureAD/microsoft-identity-web#3664
• @​MZOLN made their first contribution in Remove unnecessary flag switch that causes official build to break. AzureAD/microsoft-identity-web#3700
• @​christian-posta made their first contribution in Fix override merging for app token (and others) AzureAD/microsoft-identity-web#3644
• @​4gust made their first contribution in Added retry counter for acquire token and modified added a test with … AzureAD/microsoft-identity-web#3682
• @​rayluo made their first contribution in Update OnBeforeTokenAcquisitionForOnBehalfOf event to construct ClaimsPricipal from token AzureAD/microsoft-identity-web#3714

4.4.0-preview.1

New features

• Add AOT-compatible web API authentication for .NET 10+. See #​3705 and #​3664.
• Propagate long-running web API session key back to callers in user token acquisition. See #​3728.
• Add OBO event initialization for OBO APIs. See #​3724.
• Add support for calling WithClientClaims flow for token acquisition. See #​3623.
• Add OnBeforeTokenAcquisitionForOnBehalfOf event. See #​3680.

Bug fixes

• Throw InvalidOperationException with actionable message when a custom credential is not registered. See #​3626.
• Fix event firing for InvokeOnBeforeTokenAcquisitionForOnBehalfOfAsync. See #​3717.
• Update OnBeforeTokenAcquisitionForOnBehalfOf to construct ClaimsPrincipal from token. See #​3714.
• Add a retry counter for acquire token and updated tests with a fake secret. See #​3682.
• Fix OBO user error handling. See #​3712.
• Fix override merging for app token (and others). See #​3644.
• Fix certificate reload logic to only trigger on certificate-specific errors. See #​3653.
• Update ROPC flow CCA to pass SendX5C to MSAL. See #​3671.

Dependencies updates

• Bump qs in /tests/DevApps/SidecarAdapter/typescript. See #​3725.
• Downgrade Microsoft.Extensions.Configuration.Binder to 2.1.0 on .NET Framework. See #​3730.
• Update .NET SDK to 10.0.103 to address DOTNET-Security-10.0 vulnerability. See #​3726.
• Upgrade to Microsoft.Identity.Abstractions 11 for AoT compatibility. See #​3699.
• Update to MSAL 4.81.0. See #​3665.

Documentation

• Add documentation for auto-generated session key for long-running OBO session. See #​3729.
• Improve the Aspire doc article and skills. See #​3695.
• Add an article and agent skill to add Entra ID to an Aspire app. See #​3689.
• Fix misleading comment in CertificatelessOptions.ManagedIdentityClientId. See #​3667.
• Add Copilot explore tool functionality. See #​3694.

Fundamentals

• Remove unnecessary warning suppression. See #​3715.
• Migrate labs to Lab.API 2.x (first pass). See #​3710.
• Update Sidecar E2E test constants. See #​3693.
• Fix intermittent failures in CertificatesObserverTests. See #​3687.
• Add validation baseline exclusions. See #​3684.
• Add dSTS integration tests. See #​3677.
• Fix FIC test. See #​3663.
• Update IdentityWeb version, build logic, and validation. See #​3659.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.0.1 to 18.4.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.4.0

What's Changed

• Add LoongArch64 support by @​stdmnpkg in Add LoongArch64 support microsoft/vstest#15359

• Refactor Condition evaluation by @​Youssef1313 in Refactor Condition evaluation microsoft/vstest#15357

• Adding info on extensions points part 1 by @​nohwnd in Adding info on extensions points part 1 microsoft/vstest#15360

• Add option to ask for uploading code QL before the standard window ends by @​nohwnd in Add option to ask for uploading code QL before the standard window ends microsoft/vstest#15373

• Update runtime versions by @​nohwnd in Update runtime versions microsoft/vstest#15372

• Fix .NET 10 regression for traits by @​Youssef1313 in Fix .NET 10 regression for traits microsoft/vstest#15370

• Update target frameworks to net10.0 and net11.0 by @​dotnet-maestro[bot] in Update target frameworks to net10.0 and net11.0 microsoft/vstest#15349

• Fix names in pipeline matrix so we don't have to align them by @​nohwnd in Fix names in pipeline matrix so we don't have to align them microsoft/vstest#15365

• Update SECURITY.md by @​Youssef1313 in Update SECURITY.md microsoft/vstest#15342

New Contributors

• @​stdmnpkg made their first contribution in Add LoongArch64 support microsoft/vstest#15359

Full Changelog: microsoft/vstest@v18.3.0...v18.4.0

18.3.0

What's Changed

• Fix answer file splitting by @​nohwnd in Fix answer file splitting microsoft/vstest#15306

Internal fixes and updates

• Bump branding to 18.1 by @​nohwnd in Bump branding to 18.1 microsoft/vstest#15286
• Remove stale copy of S.ComponentModel.Composition from testplatform packages by @​ViktorHofer in Remove stale copy of S.ComponentModel.Composition from testplatform packages microsoft/vstest#15287
• Update codeflow metadata to fix backflow by @​premun in Update codeflow metadata to fix backflow microsoft/vstest#15291
• [main] Update dependencies from devdiv/DevDiv/vs-code-coverage by @​dotnet-maestro[bot] in [main] Update dependencies from devdiv/DevDiv/vs-code-coverage microsoft/vstest#15283
• Update Microsoft.Build.Utilities.Core by @​Youssef1313 in Update Microsoft.Build.Utilities.Core microsoft/vstest#15300
• Disable DynamicNative instrumentation by default by @​nohwnd in Disable DynamicNative instrumentation by default microsoft/vstest#15299
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15293
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15302
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15314
• Delete sha1 custom implementation we are not using for a long time by @​nohwnd in Delete sha1 custom implementation we are not using for a long time microsoft/vstest#15313
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15315
• Update branding to 18.3.0 by @​nohwnd in Update branding to 18.3.0 microsoft/vstest#15321
• [main] Update dependencies from devdiv/DevDiv/vs-code-coverage by @​dotnet-maestro[bot] in [main] Update dependencies from devdiv/DevDiv/vs-code-coverage microsoft/vstest#15325
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade microsoft/vstest#15264
• Revert adding dotnet_host_path workaround by @​nohwnd in Revert adding dotnet_host_path workaround microsoft/vstest#15328
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade microsoft/vstest#15338
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15322
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade microsoft/vstest#15343
• Change PreReleaseVersionLabel from 'preview' to 'release' by @​nohwnd in Change PreReleaseVersionLabel from 'preview' to 'release' microsoft/vstest#15352
• [rel/18.3] Update dependencies from devdiv/DevDiv/vs-code-coverage by @​dotnet-maestro[bot] in [rel/18.3] Update dependencies from devdiv/DevDiv/vs-code-coverage microsoft/vstest#15354
• [rel/18.3] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [rel/18.3] Update dependencies from dotnet/arcade microsoft/vstest#15389
• [rel/18.3] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [rel/18.3] Update dependencies from dotnet/arcade microsoft/vstest#15400
• Update build tools to 17.11.48 to be source buildable by @​nohwnd in Update build tools to 17.11.48 to be source buildable microsoft/vstest#15310
• Disable publishing on RTM by @​nohwnd in Disable publishing on RTM microsoft/vstest#15296
• Don't access nuget.org for package feeds by @​nohwnd in Don't access nuget.org for package feeds microsoft/vstest#15316
• No nuget access fix tests by @​nohwnd in No nuget access fix tests microsoft/vstest#15317
• Disable Dependabot updates in dependabot.yml by @​mmitche in Disable Dependabot updates in dependabot.yml microsoft/vstest#15324

New Contributors

• @​premun made their first contribution in Update codeflow metadata to fix backflow microsoft/vstest#15291

Commits viewable in compare view.

Updated Npgsql from 10.0.1 to 10.0.2.

Release notes

Sourced from Npgsql's releases.

10.0.2

v10.0.2 contains several minor bug fixes.

Milestone issues

Full Changelog: npgsql/npgsql@v10.0.1...v10.0.2

Commits viewable in compare view.

Updated Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.0 to 10.0.1.

Release notes

Sourced from Npgsql.EntityFrameworkCore.PostgreSQL's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated NUnit from 4.4.0 to 4.5.1.

Release notes

Sourced from NUnit's releases.

4.5.1

See release notes for details.

4.5.0

See release notes for details.

Commits viewable in compare view.

Updated NUnit3TestAdapter from 6.1.0 to 6.2.0.

Release notes

Sourced from NUnit3TestAdapter's releases.

6.2.0

See release notes

Commits viewable in compare view.

Updated Swashbuckle.AspNetCore from 10.1.1 to 10.1.7.

Release notes

Sourced from Swashbuckle.AspNetCore's releases.

10.1.7

What's Changed

• Support custom data type for DataTypeAttribute by @​tayfunyuksel in Support custom data type for DataTypeAttribute domaindrivendev/Swashbuckle.AspNetCore#3868

New Contributors

• @​tayfunyuksel made their first contribution in Support custom data type for DataTypeAttribute domaindrivendev/Swashbuckle.AspNetCore#3868

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.6...v10.1.7

10.1.6

What's Changed

• Fix handling of duplicate enum values for dictionaries by @​martincostello in Fix handling of duplicate enum values for dictionaries domaindrivendev/Swashbuckle.AspNetCore#3839
• Log exception when app fails to start in CLI by @​ODukhno in Log exception when app fails to start in CLI domaindrivendev/Swashbuckle.AspNetCore#3853
• Fix missing OpenAPI 3.1 $ref properties by @​martincostello in Fix missing OpenAPI 3.1 $ref properties domaindrivendev/Swashbuckle.AspNetCore#3859
• Add description for OpenAPI schema references by @​martincostello in Add description for OpenAPI schema references domaindrivendev/Swashbuckle.AspNetCore#3860

New Contributors

• @​ODukhno made their first contribution in Log exception when app fails to start in CLI domaindrivendev/Swashbuckle.AspNetCore#3853

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.5...v10.1.6

10.1.5

What's Changed

• Bump swagger-ui-dist from 5.31.1 to 5.32.0 in /src/Swashbuckle.AspNetCore.SwaggerUI by @​dependabot in Bump swagger-ui-dist from 5.31.1 to 5.32.0 in /src/Swashbuckle.AspNetCore.SwaggerUI domaindrivendev/Swashbuckle.AspNetCore#3814
• Migrate to actions/attest by @​martincostello in Migrate to actions/attest domaindrivendev/Swashbuckle.AspNetCore#3815
• Disable secrets-outside-env audit by @​martincostello in Disable secrets-outside-env audit domaindrivendev/Swashbuckle.AspNetCore#3823
• Update zizmor to 1.23.1 by @​martincostello in Update zizmor to 1.23.1 domaindrivendev/Swashbuckle.AspNetCore#3825
• Fix null examples by @​jgarciadelanoceda in Fix nullExamples domaindrivendev/Swashbuckle.AspNetCore#3803
• Bump dependencies by @​martincostello in Bump dependencies domaindrivendev/Swashbuckle.AspNetCore#3835

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.4...v10.1.5

10.1.4

What's Changed

• Bump swagger-ui-dist from 5.31.0 to 5.31.1 in /src/Swashbuckle.AspNetCore.SwaggerUI by @​dependabot in Bump swagger-ui-dist from 5.31.0 to 5.31.1 in /src/Swashbuckle.AspNetCore.SwaggerUI domaindrivendev/Swashbuckle.AspNetCore#3792
• Return null on example, as it was with OpenApiNull before by @​jgarciadelanoceda in Return null on example, as it was with OpenApiNull before domaindrivendev/Swashbuckle.AspNetCore#3793

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.3...v10.1.4

10.1.3

What's Changed

• Fix null examples being represented as the string "null" by @​jgarciadelanoceda in Fix null examples being represented as the string null domaindrivendev/Swashbuckle.AspNetCore#3788

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.2...v10.1.3

10.1.2

What's Changed

• Fix browser caching behaviour by @​martincostello in Fix browser caching behaviour domaindrivendev/Swashbuckle.AspNetCore#3772
• Fix document URL serialization by @​martincostello in Fix document URL serialization domaindrivendev/Swashbuckle.AspNetCore#3773

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.1...v10.1.2

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.

[dependabot]

Updated coverlet.msbuild from 6.0.4 to 10.0.0.

Release notes

Sourced from coverlet.msbuild's releases.

10.0.0

Improvements

• Unique Report Filenames (coverlet.MTP and AzDO) #​1866
• Add --coverlet-file-prefix option for unique report files #​1869
• Introduce .NET 10 support #​1823

Fixed

• Fix [BUG] Wrong branch rate on IAsyncEnumerable for generic type #​1836
• Fix [BUG] Missing Coverage after moving to MTP #​1843
• Fix [BUG] No coverage reported when targeting .NET Framework with 8.0.1 #​1842
• Fix [BUG] Behavior changes between MTP and Legacy (msbuild) #​1878
• Fix [BUG] Coverlet.MTP - Unable to load coverlet.mtp.appsettings.json #​1880
• Fix [BUG] Coverlet.Collector produces empty report when Mediator.SourceGenerator is referenced #​1718 by https://github.com/yusyd
• Fix [BUG] Crash during instrumentation (Methods using LibraryImport/DllImport have no body) #​1762

Maintenance

• Add comprehensive async method tests and documentation for issue #​1864
• Replace Tmds.ExecFunction Package in coverlet.core.coverage.tests #​1833
• Add net9.0 and net10.0 targets #​1822

Diff between 8.0.1 and 10.0.0

8.0.1

Fixed

• Fix [BUG] TypeInitializationException when targeting .NET Framework #​1818
• Fix [BUG] coverlet.MTP build fails with CS0400 due to developmentDependency=true #​1827

Improvements

• Additional improvements needed for .NET Framework instrumentation type import #​1825

Diff between 8.0.0 and 8.0.1

8.0.0

Special Thanks: A huge thank you to @​Bertk for driving the majority of the work in this release! 🎉

Fixed

• Fix System.CommandLine 2.0 release is available #​1776
• Fix Excluding From Coverage bad defaults from given example #​1764
• Fix branchpoint exclusion for sdk 8.0.407 #​1741
• Fix missing copyright information in NuGet #​1794
• Fix bad default values in documentation #​1764 by https://github.com/cboudereau

Improvements

• Coverlet MTP extension feature #​1788
• Generate SBOM for nuget packages #​1752
• Use multi targets projects for coverlet.collector, coverlet.msbuild.tasks packages #​1742
• Use .NET 8.0 target framework for coverlet.core and remove Newtonsoft.Json #​1733
• Use latest System.CommandLine version #​1660
• Upgraded minimum required .NET SDK and runtime to .NET 8.0 LTS (Long Term Support) (Breaking Change)
• Use xunit.v3 for tests and example code

Diff between 6.0.4 and 8.0.0

Commits viewable in compare view.

Updated Microsoft.ApplicationInsights from 2.23.0 to 3.1.0.

Release notes

Sourced from Microsoft.ApplicationInsights's releases.

3.1.0

Version 3.1.0

• Make TelemetryContext properties public and propagate them via TelemetryClient.
• Add fallback to APPLICATIONINSIGHTS_CONNECTION_STRING environment variable for Base, Web, and NLog packages when connection string is not set via code.
• Update Azure.Monitor.OpenTelemetry.Exporter to 1.7.0. This includes updated mappings for telemetry context.
• Fix OTEL_SDK_DISABLED not being honored when TelemetryConfiguration.DisableTelemetry is set in DI scenarios., #​3157
• Fix TrackAvailability ignoring user-specified Timestamp on AvailabilityTelemetry. The timestamp is now emitted as microsoft.availability.testTimestamp so downstream exporters can use the correct event time.
• Added netstandard2.0 target framework to Microsoft.ApplicationInsights package to support customers with shared libraries targeting netstandard2.0.
• Fix TelemetryClient.Context.Cloud.RoleName set after construction now applies to all telemetry.
• Fix bug where Debug/Trace level logs from TrackTrace API were not emitted to Application Insights
• Fix Track API calls to not mutate the passed in dictionary if it is readonly
• Fix NullReferenceException in TelemetryClient.Flush() and FlushAsync() when called from DI scenarios
• Fix ApplicationVersion ignored: ApplicationInsightsServiceOptions.ApplicationVersion is now applied as service.version on the OpenTelemetry Resource for both AspNetCore and WorkerService packages
• Fix HttpRequestExtensions.UnvalidatedGetHeader always returning empty string instead of the actual header value. Restored max-length enforcement to guard against oversized header values.

3.0.0

• Replaced netstandard2.0 with net8.0 target framework in Microsoft.ApplicationInsights.NLogTarget package.

3.0.0-rc1

• Removed netstandard2.0 target framework from Microsoft.ApplicationInsights, Microsoft.ApplicationInsights.AspNetCore, and Microsoft.ApplicationInsights.WorkerService packages.
• The JavaScript in Microsoft.ApplicationInsights.AspNetCore has been updated to version 10.
• Centralized package version management
• Update OpenTelemetry dependencies, #​3092
  • OpenTelemetry 1.15.0
  • OpenTelemetry.Instrumentation.AspNetCore 1.15.0
  • OpenTelemetry.Instrumentation.AspNet 1.15.1
  • OpenTelemetry.Instrumentation.Http 1.15.0
  • OpenTelemetry.Instrumentation.SqlClient 1.15.0
• Vendored OpenTelemetry.Resources.Azure resource detectors to NETCORE shared folder, replaced package with vendored implementation, #​3093
• Added support to disable telemetry via TelemetryConfiguration.DisableTelemetry
• Removed EnabledAdaptiveSampling and replaced with TracesPerSecond and SamplingRatio
• Added EnableTraceBasedLogsSampler property to ApplicationInsightsServiceOptions for ASP.NET Core and WorkerService packages
• Added support for StorageDirectory and DisableOfflineStorage from TelemetryConfiguration in DI scenarios
• Update Azure.Monitor.OpenTelemetry.Exporter dependency to 1.6.0

3.0.0-beta2

Added

• Automatic configuration binding from "ApplicationInsights" section in appsettings.json for both AspNetCore and WorkerService packages with configuration precedence: environment variables > explicit configuration > appsettings.json
• Added support for Entra ID (Azure Active Directory) authentication using Azure.Core.TokenCredential
• Added Self Diagnostics feature
• Updated the default sampler from Fixed Rate to Rate-Limited Sampling.
• Update Azure Monitor Exporter to 1.6.0-beta.2
• Add comprehensive applicationinsights.config support
• Add properties in TelemetryConfiguration to configure underlying exporter

Bug fix

• Fix TrackMetric(MetricTelemetry) unsupported telemetry type error

3.0.0-beta1

• The following Application Insights packages in this repo now use OpenTelemetry internally. OpenTelemetry is the industry standard for telemetry collection and provides better interoperability with other observability tools.
  • Microsoft.ApplicationInsights
  • Microsoft.ApplicationInsights.AspNetCore
  • Microsoft.ApplicationInsights.WorkerService
  • Microsoft.ApplicationInsights.Web
  • Microsoft.ApplicationInsights.NLogTarget
• Classic APIs of the above packages are preserved; calls are translated to OpenTelemetry telemetry.
• Other packages not listed above (such as certain auto-collectors and logging adapters that were published from this repo previously) will not have future versions published. See BreakingChanges.md for details.

Commits viewable in compare view.

Updated Microsoft.ApplicationInsights.AspNetCore from 2.23.0 to 3.1.0.

Release notes

Sourced from Microsoft.ApplicationInsights.AspNetCore's releases.

3.1.0

Version 3.1.0

• Make TelemetryContext properties public and propagate them via TelemetryClient.
• Add fallback to APPLICATIONINSIGHTS_CONNECTION_STRING environment variable for Base, Web, and NLog packages when connection string is not set via code.
• Update Azure.Monitor.OpenTelemetry.Exporter to 1.7.0. This includes updated mappings for telemetry context.
• Fix OTEL_SDK_DISABLED not being honored when TelemetryConfiguration.DisableTelemetry is set in DI scenarios., #​3157
• Fix TrackAvailability ignoring user-specified Timestamp on AvailabilityTelemetry. The timestamp is now emitted as microsoft.availability.testTimestamp so downstream exporters can use the correct event time.
• Added netstandard2.0 target framework to Microsoft.ApplicationInsights package to support customers with shared libraries targeting netstandard2.0.
• Fix TelemetryClient.Context.Cloud.RoleName set after construction now applies to all telemetry.
• Fix bug where Debug/Trace level logs from TrackTrace API were not emitted to Application Insights
• Fix Track API calls to not mutate the passed in dictionary if it is readonly
• Fix NullReferenceException in TelemetryClient.Flush() and FlushAsync() when called from DI scenarios
• Fix ApplicationVersion ignored: ApplicationInsightsServiceOptions.ApplicationVersion is now applied as service.version on the OpenTelemetry Resource for both AspNetCore and WorkerService packages
• Fix HttpRequestExtensions.UnvalidatedGetHeader always returning empty string instead of the actual header value. Restored max-length enforcement to guard against oversized header values.

3.0.0

• Replaced netstandard2.0 with net8.0 target framework in Microsoft.ApplicationInsights.NLogTarget package.

3.0.0-rc1

• Removed netstandard2.0 target framework from Microsoft.ApplicationInsights, Microsoft.ApplicationInsights.AspNetCore, and Microsoft.ApplicationInsights.WorkerService packages.
• The JavaScript in Microsoft.ApplicationInsights.AspNetCore has been updated to version 10.
• Centralized package version management
• Update OpenTelemetry dependencies, #​3092
  • OpenTelemetry 1.15.0
  • OpenTelemetry.Instrumentation.AspNetCore 1.15.0
  • OpenTelemetry.Instrumentation.AspNet 1.15.1
  • OpenTelemetry.Instrumentation.Http 1.15.0
  • OpenTelemetry.Instrumentation.SqlClient 1.15.0
• Vendored OpenTelemetry.Resources.Azure resource detectors to NETCORE shared folder, replaced package with vendored implementation, #​3093
• Added support to disable telemetry via TelemetryConfiguration.DisableTelemetry
• Removed EnabledAdaptiveSampling and replaced with TracesPerSecond and SamplingRatio
• Added EnableTraceBasedLogsSampler property to ApplicationInsightsServiceOptions for ASP.NET Core and WorkerService packages
• Added support for StorageDirectory and DisableOfflineStorage from TelemetryConfiguration in DI scenarios
• Update Azure.Monitor.OpenTelemetry.Exporter dependency to 1.6.0

3.0.0-beta2

Added

• Automatic configuration binding from "ApplicationInsights" section in appsettings.json for both AspNetCore and WorkerService packages with configuration precedence: environment variables > explicit configuration > appsettings.json
• Added support for Entra ID (Azure Active Directory) authentication using Azure.Core.TokenCredential
• Added Self Diagnostics feature
• Updated the default sampler from Fixed Rate to Rate-Limited Sampling.
• Update Azure Monitor Exporter to 1.6.0-beta.2
• Add comprehensive applicationinsights.config support
• Add properties in TelemetryConfiguration to configure underlying exporter

Bug fix

• Fix TrackMetric(MetricTelemetry) unsupported telemetry type error

3.0.0-beta1

• The following Application Insights packages in this repo now use OpenTelemetry internally. OpenTelemetry is the industry standard for telemetry collection and provides better interoperability with other observability tools.
  • Microsoft.ApplicationInsights
  • Microsoft.ApplicationInsights.AspNetCore
  • Microsoft.ApplicationInsights.WorkerService
  • Microsoft.ApplicationInsights.Web
  • Microsoft.ApplicationInsights.NLogTarget
• Classic APIs of the above packages are preserved; calls are translated to OpenTelemetry telemetry.
• Other packages not listed above (such as certain auto-collectors and logging adapters that were published from this repo previously) will not have future versions published. See BreakingChanges.md for details.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.MicrosoftAccount from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.MicrosoftAccount's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authorization from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Authorization's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Data.Sqlite.Core from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Data.Sqlite.Core's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.InMemory from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.InMemory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Proxies from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Proxies's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Sqlite from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Sqlite's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Logging's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.AzureAppServices from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Logging.AzureAppServices's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Identity.Web from 4.3.0 to 4.8.0.

Release notes

Sourced from Microsoft.Identity.Web's releases.

4.8.0

What's Changed

• Bump flatted from 3.3.3 to 3.4.2 in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump flatted from 3.3.3 to 3.4.2 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3753
• Update changelog.md for ID.Web 4.6.0 by @​bgavrilMS in Update changelog.md for ID.Web 4.6.0 AzureAD/microsoft-identity-web#3756
• Add token binding to MicrosoftIdentityMessageHandler by @​cpp11nullptr in Add token binding to MicrosoftIdentityMessageHandler AzureAD/microsoft-identity-web#3743
• Bump picomatch in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump picomatch in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3759
• Documentation: Clarify managed identity credential types for containerized vs. VM/App Service deployments by @​Copilot in Documentation: Clarify managed identity credential types for containerized vs. VM/App Service deployments AzureAD/microsoft-identity-web#3585
• Bump path-to-regexp from 8.3.0 to 8.4.0 in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump path-to-regexp from 8.3.0 to 8.4.0 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3762
• Upgrade Microsoft Application Insights packages by @​RojaEnnam in Upgrade Microsoft Application Insights packages AzureAD/microsoft-identity-web#3763
• Use Abstractions 12 by @​pmaytak in Use Abstractions 12 AzureAD/microsoft-identity-web#3761
• Post-4.7.0 by @​pmaytak in Post-4.7.0 AzureAD/microsoft-identity-web#3768
• Fix Comp Gov DOTNET-Security-10.0 by @​reginayap8 in Fix Comp Gov DOTNET-Security-10.0 AzureAD/microsoft-identity-web#3769
• Upgrade CodeQL to V4: Fix 10 CodeQL Analysis Warnings and Errors by @​reginayap8 in Upgrade CodeQL to V4: Fix 10 CodeQL Analysis Warnings and Errors AzureAD/microsoft-identity-web#3770
• fix warnings by @​gladjohn in fix warnings AzureAD/microsoft-identity-web#3771
• adding examples for using postgres as a distributed cache by @​JaredMSFT in adding examples for using postgres as a distributed cache AzureAD/microsoft-identity-web#3766
• Suppress AOT configuration-binding SYSLIB warnings in AotCompatibility test app by @​Copilot in Suppress AOT configuration-binding SYSLIB warnings in AotCompatibility test app AzureAD/microsoft-identity-web#3774
• Bump vite from 7.1.11 to 7.3.2 in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump vite from 7.1.11 to 7.3.2 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3772
• Skip legacy B2C local-account Todo UI test in WebAppUiTests by @​Copilot in Skip legacy B2C local-account Todo UI test in WebAppUiTests AzureAD/microsoft-identity-web#3778
• Fix initialization of ConfidentialClientApplicationOptions in MergedOptions by @​cpp11nullptr in Fix initialization of ConfidentialClientApplicationOptions in MergedOptions AzureAD/microsoft-identity-web#3760
• Bump net8/net9/net10 runtime package baselines to patched crypto servicing versions by @​Copilot in Bump net8/net9/net10 runtime package baselines to patched crypto servicing versions AzureAD/microsoft-identity-web#3779
• Fix flaky certificate test failures on CI by @​gladjohn in Fix flaky certificate test failures on CI AzureAD/microsoft-identity-web#3780
• MTLS Without Tokens Support by @​tlupes in MTLS Without Tokens Support - DownstreamApi AzureAD/microsoft-identity-web#3747
• Fix CredentialsProvider DI lifetime mismatch causing startup crash in Development by @​Avery-Dunn in Fix CredentialsProvider DI lifetime mismatch causing startup crash in Development AzureAD/microsoft-identity-web#3783
• Remove unused DataProtection configuration from Sidecar by @​Copilot in Remove unused DataProtection configuration from Sidecar AzureAD/microsoft-identity-web#3776

New Contributors

• @​RojaEnnam made their first contribution in Upgrade Microsoft Application Insights packages AzureAD/microsoft-identity-web#3763
• @​reginayap8 made their first contribution in Fix Comp Gov DOTNET-Security-10.0 AzureAD/microsoft-identity-web#3769
• @​JaredMSFT made their first contribution in adding examples for using postgres as a distributed cache AzureAD/microsoft-identity-web#3766

Full Changelog: AzureAD/microsoft-identity-web@4.6.0...4.8.0

4.7.0

4.7.0

Bug fixes

• Updates to Microsoft.Identity.Abstractions 12.0.0 to revert breaking changes introduced in Abstractions 11.0.0. (On .NET 10 target, Certificate extension method in CredentialDescription was reverted to normal property.) See #​3767.

4.6.0

What's Changed

• Move boilerplate code skills to IdWeb, and add Aspire DevApp demonstrating Blazor authentication components by @​Copilot in Move boilerplate code skills to IdWeb, and add Aspire DevApp demonstrating Blazor authentication components AzureAD/microsoft-identity-web#3721
• Bump MSAL to 4.83.1 and re-enable Managed Identity CAE tests by @​Copilot in Bump MSAL to 4.83.1 and re-enable Managed Identity CAE tests AzureAD/microsoft-identity-web#3746
• Bump Abstractions to 11.2 by @​bgavrilMS in Bump Abstractions to 11.2 AzureAD/microsoft-identity-web#3749
• Update documentation to reference Blazor helpers from Microsoft.Identity.Web package by @​Copilot in Update documentation to reference Blazor helpers from Microsoft.Identity.Web package AzureAD/microsoft-identity-web#3723

Full Changelog: AzureAD/microsoft-identity-web@4.5.0...4.6.0

4.5.0

New features

• Add support for certificate store lookup by subject name. See #​3742.

Dependencies updates

• Bump minimatch in /tests/DevApps/SidecarAdapter/typescript. See #​3739.
• Bump rollup from 4.52.3 to 4.59.0 in /tests/DevApps/SidecarAdapter/typescript. See #​3740.

4.4.0

New features

• Add AOT-compatible web API authentication for .NET 10+. See #​3705 and #​3664.
• Propagate long-running web API session key back to callers in user token acquisition. See #​3728.
• Add OBO event initialization for OBO APIs. See #​3724.
• Add support for calling WithClientClaims flow for token acquisition. See #​3623.
• Add OnBeforeTokenAcquisitionForOnBehalfOf event. See #​3680.

Bug fixes

• Throw InvalidOperationException with actionable message when a custom credential is not registered. See #​3626.
• Fix event firing for InvokeOnBeforeTokenAcquisitionForOnBehalfOfAsync. See #​3717.
• Update OnBeforeTokenAcquisitionForOnBehalfOf to construct ClaimsPrincipal from token. See #​3714.
• Add a retry counter for acquire token and updated tests with a fake secret. See #​3682.
• Fix OBO user error handling. See #​3712.
• Fix override merging for app token (and others). See #​3644.
• Fix certificate reload logic to only trigger on certificate-specific errors. See #​3653.
• Update ROPC flow CCA to pass SendX5C to MSAL. See #​3671.

Dependencies updates

• Bump qs in /tests/DevApps/SidecarAdapter/typescript. See #​3725.
• Downgrade Microsoft.Extensions.Configuration.Binder to 2.1.0 on .NET Framework. See #​3730.
• Update .NET SDK to 10.0.103 to address DOTNET-Security-10.0 vulnerability. See #​3726.
• Upgrade to Microsoft.Identity.Abstractions 11 for AoT compatibility. See #​3699.
• Update to MSAL 4.81.0. See #​3665.

Documentation

• Add documentation for auto-generated session key for long-running OBO session. See #​3729.
• Improve the Aspire doc article and skills. See #​3695.
• Add an article and agent skill to add Entra ID to an Aspire app. See #​3689.
• Fix misleading comment in CertificatelessOptions.ManagedIdentityClientId. See #​3667.
• Add Copilot explore tool functionality. See #​3694.

Fundamentals

• Remove unnecessary warning suppression. See #​3715.
• Migrate labs to Lab.API 2.x (first pass). See #​3710.
• Update Sidecar E2E test constants. See #​3693.
• Fix intermittent failures in CertificatesObserverTests. See #​3687.
• Add validation baseline exclusions. See #​3684.
• Add dSTS integration tests. See #​3677.
• Fix FIC test. See #​3663.
• Update IdentityWeb version, build logic, and validation. See #​3659.

New Contributors

• @​XiaoxinMS2 made their first contribution in Add dSTS integration tests AzureAD/microsoft-identity-web#3677
• @​RyAuld made their first contribution in Fix intermittent failures in CertificatesObserverTests AzureAD/microsoft-identity-web#3687
• @​agocke made their first contribution in Update AOT annotations AzureAD/microsoft-identity-web#3664
• @​MZOLN made their first contribution in Remove unnecessary flag switch that causes official build to break. AzureAD/microsoft-identity-web#3700
• @​christian-posta made their first contribution in Fix override merging for app token (and others) AzureAD/microsoft-identity-web#3644
• @​4gust made their first contribution in Added retry counter for acquire token and modified added a test with … AzureAD/microsoft-identity-web#3682
• @​rayluo made their first contribution in Update OnBeforeTokenAcquisitionForOnBehalfOf event to construct ClaimsPricipal from token AzureAD/microsoft-identity-web#3714

4.4.0-preview.1

New features

• Add AOT-compatible web API authentication for .NET 10+. See #​3705 and #​3664.
• Propagate long-running web API session key back to callers in user token acquisition. See #​3728.
• Add OBO event initialization for OBO APIs. See #​3724.
• Add support for calling WithClientClaims flow for token acquisition. See #​3623.
• Add OnBeforeTokenAcquisitionForOnBehalfOf event. See #​3680.

Bug fixes

• Throw InvalidOperationException with actionable message when a custom credential is not registered. See #​3626.
• Fix event firing for InvokeOnBeforeTokenAcquisitionForOnBehalfOfAsync. See #​3717.
• Update OnBeforeTokenAcquisitionForOnBehalfOf to construct ClaimsPrincipal from token. See #​3714.
• Add a retry counter for acquire token and updated tests with a fake secret. See #​3682.
• Fix OBO user error handling. See #​3712.
• Fix override merging for app token (and others). See #​3644.
• Fix certificate reload logic to only trigger on certificate-specific errors. See #​3653.
• Update ROPC flow CCA to pass SendX5C to MSAL. See #​3671.

Dependencies updates

• Bump qs in /tests/DevApps/SidecarAdapter/typescript. See #​3725.
• Downgrade Microsoft.Extensions.Configuration.Binder to 2.1.0 on .NET Framework. See #​3730.
• Update .NET SDK to 10.0.103 to address DOTNET-Security-10.0 vulnerability. See #​3726.
• Upgrade to Microsoft.Identity.Abstractions 11 for AoT compatibility. See #​3699.
• Update to MSAL 4.81.0. See #​3665.

Documentation

• Add documentation for auto-generated session key for long-running OBO session. See #​3729.
• Improve the Aspire doc article and skills. See #​3695.
• Add an article and agent skill to add Entra ID to an Aspire app. See #​3689.
• Fix misleading comment in CertificatelessOptions.ManagedIdentityClientId. See #​3667.
• Add Copilot explore tool functionality. See #​3694.

Fundamentals

• Remove unnecessary warning suppression. See #​3715.
• Migrate labs to Lab.API 2.x (first pass). See #​3710.
• Update Sidecar E2E test constants. See #​3693.
• Fix intermittent failures in CertificatesObserverTests. See #​3687.
• Add validation baseline exclusions. See #​3684.
• Add dSTS integration tests. See #​3677.
• Fix FIC test. See #​3663.
• Update IdentityWeb version, build logic, and validation. See #​3659.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.0.1 to 18.4.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.4.0

What's Changed

• Add LoongArch64 support by @​stdmnpkg in Add LoongArch64 support microsoft/vstest#15359

• Refactor Condition evaluation by @​Youssef1313 in Refactor Condition evaluation microsoft/vstest#15357

• Adding info on extensions points part 1 by @​nohwnd in Adding info on extensions points part 1 microsoft/vstest#15360

• Add option to ask for uploading code QL before the standard window ends by @​nohwnd in Add option to ask for uploading code QL before the standard window ends microsoft/vstest#15373

• Update runtime versions by @​nohwnd in Update runtime versions microsoft/vstest#15372

• Fix .NET 10 regression for traits by @​Youssef1313 in Fix .NET 10 regression for traits microsoft/vstest#15370

• Update target frameworks to net10.0 and net11.0 by @​dotnet-maestro[bot] in Update target frameworks to net10.0 and net11.0 microsoft/vstest#15349

• Fix names in pipeline matrix so we don't have to align them by @​nohwnd in Fix names in pipeline matrix so we don't have to align them microsoft/vstest#15365

• Update SECURITY.md by @​Youssef1313 in Update SECURITY.md microsoft/vstest#15342

New Contributors

• @​stdmnpkg made their first contribution in Add LoongArch64 support microsoft/vstest#15359

Full Changelog: microsoft/vstest@v18.3.0...v18.4.0

18.3.0

What's Changed

• Fix answer file splitting by @​nohwnd in Fix answer file splitting microsoft/vstest#15306

Internal fixes and updates

• Bump branding to 18.1 by @​nohwnd in Bump branding to 18.1 microsoft/vstest#15286
• Remove stale copy of S.ComponentModel.Composition from testplatform packages by @​ViktorHofer in Remove stale copy of S.ComponentModel.Composition from testplatform packages microsoft/vstest#15287
• Update codeflow metadata to fix backflow by @​premun in Update codeflow metadata to fix backflow microsoft/vstest#15291
• [main] Update dependencies from devdiv/DevDiv/vs-code-coverage by @​dotnet-maestro[bot] in [main] Update dependencies from devdiv/DevDiv/vs-code-coverage microsoft/vstest#15283
• Update Microsoft.Build.Utilities.Core by @​Youssef1313 in Update Microsoft.Build.Utilities.Core microsoft/vstest#15300
• Disable DynamicNative instrumentation by default by @​nohwnd in Disable DynamicNative instrumentation by default microsoft/vstest#15299
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15293
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15302
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15314
• Delete sha1 custom implementation we are not using for a long time by @​nohwnd in Delete sha1 custom implementation we are not using for a long time microsoft/vstest#15313
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15315
• Update branding to 18.3.0 by @​nohwnd in Update branding to 18.3.0 microsoft/vstest#15321
• [main] Update dependencies from devdiv/DevDiv/vs-code-coverage by @​dotnet-maestro[bot] in [main] Update dependencies from devdiv/DevDiv/vs-code-coverage microsoft/vstest#15325
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade microsoft/vstest#15264
• Revert adding dotnet_host_path workaround by @​nohwnd in Revert adding dotnet_host_path workaround microsoft/vstest#15328
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade microsoft/vstest#15338
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15322
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade microsoft/vstest#15343
• Change PreReleaseVersionLabel from 'preview' to 'release' by @​nohwnd in Change PreReleaseVersionLabel from 'preview' to 'release' microsoft/vstest#15352
• [rel/18.3] Update dependencies from devdiv/DevDiv/vs-code-coverage by @​dotnet-maestro[bot] in [rel/18.3] Update dependencies from devdiv/DevDiv/vs-code-coverage microsoft/vstest#15354
• [rel/18.3] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [rel/18.3] Update dependencies from dotnet/arcade microsoft/vstest#15389
• [rel/18.3] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [rel/18.3] Update dependencies from dotnet/arcade microsoft/vstest#15400
• Update build tools to 17.11.48 to be source buildable by @​nohwnd in Update build tools to 17.11.48 to be source buildable microsoft/vstest#15310
• Disable publishing on RTM by @​nohwnd in Disable publishing on RTM microsoft/vstest#15296
• Don't access nuget.org for package feeds by @​nohwnd in Don't access nuget.org for package feeds microsoft/vstest#15316
• No nuget access fix tests by @​nohwnd in No nuget access fix tests microsoft/vstest#15317
• Disable Dependabot updates in dependabot.yml by @​mmitche in Disable Dependabot updates in dependabot.yml microsoft/vstest#15324

New Contributors

• @​premun made their first contribution in Update codeflow metadata to fix backflow microsoft/vstest#15291

Commits viewable in compare view.

Updated Npgsql from 10.0.1 to 10.0.2.

Release notes

Sourced from Npgsql's releases.

10.0.2

v10.0.2 contains several minor bug fixes.

Milestone issues

Full Changelog: npgsql/npgsql@v10.0.1...v10.0.2

Commits viewable in compare view.

Updated Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.0 to 10.0.1.

Release notes

Sourced from Npgsql.EntityFrameworkCore.PostgreSQL's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated NUnit from 4.4.0 to 4.5.1.

Release notes

Sourced from NUnit's releases.

4.5.1

See release notes for details.

4.5.0

See release notes for details.

Commits viewable in compare view.

Updated NUnit3TestAdapter from 6.1.0 to 6.2.0.

Release notes

Sourced from NUnit3TestAdapter's releases.

6.2.0

See release notes

Commits viewable in compare view.

Updated Swashbuckle.AspNetCore from 10.1.1 to 10.1.7.

Release notes

Sourced from Swashbuckle.AspNetCore's releases.

10.1.7

What's Changed

• Support custom data type for DataTypeAttribute by @​tayfunyuksel in Support custom data type for DataTypeAttribute domaindrivendev/Swashbuckle.AspNetCore#3868

New Contributors

• @​tayfunyuksel made their first contribution in Support custom data type for DataTypeAttribute domaindrivendev/Swashbuckle.AspNetCore#3868

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.6...v10.1.7

10.1.6

What's Changed

• Fix handling of duplicate enum values for dictionaries by @​martincostello in Fix handling of duplicate enum values for dictionaries domaindrivendev/Swashbuckle.AspNetCore#3839
• Log exception when app fails to start in CLI by @​ODukhno in Log exception when app fails to start in CLI domaindrivendev/Swashbuckle.AspNetCore#3853
• Fix missing OpenAPI 3.1 $ref properties by @​martincostello in Fix missing OpenAPI 3.1 $ref properties domaindrivendev/Swashbuckle.AspNetCore#3859
• Add description for OpenAPI schema references by @​martincostello in Add description for OpenAPI schema references domaindrivendev/Swashbuckle.AspNetCore#3860

New Contributors

• @​ODukhno made their first contribution in Log exception when app fails to start in CLI domaindrivendev/Swashbuckle.AspNetCore#3853

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.5...v10.1.6

10.1.5

What's Changed

• Bump swagger-ui-dist from 5.31.1 to 5.32.0 in /src/Swashbuckle.AspNetCore.SwaggerUI by @​dependabot in Bump swagger-ui-dist from 5.31.1 to 5.32.0 in /src/Swashbuckle.AspNetCore.SwaggerUI domaindrivendev/Swashbuckle.AspNetCore#3814
• Migrate to actions/attest by @​martincostello in Migrate to actions/attest domaindrivendev/Swashbuckle.AspNetCore#3815
• Disable secrets-outside-env audit by @​martincostello in Disable secrets-outside-env audit domaindrivendev/Swashbuckle.AspNetCore#3823
• Update zizmor to 1.23.1 by @​martincostello in Update zizmor to 1.23.1 domaindrivendev/Swashbuckle.AspNetCore#3825
• Fix null examples by @​jgarciadelanoceda in Fix nullExamples domaindrivendev/Swashbuckle.AspNetCore#3803
• Bump dependencies by @​martincostello in Bump dependencies domaindrivendev/Swashbuckle.AspNetCore#3835

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.4...v10.1.5

10.1.4

What's Changed

• Bump swagger-ui-dist from 5.31.0 to 5.31.1 in /src/Swashbuckle.AspNetCore.SwaggerUI by @​dependabot in Bump swagger-ui-dist from 5.31.0 to 5.31.1 in /src/Swashbuckle.AspNetCore.SwaggerUI domaindrivendev/Swashbuckle.AspNetCore#3792
• Return null on example, as it was with OpenApiNull before by @​jgarciadelanoceda in Return null on example, as it was with OpenApiNull before domaindrivendev/Swashbuckle.AspNetCore#3793

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.3...v10.1.4

10.1.3

What's Changed

• Fix null examples being represented as the string "null" by @​jgarciadelanoceda in Fix null examples being represented as the string null domaindrivendev/Swashbuckle.AspNetCore#3788

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.2...v10.1.3

10.1.2

What's Changed

• Fix browser caching behaviour by @​martincostello in Fix browser caching behaviour domaindrivendev/Swashbuckle.AspNetCore#3772
• Fix document URL serialization by @​martincostello in Fix document URL serialization domaindrivendev/Swashbuckle.AspNetCore#3773

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.1...v10.1.2

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.

[dependabot]

Updated coverlet.msbuild from 6.0.4 to 10.0.0.

Release notes

Sourced from coverlet.msbuild's releases.

10.0.0

Improvements

• Unique Report Filenames (coverlet.MTP and AzDO) #​1866
• Add --coverlet-file-prefix option for unique report files #​1869
• Introduce .NET 10 support #​1823

Fixed

• Fix [BUG] Wrong branch rate on IAsyncEnumerable for generic type #​1836
• Fix [BUG] Missing Coverage after moving to MTP #​1843
• Fix [BUG] No coverage reported when targeting .NET Framework with 8.0.1 #​1842
• Fix [BUG] Behavior changes between MTP and Legacy (msbuild) #​1878
• Fix [BUG] Coverlet.MTP - Unable to load coverlet.mtp.appsettings.json #​1880
• Fix [BUG] Coverlet.Collector produces empty report when Mediator.SourceGenerator is referenced #​1718 by https://github.com/yusyd
• Fix [BUG] Crash during instrumentation (Methods using LibraryImport/DllImport have no body) #​1762

Maintenance

• Add comprehensive async method tests and documentation for issue #​1864
• Replace Tmds.ExecFunction Package in coverlet.core.coverage.tests #​1833
• Add net9.0 and net10.0 targets #​1822

Diff between 8.0.1 and 10.0.0

8.0.1

Fixed

• Fix [BUG] TypeInitializationException when targeting .NET Framework #​1818
• Fix [BUG] coverlet.MTP build fails with CS0400 due to developmentDependency=true #​1827

Improvements

• Additional improvements needed for .NET Framework instrumentation type import #​1825

Diff between 8.0.0 and 8.0.1

8.0.0

Special Thanks: A huge thank you to @​Bertk for driving the majority of the work in this release! 🎉

Fixed

• Fix System.CommandLine 2.0 release is available #​1776
• Fix Excluding From Coverage bad defaults from given example #​1764
• Fix branchpoint exclusion for sdk 8.0.407 #​1741
• Fix missing copyright information in NuGet #​1794
• Fix bad default values in documentation #​1764 by https://github.com/cboudereau

Improvements

• Coverlet MTP extension feature #​1788
• Generate SBOM for nuget packages #​1752
• Use multi targets projects for coverlet.collector, coverlet.msbuild.tasks packages #​1742
• Use .NET 8.0 target framework for coverlet.core and remove Newtonsoft.Json #​1733
• Use latest System.CommandLine version #​1660
• Upgraded minimum required .NET SDK and runtime to .NET 8.0 LTS (Long Term Support) (Breaking Change)
• Use xunit.v3 for tests and example code

Diff between 6.0.4 and 8.0.0

Commits viewable in compare view.

Updated Microsoft.ApplicationInsights from 2.23.0 to 3.1.0.

Release notes

Sourced from Microsoft.ApplicationInsights's releases.

3.1.0

Version 3.1.0

• Make TelemetryContext properties public and propagate them via TelemetryClient.
• Add fallback to APPLICATIONINSIGHTS_CONNECTION_STRING environment variable for Base, Web, and NLog packages when connection string is not set via code.
• Update Azure.Monitor.OpenTelemetry.Exporter to 1.7.0. This includes updated mappings for telemetry context.
• Fix OTEL_SDK_DISABLED not being honored when TelemetryConfiguration.DisableTelemetry is set in DI scenarios., #​3157
• Fix TrackAvailability ignoring user-specified Timestamp on AvailabilityTelemetry. The timestamp is now emitted as microsoft.availability.testTimestamp so downstream exporters can use the correct event time.
• Added netstandard2.0 target framework to Microsoft.ApplicationInsights package to support customers with shared libraries targeting netstandard2.0.
• Fix TelemetryClient.Context.Cloud.RoleName set after construction now applies to all telemetry.
• Fix bug where Debug/Trace level logs from TrackTrace API were not emitted to Application Insights
• Fix Track API calls to not mutate the passed in dictionary if it is readonly
• Fix NullReferenceException in TelemetryClient.Flush() and FlushAsync() when called from DI scenarios
• Fix ApplicationVersion ignored: ApplicationInsightsServiceOptions.ApplicationVersion is now applied as service.version on the OpenTelemetry Resource for both AspNetCore and WorkerService packages
• Fix HttpRequestExtensions.UnvalidatedGetHeader always returning empty string instead of the actual header value. Restored max-length enforcement to guard against oversized header values.

3.0.0

• Replaced netstandard2.0 with net8.0 target framework in Microsoft.ApplicationInsights.NLogTarget package.

3.0.0-rc1

• Removed netstandard2.0 target framework from Microsoft.ApplicationInsights, Microsoft.ApplicationInsights.AspNetCore, and Microsoft.ApplicationInsights.WorkerService packages.
• The JavaScript in Microsoft.ApplicationInsights.AspNetCore has been updated to version 10.
• Centralized package version management
• Update OpenTelemetry dependencies, #​3092
  • OpenTelemetry 1.15.0
  • OpenTelemetry.Instrumentation.AspNetCore 1.15.0
  • OpenTelemetry.Instrumentation.AspNet 1.15.1
  • OpenTelemetry.Instrumentation.Http 1.15.0
  • OpenTelemetry.Instrumentation.SqlClient 1.15.0
• Vendored OpenTelemetry.Resources.Azure resource detectors to NETCORE shared folder, replaced package with vendored implementation, #​3093
• Added support to disable telemetry via TelemetryConfiguration.DisableTelemetry
• Removed EnabledAdaptiveSampling and replaced with TracesPerSecond and SamplingRatio
• Added EnableTraceBasedLogsSampler property to ApplicationInsightsServiceOptions for ASP.NET Core and WorkerService packages
• Added support for StorageDirectory and DisableOfflineStorage from TelemetryConfiguration in DI scenarios
• Update Azure.Monitor.OpenTelemetry.Exporter dependency to 1.6.0

3.0.0-beta2

Added

• Automatic configuration binding from "ApplicationInsights" section in appsettings.json for both AspNetCore and WorkerService packages with configuration precedence: environment variables > explicit configuration > appsettings.json
• Added support for Entra ID (Azure Active Directory) authentication using Azure.Core.TokenCredential
• Added Self Diagnostics feature
• Updated the default sampler from Fixed Rate to Rate-Limited Sampling.
• Update Azure Monitor Exporter to 1.6.0-beta.2
• Add comprehensive applicationinsights.config support
• Add properties in TelemetryConfiguration to configure underlying exporter

Bug fix

• Fix TrackMetric(MetricTelemetry) unsupported telemetry type error

3.0.0-beta1

• The following Application Insights packages in this repo now use OpenTelemetry internally. OpenTelemetry is the industry standard for telemetry collection and provides better interoperability with other observability tools.
  • Microsoft.ApplicationInsights
  • Microsoft.ApplicationInsights.AspNetCore
  • Microsoft.ApplicationInsights.WorkerService
  • Microsoft.ApplicationInsights.Web
  • Microsoft.ApplicationInsights.NLogTarget
• Classic APIs of the above packages are preserved; calls are translated to OpenTelemetry telemetry.
• Other packages not listed above (such as certain auto-collectors and logging adapters that were published from this repo previously) will not have future versions published. See BreakingChanges.md for details.

Commits viewable in compare view.

Updated Microsoft.ApplicationInsights.AspNetCore from 2.23.0 to 3.1.0.

Release notes

Sourced from Microsoft.ApplicationInsights.AspNetCore's releases.

3.1.0

Version 3.1.0

• Make TelemetryContext properties public and propagate them via TelemetryClient.
• Add fallback to APPLICATIONINSIGHTS_CONNECTION_STRING environment variable for Base, Web, and NLog packages when connection string is not set via code.
• Update Azure.Monitor.OpenTelemetry.Exporter to 1.7.0. This includes updated mappings for telemetry context.
• Fix OTEL_SDK_DISABLED not being honored when TelemetryConfiguration.DisableTelemetry is set in DI scenarios., #​3157
• Fix TrackAvailability ignoring user-specified Timestamp on AvailabilityTelemetry. The timestamp is now emitted as microsoft.availability.testTimestamp so downstream exporters can use the correct event time.
• Added netstandard2.0 target framework to Microsoft.ApplicationInsights package to support customers with shared libraries targeting netstandard2.0.
• Fix TelemetryClient.Context.Cloud.RoleName set after construction now applies to all telemetry.
• Fix bug where Debug/Trace level logs from TrackTrace API were not emitted to Application Insights
• Fix Track API calls to not mutate the passed in dictionary if it is readonly
• Fix NullReferenceException in TelemetryClient.Flush() and FlushAsync() when called from DI scenarios
• Fix ApplicationVersion ignored: ApplicationInsightsServiceOptions.ApplicationVersion is now applied as service.version on the OpenTelemetry Resource for both AspNetCore and WorkerService packages
• Fix HttpRequestExtensions.UnvalidatedGetHeader always returning empty string instead of the actual header value. Restored max-length enforcement to guard against oversized header values.

3.0.0

• Replaced netstandard2.0 with net8.0 target framework in Microsoft.ApplicationInsights.NLogTarget package.

3.0.0-rc1

• Removed netstandard2.0 target framework from Microsoft.ApplicationInsights, Microsoft.ApplicationInsights.AspNetCore, and Microsoft.ApplicationInsights.WorkerService packages.
• The JavaScript in Microsoft.ApplicationInsights.AspNetCore has been updated to version 10.
• Centralized package version management
• Update OpenTelemetry dependencies, #​3092
  • OpenTelemetry 1.15.0
  • OpenTelemetry.Instrumentation.AspNetCore 1.15.0
  • OpenTelemetry.Instrumentation.AspNet 1.15.1
  • OpenTelemetry.Instrumentation.Http 1.15.0
  • OpenTelemetry.Instrumentation.SqlClient 1.15.0
• Vendored OpenTelemetry.Resources.Azure resource detectors to NETCORE shared folder, replaced package with vendored implementation, #​3093
• Added support to disable telemetry via TelemetryConfiguration.DisableTelemetry
• Removed EnabledAdaptiveSampling and replaced with TracesPerSecond and SamplingRatio
• Added EnableTraceBasedLogsSampler property to ApplicationInsightsServiceOptions for ASP.NET Core and WorkerService packages
• Added support for StorageDirectory and DisableOfflineStorage from TelemetryConfiguration in DI scenarios
• Update Azure.Monitor.OpenTelemetry.Exporter dependency to 1.6.0

3.0.0-beta2

Added

• Automatic configuration binding from "ApplicationInsights" section in appsettings.json for both AspNetCore and WorkerService packages with configuration precedence: environment variables > explicit configuration > appsettings.json
• Added support for Entra ID (Azure Active Directory) authentication using Azure.Core.TokenCredential
• Added Self Diagnostics feature
• Updated the default sampler from Fixed Rate to Rate-Limited Sampling.
• Update Azure Monitor Exporter to 1.6.0-beta.2
• Add comprehensive applicationinsights.config support
• Add properties in TelemetryConfiguration to configure underlying exporter

Bug fix

• Fix TrackMetric(MetricTelemetry) unsupported telemetry type error

3.0.0-beta1

• The following Application Insights packages in this repo now use OpenTelemetry internally. OpenTelemetry is the industry standard for telemetry collection and provides better interoperability with other observability tools.
  • Microsoft.ApplicationInsights
  • Microsoft.ApplicationInsights.AspNetCore
  • Microsoft.ApplicationInsights.WorkerService
  • Microsoft.ApplicationInsights.Web
  • Microsoft.ApplicationInsights.NLogTarget
• Classic APIs of the above packages are preserved; calls are translated to OpenTelemetry telemetry.
• Other packages not listed above (such as certain auto-collectors and logging adapters that were published from this repo previously) will not have future versions published. See BreakingChanges.md for details.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.MicrosoftAccount from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.MicrosoftAccount's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authorization from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Authorization's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Data.Sqlite.Core from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Data.Sqlite.Core's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.InMemory from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.InMemory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Proxies from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Proxies's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Sqlite from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Sqlite's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Logging's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.AzureAppServices from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Logging.AzureAppServices's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Identity.Web from 4.3.0 to 4.8.0.

Release notes

Sourced from Microsoft.Identity.Web's releases.

4.8.0

What's Changed

• Bump flatted from 3.3.3 to 3.4.2 in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump flatted from 3.3.3 to 3.4.2 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3753
• Update changelog.md for ID.Web 4.6.0 by @​bgavrilMS in Update changelog.md for ID.Web 4.6.0 AzureAD/microsoft-identity-web#3756
• Add token binding to MicrosoftIdentityMessageHandler by @​cpp11nullptr in Add token binding to MicrosoftIdentityMessageHandler AzureAD/microsoft-identity-web#3743
• Bump picomatch in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump picomatch in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3759
• Documentation: Clarify managed identity credential types for containerized vs. VM/App Service deployments by @​Copilot in Documentation: Clarify managed identity credential types for containerized vs. VM/App Service deployments AzureAD/microsoft-identity-web#3585
• Bump path-to-regexp from 8.3.0 to 8.4.0 in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump path-to-regexp from 8.3.0 to 8.4.0 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3762
• Upgrade Microsoft Application Insights packages by @​RojaEnnam in Upgrade Microsoft Application Insights packages AzureAD/microsoft-identity-web#3763
• Use Abstractions 12 by @​pmaytak in Use Abstractions 12 AzureAD/microsoft-identity-web#3761
• Post-4.7.0 by @​pmaytak in Post-4.7.0 AzureAD/microsoft-identity-web#3768
• Fix Comp Gov DOTNET-Security-10.0 by @​reginayap8 in Fix Comp Gov DOTNET-Security-10.0 AzureAD/microsoft-identity-web#3769
• Upgrade CodeQL to V4: Fix 10 CodeQL Analysis Warnings and Errors by @​reginayap8 in Upgrade CodeQL to V4: Fix 10 CodeQL Analysis Warnings and Errors AzureAD/microsoft-identity-web#3770
• fix warnings by @​gladjohn in fix warnings AzureAD/microsoft-identity-web#3771
• adding examples for using postgres as a distributed cache by @​JaredMSFT in adding examples for using postgres as a distributed cache AzureAD/microsoft-identity-web#3766
• Suppress AOT configuration-binding SYSLIB warnings in AotCompatibility test app by @​Copilot in Suppress AOT configuration-binding SYSLIB warnings in AotCompatibility test app AzureAD/microsoft-identity-web#3774
• Bump vite from 7.1.11 to 7.3.2 in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump vite from 7.1.11 to 7.3.2 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3772
• Skip legacy B2C local-account Todo UI test in WebAppUiTests by @​Copilot in Skip legacy B2C local-account Todo UI test in WebAppUiTests AzureAD/microsoft-identity-web#3778
• Fix initialization of ConfidentialClientApplicationOptions in MergedOptions by @​cpp11nullptr in Fix initialization of ConfidentialClientApplicationOptions in MergedOptions AzureAD/microsoft-identity-web#3760
• Bump net8/net9/net10 runtime package baselines to patched crypto servicing versions by @​Copilot in Bump net8/net9/net10 runtime package baselines to patched crypto servicing versions AzureAD/microsoft-identity-web#3779
• Fix flaky certificate test failures on CI by @​gladjohn in Fix flaky certificate test failures on CI AzureAD/microsoft-identity-web#3780
• MTLS Without Tokens Support by @​tlupes in MTLS Without Tokens Support - DownstreamApi AzureAD/microsoft-identity-web#3747
• Fix CredentialsProvider DI lifetime mismatch causing startup crash in Development by @​Avery-Dunn in Fix CredentialsProvider DI lifetime mismatch causing startup crash in Development AzureAD/microsoft-identity-web#3783
• Remove unused DataProtection configuration from Sidecar by @​Copilot in Remove unused DataProtection configuration from Sidecar AzureAD/microsoft-identity-web#3776

New Contributors

• @​RojaEnnam made their first contribution in Upgrade Microsoft Application Insights packages AzureAD/microsoft-identity-web#3763
• @​reginayap8 made their first contribution in Fix Comp Gov DOTNET-Security-10.0 AzureAD/microsoft-identity-web#3769
• @​JaredMSFT made their first contribution in adding examples for using postgres as a distributed cache AzureAD/microsoft-identity-web#3766

Full Changelog: AzureAD/microsoft-identity-web@4.6.0...4.8.0

4.7.0

4.7.0

Bug fixes

• Updates to Microsoft.Identity.Abstractions 12.0.0 to revert breaking changes introduced in Abstractions 11.0.0. (On .NET 10 target, Certificate extension method in CredentialDescription was reverted to normal property.) See #​3767.

4.6.0

What's Changed

• Move boilerplate code skills to IdWeb, and add Aspire DevApp demonstrating Blazor authentication components by @​Copilot in Move boilerplate code skills to IdWeb, and add Aspire DevApp demonstrating Blazor authentication components AzureAD/microsoft-identity-web#3721
• Bump MSAL to 4.83.1 and re-enable Managed Identity CAE tests by @​Copilot in Bump MSAL to 4.83.1 and re-enable Managed Identity CAE tests AzureAD/microsoft-identity-web#3746
• Bump Abstractions to 11.2 by @​bgavrilMS in Bump Abstractions to 11.2 AzureAD/microsoft-identity-web#3749
• Update documentation to reference Blazor helpers from Microsoft.Identity.Web package by @​Copilot in Update documentation to reference Blazor helpers from Microsoft.Identity.Web package AzureAD/microsoft-identity-web#3723

Full Changelog: AzureAD/microsoft-identity-web@4.5.0...4.6.0

4.5.0

New features

• Add support for certificate store lookup by subject name. See #​3742.

Dependencies updates

• Bump minimatch in /tests/DevApps/SidecarAdapter/typescript. See #​3739.
• Bump rollup from 4.52.3 to 4.59.0 in /tests/DevApps/SidecarAdapter/typescript. See #​3740.

4.4.0

New features

• Add AOT-compatible web API authentication for .NET 10+. See #​3705 and #​3664.
• Propagate long-running web API session key back to callers in user token acquisition. See #​3728.
• Add OBO event initialization for OBO APIs. See #​3724.
• Add support for calling WithClientClaims flow for token acquisition. See #​3623.
• Add OnBeforeTokenAcquisitionForOnBehalfOf event. See #​3680.

Bug fixes

• Throw InvalidOperationException with actionable message when a custom credential is not registered. See #​3626.
• Fix event firing for InvokeOnBeforeTokenAcquisitionForOnBehalfOfAsync. See #​3717.
• Update OnBeforeTokenAcquisitionForOnBehalfOf to construct ClaimsPrincipal from token. See #​3714.
• Add a retry counter for acquire token and updated tests with a fake secret. See #​3682.
• Fix OBO user error handling. See #​3712.
• Fix override merging for app token (and others). See #​3644.
• Fix certificate reload logic to only trigger on certificate-specific errors. See #​3653.
• Update ROPC flow CCA to pass SendX5C to MSAL. See #​3671.

Dependencies updates

• Bump qs in /tests/DevApps/SidecarAdapter/typescript. See #​3725.
• Downgrade Microsoft.Extensions.Configuration.Binder to 2.1.0 on .NET Framework. See #​3730.
• Update .NET SDK to 10.0.103 to address DOTNET-Security-10.0 vulnerability. See #​3726.
• Upgrade to Microsoft.Identity.Abstractions 11 for AoT compatibility. See #​3699.
• Update to MSAL 4.81.0. See #​3665.

Documentation

• Add documentation for auto-generated session key for long-running OBO session. See #​3729.
• Improve the Aspire doc article and skills. See #​3695.
• Add an article and agent skill to add Entra ID to an Aspire app. See #​3689.
• Fix misleading comment in CertificatelessOptions.ManagedIdentityClientId. See #​3667.
• Add Copilot explore tool functionality. See #​3694.

Fundamentals

• Remove unnecessary warning suppression. See #​3715.
• Migrate labs to Lab.API 2.x (first pass). See #​3710.
• Update Sidecar E2E test constants. See #​3693.
• Fix intermittent failures in CertificatesObserverTests. See #​3687.
• Add validation baseline exclusions. See #​3684.
• Add dSTS integration tests. See #​3677.
• Fix FIC test. See #​3663.
• Update IdentityWeb version, build logic, and validation. See #​3659.

New Contributors

• @​XiaoxinMS2 made their first contribution in Add dSTS integration tests AzureAD/microsoft-identity-web#3677
• @​RyAuld made their first contribution in Fix intermittent failures in CertificatesObserverTests AzureAD/microsoft-identity-web#3687
• @​agocke made their first contribution in Update AOT annotations AzureAD/microsoft-identity-web#3664
• @​MZOLN made their first contribution in Remove unnecessary flag switch that causes official build to break. AzureAD/microsoft-identity-web#3700
• @​christian-posta made their first contribution in Fix override merging for app token (and others) AzureAD/microsoft-identity-web#3644
• @​4gust made their first contribution in Added retry counter for acquire token and modified added a test with … AzureAD/microsoft-identity-web#3682
• @​rayluo made their first contribution in Update OnBeforeTokenAcquisitionForOnBehalfOf event to construct ClaimsPricipal from token AzureAD/microsoft-identity-web#3714

4.4.0-preview.1

New features

• Add AOT-compatible web API authentication for .NET 10+. See #​3705 and #​3664.
• Propagate long-running web API session key back to callers in user token acquisition. See #​3728.
• Add OBO event initialization for OBO APIs. See #​3724.
• Add support for calling WithClientClaims flow for token acquisition. See #​3623.
• Add OnBeforeTokenAcquisitionForOnBehalfOf event. See #​3680.

Bug fixes

• Throw InvalidOperationException with actionable message when a custom credential is not registered. See #​3626.
• Fix event firing for InvokeOnBeforeTokenAcquisitionForOnBehalfOfAsync. See #​3717.
• Update OnBeforeTokenAcquisitionForOnBehalfOf to construct ClaimsPrincipal from token. See #​3714.
• Add a retry counter for acquire token and updated tests with a fake secret. See #​3682.
• Fix OBO user error handling. See #​3712.
• Fix override merging for app token (and others). See #​3644.
• Fix certificate reload logic to only trigger on certificate-specific errors. See #​3653.
• Update ROPC flow CCA to pass SendX5C to MSAL. See #​3671.

Dependencies updates

• Bump qs in /tests/DevApps/SidecarAdapter/typescript. See #​3725.
• Downgrade Microsoft.Extensions.Configuration.Binder to 2.1.0 on .NET Framework. See #​3730.
• Update .NET SDK to 10.0.103 to address DOTNET-Security-10.0 vulnerability. See #​3726.
• Upgrade to Microsoft.Identity.Abstractions 11 for AoT compatibility. See #​3699.
• Update to MSAL 4.81.0. See #​3665.

Documentation

• Add documentation for auto-generated session key for long-running OBO session. See #​3729.
• Improve the Aspire doc article and skills. See #​3695.
• Add an article and agent skill to add Entra ID to an Aspire app. See #​3689.
• Fix misleading comment in CertificatelessOptions.ManagedIdentityClientId. See #​3667.
• Add Copilot explore tool functionality. See #​3694.

Fundamentals

• Remove unnecessary warning suppression. See #​3715.
• Migrate labs to Lab.API 2.x (first pass). See #​3710.
• Update Sidecar E2E test constants. See #​3693.
• Fix intermittent failures in CertificatesObserverTests. See #​3687.
• Add validation baseline exclusions. See #​3684.
• Add dSTS integration tests. See #​3677.
• Fix FIC test. See #​3663.
• Update IdentityWeb version, build logic, and validation. See #​3659.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.0.1 to 18.4.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.4.0

What's Changed

• Add LoongArch64 support by @​stdmnpkg in Add LoongArch64 support microsoft/vstest#15359

• Refactor Condition evaluation by @​Youssef1313 in Refactor Condition evaluation microsoft/vstest#15357

• Adding info on extensions points part 1 by @​nohwnd in Adding info on extensions points part 1 microsoft/vstest#15360

• Add option to ask for uploading code QL before the standard window ends by @​nohwnd in Add option to ask for uploading code QL before the standard window ends microsoft/vstest#15373

• Update runtime versions by @​nohwnd in Update runtime versions microsoft/vstest#15372

• Fix .NET 10 regression for traits by @​Youssef1313 in Fix .NET 10 regression for traits microsoft/vstest#15370

• Update target frameworks to net10.0 and net11.0 by @​dotnet-maestro[bot] in Update target frameworks to net10.0 and net11.0 microsoft/vstest#15349

• Fix names in pipeline matrix so we don't have to align them by @​nohwnd in Fix names in pipeline matrix so we don't have to align them microsoft/vstest#15365

• Update SECURITY.md by @​Youssef1313 in Update SECURITY.md microsoft/vstest#15342

New Contributors

• @​stdmnpkg made their first contribution in Add LoongArch64 support microsoft/vstest#15359

Full Changelog: microsoft/vstest@v18.3.0...v18.4.0

18.3.0

What's Changed

• Fix answer file splitting by @​nohwnd in Fix answer file splitting microsoft/vstest#15306

Internal fixes and updates

• Bump branding to 18.1 by @​nohwnd in Bump branding to 18.1 microsoft/vstest#15286
• Remove stale copy of S.ComponentModel.Composition from testplatform packages by @​ViktorHofer in Remove stale copy of S.ComponentModel.Composition from testplatform packages microsoft/vstest#15287
• Update codeflow metadata to fix backflow by @​premun in Update codeflow metadata to fix backflow microsoft/vstest#15291
• [main] Update dependencies from devdiv/DevDiv/vs-code-coverage by @​dotnet-maestro[bot] in [main] Update dependencies from devdiv/DevDiv/vs-code-coverage microsoft/vstest#15283
• Update Microsoft.Build.Utilities.Core by @​Youssef1313 in Update Microsoft.Build.Utilities.Core microsoft/vstest#15300
• Disable DynamicNative instrumentation by default by @​nohwnd in Disable DynamicNative instrumentation by default microsoft/vstest#15299
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15293
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15302
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15314
• Delete sha1 custom implementation we are not using for a long time by @​nohwnd in Delete sha1 custom implementation we are not using for a long time microsoft/vstest#15313
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15315
• Update branding to 18.3.0 by @​nohwnd in Update branding to 18.3.0 microsoft/vstest#15321
• [main] Update dependencies from devdiv/DevDiv/vs-code-coverage by @​dotnet-maestro[bot] in [main] Update dependencies from devdiv/DevDiv/vs-code-coverage microsoft/vstest#15325
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade microsoft/vstest#15264
• Revert adding dotnet_host_path workaround by @​nohwnd in Revert adding dotnet_host_path workaround microsoft/vstest#15328
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade microsoft/vstest#15338
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15322
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade microsoft/vstest#15343
• Change PreReleaseVersionLabel from 'preview' to 'release' by @​nohwnd in Change PreReleaseVersionLabel from 'preview' to 'release' microsoft/vstest#15352
• [rel/18.3] Update dependencies from devdiv/DevDiv/vs-code-coverage by @​dotnet-maestro[bot] in [rel/18.3] Update dependencies from devdiv/DevDiv/vs-code-coverage microsoft/vstest#15354
• [rel/18.3] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [rel/18.3] Update dependencies from dotnet/arcade microsoft/vstest#15389
• [rel/18.3] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [rel/18.3] Update dependencies from dotnet/arcade microsoft/vstest#15400
• Update build tools to 17.11.48 to be source buildable by @​nohwnd in Update build tools to 17.11.48 to be source buildable microsoft/vstest#15310
• Disable publishing on RTM by @​nohwnd in Disable publishing on RTM microsoft/vstest#15296
• Don't access nuget.org for package feeds by @​nohwnd in Don't access nuget.org for package feeds microsoft/vstest#15316
• No nuget access fix tests by @​nohwnd in No nuget access fix tests microsoft/vstest#15317
• Disable Dependabot updates in dependabot.yml by @​mmitche in Disable Dependabot updates in dependabot.yml microsoft/vstest#15324

New Contributors

• @​premun made their first contribution in Update codeflow metadata to fix backflow microsoft/vstest#15291

Commits viewable in compare view.

Updated Npgsql from 10.0.1 to 10.0.2.

Release notes

Sourced from Npgsql's releases.

10.0.2

v10.0.2 contains several minor bug fixes.

Milestone issues

Full Changelog: npgsql/npgsql@v10.0.1...v10.0.2

Commits viewable in compare view.

Updated Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.0 to 10.0.1.

Release notes

Sourced from Npgsql.EntityFrameworkCore.PostgreSQL's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated NUnit from 4.4.0 to 4.5.1.

Release notes

Sourced from NUnit's releases.

4.5.1

See release notes for details.

4.5.0

See release notes for details.

Commits viewable in compare view.

Updated NUnit3TestAdapter from 6.1.0 to 6.2.0.

Release notes

Sourced from NUnit3TestAdapter's releases.

6.2.0

See release notes

Commits viewable in compare view.

Updated Swashbuckle.AspNetCore from 10.1.1 to 10.1.7.

Release notes

Sourced from Swashbuckle.AspNetCore's releases.

10.1.7

What's Changed

• Support custom data type for DataTypeAttribute by @​tayfunyuksel in Support custom data type for DataTypeAttribute domaindrivendev/Swashbuckle.AspNetCore#3868

New Contributors

• @​tayfunyuksel made their first contribution in Support custom data type for DataTypeAttribute domaindrivendev/Swashbuckle.AspNetCore#3868

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.6...v10.1.7

10.1.6

What's Changed

• Fix handling of duplicate enum values for dictionaries by @​martincostello in Fix handling of duplicate enum values for dictionaries domaindrivendev/Swashbuckle.AspNetCore#3839
• Log exception when app fails to start in CLI by @​ODukhno in Log exception when app fails to start in CLI domaindrivendev/Swashbuckle.AspNetCore#3853
• Fix missing OpenAPI 3.1 $ref properties by @​martincostello in Fix missing OpenAPI 3.1 $ref properties domaindrivendev/Swashbuckle.AspNetCore#3859
• Add description for OpenAPI schema references by @​martincostello in Add description for OpenAPI schema references domaindrivendev/Swashbuckle.AspNetCore#3860

New Contributors

• @​ODukhno made their first contribution in Log exception when app fails to start in CLI domaindrivendev/Swashbuckle.AspNetCore#3853

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.5...v10.1.6

10.1.5

What's Changed

• Bump swagger-ui-dist from 5.31.1 to 5.32.0 in /src/Swashbuckle.AspNetCore.SwaggerUI by @​dependabot in Bump swagger-ui-dist from 5.31.1 to 5.32.0 in /src/Swashbuckle.AspNetCore.SwaggerUI domaindrivendev/Swashbuckle.AspNetCore#3814
• Migrate to actions/attest by @​martincostello in Migrate to actions/attest domaindrivendev/Swashbuckle.AspNetCore#3815
• Disable secrets-outside-env audit by @​martincostello in Disable secrets-outside-env audit domaindrivendev/Swashbuckle.AspNetCore#3823
• Update zizmor to 1.23.1 by @​martincostello in Update zizmor to 1.23.1 domaindrivendev/Swashbuckle.AspNetCore#3825
• Fix null examples by @​jgarciadelanoceda in Fix nullExamples domaindrivendev/Swashbuckle.AspNetCore#3803
• Bump dependencies by @​martincostello in Bump dependencies domaindrivendev/Swashbuckle.AspNetCore#3835

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.4...v10.1.5

10.1.4

What's Changed

• Bump swagger-ui-dist from 5.31.0 to 5.31.1 in /src/Swashbuckle.AspNetCore.SwaggerUI by @​dependabot in Bump swagger-ui-dist from 5.31.0 to 5.31.1 in /src/Swashbuckle.AspNetCore.SwaggerUI domaindrivendev/Swashbuckle.AspNetCore#3792
• Return null on example, as it was with OpenApiNull before by @​jgarciadelanoceda in Return null on example, as it was with OpenApiNull before domaindrivendev/Swashbuckle.AspNetCore#3793

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.3...v10.1.4

10.1.3

What's Changed

• Fix null examples being represented as the string "null" by @​jgarciadelanoceda in Fix null examples being represented as the string null domaindrivendev/Swashbuckle.AspNetCore#3788

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.2...v10.1.3

10.1.2

What's Changed

• Fix browser caching behaviour by @​martincostello in Fix browser caching behaviour domaindrivendev/Swashbuckle.AspNetCore#3772
• Fix document URL serialization by @​martincostello in Fix document URL serialization domaindrivendev/Swashbuckle.AspNetCore#3773

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.1...v10.1.2

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.

[dependabot]

Updated coverlet.msbuild from 6.0.4 to 10.0.0.

Release notes

Sourced from coverlet.msbuild's releases.

10.0.0

Improvements

• Unique Report Filenames (coverlet.MTP and AzDO) #​1866
• Add --coverlet-file-prefix option for unique report files #​1869
• Introduce .NET 10 support #​1823

Fixed

• Fix [BUG] Wrong branch rate on IAsyncEnumerable for generic type #​1836
• Fix [BUG] Missing Coverage after moving to MTP #​1843
• Fix [BUG] No coverage reported when targeting .NET Framework with 8.0.1 #​1842
• Fix [BUG] Behavior changes between MTP and Legacy (msbuild) #​1878
• Fix [BUG] Coverlet.MTP - Unable to load coverlet.mtp.appsettings.json #​1880
• Fix [BUG] Coverlet.Collector produces empty report when Mediator.SourceGenerator is referenced #​1718 by https://github.com/yusyd
• Fix [BUG] Crash during instrumentation (Methods using LibraryImport/DllImport have no body) #​1762

Maintenance

• Add comprehensive async method tests and documentation for issue #​1864
• Replace Tmds.ExecFunction Package in coverlet.core.coverage.tests #​1833
• Add net9.0 and net10.0 targets #​1822

Diff between 8.0.1 and 10.0.0

8.0.1

Fixed

• Fix [BUG] TypeInitializationException when targeting .NET Framework #​1818
• Fix [BUG] coverlet.MTP build fails with CS0400 due to developmentDependency=true #​1827

Improvements

• Additional improvements needed for .NET Framework instrumentation type import #​1825

Diff between 8.0.0 and 8.0.1

8.0.0

Special Thanks: A huge thank you to @​Bertk for driving the majority of the work in this release! 🎉

Fixed

• Fix System.CommandLine 2.0 release is available #​1776
• Fix Excluding From Coverage bad defaults from given example #​1764
• Fix branchpoint exclusion for sdk 8.0.407 #​1741
• Fix missing copyright information in NuGet #​1794
• Fix bad default values in documentation #​1764 by https://github.com/cboudereau

Improvements

• Coverlet MTP extension feature #​1788
• Generate SBOM for nuget packages #​1752
• Use multi targets projects for coverlet.collector, coverlet.msbuild.tasks packages #​1742
• Use .NET 8.0 target framework for coverlet.core and remove Newtonsoft.Json #​1733
• Use latest System.CommandLine version #​1660
• Upgraded minimum required .NET SDK and runtime to .NET 8.0 LTS (Long Term Support) (Breaking Change)
• Use xunit.v3 for tests and example code

Diff between 6.0.4 and 8.0.0

Commits viewable in compare view.

Updated Microsoft.ApplicationInsights from 2.23.0 to 3.1.0.

Release notes

Sourced from Microsoft.ApplicationInsights's releases.

3.1.0

Version 3.1.0

• Make TelemetryContext properties public and propagate them via TelemetryClient.
• Add fallback to APPLICATIONINSIGHTS_CONNECTION_STRING environment variable for Base, Web, and NLog packages when connection string is not set via code.
• Update Azure.Monitor.OpenTelemetry.Exporter to 1.7.0. This includes updated mappings for telemetry context.
• Fix OTEL_SDK_DISABLED not being honored when TelemetryConfiguration.DisableTelemetry is set in DI scenarios., #​3157
• Fix TrackAvailability ignoring user-specified Timestamp on AvailabilityTelemetry. The timestamp is now emitted as microsoft.availability.testTimestamp so downstream exporters can use the correct event time.
• Added netstandard2.0 target framework to Microsoft.ApplicationInsights package to support customers with shared libraries targeting netstandard2.0.
• Fix TelemetryClient.Context.Cloud.RoleName set after construction now applies to all telemetry.
• Fix bug where Debug/Trace level logs from TrackTrace API were not emitted to Application Insights
• Fix Track API calls to not mutate the passed in dictionary if it is readonly
• Fix NullReferenceException in TelemetryClient.Flush() and FlushAsync() when called from DI scenarios
• Fix ApplicationVersion ignored: ApplicationInsightsServiceOptions.ApplicationVersion is now applied as service.version on the OpenTelemetry Resource for both AspNetCore and WorkerService packages
• Fix HttpRequestExtensions.UnvalidatedGetHeader always returning empty string instead of the actual header value. Restored max-length enforcement to guard against oversized header values.

3.0.0

• Replaced netstandard2.0 with net8.0 target framework in Microsoft.ApplicationInsights.NLogTarget package.

3.0.0-rc1

• Removed netstandard2.0 target framework from Microsoft.ApplicationInsights, Microsoft.ApplicationInsights.AspNetCore, and Microsoft.ApplicationInsights.WorkerService packages.
• The JavaScript in Microsoft.ApplicationInsights.AspNetCore has been updated to version 10.
• Centralized package version management
• Update OpenTelemetry dependencies, #​3092
  • OpenTelemetry 1.15.0
  • OpenTelemetry.Instrumentation.AspNetCore 1.15.0
  • OpenTelemetry.Instrumentation.AspNet 1.15.1
  • OpenTelemetry.Instrumentation.Http 1.15.0
  • OpenTelemetry.Instrumentation.SqlClient 1.15.0
• Vendored OpenTelemetry.Resources.Azure resource detectors to NETCORE shared folder, replaced package with vendored implementation, #​3093
• Added support to disable telemetry via TelemetryConfiguration.DisableTelemetry
• Removed EnabledAdaptiveSampling and replaced with TracesPerSecond and SamplingRatio
• Added EnableTraceBasedLogsSampler property to ApplicationInsightsServiceOptions for ASP.NET Core and WorkerService packages
• Added support for StorageDirectory and DisableOfflineStorage from TelemetryConfiguration in DI scenarios
• Update Azure.Monitor.OpenTelemetry.Exporter dependency to 1.6.0

3.0.0-beta2

Added

• Automatic configuration binding from "ApplicationInsights" section in appsettings.json for both AspNetCore and WorkerService packages with configuration precedence: environment variables > explicit configuration > appsettings.json
• Added support for Entra ID (Azure Active Directory) authentication using Azure.Core.TokenCredential
• Added Self Diagnostics feature
• Updated the default sampler from Fixed Rate to Rate-Limited Sampling.
• Update Azure Monitor Exporter to 1.6.0-beta.2
• Add comprehensive applicationinsights.config support
• Add properties in TelemetryConfiguration to configure underlying exporter

Bug fix

• Fix TrackMetric(MetricTelemetry) unsupported telemetry type error

3.0.0-beta1

• The following Application Insights packages in this repo now use OpenTelemetry internally. OpenTelemetry is the industry standard for telemetry collection and provides better interoperability with other observability tools.
  • Microsoft.ApplicationInsights
  • Microsoft.ApplicationInsights.AspNetCore
  • Microsoft.ApplicationInsights.WorkerService
  • Microsoft.ApplicationInsights.Web
  • Microsoft.ApplicationInsights.NLogTarget
• Classic APIs of the above packages are preserved; calls are translated to OpenTelemetry telemetry.
• Other packages not listed above (such as certain auto-collectors and logging adapters that were published from this repo previously) will not have future versions published. See BreakingChanges.md for details.

Commits viewable in compare view.

Updated Microsoft.ApplicationInsights.AspNetCore from 2.23.0 to 3.1.0.

Release notes

Sourced from Microsoft.ApplicationInsights.AspNetCore's releases.

3.1.0

Version 3.1.0

• Make TelemetryContext properties public and propagate them via TelemetryClient.
• Add fallback to APPLICATIONINSIGHTS_CONNECTION_STRING environment variable for Base, Web, and NLog packages when connection string is not set via code.
• Update Azure.Monitor.OpenTelemetry.Exporter to 1.7.0. This includes updated mappings for telemetry context.
• Fix OTEL_SDK_DISABLED not being honored when TelemetryConfiguration.DisableTelemetry is set in DI scenarios., #​3157
• Fix TrackAvailability ignoring user-specified Timestamp on AvailabilityTelemetry. The timestamp is now emitted as microsoft.availability.testTimestamp so downstream exporters can use the correct event time.
• Added netstandard2.0 target framework to Microsoft.ApplicationInsights package to support customers with shared libraries targeting netstandard2.0.
• Fix TelemetryClient.Context.Cloud.RoleName set after construction now applies to all telemetry.
• Fix bug where Debug/Trace level logs from TrackTrace API were not emitted to Application Insights
• Fix Track API calls to not mutate the passed in dictionary if it is readonly
• Fix NullReferenceException in TelemetryClient.Flush() and FlushAsync() when called from DI scenarios
• Fix ApplicationVersion ignored: ApplicationInsightsServiceOptions.ApplicationVersion is now applied as service.version on the OpenTelemetry Resource for both AspNetCore and WorkerService packages
• Fix HttpRequestExtensions.UnvalidatedGetHeader always returning empty string instead of the actual header value. Restored max-length enforcement to guard against oversized header values.

3.0.0

• Replaced netstandard2.0 with net8.0 target framework in Microsoft.ApplicationInsights.NLogTarget package.

3.0.0-rc1

• Removed netstandard2.0 target framework from Microsoft.ApplicationInsights, Microsoft.ApplicationInsights.AspNetCore, and Microsoft.ApplicationInsights.WorkerService packages.
• The JavaScript in Microsoft.ApplicationInsights.AspNetCore has been updated to version 10.
• Centralized package version management
• Update OpenTelemetry dependencies, #​3092
  • OpenTelemetry 1.15.0
  • OpenTelemetry.Instrumentation.AspNetCore 1.15.0
  • OpenTelemetry.Instrumentation.AspNet 1.15.1
  • OpenTelemetry.Instrumentation.Http 1.15.0
  • OpenTelemetry.Instrumentation.SqlClient 1.15.0
• Vendored OpenTelemetry.Resources.Azure resource detectors to NETCORE shared folder, replaced package with vendored implementation, #​3093
• Added support to disable telemetry via TelemetryConfiguration.DisableTelemetry
• Removed EnabledAdaptiveSampling and replaced with TracesPerSecond and SamplingRatio
• Added EnableTraceBasedLogsSampler property to ApplicationInsightsServiceOptions for ASP.NET Core and WorkerService packages
• Added support for StorageDirectory and DisableOfflineStorage from TelemetryConfiguration in DI scenarios
• Update Azure.Monitor.OpenTelemetry.Exporter dependency to 1.6.0

3.0.0-beta2

Added

• Automatic configuration binding from "ApplicationInsights" section in appsettings.json for both AspNetCore and WorkerService packages with configuration precedence: environment variables > explicit configuration > appsettings.json
• Added support for Entra ID (Azure Active Directory) authentication using Azure.Core.TokenCredential
• Added Self Diagnostics feature
• Updated the default sampler from Fixed Rate to Rate-Limited Sampling.
• Update Azure Monitor Exporter to 1.6.0-beta.2
• Add comprehensive applicationinsights.config support
• Add properties in TelemetryConfiguration to configure underlying exporter

Bug fix

• Fix TrackMetric(MetricTelemetry) unsupported telemetry type error

3.0.0-beta1

• The following Application Insights packages in this repo now use OpenTelemetry internally. OpenTelemetry is the industry standard for telemetry collection and provides better interoperability with other observability tools.
  • Microsoft.ApplicationInsights
  • Microsoft.ApplicationInsights.AspNetCore
  • Microsoft.ApplicationInsights.WorkerService
  • Microsoft.ApplicationInsights.Web
  • Microsoft.ApplicationInsights.NLogTarget
• Classic APIs of the above packages are preserved; calls are translated to OpenTelemetry telemetry.
• Other packages not listed above (such as certain auto-collectors and logging adapters that were published from this repo previously) will not have future versions published. See BreakingChanges.md for details.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authentication.MicrosoftAccount from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.MicrosoftAccount's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Authorization from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Authorization's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.AspNetCore.Mvc.Testing from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.AspNetCore.Mvc.Testing's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Data.Sqlite.Core from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Data.Sqlite.Core's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Design from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Design's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.InMemory from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.InMemory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Proxies from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Proxies's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.EntityFrameworkCore.Sqlite from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.EntityFrameworkCore.Sqlite's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Logging's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.AzureAppServices from 10.0.2 to 10.0.6.

Release notes

Sourced from Microsoft.Extensions.Logging.AzureAppServices's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Identity.Web from 4.3.0 to 4.8.0.

Release notes

Sourced from Microsoft.Identity.Web's releases.

4.8.0

What's Changed

• Bump flatted from 3.3.3 to 3.4.2 in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump flatted from 3.3.3 to 3.4.2 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3753
• Update changelog.md for ID.Web 4.6.0 by @​bgavrilMS in Update changelog.md for ID.Web 4.6.0 AzureAD/microsoft-identity-web#3756
• Add token binding to MicrosoftIdentityMessageHandler by @​cpp11nullptr in Add token binding to MicrosoftIdentityMessageHandler AzureAD/microsoft-identity-web#3743
• Bump picomatch in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump picomatch in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3759
• Documentation: Clarify managed identity credential types for containerized vs. VM/App Service deployments by @​Copilot in Documentation: Clarify managed identity credential types for containerized vs. VM/App Service deployments AzureAD/microsoft-identity-web#3585
• Bump path-to-regexp from 8.3.0 to 8.4.0 in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump path-to-regexp from 8.3.0 to 8.4.0 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3762
• Upgrade Microsoft Application Insights packages by @​RojaEnnam in Upgrade Microsoft Application Insights packages AzureAD/microsoft-identity-web#3763
• Use Abstractions 12 by @​pmaytak in Use Abstractions 12 AzureAD/microsoft-identity-web#3761
• Post-4.7.0 by @​pmaytak in Post-4.7.0 AzureAD/microsoft-identity-web#3768
• Fix Comp Gov DOTNET-Security-10.0 by @​reginayap8 in Fix Comp Gov DOTNET-Security-10.0 AzureAD/microsoft-identity-web#3769
• Upgrade CodeQL to V4: Fix 10 CodeQL Analysis Warnings and Errors by @​reginayap8 in Upgrade CodeQL to V4: Fix 10 CodeQL Analysis Warnings and Errors AzureAD/microsoft-identity-web#3770
• fix warnings by @​gladjohn in fix warnings AzureAD/microsoft-identity-web#3771
• adding examples for using postgres as a distributed cache by @​JaredMSFT in adding examples for using postgres as a distributed cache AzureAD/microsoft-identity-web#3766
• Suppress AOT configuration-binding SYSLIB warnings in AotCompatibility test app by @​Copilot in Suppress AOT configuration-binding SYSLIB warnings in AotCompatibility test app AzureAD/microsoft-identity-web#3774
• Bump vite from 7.1.11 to 7.3.2 in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump vite from 7.1.11 to 7.3.2 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3772
• Skip legacy B2C local-account Todo UI test in WebAppUiTests by @​Copilot in Skip legacy B2C local-account Todo UI test in WebAppUiTests AzureAD/microsoft-identity-web#3778
• Fix initialization of ConfidentialClientApplicationOptions in MergedOptions by @​cpp11nullptr in Fix initialization of ConfidentialClientApplicationOptions in MergedOptions AzureAD/microsoft-identity-web#3760
• Bump net8/net9/net10 runtime package baselines to patched crypto servicing versions by @​Copilot in Bump net8/net9/net10 runtime package baselines to patched crypto servicing versions AzureAD/microsoft-identity-web#3779
• Fix flaky certificate test failures on CI by @​gladjohn in Fix flaky certificate test failures on CI AzureAD/microsoft-identity-web#3780
• MTLS Without Tokens Support by @​tlupes in MTLS Without Tokens Support - DownstreamApi AzureAD/microsoft-identity-web#3747
• Fix CredentialsProvider DI lifetime mismatch causing startup crash in Development by @​Avery-Dunn in Fix CredentialsProvider DI lifetime mismatch causing startup crash in Development AzureAD/microsoft-identity-web#3783
• Remove unused DataProtection configuration from Sidecar by @​Copilot in Remove unused DataProtection configuration from Sidecar AzureAD/microsoft-identity-web#3776

New Contributors

• @​RojaEnnam made their first contribution in Upgrade Microsoft Application Insights packages AzureAD/microsoft-identity-web#3763
• @​reginayap8 made their first contribution in Fix Comp Gov DOTNET-Security-10.0 AzureAD/microsoft-identity-web#3769
• @​JaredMSFT made their first contribution in adding examples for using postgres as a distributed cache AzureAD/microsoft-identity-web#3766

Full Changelog: AzureAD/microsoft-identity-web@4.6.0...4.8.0

4.7.0

4.7.0

Bug fixes

• Updates to Microsoft.Identity.Abstractions 12.0.0 to revert breaking changes introduced in Abstractions 11.0.0. (On .NET 10 target, Certificate extension method in CredentialDescription was reverted to normal property.) See #​3767.

4.6.0

What's Changed

• Move boilerplate code skills to IdWeb, and add Aspire DevApp demonstrating Blazor authentication components by @​Copilot in Move boilerplate code skills to IdWeb, and add Aspire DevApp demonstrating Blazor authentication components AzureAD/microsoft-identity-web#3721
• Bump MSAL to 4.83.1 and re-enable Managed Identity CAE tests by @​Copilot in Bump MSAL to 4.83.1 and re-enable Managed Identity CAE tests AzureAD/microsoft-identity-web#3746
• Bump Abstractions to 11.2 by @​bgavrilMS in Bump Abstractions to 11.2 AzureAD/microsoft-identity-web#3749
• Update documentation to reference Blazor helpers from Microsoft.Identity.Web package by @​Copilot in Update documentation to reference Blazor helpers from Microsoft.Identity.Web package AzureAD/microsoft-identity-web#3723

Full Changelog: AzureAD/microsoft-identity-web@4.5.0...4.6.0

4.5.0

New features

• Add support for certificate store lookup by subject name. See #​3742.

Dependencies updates

• Bump minimatch in /tests/DevApps/SidecarAdapter/typescript. See #​3739.
• Bump rollup from 4.52.3 to 4.59.0 in /tests/DevApps/SidecarAdapter/typescript. See #​3740.

4.4.0

New features

• Add AOT-compatible web API authentication for .NET 10+. See #​3705 and #​3664.
• Propagate long-running web API session key back to callers in user token acquisition. See #​3728.
• Add OBO event initialization for OBO APIs. See #​3724.
• Add support for calling WithClientClaims flow for token acquisition. See #​3623.
• Add OnBeforeTokenAcquisitionForOnBehalfOf event. See #​3680.

Bug fixes

• Throw InvalidOperationException with actionable message when a custom credential is not registered. See #​3626.
• Fix event firing for InvokeOnBeforeTokenAcquisitionForOnBehalfOfAsync. See #​3717.
• Update OnBeforeTokenAcquisitionForOnBehalfOf to construct ClaimsPrincipal from token. See #​3714.
• Add a retry counter for acquire token and updated tests with a fake secret. See #​3682.
• Fix OBO user error handling. See #​3712.
• Fix override merging for app token (and others). See #​3644.
• Fix certificate reload logic to only trigger on certificate-specific errors. See #​3653.
• Update ROPC flow CCA to pass SendX5C to MSAL. See #​3671.

Dependencies updates

• Bump qs in /tests/DevApps/SidecarAdapter/typescript. See #​3725.
• Downgrade Microsoft.Extensions.Configuration.Binder to 2.1.0 on .NET Framework. See #​3730.
• Update .NET SDK to 10.0.103 to address DOTNET-Security-10.0 vulnerability. See #​3726.
• Upgrade to Microsoft.Identity.Abstractions 11 for AoT compatibility. See #​3699.
• Update to MSAL 4.81.0. See #​3665.

Documentation

• Add documentation for auto-generated session key for long-running OBO session. See #​3729.
• Improve the Aspire doc article and skills. See #​3695.
• Add an article and agent skill to add Entra ID to an Aspire app. See #​3689.
• Fix misleading comment in CertificatelessOptions.ManagedIdentityClientId. See #​3667.
• Add Copilot explore tool functionality. See #​3694.

Fundamentals

• Remove unnecessary warning suppression. See #​3715.
• Migrate labs to Lab.API 2.x (first pass). See #​3710.
• Update Sidecar E2E test constants. See #​3693.
• Fix intermittent failures in CertificatesObserverTests. See #​3687.
• Add validation baseline exclusions. See #​3684.
• Add dSTS integration tests. See #​3677.
• Fix FIC test. See #​3663.
• Update IdentityWeb version, build logic, and validation. See #​3659.

New Contributors

• @​XiaoxinMS2 made their first contribution in Add dSTS integration tests AzureAD/microsoft-identity-web#3677
• @​RyAuld made their first contribution in Fix intermittent failures in CertificatesObserverTests AzureAD/microsoft-identity-web#3687
• @​agocke made their first contribution in Update AOT annotations AzureAD/microsoft-identity-web#3664
• @​MZOLN made their first contribution in Remove unnecessary flag switch that causes official build to break. AzureAD/microsoft-identity-web#3700
• @​christian-posta made their first contribution in Fix override merging for app token (and others) AzureAD/microsoft-identity-web#3644
• @​4gust made their first contribution in Added retry counter for acquire token and modified added a test with … AzureAD/microsoft-identity-web#3682
• @​rayluo made their first contribution in Update OnBeforeTokenAcquisitionForOnBehalfOf event to construct ClaimsPricipal from token AzureAD/microsoft-identity-web#3714

4.4.0-preview.1

New features

• Add AOT-compatible web API authentication for .NET 10+. See #​3705 and #​3664.
• Propagate long-running web API session key back to callers in user token acquisition. See #​3728.
• Add OBO event initialization for OBO APIs. See #​3724.
• Add support for calling WithClientClaims flow for token acquisition. See #​3623.
• Add OnBeforeTokenAcquisitionForOnBehalfOf event. See #​3680.

Bug fixes

• Throw InvalidOperationException with actionable message when a custom credential is not registered. See #​3626.
• Fix event firing for InvokeOnBeforeTokenAcquisitionForOnBehalfOfAsync. See #​3717.
• Update OnBeforeTokenAcquisitionForOnBehalfOf to construct ClaimsPrincipal from token. See #​3714.
• Add a retry counter for acquire token and updated tests with a fake secret. See #​3682.
• Fix OBO user error handling. See #​3712.
• Fix override merging for app token (and others). See #​3644.
• Fix certificate reload logic to only trigger on certificate-specific errors. See #​3653.
• Update ROPC flow CCA to pass SendX5C to MSAL. See #​3671.

Dependencies updates

• Bump qs in /tests/DevApps/SidecarAdapter/typescript. See #​3725.
• Downgrade Microsoft.Extensions.Configuration.Binder to 2.1.0 on .NET Framework. See #​3730.
• Update .NET SDK to 10.0.103 to address DOTNET-Security-10.0 vulnerability. See #​3726.
• Upgrade to Microsoft.Identity.Abstractions 11 for AoT compatibility. See #​3699.
• Update to MSAL 4.81.0. See #​3665.

Documentation

• Add documentation for auto-generated session key for long-running OBO session. See #​3729.
• Improve the Aspire doc article and skills. See #​3695.
• Add an article and agent skill to add Entra ID to an Aspire app. See #​3689.
• Fix misleading comment in CertificatelessOptions.ManagedIdentityClientId. See #​3667.
• Add Copilot explore tool functionality. See #​3694.

Fundamentals

• Remove unnecessary warning suppression. See #​3715.
• Migrate labs to Lab.API 2.x (first pass). See #​3710.
• Update Sidecar E2E test constants. See #​3693.
• Fix intermittent failures in CertificatesObserverTests. See #​3687.
• Add validation baseline exclusions. See #​3684.
• Add dSTS integration tests. See #​3677.
• Fix FIC test. See #​3663.
• Update IdentityWeb version, build logic, and validation. See #​3659.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.0.1 to 18.4.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.4.0

What's Changed

• Add LoongArch64 support by @​stdmnpkg in Add LoongArch64 support microsoft/vstest#15359

• Refactor Condition evaluation by @​Youssef1313 in Refactor Condition evaluation microsoft/vstest#15357

• Adding info on extensions points part 1 by @​nohwnd in Adding info on extensions points part 1 microsoft/vstest#15360

• Add option to ask for uploading code QL before the standard window ends by @​nohwnd in Add option to ask for uploading code QL before the standard window ends microsoft/vstest#15373

• Update runtime versions by @​nohwnd in Update runtime versions microsoft/vstest#15372

• Fix .NET 10 regression for traits by @​Youssef1313 in Fix .NET 10 regression for traits microsoft/vstest#15370

• Update target frameworks to net10.0 and net11.0 by @​dotnet-maestro[bot] in Update target frameworks to net10.0 and net11.0 microsoft/vstest#15349

• Fix names in pipeline matrix so we don't have to align them by @​nohwnd in Fix names in pipeline matrix so we don't have to align them microsoft/vstest#15365

• Update SECURITY.md by @​Youssef1313 in Update SECURITY.md microsoft/vstest#15342

New Contributors

• @​stdmnpkg made their first contribution in Add LoongArch64 support microsoft/vstest#15359

Full Changelog: microsoft/vstest@v18.3.0...v18.4.0

18.3.0

What's Changed

• Fix answer file splitting by @​nohwnd in Fix answer file splitting microsoft/vstest#15306

Internal fixes and updates

• Bump branding to 18.1 by @​nohwnd in Bump branding to 18.1 microsoft/vstest#15286
• Remove stale copy of S.ComponentModel.Composition from testplatform packages by @​ViktorHofer in Remove stale copy of S.ComponentModel.Composition from testplatform packages microsoft/vstest#15287
• Update codeflow metadata to fix backflow by @​premun in Update codeflow metadata to fix backflow microsoft/vstest#15291
• [main] Update dependencies from devdiv/DevDiv/vs-code-coverage by @​dotnet-maestro[bot] in [main] Update dependencies from devdiv/DevDiv/vs-code-coverage microsoft/vstest#15283
• Update Microsoft.Build.Utilities.Core by @​Youssef1313 in Update Microsoft.Build.Utilities.Core microsoft/vstest#15300
• Disable DynamicNative instrumentation by default by @​nohwnd in Disable DynamicNative instrumentation by default microsoft/vstest#15299
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15293
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15302
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15314
• Delete sha1 custom implementation we are not using for a long time by @​nohwnd in Delete sha1 custom implementation we are not using for a long time microsoft/vstest#15313
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15315
• Update branding to 18.3.0 by @​nohwnd in Update branding to 18.3.0 microsoft/vstest#15321
• [main] Update dependencies from devdiv/DevDiv/vs-code-coverage by @​dotnet-maestro[bot] in [main] Update dependencies from devdiv/DevDiv/vs-code-coverage microsoft/vstest#15325
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade microsoft/vstest#15264
• Revert adding dotnet_host_path workaround by @​nohwnd in Revert adding dotnet_host_path workaround microsoft/vstest#15328
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade microsoft/vstest#15338
• [main] Source code updates from dotnet/dotnet by @​dotnet-maestro[bot] in [main] Source code updates from dotnet/dotnet microsoft/vstest#15322
• [main] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [main] Update dependencies from dotnet/arcade microsoft/vstest#15343
• Change PreReleaseVersionLabel from 'preview' to 'release' by @​nohwnd in Change PreReleaseVersionLabel from 'preview' to 'release' microsoft/vstest#15352
• [rel/18.3] Update dependencies from devdiv/DevDiv/vs-code-coverage by @​dotnet-maestro[bot] in [rel/18.3] Update dependencies from devdiv/DevDiv/vs-code-coverage microsoft/vstest#15354
• [rel/18.3] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [rel/18.3] Update dependencies from dotnet/arcade microsoft/vstest#15389
• [rel/18.3] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [rel/18.3] Update dependencies from dotnet/arcade microsoft/vstest#15400
• Update build tools to 17.11.48 to be source buildable by @​nohwnd in Update build tools to 17.11.48 to be source buildable microsoft/vstest#15310
• Disable publishing on RTM by @​nohwnd in Disable publishing on RTM microsoft/vstest#15296
• Don't access nuget.org for package feeds by @​nohwnd in Don't access nuget.org for package feeds microsoft/vstest#15316
• No nuget access fix tests by @​nohwnd in No nuget access fix tests microsoft/vstest#15317
• Disable Dependabot updates in dependabot.yml by @​mmitche in Disable Dependabot updates in dependabot.yml microsoft/vstest#15324

New Contributors

• @​premun made their first contribution in Update codeflow metadata to fix backflow microsoft/vstest#15291

Commits viewable in compare view.

Updated Npgsql from 10.0.1 to 10.0.2.

Release notes

Sourced from Npgsql's releases.

10.0.2

v10.0.2 contains several minor bug fixes.

Milestone issues

Full Changelog: npgsql/npgsql@v10.0.1...v10.0.2

Commits viewable in compare view.

Updated Npgsql.EntityFrameworkCore.PostgreSQL from 10.0.0 to 10.0.1.

Release notes

Sourced from Npgsql.EntityFrameworkCore.PostgreSQL's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated NUnit from 4.4.0 to 4.5.1.

Release notes

Sourced from NUnit's releases.

4.5.1

See release notes for details.

4.5.0

See release notes for details.

Commits viewable in compare view.

Updated NUnit3TestAdapter from 6.1.0 to 6.2.0.

Release notes

Sourced from NUnit3TestAdapter's releases.

6.2.0

See release notes

Commits viewable in compare view.

Updated Swashbuckle.AspNetCore from 10.1.1 to 10.1.7.

Release notes

Sourced from Swashbuckle.AspNetCore's releases.

10.1.7

What's Changed

• Support custom data type for DataTypeAttribute by @​tayfunyuksel in Support custom data type for DataTypeAttribute domaindrivendev/Swashbuckle.AspNetCore#3868

New Contributors

• @​tayfunyuksel made their first contribution in Support custom data type for DataTypeAttribute domaindrivendev/Swashbuckle.AspNetCore#3868

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.6...v10.1.7

10.1.6

What's Changed

• Fix handling of duplicate enum values for dictionaries by @​martincostello in Fix handling of duplicate enum values for dictionaries domaindrivendev/Swashbuckle.AspNetCore#3839
• Log exception when app fails to start in CLI by @​ODukhno in Log exception when app fails to start in CLI domaindrivendev/Swashbuckle.AspNetCore#3853
• Fix missing OpenAPI 3.1 $ref properties by @​martincostello in Fix missing OpenAPI 3.1 $ref properties domaindrivendev/Swashbuckle.AspNetCore#3859
• Add description for OpenAPI schema references by @​martincostello in Add description for OpenAPI schema references domaindrivendev/Swashbuckle.AspNetCore#3860

New Contributors

• @​ODukhno made their first contribution in Log exception when app fails to start in CLI domaindrivendev/Swashbuckle.AspNetCore#3853

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.5...v10.1.6

10.1.5

What's Changed

• Bump swagger-ui-dist from 5.31.1 to 5.32.0 in /src/Swashbuckle.AspNetCore.SwaggerUI by @​dependabot in Bump swagger-ui-dist from 5.31.1 to 5.32.0 in /src/Swashbuckle.AspNetCore.SwaggerUI domaindrivendev/Swashbuckle.AspNetCore#3814
• Migrate to actions/attest by @​martincostello in Migrate to actions/attest domaindrivendev/Swashbuckle.AspNetCore#3815
• Disable secrets-outside-env audit by @​martincostello in Disable secrets-outside-env audit domaindrivendev/Swashbuckle.AspNetCore#3823
• Update zizmor to 1.23.1 by @​martincostello in Update zizmor to 1.23.1 domaindrivendev/Swashbuckle.AspNetCore#3825
• Fix null examples by @​jgarciadelanoceda in Fix nullExamples domaindrivendev/Swashbuckle.AspNetCore#3803
• Bump dependencies by @​martincostello in Bump dependencies domaindrivendev/Swashbuckle.AspNetCore#3835

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.4...v10.1.5

10.1.4

What's Changed

• Bump swagger-ui-dist from 5.31.0 to 5.31.1 in /src/Swashbuckle.AspNetCore.SwaggerUI by @​dependabot in Bump swagger-ui-dist from 5.31.0 to 5.31.1 in /src/Swashbuckle.AspNetCore.SwaggerUI domaindrivendev/Swashbuckle.AspNetCore#3792
• Return null on example, as it was with OpenApiNull before by @​jgarciadelanoceda in Return null on example, as it was with OpenApiNull before domaindrivendev/Swashbuckle.AspNetCore#3793

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.3...v10.1.4

10.1.3

What's Changed

• Fix null examples being represented as the string "null" by @​jgarciadelanoceda in Fix null examples being represented as the string null domaindrivendev/Swashbuckle.AspNetCore#3788

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.2...v10.1.3

10.1.2

What's Changed

• Fix browser caching behaviour by @​martincostello in Fix browser caching behaviour domaindrivendev/Swashbuckle.AspNetCore#3772
• Fix document URL serialization by @​martincostello in Fix document URL serialization domaindrivendev/Swashbuckle.AspNetCore#3773

Full Changelog: domaindrivendev/Swashbuckle.AspNetCore@v10.1.1...v10.1.2

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.