Bump the nuget group with 19 updates

[dependabot]

Updated Azure.Identity from 1.17.1 to 1.21.0.

Release notes

Sourced from Azure.Identity's releases.

1.21.0

1.21.0 (2026-04-10)

Other Changes

• All Azure.Identity types have been moved to Azure.Core and are now available through TypeForwardedTo attributes. This is a non-breaking change — existing code continues to work transparently. The library's version number now aligns with that of Azure.Core. See the Migration Guide for details.

1.17.2

1.17.2 (2026-04-15)

Other Changes

• Updated Microsoft.Identity.Client and Microsoft.Identity.Client.Extensions.Msal dependencies to version 4.83.1.

Commits viewable in compare view.

Updated coverlet.collector from 8.0.0 to 10.0.0.

Release notes

Sourced from coverlet.collector's releases.

10.0.0

Improvements

• Unique Report Filenames (coverlet.MTP and AzDO) #​1866
• Add --coverlet-file-prefix option for unique report files #​1869
• Introduce .NET 10 support #​1823

Fixed

• Fix [BUG] Wrong branch rate on IAsyncEnumerable for generic type #​1836
• Fix [BUG] Missing Coverage after moving to MTP #​1843
• Fix [BUG] No coverage reported when targeting .NET Framework with 8.0.1 #​1842
• Fix [BUG] Behavior changes between MTP and Legacy (msbuild) #​1878
• Fix [BUG] Coverlet.MTP - Unable to load coverlet.mtp.appsettings.json #​1880
• Fix [BUG] Coverlet.Collector produces empty report when Mediator.SourceGenerator is referenced #​1718 by https://github.com/yusyd
• Fix [BUG] Crash during instrumentation (Methods using LibraryImport/DllImport have no body) #​1762

Maintenance

• Add comprehensive async method tests and documentation for issue #​1864
• Replace Tmds.ExecFunction Package in coverlet.core.coverage.tests #​1833
• Add net9.0 and net10.0 targets #​1822

Diff between 8.0.1 and 10.0.0

8.0.1

Fixed

• Fix [BUG] TypeInitializationException when targeting .NET Framework #​1818
• Fix [BUG] coverlet.MTP build fails with CS0400 due to developmentDependency=true #​1827

Improvements

• Additional improvements needed for .NET Framework instrumentation type import #​1825

Diff between 8.0.0 and 8.0.1

Commits viewable in compare view.

Updated FluentFTP from 53.0.2 to 54.1.1.

Release notes

Sourced from FluentFTP's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.ApplicationInsights from 2.23.0 to 3.1.0.

Release notes

Sourced from Microsoft.ApplicationInsights's releases.

3.1.0

Version 3.1.0

• Make TelemetryContext properties public and propagate them via TelemetryClient.
• Add fallback to APPLICATIONINSIGHTS_CONNECTION_STRING environment variable for Base, Web, and NLog packages when connection string is not set via code.
• Update Azure.Monitor.OpenTelemetry.Exporter to 1.7.0. This includes updated mappings for telemetry context.
• Fix OTEL_SDK_DISABLED not being honored when TelemetryConfiguration.DisableTelemetry is set in DI scenarios., #​3157
• Fix TrackAvailability ignoring user-specified Timestamp on AvailabilityTelemetry. The timestamp is now emitted as microsoft.availability.testTimestamp so downstream exporters can use the correct event time.
• Added netstandard2.0 target framework to Microsoft.ApplicationInsights package to support customers with shared libraries targeting netstandard2.0.
• Fix TelemetryClient.Context.Cloud.RoleName set after construction now applies to all telemetry.
• Fix bug where Debug/Trace level logs from TrackTrace API were not emitted to Application Insights
• Fix Track API calls to not mutate the passed in dictionary if it is readonly
• Fix NullReferenceException in TelemetryClient.Flush() and FlushAsync() when called from DI scenarios
• Fix ApplicationVersion ignored: ApplicationInsightsServiceOptions.ApplicationVersion is now applied as service.version on the OpenTelemetry Resource for both AspNetCore and WorkerService packages
• Fix HttpRequestExtensions.UnvalidatedGetHeader always returning empty string instead of the actual header value. Restored max-length enforcement to guard against oversized header values.

3.0.0

• Replaced netstandard2.0 with net8.0 target framework in Microsoft.ApplicationInsights.NLogTarget package.

3.0.0-rc1

• Removed netstandard2.0 target framework from Microsoft.ApplicationInsights, Microsoft.ApplicationInsights.AspNetCore, and Microsoft.ApplicationInsights.WorkerService packages.
• The JavaScript in Microsoft.ApplicationInsights.AspNetCore has been updated to version 10.
• Centralized package version management
• Update OpenTelemetry dependencies, #​3092
  • OpenTelemetry 1.15.0
  • OpenTelemetry.Instrumentation.AspNetCore 1.15.0
  • OpenTelemetry.Instrumentation.AspNet 1.15.1
  • OpenTelemetry.Instrumentation.Http 1.15.0
  • OpenTelemetry.Instrumentation.SqlClient 1.15.0
• Vendored OpenTelemetry.Resources.Azure resource detectors to NETCORE shared folder, replaced package with vendored implementation, #​3093
• Added support to disable telemetry via TelemetryConfiguration.DisableTelemetry
• Removed EnabledAdaptiveSampling and replaced with TracesPerSecond and SamplingRatio
• Added EnableTraceBasedLogsSampler property to ApplicationInsightsServiceOptions for ASP.NET Core and WorkerService packages
• Added support for StorageDirectory and DisableOfflineStorage from TelemetryConfiguration in DI scenarios
• Update Azure.Monitor.OpenTelemetry.Exporter dependency to 1.6.0

3.0.0-beta2

Added

• Automatic configuration binding from "ApplicationInsights" section in appsettings.json for both AspNetCore and WorkerService packages with configuration precedence: environment variables > explicit configuration > appsettings.json
• Added support for Entra ID (Azure Active Directory) authentication using Azure.Core.TokenCredential
• Added Self Diagnostics feature
• Updated the default sampler from Fixed Rate to Rate-Limited Sampling.
• Update Azure Monitor Exporter to 1.6.0-beta.2
• Add comprehensive applicationinsights.config support
• Add properties in TelemetryConfiguration to configure underlying exporter

Bug fix

• Fix TrackMetric(MetricTelemetry) unsupported telemetry type error

3.0.0-beta1

• The following Application Insights packages in this repo now use OpenTelemetry internally. OpenTelemetry is the industry standard for telemetry collection and provides better interoperability with other observability tools.
  • Microsoft.ApplicationInsights
  • Microsoft.ApplicationInsights.AspNetCore
  • Microsoft.ApplicationInsights.WorkerService
  • Microsoft.ApplicationInsights.Web
  • Microsoft.ApplicationInsights.NLogTarget
• Classic APIs of the above packages are preserved; calls are translated to OpenTelemetry telemetry.
• Other packages not listed above (such as certain auto-collectors and logging adapters that were published from this repo previously) will not have future versions published. See BreakingChanges.md for details.

Commits viewable in compare view.

Updated Microsoft.ApplicationInsights.WorkerService from 2.23.0 to 3.1.0.

Release notes

Sourced from Microsoft.ApplicationInsights.WorkerService's releases.

3.1.0

Version 3.1.0

• Make TelemetryContext properties public and propagate them via TelemetryClient.
• Add fallback to APPLICATIONINSIGHTS_CONNECTION_STRING environment variable for Base, Web, and NLog packages when connection string is not set via code.
• Update Azure.Monitor.OpenTelemetry.Exporter to 1.7.0. This includes updated mappings for telemetry context.
• Fix OTEL_SDK_DISABLED not being honored when TelemetryConfiguration.DisableTelemetry is set in DI scenarios., #​3157
• Fix TrackAvailability ignoring user-specified Timestamp on AvailabilityTelemetry. The timestamp is now emitted as microsoft.availability.testTimestamp so downstream exporters can use the correct event time.
• Added netstandard2.0 target framework to Microsoft.ApplicationInsights package to support customers with shared libraries targeting netstandard2.0.
• Fix TelemetryClient.Context.Cloud.RoleName set after construction now applies to all telemetry.
• Fix bug where Debug/Trace level logs from TrackTrace API were not emitted to Application Insights
• Fix Track API calls to not mutate the passed in dictionary if it is readonly
• Fix NullReferenceException in TelemetryClient.Flush() and FlushAsync() when called from DI scenarios
• Fix ApplicationVersion ignored: ApplicationInsightsServiceOptions.ApplicationVersion is now applied as service.version on the OpenTelemetry Resource for both AspNetCore and WorkerService packages
• Fix HttpRequestExtensions.UnvalidatedGetHeader always returning empty string instead of the actual header value. Restored max-length enforcement to guard against oversized header values.

3.0.0

• Replaced netstandard2.0 with net8.0 target framework in Microsoft.ApplicationInsights.NLogTarget package.

3.0.0-rc1

• Removed netstandard2.0 target framework from Microsoft.ApplicationInsights, Microsoft.ApplicationInsights.AspNetCore, and Microsoft.ApplicationInsights.WorkerService packages.
• The JavaScript in Microsoft.ApplicationInsights.AspNetCore has been updated to version 10.
• Centralized package version management
• Update OpenTelemetry dependencies, #​3092
  • OpenTelemetry 1.15.0
  • OpenTelemetry.Instrumentation.AspNetCore 1.15.0
  • OpenTelemetry.Instrumentation.AspNet 1.15.1
  • OpenTelemetry.Instrumentation.Http 1.15.0
  • OpenTelemetry.Instrumentation.SqlClient 1.15.0
• Vendored OpenTelemetry.Resources.Azure resource detectors to NETCORE shared folder, replaced package with vendored implementation, #​3093
• Added support to disable telemetry via TelemetryConfiguration.DisableTelemetry
• Removed EnabledAdaptiveSampling and replaced with TracesPerSecond and SamplingRatio
• Added EnableTraceBasedLogsSampler property to ApplicationInsightsServiceOptions for ASP.NET Core and WorkerService packages
• Added support for StorageDirectory and DisableOfflineStorage from TelemetryConfiguration in DI scenarios
• Update Azure.Monitor.OpenTelemetry.Exporter dependency to 1.6.0

3.0.0-beta2

Added

• Automatic configuration binding from "ApplicationInsights" section in appsettings.json for both AspNetCore and WorkerService packages with configuration precedence: environment variables > explicit configuration > appsettings.json
• Added support for Entra ID (Azure Active Directory) authentication using Azure.Core.TokenCredential
• Added Self Diagnostics feature
• Updated the default sampler from Fixed Rate to Rate-Limited Sampling.
• Update Azure Monitor Exporter to 1.6.0-beta.2
• Add comprehensive applicationinsights.config support
• Add properties in TelemetryConfiguration to configure underlying exporter

Bug fix

• Fix TrackMetric(MetricTelemetry) unsupported telemetry type error

3.0.0-beta1

• The following Application Insights packages in this repo now use OpenTelemetry internally. OpenTelemetry is the industry standard for telemetry collection and provides better interoperability with other observability tools.
  • Microsoft.ApplicationInsights
  • Microsoft.ApplicationInsights.AspNetCore
  • Microsoft.ApplicationInsights.WorkerService
  • Microsoft.ApplicationInsights.Web
  • Microsoft.ApplicationInsights.NLogTarget
• Classic APIs of the above packages are preserved; calls are translated to OpenTelemetry telemetry.
• Other packages not listed above (such as certain auto-collectors and logging adapters that were published from this repo previously) will not have future versions published. See BreakingChanges.md for details.

Commits viewable in compare view.

Updated Microsoft.Azure.AppConfiguration.Functions.Worker from 8.1.2 to 8.5.0.

Release notes

Sourced from Microsoft.Azure.AppConfiguration.Functions.Worker's releases.

8.5.0

What's Changed

• Add AlwaysHealthy health check when provider is disabled by @​zhiyuanliang-ms in Add AlwaysHealthy health check when provider is disabled Azure/AppConfiguration-DotnetProvider#700
• Bug fix: The registered failture status should be used when health check fails by @​zhiyuanliang-ms in Bug fix: The registered failture status should be used when health check fails Azure/AppConfiguration-DotnetProvider#714
• AzureAppConfigurationRefresherProvider finds IConfigurationRefresher by @​zhiyuanliang-ms in AzureAppConfigurationRefresherProvider finds IConfigurationRefresher Azure/AppConfiguration-DotnetProvider#715
• Dependency upgrade by @​linglingye001 in Dependency upgrade Azure/AppConfiguration-DotnetProvider#721
• Version bump 8.5.0 by @​linglingye001 in Version bump 8.5.0 Azure/AppConfiguration-DotnetProvider#723
• Merge main to release/stable/v8 by @​linglingye001 in Merge main to release/stable/v8 Azure/AppConfiguration-DotnetProvider#724

Full Changelog: Azure/AppConfiguration-DotnetProvider@8.4.0...8.5.0

8.5.0-preview

Microsoft.Extensions.Configuration.AzureAppConfiguration 8.5.0-preview - November 14th, 2025

Enhancements

• Added a new method ConnectAzureFrontDoor to AzureAppConfigurationOptions, which can be used to load configuration settings from Azure App Configuration via an Azure Front Door endpoint. This enables client (browser) applications to take advantage of CDN benefits, such as scale, when fetching configuration. #​706

Microsoft.Azure.AppConfiguration.AspNetCore 8.5.0-preview - November 14th, 2025

• Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.5.0-preview. See the release notes for more information on the changes.

Microsoft.Azure.AppConfiguration.Functions.Worker 8.5.0-preview - November 14th, 2025

• Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.5.0-preview. See the release notes for more information on the changes.

8.4.0

Microsoft.Extensions.Configuration.AzureAppConfiguration 8.4.0 - September 19th, 2025

Enhancements

• Added an overload of AddAzureAppConfiguration that accepts the endpoint and token credential. #​694

• Added support for parsing json values with comments. #​685

• Added support for snapshot references. If a configuration setting's value is a snapshot reference, loading it automatically pulls all key-values and feature flags from the referenced snapshot into the configuration. This enables dynamically switching between snapshots at runtime. #​689

• Updated dependency package versions. #​695

  • Azure.Data.AppConfiguration: 1.6.0 -> 1.6.1
  • Azure.Messaging.EventGrid: 4.7.0 -> 5.0.0
  • Azure.Security.KeyVault.Secrets: 4.6.0 -> 4.8.0
  • Microsoft.Extensions.Diagnostics.HealthChecks: 6.0.36 -> 8.0.19
  • Microsoft.Extensions.Azure: 1.7.6 -> 1.12.0
  • Microsoft.Extensions.DependencyInjection.Abstractions: 6.0.0 -> 8.0.2
  • Microsoft.Extensions.Logging: 6.0.0 -> 8.0.1
  • Microsoft.Extensions.Configuration: 6.0.1 -> 8.0.0

Microsoft.Azure.AppConfiguration.AspNetCore 8.4.0 - September 19th, 2025

• Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.4.0. See the release notes for more information on the changes.

Microsoft.Azure.AppConfiguration.Functions.Worker 8.4.0 - September 19th, 2025

• Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.4.0. See the release notes for more information on the changes.

8.3.0

Microsoft.Extensions.Configuration.AzureAppConfiguration 8.3.0 - July 24th, 2025

Enhancements

• Added health check integration for Microsoft.Extensions.Diagnostic.HealthChecks. You can call AddAzureAppConfiguration on IHealthCheckBuilder to register a health check for the Azure App Configuration provider. #​644

  builder.Services
     .AddHealthChecks()
     .AddAzureAppConfiguration();

• Introduced a new environment variable AZURE_APP_CONFIGURATION_FM_SCHEMA_COMPATIBILITY_DISABLED to force processing and outputting feature flags using the Microsoft schema. #​676

Microsoft.Azure.AppConfiguration.AspNetCore 8.3.0 - July 24th, 2025

• Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.3.0. See the release notes for more information on the changes.

Microsoft.Azure.AppConfiguration.Functions.Worker 8.3.0 - July 24th, 2025

• Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.3.0. See the release notes for more information on the changes.

8.2.0

Microsoft.Extensions.Configuration.AzureAppConfiguration 8.2.0 - May 14th, 2025

Enhancements

• Updated the existing Select APIs with the new parameter tagFilters to support filtering key-values and feature flags by tags.

  public AzureAppConfigurationOptions Select(string keyFilter, string labelFilter = LabelFilter.Null, IEnumerable<string> tagFilters = null)

  public FeatureFlagOptions Select(string featureFlagFilter, string labelFilter = LabelFilter.Null, IEnumerable<string> tagFilters = null)

• Added an ActivitySource called Microsoft.Extensions.Configuration.AzureAppConfiguration to support instrumentation. A Load activity will start when configuration is initially built and the Refresh activity will start when a refresh is triggered. #​645

• This is the first stable release of the AzureAppConfigurationOptions.SetClientFactory API introduced in 8.2.0-preview. #​380

  public AzureAppConfigurationOptions SetClientFactory(IAzureClientFactory<ConfigurationClient> factory)

Other Changes

• Removed the FeatureFlagId property from feature flag telemetry. #​655
• Shortened default network timeout for requests to App Configuration to improve failover speed and retry responsiveness. #​657
• This is the first stable release of AllocationId from feature flag telemetry metadata, which was introduced in 8.1.0-preview. #​600

Microsoft.Azure.AppConfiguration.AspNetCore 8.2.0 - May 14th, 2025

• Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.2.0. See the release notes for more information on the changes.

Microsoft.Azure.AppConfiguration.Functions.Worker 8.2.0 - May 14th, 2025

• Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.2.0. See the release notes for more information on the changes.

8.2.0-preview

Microsoft.Extensions.Configuration.AzureAppConfiguration 8.2.0-preview - March 21st, 2025

Enhancements

• Added the ability to set a client factory used for creating ConfigurationClient instances. #​380

  public AzureAppConfigurationOptions SetClientFactory(IAzureClientFactory<ConfigurationClient> factory)

Microsoft.Azure.AppConfiguration.AspNetCore 8.2.0-preview - March 21st, 2025

• Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.2.0-preview. See the release notes for more information on the changes.

Microsoft.Azure.AppConfiguration.Functions.Worker 8.2.0-preview - March 21st, 2025

• Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.2.0-preview. See the release notes for more information on the changes.

Commits viewable in compare view.

Updated Microsoft.Azure.Functions.Worker from 2.51.0 to 2.52.0.

Release notes

Sourced from Microsoft.Azure.Functions.Worker's releases.

2.52.0

What's Changed

Microsoft.Azure.Functions.Worker (metapackage) 2.52.0

• Update Microsoft.Azure.Functions.Worker.Core to 2.52.0
• Update Microsoft.Azure.Functions.Worker.Grpc to 2.52.0

Microsoft.Azure.Functions.Worker.Core 2.52.0

• Add support for propagating trace context tags from worker to host (#​3303)
• Add support for propagating OpenTelemetry Baggage to the worker. Requires use with the OpenTelemetry Extension to work end to end (#​3319).

Microsoft.Azure.Functions.Worker.Grpc 2.52.0

• Update protobuf version to v1.12.0-protofile and add support for propagating tags from the worker to the functions host (#​3303).
• Update protobuf version to v1.13.0-protofile to add support for propagating OpenTelemetry baggage to the worker (#​3319).

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.Memory from 10.0.3 to 10.0.7.

Release notes

Sourced from Microsoft.Extensions.Caching.Memory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.Abstractions from 10.0.3 to 10.0.7.

Release notes

Sourced from Microsoft.Extensions.Configuration.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.AzureAppConfiguration from 8.1.2 to 8.5.0.

Release notes

Sourced from Microsoft.Extensions.Configuration.AzureAppConfiguration's releases.

8.5.0

What's Changed

• Add AlwaysHealthy health check when provider is disabled by @​zhiyuanliang-ms in Add AlwaysHealthy health check when provider is disabled Azure/AppConfiguration-DotnetProvider#700
• Bug fix: The registered failture status should be used when health check fails by @​zhiyuanliang-ms in Bug fix: The registered failture status should be used when health check fails Azure/AppConfiguration-DotnetProvider#714
• AzureAppConfigurationRefresherProvider finds IConfigurationRefresher by @​zhiyuanliang-ms in AzureAppConfigurationRefresherProvider finds IConfigurationRefresher Azure/AppConfiguration-DotnetProvider#715
• Dependency upgrade by @​linglingye001 in Dependency upgrade Azure/AppConfiguration-DotnetProvider#721
• Version bump 8.5.0 by @​linglingye001 in Version bump 8.5.0 Azure/AppConfiguration-DotnetProvider#723
• Merge main to release/stable/v8 by @​linglingye001 in Merge main to release/stable/v8 Azure/AppConfiguration-DotnetProvider#724

Full Changelog: Azure/AppConfiguration-DotnetProvider@8.4.0...8.5.0

8.5.0-preview

Microsoft.Extensions.Configuration.AzureAppConfiguration 8.5.0-preview - November 14th, 2025

Enhancements

• Added a new method ConnectAzureFrontDoor to AzureAppConfigurationOptions, which can be used to load configuration settings from Azure App Configuration via an Azure Front Door endpoint. This enables client (browser) applications to take advantage of CDN benefits, such as scale, when fetching configuration. #​706

Microsoft.Azure.AppConfiguration.AspNetCore 8.5.0-preview - November 14th, 2025

• Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.5.0-preview. See the release notes for more information on the changes.

Microsoft.Azure.AppConfiguration.Functions.Worker 8.5.0-preview - November 14th, 2025

• Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.5.0-preview. See the release notes for more information on the changes.

8.4.0

Microsoft.Extensions.Configuration.AzureAppConfiguration 8.4.0 - September 19th, 2025

Enhancements

• Added an overload of AddAzureAppConfiguration that accepts the endpoint and token credential. #​694

• Added support for parsing json values with comments. #​685

• Added support for snapshot references. If a configuration setting's value is a snapshot reference, loading it automatically pulls all key-values and feature flags from the referenced snapshot into the configuration. This enables dynamically switching between snapshots at runtime. #​689

• Updated dependency package versions. #​695

  • Azure.Data.AppConfiguration: 1.6.0 -> 1.6.1
  • Azure.Messaging.EventGrid: 4.7.0 -> 5.0.0
  • Azure.Security.KeyVault.Secrets: 4.6.0 -> 4.8.0
  • Microsoft.Extensions.Diagnostics.HealthChecks: 6.0.36 -> 8.0.19
  • Microsoft.Extensions.Azure: 1.7.6 -> 1.12.0
  • Microsoft.Extensions.DependencyInjection.Abstractions: 6.0.0 -> 8.0.2
  • Microsoft.Extensions.Logging: 6.0.0 -> 8.0.1
  • Microsoft.Extensions.Configuration: 6.0.1 -> 8.0.0

Microsoft.Azure.AppConfiguration.AspNetCore 8.4.0 - September 19th, 2025

• Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.4.0. See the release notes for more information on the changes.

Microsoft.Azure.AppConfiguration.Functions.Worker 8.4.0 - September 19th, 2025

• Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.4.0. See the release notes for more information on the changes.

8.3.0

Microsoft.Extensions.Configuration.AzureAppConfiguration 8.3.0 - July 24th, 2025

Enhancements

• Added health check integration for Microsoft.Extensions.Diagnostic.HealthChecks. You can call AddAzureAppConfiguration on IHealthCheckBuilder to register a health check for the Azure App Configuration provider. #​644

  builder.Services
     .AddHealthChecks()
     .AddAzureAppConfiguration();

• Introduced a new environment variable AZURE_APP_CONFIGURATION_FM_SCHEMA_COMPATIBILITY_DISABLED to force processing and outputting feature flags using the Microsoft schema. #​676

Microsoft.Azure.AppConfiguration.AspNetCore 8.3.0 - July 24th, 2025

• Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.3.0. See the release notes for more information on the changes.

Microsoft.Azure.AppConfiguration.Functions.Worker 8.3.0 - July 24th, 2025

• Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.3.0. See the release notes for more information on the changes.

8.2.0

Microsoft.Extensions.Configuration.AzureAppConfiguration 8.2.0 - May 14th, 2025

Enhancements

• Updated the existing Select APIs with the new parameter tagFilters to support filtering key-values and feature flags by tags.

  public AzureAppConfigurationOptions Select(string keyFilter, string labelFilter = LabelFilter.Null, IEnumerable<string> tagFilters = null)

  public FeatureFlagOptions Select(string featureFlagFilter, string labelFilter = LabelFilter.Null, IEnumerable<string> tagFilters = null)

• Added an ActivitySource called Microsoft.Extensions.Configuration.AzureAppConfiguration to support instrumentation. A Load activity will start when configuration is initially built and the Refresh activity will start when a refresh is triggered. #​645

• This is the first stable release of the AzureAppConfigurationOptions.SetClientFactory API introduced in 8.2.0-preview. #​380

  public AzureAppConfigurationOptions SetClientFactory(IAzureClientFactory<ConfigurationClient> factory)

Other Changes

• Removed the FeatureFlagId property from feature flag telemetry. #​655
• Shortened default network timeout for requests to App Configuration to improve failover speed and retry responsiveness. #​657
• This is the first stable release of AllocationId from feature flag telemetry metadata, which was introduced in 8.1.0-preview. #​600

Microsoft.Azure.AppConfiguration.AspNetCore 8.2.0 - May 14th, 2025

• Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.2.0. See the release notes for more information on the changes.

Microsoft.Azure.AppConfiguration.Functions.Worker 8.2.0 - May 14th, 2025

• Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.2.0. See the release notes for more information on the changes.

8.2.0-preview

Microsoft.Extensions.Configuration.AzureAppConfiguration 8.2.0-preview - March 21st, 2025

Enhancements

• Added the ability to set a client factory used for creating ConfigurationClient instances. #​380

  public AzureAppConfigurationOptions SetClientFactory(IAzureClientFactory<ConfigurationClient> factory)

Microsoft.Azure.AppConfiguration.AspNetCore 8.2.0-preview - March 21st, 2025

• Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.2.0-preview. See the release notes for more information on the changes.

Microsoft.Azure.AppConfiguration.Functions.Worker 8.2.0-preview - March 21st, 2025

• Updated Microsoft.Extensions.Configuration.AzureAppConfiguration reference to 8.2.0-preview. See the release notes for more information on the changes.

Commits viewable in compare view.

Updated Microsoft.Extensions.Configuration.UserSecrets from 10.0.3 to 10.0.7.

Release notes

Sourced from Microsoft.Extensions.Configuration.UserSecrets's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.3 to 10.0.7.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks from 10.0.3 to 10.0.7.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Abstractions from 10.0.3 to 10.0.7.

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Identity.Web from 4.3.0 to 4.8.0.

Release notes

Sourced from Microsoft.Identity.Web's releases.

4.8.0

What's Changed

• Bump flatted from 3.3.3 to 3.4.2 in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump flatted from 3.3.3 to 3.4.2 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3753
• Update changelog.md for ID.Web 4.6.0 by @​bgavrilMS in Update changelog.md for ID.Web 4.6.0 AzureAD/microsoft-identity-web#3756
• Add token binding to MicrosoftIdentityMessageHandler by @​cpp11nullptr in Add token binding to MicrosoftIdentityMessageHandler AzureAD/microsoft-identity-web#3743
• Bump picomatch in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump picomatch in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3759
• Documentation: Clarify managed identity credential types for containerized vs. VM/App Service deployments by @​Copilot in Documentation: Clarify managed identity credential types for containerized vs. VM/App Service deployments AzureAD/microsoft-identity-web#3585
• Bump path-to-regexp from 8.3.0 to 8.4.0 in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump path-to-regexp from 8.3.0 to 8.4.0 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3762
• Upgrade Microsoft Application Insights packages by @​RojaEnnam in Upgrade Microsoft Application Insights packages AzureAD/microsoft-identity-web#3763
• Use Abstractions 12 by @​pmaytak in Use Abstractions 12 AzureAD/microsoft-identity-web#3761
• Post-4.7.0 by @​pmaytak in Post-4.7.0 AzureAD/microsoft-identity-web#3768
• Fix Comp Gov DOTNET-Security-10.0 by @​reginayap8 in Fix Comp Gov DOTNET-Security-10.0 AzureAD/microsoft-identity-web#3769
• Upgrade CodeQL to V4: Fix 10 CodeQL Analysis Warnings and Errors by @​reginayap8 in Upgrade CodeQL to V4: Fix 10 CodeQL Analysis Warnings and Errors AzureAD/microsoft-identity-web#3770
• fix warnings by @​gladjohn in fix warnings AzureAD/microsoft-identity-web#3771
• adding examples for using postgres as a distributed cache by @​JaredMSFT in adding examples for using postgres as a distributed cache AzureAD/microsoft-identity-web#3766
• Suppress AOT configuration-binding SYSLIB warnings in AotCompatibility test app by @​Copilot in Suppress AOT configuration-binding SYSLIB warnings in AotCompatibility test app AzureAD/microsoft-identity-web#3774
• Bump vite from 7.1.11 to 7.3.2 in /tests/DevApps/SidecarAdapter/typescript by @​dependabot[bot] in Bump vite from 7.1.11 to 7.3.2 in /tests/DevApps/SidecarAdapter/typescript AzureAD/microsoft-identity-web#3772
• Skip legacy B2C local-account Todo UI test in WebAppUiTests by @​Copilot in Skip legacy B2C local-account Todo UI test in WebAppUiTests AzureAD/microsoft-identity-web#3778
• Fix initialization of ConfidentialClientApplicationOptions in MergedOptions by @​cpp11nullptr in Fix initialization of ConfidentialClientApplicationOptions in MergedOptions AzureAD/microsoft-identity-web#3760
• Bump net8/net9/net10 runtime package baselines to patched crypto servicing versions by @​Copilot in Bump net8/net9/net10 runtime package baselines to patched crypto servicing versions AzureAD/microsoft-identity-web#3779
• Fix flaky certificate test failures on CI by @​gladjohn in Fix flaky certificate test failures on CI AzureAD/microsoft-identity-web#3780
• MTLS Without Tokens Support by @​tlupes in MTLS Without Tokens Support AzureAD/microsoft-identity-web#3747
• Fix CredentialsProvider DI lifetime mismatch causing startup crash in Development by @​Avery-Dunn in Fix CredentialsProvider DI lifetime mismatch causing startup crash in Development AzureAD/microsoft-identity-web#3783
• Remove unused DataProtection configuration from Sidecar by @​Copilot in Remove unused DataProtection configuration from Sidecar AzureAD/microsoft-identity-web#3776

New Contributors

• @​RojaEnnam made their first contribution in Upgrade Microsoft Application Insights packages AzureAD/microsoft-identity-web#3763
• @​reginayap8 made their first contribution in Fix Comp Gov DOTNET-Security-10.0 AzureAD/microsoft-identity-web#3769
• @​JaredMSFT made their first contribution in adding examples for using postgres as a distributed cache AzureAD/microsoft-identity-web#3766

Full Changelog: AzureAD/microsoft-identity-web@4.6.0...4.8.0

4.7.0

4.7.0

Bug fixes

• Updates to Microsoft.Identity.Abstractions 12.0.0 to revert breaking changes introduced in Abstractions 11.0.0. (On .NET 10 target, Certificate extension method in CredentialDescription was reverted to normal property.) See #​3767.

4.6.0

What's Changed

• Move boilerplate code skills to IdWeb, and add Aspire DevApp demonstrating Blazor authentication components by @​Copilot in Move boilerplate code skills to IdWeb, and add Aspire DevApp demonstrating Blazor authentication components AzureAD/microsoft-identity-web#3721
• Bump MSAL to 4.83.1 and re-enable Managed Identity CAE tests by @​Copilot in Bump MSAL to 4.83.1 and re-enable Managed Identity CAE tests AzureAD/microsoft-identity-web#3746
• Bump Abstractions to 11.2 by @​bgavrilMS in Bump Abstractions to 11.2 AzureAD/microsoft-identity-web#3749
• Update documentation to reference Blazor helpers from Microsoft.Identity.Web package by @​Copilot in Update documentation to reference Blazor helpers from Microsoft.Identity.Web package AzureAD/microsoft-identity-web#3723

Full Changelog: AzureAD/microsoft-identity-web@4.5.0...4.6.0

4.5.0

New features

• Add support for certificate store lookup by subject name. See #​3742.

Dependencies updates

• Bump minimatch in /tests/DevApps/SidecarAdapter/typescript. See #​3739.
• Bump rollup from 4.52.3 to 4.59.0 in /tests/DevApps/SidecarAdapter/typescript. See #​3740.

4.4.0

New features

• Add AOT-compatible web API authentication for .NET 10+. See #​3705 and #​3664.
• Propagate long-running web API session key back to callers in user token acquisition. See #​3728.
• Add OBO event initialization for OBO APIs. See #​3724.
• Add support for calling WithClientClaims flow for token acquisition. See #​3623.
• Add OnBeforeTokenAcquisitionForOnBehalfOf event. See #​3680.

Bug fixes

• Throw InvalidOperationException with actionable message when a custom credential is not registered. See #​3626.
• Fix event firing for InvokeOnBeforeTokenAcquisitionForOnBehalfOfAsync. See #​3717.
• Update OnBeforeTokenAcquisitionForOnBehalfOf to construct ClaimsPrincipal from token. See #​3714.
• Add a retry counter for acquire token and updated tests with a fake secret. See #​3682.
• Fix OBO user error handling. See #​3712.
• Fix override merging for app token (and others). See #​3644.
• Fix certificate reload logic to only trigger on certificate-specific errors. See #​3653.
• Update ROPC flow CCA to pass SendX5C to MSAL. See #​3671.

Dependencies updates

• Bump qs in /tests/DevApps/SidecarAdapter/typescript. See #​3725.
• Downgrade Microsoft.Extensions.Configuration.Binder to 2.1.0 on .NET Framework. See #​3730.
• Update .NET SDK to 10.0.103 to address DOTNET-Security-10.0 vulnerability. See #​3726.
• Upgrade to Microsoft.Identity.Abstractions 11 for AoT compatibility. See #​3699.
• Update to MSAL 4.81.0. See #​3665.

Documentation

• Add documentation for auto-generated session key for long-running OBO session. See #​3729.
• Improve the Aspire doc article and skills. See #​3695.
• Add an article and agent skill to add Entra ID to an Aspire app. See #​3689.
• Fix misleading comment in CertificatelessOptions.ManagedIdentityClientId. See #​3667.
• Add Copilot explore tool functionality. See #​3694.

Fundamentals

• Remove unnecessary warning suppression. See #​3715.
• Migrate labs to Lab.API 2.x (first pass). See #​3710.
• Update Sidecar E2E test constants. See #​3693.
• Fix intermittent failures in CertificatesObserverTests. See #​3687.
• Add validation baseline exclusions. See #​3684.
• Add dSTS integration tests. See #​3677.
• Fix FIC test. See #​3663.
• Update IdentityWeb version, build logic, and validation. See #​3659.

New Contributors

• @​XiaoxinMS2 made their first contribution in Add dSTS integration tests AzureAD/microsoft-identity-web#3677
• @​RyAuld made their first contribution in Fix intermittent failures in CertificatesObserverTests AzureAD/microsoft-identity-web#3687
• @​agocke made their first contribution in Update AOT annotations AzureAD/microsoft-identity-web#3664
• @​MZOLN made their first contribution in Remove unnecessary flag switch that causes official build to break. AzureAD/microsoft-identity-web#3700
• @​christian-posta made their first contribution in Fix override merging for app token (and others) AzureAD/microsoft-identity-web#3644
• @​4gust made their first contribution in Added retry counter for acquire token and modified added a test with … AzureAD/microsoft-identity-web#3682
• @​rayluo made their first contribution in Update OnBeforeTokenAcquisitionForOnBehalfOf event to construct ClaimsPricipal from token AzureAD/microsoft-identity-web#3714

4.4.0-preview.1

New features

• Add AOT-compatible web API authentication for .NET 10+. See #​3705 and #​3664.
• Propagate long-running web API session key back to callers in user token acquisition. See #​3728.
• Add OBO event initialization for OBO APIs. See #​3724.
• Add support for calling WithClientClaims flow for token acquisition. See #​3623.
• Add OnBeforeTokenAcquisitionForOnBehalfOf event. See #​3680.

Bug fixes

• Throw InvalidOperationException with actionable message when a custom credential is not registered. See #​3626.
• Fix event firing for InvokeOnBeforeTokenAcquisitionForOnBehalfOfAsync. See #​3717.
• Update OnBeforeTokenAcquisitionForOnBehalfOf to construct ClaimsPrincipal from token. See #​3714.
• Add a retry counter for acquire token and updated tests with a fake secret. See #​3682.
• Fix OBO user error handling. See #​3712.
• Fix override merging for app token (and others). See #​3644.
• Fix certificate reload logic to only trigger on certificate-specific errors. See #​3653.
• Update ROPC flow CCA to pass SendX5C to MSAL. See #​3671.

Dependencies updates

• Bump qs in /tests/DevApps/SidecarAdapter/typescript. See #​3725.
• Downgrade Microsoft.Extensions.Configuration.Binder to 2.1.0 on .NET Framework. See #​3730.
• Update .NET SDK to 10.0.103 to address DOTNET-Security-10.0 vulnerability. See #​3726.
• Upgrade to Microsoft.Identity.Abstractions 11 for AoT compatibility. See #​3699.
• Update to MSAL 4.81.0. See #​3665.

Documentation

• Add documentation for auto-generated session key for long-running OBO session. See #​3729.
• Improve the Aspire doc article and skills. See #​3695.
• Add an article and agent skill to add Entra ID to an Aspire app. See #​3689.
• Fix misleading comment in CertificatelessOptions.ManagedIdentityClientId. See #​3667.
• Add Copilot explore tool functionality. See #​3694.

Fundamentals

• Remove unnecessary warning suppression. See #​3715.
• Migrate labs to Lab.API 2.x (first pass). See #​3710.
• Update Sidecar E2E test constants. See #​3693.
• Fix intermittent failures in CertificatesObserverTests. See #​3687.
• Add validation baseline exclusions. See #​3684.
• Add dSTS integration tests. See #​3677.
• Fix FIC test. See #​3663.
• Update IdentityWeb version, build logic, and validation. See #​3659.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.3.0 to 18.4.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.4.0

What's Changed

• Add LoongArch64 support by @​stdmnpkg in Add LoongArch64 support microsoft/vstest#15359

• Refactor Condition evaluation by @​Youssef1313 in Refactor Condition evaluation microsoft/vstest#15357

• Adding info on extensions points part 1 by @​nohwnd in Adding info on extensions points part 1 microsoft/vstest#15360

• Add option to ask for uploading code QL before the standard window ends by @​nohwnd in Add option to ask for uploading code QL before the standard window ends microsoft/vstest#15373

• Update runtime versions by @​nohwnd in Update runtime versions microsoft/vstest#15372

• Fix .NET 10 regression for traits by @​Youssef1313 in Fix .NET 10 regression for traits microsoft/vstest#15370

• Update target frameworks to net10.0 and net11.0 by @​dotnet-maestro[bot] in Update target frameworks to net10.0 and net11.0 microsoft/vstest#15349

• Fix names in pipeline matrix so we don't have to align them by @​nohwnd in Fix names in pipeline matrix so we don't have to align them microsoft/vstest#15365

• Update SECURITY.md by @​Youssef1313 in Update SECURITY.md microsoft/vstest#15342

New Contributors

• @​stdmnpkg made their first contribution in Add LoongArch64 support microsoft/vstest#15359

Full Changelog: microsoft/vstest@v18.3.0...v18.4.0

Commits viewable in compare view.

Updated XtremeIdiots.Portal.Integrations.Servers.Api.Client.V1 from 2.1.142 to 2.1.155.

Release notes

Sourced from XtremeIdiots.Portal.Integrations.Servers.Api.Client.V1's releases.

2.1.155

What's Changed

• chore(deps): update hashicorp/azurerm requirement from ~> 4.68.0 to ~> 4.69.0 in /terraform in the terraform group by @​dependabot[bot] in chore(deps): update hashicorp/azurerm requirement from ~> 4.68.0 to ~> 4.69.0 in /terraform in the terraform group portal-servers-integration#958

Full Changelog: frasermolyneux/portal-servers-integration@v2.1.153...v2.1.155

2.1.153

Full Changelog: frasermolyneux/portal-servers-integration@v2.1.152...v2.1.153

2.1.152

Full Changelog: frasermolyneux/portal-servers-integration@v2.1.151...v2.1.152

2.1.151

Full Changelog: frasermolyneux/portal-servers-integration@v2.1.150...v2.1.151

2.1.150

Full Changelog: frasermolyneux/portal-servers-integration@v2.1.149...v2.1.150

2.1.149

Full Changelog: frasermolyneux/portal-servers-integration@v2.1.148...v2.1.149

2.1.148

Full Changelog: frasermolyneux/portal-servers-integration@v2.1.147...v2.1.148

2.1.147

Full Changelog: frasermolyneux/portal-servers-integration@v2.1.146...v2.1.147

2.1.146

What's Changed

• chore(deps): update hashicorp/azurerm requirement from ~> 4.67.0 to ~> 4.68.0 in /terraform in the terraform group by @​dependabot[bot] in chore(deps): update hashicorp/azurerm requirement from ~> 4.67.0 to ~> 4.68.0 in /terraform in the terraform group portal-servers-integration#952

Full Changelog: frasermolyneux/portal-servers-integration@v2.1.144...v2.1.146

2.1.144

Full Changelog: frasermolyneux/portal-servers-integration@v2.1.143...v2.1.144

2.1.143

Full Changelog: frasermolyneux/portal-servers-integration@v2.1.142...v2.1.143

Commits viewable in compare view.

Updated XtremeIdiots.Portal.Repository.Abstractions.V1 from 2.1.198 to 2.1.209.

Release notes

Sourced from XtremeIdiots.Portal.Repository.Abstractions.V1's releases.

2.1.209

What's Changed

• chore(deps): update hashicorp/azurerm requirement from ~> 4.68.0 to ~> 4.69.0 in /terraform in the terraform group by @​dependabot[bot] in chore(deps): update hashicorp/azurerm requirement from ~> 4.68.0 to ~> 4.69.0 in /terraform in the terraform group portal-repository#792

Full Changelog: frasermolyneux/portal-repository@v2.1.207...v2.1.209

2.1.207

Full Changelog: frasermolyneux/portal-repository@v2.1.206...v2.1.207

2.1.206

Full Changelog: frasermolyneux/portal-repository@v2.1.205...v2.1.206

2.1.205

Full Changelog: frasermolyneux/portal-repository@v2.1.204...v2.1.205

2.1.204

Full Changelog: frasermolyneux/portal-repository@v2.1.203...v2.1.204

2.1.203

Full Changelog: frasermolyneux/portal-repository@v2.1.202...v2.1.203

2.1.202

Full Changelog: frasermolyneux/portal-repository@v2.1.201...v2.1.202

2.1.201

Full Changelog: frasermolyneux/portal-repository@v2.1.200...v2.1.201

2.1.200

Full Changelog: frasermolyneux/portal-repository@v2.1.198...v2.1.200

Commits viewable in compare view.

Updated XtremeIdiots.Portal.Repository.Abstractions.V1 from 2.1.201 to 2.1.209.

Release notes

Sourced from XtremeIdiots.Portal.Repository.Abstractions.V1's releases.

2.1.209

What's Changed

• chore(deps): update hashicorp/azurerm requirement from ~> 4.68.0 to ~> 4.69.0 in /terraform in the terraform group by @​dependabot[bot] in chore(deps): update hashicorp/azurerm requirement from ~> 4.68.0 to ~> 4.69.0 in /terraform in the terraform group portal-repository#792

Full Changelog: frasermolyneux/portal-repository@v2.1.207...v2.1.209

2.1.207

Full Changelog: frasermolyneux/portal-repository@v2.1.206...v2.1.207

2.1.206

Full Changelog: frasermolyneux/portal-repository@v2.1.205...v2.1.206

2.1.205

Full Changelog: frasermolyneux/portal-repository@v2.1.204...v2.1.205

2.1.204

Full Changelog: frasermolyneux/portal-repository@v2.1.203...v2.1.204

2.1.203

Full Changelog: frasermolyneux/portal-repository@v2.1.202...v2.1.203

2.1.202

Full Changelog: frasermolyneux/portal-repository@v2.1.201...v2.1.202

Commits viewable in compare view.

Updated XtremeIdiots.Portal.Repository.Api.Client.V1 from 2.1.201 to 2.1.209.

Release notes

Sourced from XtremeIdiots.Portal.Repository.Api.Client.V1's releases.

2.1.209

What's Changed

• chore(deps): update hashicorp/azurerm requirement from ~> 4.68.0 to ~> 4.69.0 in /terraform in the terraform group by @​dependabot[bot] in chore(deps): update hashicorp/azurerm requirement from ~> 4.68.0 to ~> 4.69.0 in /terraform in the terraform group portal-repository#792

Full Changelog: frasermolyneux/portal-repository@v2.1.207...v2.1.209

2.1.207

Full Changelog: frasermolyneux/portal-repository@v2.1.206...v2.1.207

2.1.206

Full Changelog: frasermolyneux/portal-repository@v2.1.205...v2.1.206

2.1.205

Full Changelog: frasermolyneux/portal-repository@v2.1.204...v2.1.205

2.1.204

Full Changelog: frasermolyneux/portal-repository@v2.1.203...v2.1.204

2.1.203

Full Changelog: frasermolyneux/portal-repository@v2.1.202...v2.1.203

2.1.202

Full Changelog: frasermolyneux/portal-repository@v2.1.201...v2.1.202

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will clo...

Description has been truncated

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 17 package(s) with unknown licenses.

See the Details below.

License Issues

src/XtremeIdiots.Portal.Forums.Integration/XtremeIdiots.Portal.Forums.Integration.csproj

Package	Version	License	Issue Type
Microsoft.Extensions.Configuration.Abstractions	10.0.7	Null	Unknown License
Microsoft.Extensions.DependencyInjection.Abstractions	10.0.7	Null	Unknown License
Microsoft.Extensions.Logging.Abstractions	10.0.7	Null	Unknown License
XtremeIdiots.Portal.Repository.Abstractions.V1	2.1.209	Null	Unknown License

src/XtremeIdiots.Portal.Sync.App.Tests/XtremeIdiots.Portal.Sync.App.Tests.csproj

Package	Version	License	Issue Type
coverlet.collector	10.0.0	Null	Unknown License

src/XtremeIdiots.Portal.Sync.App/XtremeIdiots.Portal.Sync.App.csproj

Package	Version	License	Issue Type
Azure.Identity	1.21.0	Null	Unknown License
FluentFTP	54.1.1	Null	Unknown License
Microsoft.ApplicationInsights	3.1.0	Null	Unknown License
Microsoft.ApplicationInsights.WorkerService	3.1.0	Null	Unknown License
Microsoft.Azure.Functions.Worker	2.52.0	Null	Unknown License
Microsoft.Extensions.Caching.Memory	10.0.7	Null	Unknown License
Microsoft.Extensions.Configuration.UserSecrets	10.0.7	Null	Unknown License
Microsoft.Extensions.Diagnostics.HealthChecks	10.0.7	Null	Unknown License
Microsoft.Identity.Web	4.8.0	Null	Unknown License
XtremeIdiots.Portal.Integrations.Servers.Api.Client.V1	2.1.155	Null	Unknown License
XtremeIdiots.Portal.Repository.Abstractions.V1	2.1.209	Null	Unknown License
XtremeIdiots.Portal.Repository.Api.Client.V1	2.1.209	Null	Unknown License

OpenSSF Scorecard

Scorecard details

Package	Version	Score	Details
nuget/Microsoft.Extensions.Configuration.Abstractions	10.0.7	Unknown	Unknown
nuget/Microsoft.Extensions.DependencyInjection.Abstractions	10.0.7	Unknown	Unknown
nuget/Microsoft.Extensions.Logging.Abstractions	10.0.7	Unknown	Unknown
nuget/XtremeIdiots.Portal.Repository.Abstractions.V1	2.1.209	Unknown	Unknown
nuget/Microsoft.NET.Test.Sdk	18.4.0	🟢 4.4	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10 Code-Review 🟢 7 Found 19/27 approved changesets -- score normalized to 7 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Packaging ⚠️ -1 packaging workflow not detected Security-Policy 🟢 10 security policy file detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Binary-Artifacts ⚠️ 0 binaries present in source code Signed-Releases ⚠️ -1 no releases found Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Fuzzing ⚠️ 0 project is not fuzzed Branch-Protection ⚠️ 2 branch protection is not maximal on development and all release branches SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
nuget/coverlet.collector	10.0.0	🟢 5	Details Check Score Reason Code-Review ⚠️ 0 Found 1/26 approved changesets -- score normalized to 0 Maintained 🟢 10 30 commit(s) and 24 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Token-Permissions 🟢 9 detected GitHub workflow tokens with excessive permissions CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Binary-Artifacts 🟢 7 binaries present in source code Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Security-Policy ⚠️ 0 security policy file not detected SAST 🟢 9 SAST tool detected but not run on all commits
nuget/Azure.Identity	1.21.0	Unknown	Unknown
nuget/FluentFTP	54.1.1	Unknown	Unknown
nuget/Microsoft.ApplicationInsights	3.1.0	Unknown	Unknown
nuget/Microsoft.ApplicationInsights.WorkerService	3.1.0	Unknown	Unknown
nuget/Microsoft.Azure.AppConfiguration.Functions.Worker	8.5.0	Unknown	Unknown
nuget/Microsoft.Azure.Functions.Worker	2.52.0	Unknown	Unknown
nuget/Microsoft.Extensions.Caching.Memory	10.0.7	Unknown	Unknown
nuget/Microsoft.Extensions.Configuration.AzureAppConfiguration	8.5.0	Unknown	Unknown
nuget/Microsoft.Extensions.Configuration.UserSecrets	10.0.7	Unknown	Unknown
nuget/Microsoft.Extensions.Diagnostics.HealthChecks	10.0.7	Unknown	Unknown
nuget/Microsoft.Identity.Web	4.8.0	Unknown	Unknown
nuget/XtremeIdiots.Portal.Integrations.Servers.Api.Client.V1	2.1.155	Unknown	Unknown
nuget/XtremeIdiots.Portal.Repository.Abstractions.V1	2.1.209	Unknown	Unknown
nuget/XtremeIdiots.Portal.Repository.Api.Client.V1	2.1.209	Unknown	Unknown

Scanned Files

• src/XtremeIdiots.Portal.Forums.Integration/XtremeIdiots.Portal.Forums.Integration.csproj
• src/XtremeIdiots.Portal.Sync.App.Tests/XtremeIdiots.Portal.Sync.App.Tests.csproj
• src/XtremeIdiots.Portal.Sync.App/XtremeIdiots.Portal.Sync.App.csproj

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud