Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 13, 2025

Updated Azure.AI.OpenAI from 2.1.0-beta.1 to 2.1.0.

Release notes

Sourced from Azure.AI.OpenAI's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Azure.Identity from 1.13.2 to 1.17.0.

Release notes

Sourced from Azure.Identity's releases.

1.17.0

1.17.0 (2025-10-07)

Bugs Fixed

  • TenantId is now configured via MSAL's WithTenantId instead of WithTenantIdFromAuthority to prevent malformed Uris to the authority.

Other Changes

  • Deprecated BrowserCustomizationOptions.UseEmbeddedWebView property. This option requires additional dependencies on Microsoft.Identity.Client.Desktop and is no longer supported. Consider using brokered authentication instead.

1.16.0

1.16.0 (2025-09-09)

Features Added

  • Added a new DefaultAzureCredential constructor that accepts a custom environment variable name for credential configuration. This provides flexibility beyond the default AZURE_TOKEN_CREDENTIALS environment variable. The constructor accepts any environment variable name and uses the same credential selection logic as the existing AZURE_TOKEN_CREDENTIALS processing.
  • Added DefaultAzureCredential.DefaultEnvironmentVariableName constant property that returns "AZURE_TOKEN_CREDENTIALS" for convenience when referencing the default environment variable name.
  • AzureCliCredential, AzurePowerShellCredential, and AzureDeveloperCliCredential now throw an AuthenticationFailedException when the TokenRequestContext includes claims, as these credentials do not support claims challenges. The exception message includes guidance for handling such scenarios.
  • When AZURE_TOKEN_CREDENTIALS or the equivalent custom environment variable is configured to ManagedIdentityCredential, the DefaultAzureCredential does not issue a probe request and performs retries with exponential backoff.

Bugs Fixed

  • Fixed AzureDeveloperCliCredential hanging when the AZD_DEBUG environment variable is set by adding the --no-prompt flag to prevent interactive prompts (#​52005).
  • BrokerCredential is now included in the chain when AZURE_TOKEN_CREDENTIALS is set to dev.
  • Fixed an issue that prevented ManagedIdentityCredential from utilizing the token cache in Workload Identity Federation environments.
  • Fixed a bug in DefaultAzureCredential that caused the credential chain to be constructed incorrectly when using AZURE_TOKEN_CREDENTIALS in combination with DefaultAzureCredentialOptions.

Other Changes

  • The BrokerCredential is now always included in the DefaultAzureCredential chain. If the Azure.Identity.Broker package is not referenced, an exception will be thrown when GetToken is called, making its behavior consistent with the rest of the credentials in the chain.
  • Updated Microsoft.Identity.Client dependency to version 4.76.0.
  • Updated Microsoft.Identity.Client.Extensions.Msal dependency to version 4.76.0.

Commits viewable in compare view.

Updated Microsoft.Identity.Client from 4.67.2 to 4.77.1.

Release notes

Sourced from Microsoft.Identity.Client's releases.

4.77.1

What's Changed

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.77.0...4.77.1

4.77.0

Features

Changes

Bug fixes

4.76.0

What's Changed

New Contributors

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.74.1...4.76.0

4.74.1

Bug fixes

4.74.0

Features

Bug fixes

4.73.1

What's Changed

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.73.0...4.73.1

4.73.0

What's Changed

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.72.1...4.73.0

4.72.1

4.72.1

Bug Fixes

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.72.0...4.72.1

4.72.0

4.72.0

Features

Bug Fixes

  • Ensure additional cache parameters are persisted in cache serializationIssue #​5261

4.71.1

Bug Fixes

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.71.0...4.71.1

4.71.0

Bug Fixes

  • Enable the Service Fabric flow to get a httpClient from the factory with ssl validation callback. See Issue #​5220

Full changelog: 4.70.2 .. 4.71.0

4.70.2

What's Changed

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.70.1...4.70.2

4.70.1

What's Changed

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.70.0...4.70.1

4.70.0

Features

  • Added a .WithAccessTokenSha256ToRefresh() method to AcquireTokenForClientParameterBuilder for ConfidentialClientApplication, allowing finer control over token refresh scenarios. Issue #​5111, PR #​5179
  • Added TokenCacheNotificationArgs.NoDistributedCacheUseReason in order to indicate that the configured serialized cache should not be a distributed cache to prevent issues when acquiring tokens. Issue #​5199

Bug Fixes

  • Removed invalid tenant checks (/organizations or /common) in MTLS flows for AAD/dSTS authorities. Issue #​5093
  • Fixed an issue where specifying a null service config region in MTLS scenarios did not correctly throw an exception. Issue #​5181

4.69.1

4.69.1

Features

  • Enabled broker support on the Linux platform. See Issue #​5086
  • Added a WithCertificate(..., bool associateTokensWithCertificateSerialNumber) overload to enable the use of the certificate's serial number as part of the cache key for tokens. Issue #​5150

Bug Fixes

  • MSAL will now stop replacing "%20" with "+" since it is obsolete. See Issue #​5061
  • Exposed client capabilities in AssertionRequestOptions for MSI FIC scenarios Issue #​4948
  • Added the missing claims in SignedAssertion when using the AssertionRequestOptions Delegate Issue #​5143

4.68.0

Features

  • Added WithFmiPath() api to support FMI scenarios in MSAL. See Issue #​5110
  • MSAL will now pass Client sku and Version to MsalRuntime for MSAL Runtime's client telemetry. See Issue #​5103

Bug Fixes

  • Reordered the condition for ManagedIdentitySource.MachineLearning to be checked after ManagedIdentitySource.AppService instead of before it. See Issue #​5077
  • Improved Managed Identity Source Detection Logging for Debugging. See Issue #​5097
  • When a 404 error occurs, MSAL will now include the endpoint and authority URLs in the exception message for better debugging. See Issue #​4769
  • MSAL will now set UseShellExecute to false in OpenLinuxBrowser. See Issue #​5075
  • Fixed a threading exception when using ExtraQueryParameters. See Issue #​5108

Commits viewable in compare view.

Updated Microsoft.ML.Tokenizers.Data.Cl100kBase from 1.0.1 to 1.0.2.

Release notes

Sourced from Microsoft.ML.Tokenizers.Data.Cl100kBase's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.ML.Tokenizers.Data.O200kBase from 1.0.1 to 1.0.2.

Release notes

Sourced from Microsoft.ML.Tokenizers.Data.O200kBase's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 17.12.0 to 17.13.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

17.13.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v17.12.0...v17.13.0

Commits viewable in compare view.

Updated Moq from 4.18.4 to 4.20.72.

Release notes

Sourced from Moq's releases.

4.20.72

What's Changed

🔨 Other

Full Changelog: devlooped/moq@v4.20.71...v4.20.72

4.20.71

What's Changed

🔨 Other

New Contributors

Full Changelog: devlooped/moq@v4.20.70...v4.20.71

4.20.70

What's Changed

🔨 Other

New Contributors

Full Changelog: devlooped/moq@v4.20.69...v4.20.70

4.20.69

Let's make it more memorable when Moq became "safe" again.

What's Changed

4.20.2

What's Changed

🐛 Fixed bugs

NOTE: in addition, there were potential privacy issues raised with regards to the SHA256 hashing of
user' email to check for sponsorship, so it won't be coming back until that's properly addressed

Full Changelog: moq/moq.spikes@v4.20.1...v4.20.2

4.20.1

What's Changed

✨ Implemented enhancements

  • Add Sponsor button to package readme 💜

Full Changelog: moq/moq.spikes@v4.20.0...v4.20.1

4.20.0

What's Changed

✨ Implemented enhancements

🔨 Other

New Contributors

Full Changelog: moq/moq.spikes@v4.18.4...v4.20.0

4.20.0-rc

What's Changed

🔨 Other

Full Changelog: moq/moq.spikes@v4.20.0-beta...v4.20.0-rc

4.20.0-beta

What's Changed

✨ Implemented enhancements

🔨 Other

New Contributors

Full Changelog: moq/moq.spikes@v4.18.4...v4.20.0-beta

4.20.0-alpha

What's Changed

✨ Implemented enhancements

🔨 Other

New Contributors

Full Changelog: moq/moq.spikes@v4.18.4...v4.20.0-alpha

Commits viewable in compare view.

Updated Newtonsoft.Json from 13.0.3 to 13.0.4.

Release notes

Sourced from Newtonsoft.Json's releases.

13.0.4

  • New feature - Annotated for trim/AOT (in)compatibility
  • New feature - Added support for using Index with JArray
  • Change - Avoid LINQ expression trees in .NET 6+ reflection
  • Fix - Fixed handling of empty constructor names
  • Fix - Fixed XML convert duplicate attribute error on nested arrays with writeArrayAttribute set to true
  • Fix - Fixed XML convert array attribute is not set for properties with special characters
  • Fix - Fixed TimeOnly deserialization to support more formats

Commits viewable in compare view.

Updated OpenAI from 2.1.0-beta.1 to 2.1.0.

Release notes

Sourced from OpenAI's releases.

2.1.0

What's Changed

New Contributors

Full Changelog: openai/openai-dotnet@OpenAI_2.1.0-beta.2...OpenAI_2.1.0

2.1.0-beta.2

What's Changed

New Contributors

Full Changelog: openai/openai-dotnet@OpenAI_2.1.0-beta.1...OpenAI_2.1.0-beta.2

Commits viewable in compare view.

Updated OpenAI from 2.1.0-beta.1 to 2.5.0.

Release notes

Sourced from OpenAI's releases.

2.5.0

See full changelog: https://github.com/openai/openai-dotnet/blob/OpenAI_2.5.0/CHANGELOG.md

2.4.0

See full changelog: https://github.com/openai/openai-dotnet/blob/OpenAI_2.4.0/CHANGELOG.md

2.3.0

See full changelog: https://github.com/openai/openai-dotnet/blob/OpenAI_2.3.0/CHANGELOG.md

2.2.0

What's Changed

New Contributors

Full Changelog: openai/openai-dotnet@OpenAI_2.2.0-beta.4...OpenAI_2.2.0

2.2.0-beta.4

What's Changed

Full Changelog: openai/openai-dotnet@OpenAI_2.2.0-beta.3...OpenAI_2.2.0-beta.4

2.2.0-beta.3

What's Changed

New Contributors

Full Changelog: openai/openai-dotnet@OpenAI_2.2.0-beta.2...OpenAI_2.2.0-beta.3

2.2.0-beta.2

What's Changed

Full Changelog: openai/openai-dotnet@OpenAI_2.2.0-beta.1...OpenAI_2.2.0-beta.2

2.2.0-beta.1

What's Changed

New Contributors

Full Changelog: openai/openai-dotnet@OpenAI_2.1.0...OpenAI_2.2.0-beta.1

2.1.0

What's Changed

New Contributors

Full Changelog: openai/openai-dotnet@OpenAI_2.1.0-beta.2...OpenAI_2.1.0

2.1.0-beta.2

What's Changed

New Contributors

Full Changelog: openai/openai-dotnet@OpenAI_2.1.0-beta.1...OpenAI_2.1.0-beta.2

Commits viewable in compare view.

Updated System.Linq.Async from 6.0.1 to 6.0.3.

Release notes

Sourced from System.Linq.Async's releases.

6.0.3

Changes:

Bugs:

  • #​1626: Fix duplicate emission in Delay with immediate selector

Enhancement:

  • #​1700: Add MinByWithTies and MaxByWithTies to bring back a MinBy/MaxBy that returns a list

Others:

  • #​2209: Fix Ix.NET build break on Ubuntu 24
  • #​2135: Update Ix.NET for .NET 8.0 sdk
  • #​2112: Union doesn't dispose enumerator for empty lists
  • #​2131: Fix Union Dispose bug #​2112
  • #​1719: Avoid spurious references to Microsoft.Bcl.AsyncInterfaces
See More
  • #​1701: Include icon in package & fix a couple warnings
  • #​1681: Bump Nerdbank.GitVersioning from 3.4.244 to 3.4.255 in /Ix.NET/Source
  • #​1680: Bump Nerdbank.GitVersioning from 3.4.244 to 3.4.255 in /Rx.NET/Source
  • #​1684: Update Merge.cs
  • #​1688: Bump FluentAssertions from 6.2.0 to 6.4.0 in /Ix.NET/Source
  • #​1694: Bump coverlet.collector from 3.1.0 to 3.1.1 in /Ix.NET/Source
  • #​1696: Bump coverlet.collector from 3.1.0 to 3.1.1 in /Rx.NET/Source
  • #​1671: Fix defines to be OR_GREATER
  • #​1666: Bump IsExternalInit from 1.0.1 to 1.0.2 in /Ix.NET/Source
  • #​1668: Bump Verify.Xunit from 14.7.0 to 14.11.2 in /Rx.NET/Source
  • #​1670: Bump MSBuild.Sdk.Extras from 3.0.38 to 3.0.44 in /Ix.NET/Source
  • #​1669: Bump MSBuild.Sdk.Extras from 3.0.38 to 3.0.44 in /Rx.NET/Source
  • #​1661: Remove support for .NET Core 2.1 and netstandard1.0. bump .net to 4.8
  • #​1660: Update to 6.0 SDK and exclude min/max/minby/maxby from 6.0 refs
  • #​1637: Bump Microsoft.Bcl.AsyncInterfaces from 5.0.0 to 6.0.0 in /Ix.NET/Source
  • #​1640: Bump Microsoft.SourceLink.GitHub from 1.0.0 to 1.1.1 in /Rx.NET/Source
  • #​1641: Bump Microsoft.SourceLink.GitHub from 1.0.0 to 1.1.1 in /Ix.NET/Source
  • #​1658: Bump Verify.Xunit from 13.3.1 to 14.7.0 in /Rx.NET/Source
  • #​1617: fix: OfType now accepts a collection of object?
  • #​1502: Update Rx 5.x supported platform in README
  • #​1622: Bump Verify.Xunit from 11.24.0 to 13.3.1 in /Rx.NET/Source
  • #​1621: Bump FluentAssertions from 6.1.0 to 6.2.0 in /Ix.NET/Source
  • #​1615: Bump Microsoft.NETCore.UniversalWindowsPlatform from 6.2.12 to 6.2.13 in /Rx.NET/Source
  • #​1603: Bump MSBuild.Sdk.Extras from 3.0.23 to 3.0.38 in /Rx.NET/Source
  • #​1602: Bump MSBuild.Sdk.Extras from 3.0.23 to 3.0.38 in /Ix.NET/Source
    ... (truncated)

6.0.2

Changes:

Bugs:

  • #​1626: Fix duplicate emission in Delay with immediate selector

Enhancement:

  • #​1700: Add MinByWithTies and MaxByWithTies to bring back a MinBy/MaxBy that returns a list

Others:

  • #​2209: Fix Ix.NET build break on Ubuntu 24
  • #​2135: Update Ix.NET for .NET 8.0 sdk
  • #​2112: Union doesn't dispose enumerator for empty lists
  • #​2131: Fix Union Dispose bug #​2112
  • #​1719: Avoid spurious references to Microsoft.Bcl.AsyncInterfaces
See More
  • #​1701: Include icon in package & fix a couple warnings
  • #​1681: Bump Nerdbank.GitVersioning from 3.4.244 to 3.4.255 in /Ix.NET/Source
  • #​1680: Bump Nerdbank.GitVersioning from 3.4.244 to 3.4.255 in /Rx.NET/Source
  • #​1684: Update Merge.cs
  • #​1688: Bump FluentAssertions from 6.2.0 to 6.4.0 in /Ix.NET/Source
  • #​1694: Bump coverlet.collector from 3.1.0 to 3.1.1 in /Ix.NET/Source
  • #​1696: Bump coverlet.collector from 3.1.0 to 3.1.1 in /Rx.NET/Source
  • #​1671: Fix defines to be OR_GREATER
  • #​1666: Bump IsExternalInit from 1.0.1 to 1.0.2 in /Ix.NET/Source
  • #​1668: Bump Verify.Xunit from 14.7.0 to 14.11.2 in /Rx.NET/Source
  • #​1670: Bump MSBuild.Sdk.Extras from 3.0.38 to 3.0.44 in /Ix.NET/Source
  • #​1669: Bump MSBuild.Sdk.Extras from 3.0.38 to 3.0.44 in /Rx.NET/Source
  • #​1661: Remove support for .NET Core 2.1 and netstandard1.0. bump .net to 4.8
  • #​1660: Update to 6.0 SDK and exclude min/max/minby/maxby from 6.0 refs
  • #​1637: Bump Microsoft.Bcl.AsyncInterfaces from 5.0.0 to 6.0.0 in /Ix.NET/Source
  • #​1640: Bump Microsoft.SourceLink.GitHub from 1.0.0 to 1.1.1 in /Rx.NET/Source
  • #​1641: Bump Microsoft.SourceLink.GitHub from 1.0.0 to 1.1.1 in /Ix.NET/Source
  • #​1658: Bump Verify.Xunit from 13.3.1 to 14.7.0 in /Rx.NET/Source
  • #​1617: fix: OfType now accepts a collection of object?
  • #​1502: Update Rx 5.x supported platform in README
  • #​1622: Bump Verify.Xunit from 11.24.0 to 13.3.1 in /Rx.NET/Source
  • #​1621: Bump FluentAssertions from 6.1.0 to 6.2.0 in /Ix.NET/Source
  • #​1615: Bump Microsoft.NETCore.UniversalWindowsPlatform from 6.2.12 to 6.2.13 in /Rx.NET/Source
  • #​1603: Bump MSBuild.Sdk.Extras from 3.0.23 to 3.0.38 in /Rx.NET/Source
  • #​1602: Bump MSBuild.Sdk.Extras from 3.0.23 to 3.0.38 in /Ix.NET/Source
    ... (truncated)

Commits viewable in compare view.

Updated System.Text.Json from 8.0.5 to 8.0.6.

Release notes

Sourced from System.Text.Json's releases.

8.0.6

Release

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Azure.AI.OpenAI from 2.1.0-beta.1 to 2.1.0
Bumps Azure.Identity from 1.13.2 to 1.17.0
Bumps Microsoft.Identity.Client from 4.67.2 to 4.77.1
Bumps Microsoft.ML.Tokenizers.Data.Cl100kBase from 1.0.1 to 1.0.2
Bumps Microsoft.ML.Tokenizers.Data.O200kBase from 1.0.1 to 1.0.2
Bumps Microsoft.NET.Test.Sdk from 17.12.0 to 17.13.0
Bumps Moq from 4.18.4 to 4.20.72
Bumps Newtonsoft.Json from 13.0.3 to 13.0.4
Bumps OpenAI to 2.1.0, 2.5.0
Bumps System.Linq.Async from 6.0.1 to 6.0.3
Bumps System.Text.Json from 8.0.5 to 8.0.6

---
updated-dependencies:
- dependency-name: Azure.AI.OpenAI
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: OpenAI
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: Azure.AI.OpenAI
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: OpenAI
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: Azure.Identity
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: Microsoft.Identity.Client
  dependency-version: 4.77.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: Microsoft.ML.Tokenizers.Data.Cl100kBase
  dependency-version: 1.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: Microsoft.ML.Tokenizers.Data.O200kBase
  dependency-version: 1.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 17.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: Moq
  dependency-version: 4.20.72
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: Newtonsoft.Json
  dependency-version: 13.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: OpenAI
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: System.Linq.Async
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: System.Text.Json
  dependency-version: 8.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 13, 2025

Labels

The following labels could not be found: dependencies, dotnet. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants