Bumps the notsecurity group with 25 updates:

Package	From	To
Microsoft.Identity.Web.DownstreamApi	`3.3.0`	`3.3.1`
Microsoft.Extensions.Logging.Abstractions	`2.1.0`	`9.0.0-rc.2.24473.5`
Microsoft.IdentityModel.JsonWebTokens	`8.1.2`	`8.2.0`
Microsoft.IdentityModel.Logging	`8.1.2`	`8.2.0`
System.Text.Json	`8.0.5`	`9.0.0-rc.2.24473.5`
System.Text.Encodings.Web	`6.0.0`	`9.0.0-rc.2.24473.5`
Microsoft.AspNetCore.DataProtection	`2.1.0`	`9.0.0-rc.2.24474.3`
System.Security.Cryptography.Xml	`4.7.1`	`9.0.0-rc.2.24473.5`
Microsoft.Extensions.Caching.Memory	`2.1.0`	`9.0.0-rc.2.24473.5`
Microsoft.Extensions.Logging	`2.1.0`	`9.0.0-rc.2.24473.5`
Microsoft.Extensions.DependencyInjection	`2.1.0`	`9.0.0-rc.2.24473.5`
System.Formats.Asn1	`6.0.1`	`9.0.0-rc.2.24473.5`
System.Security.Cryptography.Pkcs	`7.0.2`	`9.0.0-rc.2.24473.5`
Microsoft.Extensions.Configuration.Binder	`2.2.4`	`9.0.0-rc.2.24473.5`
Microsoft.Extensions.Configuration.EnvironmentVariables	`2.2.4`	`6.0.0`
Microsoft.Extensions.Configuration	`3.1.24`	`6.0.0`
Microsoft.Extensions.Options.ConfigurationExtensions	`2.1.0`	`9.0.0-rc.2.24473.5`
Microsoft.IdentityModel.LoggingExtensions	`8.1.2`	`8.2.0`
System.IdentityModel.Tokens.Jwt	`8.1.2`	`8.2.0`
Microsoft.IdentityModel.Protocols.OpenIdConnect	`8.1.2`	`8.2.0`
Microsoft.Identity.Web.MicrosoftGraph	`3.3.0`	`3.3.1`
Microsoft.Identity.Web	`3.3.0`	`3.3.1`
Microsoft.Extensions.Configuration.Json	`3.1.0`	`6.0.0`
Microsoft.Extensions.Hosting	`2.1.1`	`6.0.0`
Microsoft.IdentityModel.Validators	`8.1.2`	`8.2.0`

Updates Microsoft.Identity.Web.DownstreamApi from 3.3.0 to 3.3.1

Release notes

Sourced from Microsoft.Identity.Web.DownstreamApi's releases.

3.3.1

Updated to Microsoft.IdentityModel.* 8.2.0

Supportability

Added JSON schema support for Microsoft.Identity.Web configuration. This allows for schema validation in the appsettings.json, improving configuration accuracy and developer experience. To use it, add the following at the top of your appsettings.json: "$schema": "https://github.com/AzureAD/microsoft-identity-web/blob/master/JsonSchemas/microsoft-identity-web.json" This update enhances the configuration process by providing clear structure and validation for settings used in Microsoft.Identity.Web. See PR #3119 for details.

Fundamentals

Fix a flaky test in the L1L2Cache tests. See PR #3122 for details.

What's Changed

Update changelog.md to fix release 3.2.2 which had a breaking change by @jmprieur in AzureAD/microsoft-identity-web#3116

Bump the notsecurity group with 19 updates by @dependabot in AzureAD/microsoft-identity-web#3115

Adding a json schema for Microsoft.Identity.Web configuration by @jmprieur in AzureAD/microsoft-identity-web#3119

Fixed flaky tests by @alexholub113 in AzureAD/microsoft-identity-web#3122

Update changelog.md 3.3.1 by @jennyf19 in AzureAD/microsoft-identity-web#3123

Add Ask Mode Change Template by @kellyyangsong in AzureAD/microsoft-identity-web#3110

New Contributors

@alexholub113 made their first contribution in AzureAD/microsoft-identity-web#3122

Full Changelog: https://github.com/AzureAD/microsoft-identity-web/compare/3.3.0...3.3.1

Changelog

Sourced from Microsoft.Identity.Web.DownstreamApi's changelog.

3.3.1

Updated to Microsoft.IdentityModel.* 8.2.0

Supportability

Added JSON schema support for Microsoft.Identity.Web configuration. This allows for schema validation in the appsettings.json, improving configuration accuracy and developer experience. To use it, add the following at the top of your appsettings.json: "$schema": "https://github.com/AzureAD/microsoft-identity-web/blob/master/JsonSchemas/microsoft-identity-web.json" This update enhances the configuration process by providing clear structure and validation for settings used in Microsoft.Identity.Web. See PR #3119 for details.

Fundamentals

Fix a flaky test in the L1L2Cache tests. See PR #3122 for details.

Commits

3dc8286 Add Ask Mode Change Template (#3110)
7a871b9 Update changelog.md 3.3.1 (#3123)
45beafc Fixed flaky tests (#3122)
8dba2e8 Adding a json schema for Microsoft.Identity.Web configuration (#3119)
f35f7d8 Bump the notsecurity group with 19 updates (#3115)
0106ea4 Update changelog.md to fix release 3.2.2 which had a breaking change (#3116)
See full diff in compare view

Updates Microsoft.Extensions.Logging.Abstractions from 2.1.0 to 9.0.0-rc.2.24473.5

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

.NET 9.0 RC 2

Release

.NET 9.0 RC 1

Release

.NET 9.0 Preview 7

Release

.NET 9.0 Preview 6

Release

.NET 9.0 Preview 5

Release

.NET 9.0 Preview 4

Release

.NET 9.0 Preview 3

Release

.NET 9.0 Preview 2

[Release[(https://github.com/dotnet/core/releases/tag/v9.0.0-preview.2)

.NET 9 Preview 1

Release

.NET 8.0.10

Release

.NET 8.0.8

Release

.NET 8.0.7

Release

.NET 8.0.6

Release

.NET 8.0.5

Release

What's Changed

[release/8.0-staging] Fix AsyncVoidMethodBuilder race condition around SynchronizationContext by @github-actions in dotnet/runtime#99640

[release/8.0-staging] Always keep global symbols on ApplePlatforms by @github-actions in dotnet/runtime#99650

[release/8.0-staging] Delete Decrypt_Pkcs1_ErrorsForInvalidPadding by @github-actions in dotnet/runtime#99653

[8.0] Rename MSBuild property MicrosoftNativeQuicMsQuicVersion -> MicrosoftNativeQuicMsQuicSchannelVersion by @carlossanlop in dotnet/runtime#99714

[release/8.0] Fixing SignedXml.CheckSignature for enveloped signature with #xpointer(/) Reference by @bartonjs in dotnet/runtime#99651

[release/8.0-staging] disable optimizations for PopCount by @github-actions in dotnet/runtime#99832

[release/8.0-staging] Handle NativeOverlapped* coming from both the Windows or Portable thread pool in NativeRuntimeEventSource by @github-actions in dotnet/runtime#99656

... (truncated)

Commits

See full diff in compare view

Updates Microsoft.IdentityModel.JsonWebTokens from 8.1.2 to 8.2.0

Release notes

Sourced from Microsoft.IdentityModel.JsonWebTokens's releases.

8.2.0

Fundamentals

Update System.Text.Json to 8.0.5 CVE-2024-43485. See 2892.

Using FixedTimeEquals in NETCore targets. See 2857.

Updated .NET 9 to RC 2 2898.

Adds ability to create token without kid 2968

Enables code coverage in PRs 2946

Various test improvements:

#2953

#2955

#2951

#2952

#2947

Work related to redesign of IdentityModel's token validation logic #2711

Validates Audience for SAML2TokenHandler with New Model 2863

Improvements to AudienceValidation 2902

Added properties to ValidationResult 2923

Implements Audience and Lifetime validations in SamlSecurityTokenHandler 2925

Implements Issuer validation in SamlSecurityTokenHandler 2948

What's Changed

update to next version by @jennyf19 in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2890

Use FixedTimeEquals in NETCore targets by @westin-m in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2857

Update System.Text.Json to 8.0.5 CVE-2024-43485 by @msbw2 in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2892

Update .NET 9 to RC 2 by @msbw2 in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2898

Validate Audience for SAML2TokenHandler with New Model by @FuPingFranco in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2863

Regression tests: Issuer by @iNinja in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2868

Mark Wilson APIs as Shipped by @westin-m in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2903

Add Tests for Lifetime Validation Using New Validation Model For SAML2 by @FuPingFranco in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2906

Suggested changes to AudienceValidation by @brentschmaltz in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2902

Extensibility tests: Audience by @iNinja in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2861

Added properties to ValidationResult without throwing by @iNinja in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2923

Extensibility tests: Lifetime by @iNinja in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2867

Regression tests: Issuer signing key by @iNinja in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2927

Do not serialize CaseSensitiveClaimsIdentity.SecurityToken. by @pmaytak in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2896

Fix typo by @westin-m in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2894

Implement and Test Audience and Lifetime validations in SamlSecurityTokenHandler with New Validation Model by @FuPingFranco in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2925

Fix Flaky Tests: NameAndRoleClaimDelegates and RoleClaims by @kellyyangsong in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2873

Regression tests: Signature by @iNinja in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2930

Validate Issuer Using New Validation Model in Saml2SecurityTokenHandler by @FuPingFranco in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2929

Fix builds on macOS / Linux using the build.sh script by @filipnavara in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2937

Regression tests: Algorithm by @iNinja in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2934

Regression tests: Token Type by @iNinja in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2932

Regression tests: Token Replay by @iNinja in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2931

Fix DevEx and IDDP builds such that when building internally, use an internal Nuget feed instead of nuget.org by @kellyyangsong in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2936

Restore PopKeyResolvingTests.GetPopKeysFromJkuAsync by @kellyyangsong in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2947

Restore skipped test: ReferenceCountingTest_MultiThreaded by @kellyyangsong in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2952

Restore EnsureAotCompatibility test by @kellyyangsong in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2951

... (truncated)

Changelog

Sourced from Microsoft.IdentityModel.JsonWebTokens's changelog.

8.2.0

Fundamentals

Update System.Text.Json to 8.0.5 CVE-2024-43485. See 2892.

Using FixedTimeEquals in NETCore targets. See 2857.

Updated .NET 9 to RC 2 2898.

Adds ability to create token without kid 2968

Enables code coverage in PRs 2946

Various test improvements:

#2953

#2955

#2951

#2952

#2947

Work related to redesign of IdentityModel's token validation logic #2711

Validates Audience for SAML2TokenHandler with New Model 2863

Improvements to AudienceValidation 2902

Added properties to ValidationResult 2923

Implements Audience and Lifetime validations in SamlSecurityTokenHandler 2925

Implements Issuer validation in SamlSecurityTokenHandler 2948

Commits

5471249 SAML new model validation: Signature (#2958)
ba49516 Add Ask Mode Change Template (#2941)
e43dc2d Adds changelog for 8.2.0 (#2971)
a1d55cb Add ability to create token without kid (#2968)
671e2a2 Handle the case where the event received has no arguments as passing null to ...
4b0cfc2 SAML new model validation: Issuer (#2948)
0b72d1f Enable coverage report in PRs (#2946)
2477877 Regression tests: JWE Decryption (#2940)
38ddcdc restore CacheOverflowTestMultithreaded as it took 67 ms and is no longer larg...
d7d78fa restore CacheOverflowTestSequential - takes 1.5s (#2955)
Additional commits viewable in compare view

Updates Microsoft.IdentityModel.Logging from 8.1.2 to 8.2.0

Release notes

Sourced from Microsoft.IdentityModel.Logging's releases.

8.2.0

Fundamentals

Update System.Text.Json to 8.0.5 CVE-2024-43485. See 2892.

Using FixedTimeEquals in NETCore targets. See 2857.

Updated .NET 9 to RC 2 2898.

Adds ability to create token without kid 2968

Enables code coverage in PRs 2946

Various test improvements:

#2953

#2955

#2951

#2952

#2947

Work related to redesign of IdentityModel's token validation logic #2711

Validates Audience for SAML2TokenHandler with New Model 2863

Improvements to AudienceValidation 2902

Added properties to ValidationResult 2923

Implements Audience and Lifetime validations in SamlSecurityTokenHandler 2925

Implements Issuer validation in SamlSecurityTokenHandler 2948

What's Changed

update to next version by @jennyf19 in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2890

Use FixedTimeEquals in NETCore targets by @westin-m in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2857

Update System.Text.Json to 8.0.5 CVE-2024-43485 by @msbw2 in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2892

Update .NET 9 to RC 2 by @msbw2 in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2898

Validate Audience for SAML2TokenHandler with New Model by @FuPingFranco in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2863

Regression tests: Issuer by @iNinja in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2868

Mark Wilson APIs as Shipped by @westin-m in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2903

Add Tests for Lifetime Validation Using New Validation Model For SAML2 by @FuPingFranco in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2906

Suggested changes to AudienceValidation by @brentschmaltz in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2902

Extensibility tests: Audience by @iNinja in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2861

Added properties to ValidationResult without throwing by @iNinja in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2923

Extensibility tests: Lifetime by @iNinja in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2867

Regression tests: Issuer signing key by @iNinja in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2927

Do not serialize CaseSensitiveClaimsIdentity.SecurityToken. by @pmaytak in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2896

Fix typo by @westin-m in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2894

Implement and Test Audience and Lifetime validations in SamlSecurityTokenHandler with New Validation Model by @FuPingFranco in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2925

Fix Flaky Tests: NameAndRoleClaimDelegates and RoleClaims by @kellyyangsong in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2873

Regression tests: Signature by @iNinja in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2930

Validate Issuer Using New Validation Model in Saml2SecurityTokenHandler by @FuPingFranco in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2929

Fix builds on macOS / Linux using the build.sh script by @filipnavara in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2937

Regression tests: Algorithm by @iNinja in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2934

Regression tests: Token Type by @iNinja in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2932

Regression tests: Token Replay by @iNinja in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2931

Fix DevEx and IDDP builds such that when building internally, use an internal Nuget feed instead of nuget.org by @kellyyangsong in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2936

Restore PopKeyResolvingTests.GetPopKeysFromJkuAsync by @kellyyangsong in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2947

Restore skipped test: ReferenceCountingTest_MultiThreaded by @kellyyangsong in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2952

Restore EnsureAotCompatibility test by @kellyyangsong in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2951

... (truncated)

Changelog

Sourced from Microsoft.IdentityModel.Logging's changelog.

8.2.0

Fundamentals

Update System.Text.Json to 8.0.5 CVE-2024-43485. See 2892.

Using FixedTimeEquals in NETCore targets. See 2857.

Updated .NET 9 to RC 2 2898.

Adds ability to create token without kid 2968

Enables code coverage in PRs 2946

Various test improvements:

#2953

#2955

#2951

#2952

#2947

Work related to redesign of IdentityModel's token validation logic #2711

Validates Audience for SAML2TokenHandler with New Model 2863

Improvements to AudienceValidation 2902

Added properties to ValidationResult 2923

Implements Audience and Lifetime validations in SamlSecurityTokenHandler 2925

Implements Issuer validation in SamlSecurityTokenHandler 2948

Commits

5471249 SAML new model validation: Signature (#2958)
ba49516 Add Ask Mode Change Template (#2941)
e43dc2d Adds changelog for 8.2.0 (#2971)
a1d55cb Add ability to create token without kid (#2968)
671e2a2 Handle the case where the event received has no arguments as passing null to ...
4b0cfc2 SAML new model validation: Issuer (#2948)
0b72d1f Enable coverage report in PRs (#2946)
2477877 Regression tests: JWE Decryption (#2940)
38ddcdc restore CacheOverflowTestMultithreaded as it took 67 ms and is no longer larg...
d7d78fa restore CacheOverflowTestSequential - takes 1.5s (#2955)
Additional commits viewable in compare view

Updates System.Text.Json from 8.0.5 to 9.0.0-rc.2.24473.5

Release notes

Sourced from System.Text.Json's releases.

.NET 9.0 RC 2

Release

.NET 9.0 RC 1

Release

.NET 9.0 Preview 7

Release

.NET 9.0 Preview 6

Release

.NET 9.0 Preview 5

Release

.NET 9.0 Preview 4

Release

.NET 9.0 Preview 3

Release

.NET 9.0 Preview 2

[Release[(https://github.com/dotnet/core/releases/tag/v9.0.0-preview.2)

.NET 9 Preview 1

Release

.NET 8.0.10

Release

.NET 8.0.8

Release

.NET 8.0.7

Release

.NET 8.0.6

Release

Commits

990ebf5 Merge commit '200d05e41fc2212ff8c98ed79ebe9043bfed58aa'
200d05e [release/9.0-rc2] dont try to capture threadId for NativeAOT (#108091)
002e894 Merge commit '55c018f4580a149514e5b28b820da44ffd3d24e8'
55c018f [release/9.0-rc2] [browser] Fix custom icu fingerprinting. (#108025)
327e087 Merge commit 'fe77f43b7dd624028c3d210e2eecd9265566d2dc'
fe77f43 Fix Random.GetItems observably breaking change in produced sequence (#108018)
2dc643f Merge commit '25e7a899b0640981c387f51f2121cf754925365f'
25e7a89 Update dependencies from https://github.com/dotnet/emsdk build 20240918.8 (#1...
8d6a573 Update configure.h.in (#107955)
0cd7306 Update dependencies from https://github.com/dotnet/icu build 20240917.2 (#107...
Additional commits viewable in compare view

Updates System.Text.Encodings.Web from 6.0.0 to 9.0.0-rc.2.24473.5

Release notes

Sourced from System.Text.Encodings.Web's releases.

.NET 9.0 RC 2

Release

.NET 9.0 RC 1

Release

.NET 9.0 Preview 7

Release

.NET 9.0 Preview 6

Release

.NET 9.0 Preview 5

Release

.NET 9.0 Preview 4

Release

.NET 9.0 Preview 3

Release

.NET 9.0 Preview 2

[Release[(https://github.com/dotnet/core/releases/tag/v9.0.0-preview.2)

.NET 9 Preview 1

Release

.NET 8.0.10

Release

.NET 8.0.8

Release

.NET 8.0.7

Release

.NET 8.0.6

Release

.NET 8.0.5

Release

What's Changed

[release/8.0-staging] Fix AsyncVoidMethodBuilder race condition around SynchronizationContext by @github-actions in dotnet/runtime#99640

[release/8.0-staging] Always keep global symbols on ApplePlatforms by @github-actions in dotnet/runtime#99650

[release/8.0-staging] Delete Decrypt_Pkcs1_ErrorsForInvalidPadding by @github-actions in dotnet/runtime#99653

[8.0] Rename MSBuild property MicrosoftNativeQuicMsQuicVersion -> MicrosoftNativeQuicMsQuicSchannelVersion by @carlossanlop in dotnet/runtime#99714

[release/8.0] Fixing SignedXml.CheckSignature for enveloped signature with #xpointer(/) Reference by @bartonjs in dotnet/runtime#99651

[release/8.0-staging] disable optimizations for PopCount by @github-actions in dotnet/runtime#99832

[release/8.0-staging] Handle NativeOverlapped* coming from both the Windows or Portable thread pool in NativeRuntimeEventSource by @github-actions in dotnet/runtime#99656

... (truncated)

Commits

990ebf5 Merge commit '200d05e41fc2212ff8c98ed79ebe9043bfed58aa'
200d05e [release/9.0-rc2] dont try to capture threadId for NativeAOT (#108091)
002e894 Merge commit '55c018f4580a149514e5b28b820da44ffd3d24e8'
55c018f [release/9.0-rc2] [browser] Fix custom icu fingerprinting. (#108025)
327e087 Merge commit 'fe77f43b7dd624028c3d210e2eecd9265566d2dc'
fe77f43 Fix Random.GetItems observably breaking change in produced sequence (#108018)
2dc643f Merge commit '25e7a899b0640981c387f51f2121cf754925365f'
25e7a89 Update dependencies from https://github.com/dotnet/emsdk build 20240918.8 (#1...
8d6a573 Update configure.h.in (#107955)
0cd7306 Update dependencies from https://github.com/dotnet/icu build 20240917.2 (#107...
Additional commits viewable in compare view

Updates Microsoft.AspNetCore.DataProtection from 2.1.0 to 9.0.0-rc.2.24474.3

Release notes

Sourced from Microsoft.AspNetCore.DataProtection's releases.

.NET 9.0 RC 2

Release

What's Changed

[automated] Merge branch 'release/9.0-rc1' => 'release/9.0' by @github-actions in dotnet/aspnetcore#57420

[release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in dotnet/aspnetcore#57366

[release/9.0] Add references to new 9.0 branches in .yml files by @wtgodbe in dotnet/aspnetcore#57463

[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in dotnet/aspnetcore#57526

[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in dotnet/aspnetcore#57446

[release/9.0] Quarantine two CircuitTests by @github-actions in dotnet/aspnetcore#57606

[automated] Merge branch 'release/9.0-rc1' => 'release/9.0' by @github-actions in dotnet/aspnetcore#57659

[release/9.0] Fix duplicate error.type on kestrel.connection.duration by @github-actions in dotnet/aspnetcore#57581

[release/9.0] Update dependencies from dotnet/extensions by @dotnet-maestro in dotnet/aspnetcore#57668

[release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in dotnet/aspnetcore#57436

[release/9.0] Update dependencies from dotnet/winforms by @dotnet-maestro in dotnet/aspnetcore#57527

[release/9.0] Update dependencies from dotnet/efcore, dotnet/runtime by @dotnet-maestro in dotnet/aspnetcore#57686

[release/9.0] Update dependencies from dotnet/xdt by @dotnet-maestro in dotnet/aspnetcore#57691

[release/9.0] Update dependencies from dotnet/arcade by @dotnet-maestro in dotnet/aspnetcore#57667

[release/9.0] Update dependencies from dotnet/source-build-externals by @dotnet-maestro in dotnet/aspnetcore#57528

[release/9.0] Update dependencies from dotnet/efcore by @dotnet-maestro in dotnet/aspnetcore#57697

[release/9.0] [Blazor] Invoke inbound activity handlers on circuit initialization by @github-actions in dotnet/aspnetcore#57678

Disable launching browser on Web API template by @captainsafia in dotnet/aspnetcore#57682

[release/9.0] [Static Assets] Improve development experience by @github-actions in dotnet/aspnetcore#57764

Include Readme.md in p... _Description has been truncated_

Summary

||| |:---|:---| | Generated on: | 11/4/2024 - 2:24:47 AM | | Coverage date: | 11/4/2024 - 2:24:45 AM | | Parser: | Cobertura | | Assemblies: | 9 | | Classes: | 158 | | Files: | 166 | | **Line coverage:** | 51.4% (3177 of 6180) | | Covered lines: | 3177 | | Uncovered lines: | 3003 | | Coverable lines: | 6180 | | Total lines: | 19826 | | **Branch coverage:** | 48.4% (1137 of 2348) | | Covered branches: | 1137 | | Total branches: | 2348 | | **Method coverage:** | [Feature is only available for sponsors](https://reportgenerator.io/pro) |

Coverage

Microsoft.Identity.Web - 63.6%

|**Name**|**Line**|**Branch**| |:---|---:|---:| |**Microsoft.Identity.Web**|**63.6%**|**56.9%**| |Microsoft.Identity.Web.AadIssuerValidatorOptions|100%|| |Microsoft.Identity.Web.AccountExtensions|100%|100%| |Microsoft.Identity.Web.AppContextSwitches|100%|100%| |Microsoft.Identity.Web.AppServicesAuthenticationBuilderExtensions|100%|| |Microsoft.Identity.Web.AppServicesAuthenticationHandler|0%|0%| |Microsoft.Identity.Web.AppServicesAuthenticationInformation|78.8%|59%| |Microsoft.Identity.Web.AppServicesAuthenticationTokenAcquisition|0%|0%| |Microsoft.Identity.Web.AuthorityHelpers|100%|92.3%| |Microsoft.Identity.Web.AuthorizeForScopesAttribute|8.3%|7.1%| |Microsoft.Identity.Web.AzureADB2COpenIDConnectEventHandlers|97.5%|87.5%| |Microsoft.Identity.Web.AzureFunctionsAuthenticationHttpContextExtension|0%|0%| |Microsoft.Identity.Web.ClaimsPrincipalFactory|100%|100%| |Microsoft.Identity.Web.CookiePolicyOptionsExtensions|95.8%|90%| |Microsoft.Identity.Web.DefaultMicrosoftIdentityAuthenticationDelegatingHand
lerFactory|100%|| |Microsoft.Identity.Web.DownstreamWebApi|10.8%|0%| |Microsoft.Identity.Web.DownstreamWebApiExtensions|100%|| |Microsoft.Identity.Web.DownstreamWebApiGenericExtensions|0%|0%| |Microsoft.Identity.Web.DownstreamWebApiOptions|94.7%|50%| |Microsoft.Identity.Web.Extensions|100%|100%| |Microsoft.Identity.Web.IDownstreamWebApi|0%|| |Microsoft.Identity.Web.IncrementalConsentAndConditionalAccessHelper|95.8%|87.5%| |Microsoft.Identity.Web.MergedOptionsValidation|100%|100%| |Microsoft.Identity.Web.MicrosoftIdentityAppAuthenticationMessageHandler|100%|100%| |Microsoft.Identity.Web.MicrosoftIdentityAppCallsWebApiAuthenticationBuilder
Extension|0%|0%| |Microsoft.Identity.Web.MicrosoftIdentityAuthenticationBaseMessageHandler|96%|62.5%| |Microsoft.Identity.Web.MicrosoftIdentityAuthenticationBaseOptions|100%|50%| |Microsoft.Identity.Web.MicrosoftIdentityAuthenticationMessageHandlerHttpCli
entBuilderExtensions|91.3%|| |Microsoft.Identity.Web.MicrosoftIdentityAuthenticationMessageHandlerOptions|90%|| |Microsoft.Identity.Web.MicrosoftIdentityBlazorServiceCollectionExtensions|100%|| |Microsoft.Identity.Web.MicrosoftIdentityConsentAndConditionalAccessHandler|4.9%|0%| |Microsoft.Identity.Web.MicrosoftIdentityServiceHandler|0%|| |Microsoft.Identity.Web.MicrosoftIdentityUserAuthenticationMessageHandler|100%|66.6%| |Microsoft.Identity.Web.MicrosoftIdentityWebApiAuthenticationBuilder|78.9%|0%| |Microsoft.Identity.Web.MicrosoftIdentityWebApiAuthenticationBuilderExtensio
ns|62.2%|27.7%| |Microsoft.Identity.Web.MicrosoftIdentityWebApiAuthenticationBuilderWithConf
iguration|100%|| |Microsoft.Identity.Web.MicrosoftIdentityWebApiServiceCollectionExtensions|0%|| |Microsoft.Identity.Web.MicrosoftIdentityWebAppAuthenticationBuilder|94.6%|83.3%| |Microsoft.Identity.Web.MicrosoftIdentityWebAppAuthenticationBuilderExtensio
ns|97%|88.7%| |Microsoft.Identity.Web.MicrosoftIdentityWebAppAuthenticationBuilderWithConf
iguration|81.2%|| |Microsoft.Identity.Web.MicrosoftIdentityWebAppServiceCollectionExtensions|100%|| |Microsoft.Identity.Web.PolicyBuilderExtensions|100%|| |Microsoft.Identity.Web.RequiredScopeExtensions|40%|| |Microsoft.Identity.Web.RequiredScopeOrAppPermissionExtensions|33.3%|| |Microsoft.Identity.Web.RequireScopeOptions|100%|50%| |Microsoft.Identity.Web.RequireScopeOrAppPermissionOptions|100%|50%| |Microsoft.Identity.Web.Resource.JwtBearerMiddlewareDiagnostics|100%|100%| |Microsoft.Identity.Web.Resource.MicrosoftIdentityIssuerValidatorFactory|90%|62.5%| |Microsoft.Identity.Web.Resource.OpenIdConnectMiddlewareDiagnostics|100%|83.3%| |Microsoft.Identity.Web.Resource.RegisterValidAudience|95.6%|90%| |Microsoft.Identity.Web.Resource.RequiredScopeAttribute|0%|| |Microsoft.Identity.Web.Resource.RequiredScopeOrAppPermissionAttribute|0%|| |Microsoft.Identity.Web.Resource.RolesRequiredHttpContextExtensions|100%|100%| |Microsoft.Identity.Web.Resource.ScopesRequiredHttpContextExtensions|100%|100%| |Microsoft.Identity.Web.ScopeAuthorizationHandler|90.3%|73%| |Microsoft.Identity.Web.ScopeAuthorizationRequirement|100%|50%| |Microsoft.Identity.Web.ScopeOrAppPermissionAuthorizationHandler|90.2%|72.9%| |Microsoft.Identity.Web.ScopeOrAppPermissionAuthorizationRequirement|78.9%|60%| |Microsoft.Identity.Web.TempDataLoginErrorAccessor|15%|25%| |Microsoft.Identity.Web.TokenAcquisitionAppTokenCredential|0%|| |Microsoft.Identity.Web.TokenAcquisitionTokenCredential|0%|| |Microsoft.Identity.Web.TokenCacheProviders.Session.MsalSessionTokenCachePro
vider|0%|0%| |Microsoft.Identity.Web.TokenCacheProviders.Session.SessionTokenCacheProvide
rExtension|0%|0%|

Microsoft.Identity.Web.Certificate - 41.4%

|**Name**|**Line**|**Branch**| |:---|---:|---:| |**Microsoft.Identity.Web.Certificate**|**41.4%**|**26.5%**| |Microsoft.Identity.Web.Base64EncodedCertificateLoader|90.9%|66.6%| |Microsoft.Identity.Web.CertificateDescription|87.9%|| |Microsoft.Identity.Web.CertificateLoaderHelper|29.1%|20%| |Microsoft.Identity.Web.DefaultCertificateLoader|45.6%|31.8%| |Microsoft.Identity.Web.DefaultCredentialsLoader|54.7%|50%| |Microsoft.Identity.Web.FromPathCertificateLoader|0%|| |Microsoft.Identity.Web.KeyVaultCertificateLoader|0%|0%| |Microsoft.Identity.Web.SignedAssertionFilePathCredentialsLoader|93.7%|100%| |Microsoft.Identity.Web.SignedAssertionFromManagedIdentityCredentialLoader|15.7%|0%| |Microsoft.Identity.Web.StoreWithDistinguishedNameCertificateLoader|0%|| |Microsoft.Identity.Web.StoreWithThumbprintCertificateLoader|0%||

Microsoft.Identity.Web.Certificateless - 40.1%

|**Name**|**Line**|**Branch**| |:---|---:|---:| |**Microsoft.Identity.Web.Certificateless**|**40.1%**|**43.2%**| |Microsoft.Identity.Web.AzureIdentityForKubernetesClientAssertion|58.1%|63.1%| |Microsoft.Identity.Web.CertificatelessOptions|100%|| |Microsoft.Identity.Web.ClientAssertion|100%|| |Microsoft.Identity.Web.ClientAssertionProviderBase|100%|80%| |Microsoft.Identity.Web.ManagedIdentityClientAssertion|0%|0%|

Microsoft.Identity.Web.Diagnostics - 10.2%

|**Name**|**Line**|**Branch**| |:---|---:|---:| |**Microsoft.Identity.Web.Diagnostics**|**10.2%**|**7.1%**| |Microsoft.Identity.Web.Diagnostics.OsHelper|33.3%|| |Microsoft.Identity.Web.Throws|8.6%|7.1%|

Microsoft.Identity.Web.DownstreamApi - 14.5%

|**Name**|**Line**|**Branch**| |:---|---:|---:| |**Microsoft.Identity.Web.DownstreamApi**|**14.5%**|**16.1%**| |Microsoft.Extensions.Configuration.Binder.SourceGeneration|0%|0%| |Microsoft.Identity.Web.DownstreamApi|15.4%|21.6%| |Microsoft.Identity.Web.DownstreamApiExtensions|51.4%|80%| |Microsoft.Identity.Web.DownstreamApiLoggingEventId|100%|| |System.Runtime.CompilerServices|0%||

Microsoft.Identity.Web.MicrosoftGraph - 42%

|**Name**|**Line**|**Branch**| |:---|---:|---:| |**Microsoft.Identity.Web.MicrosoftGraph**|**42%**|**4.5%**| |Microsoft.Identity.Web.BaseRequestExtensions|0%|0%| |Microsoft.Identity.Web.GraphServiceCollectionExtensions|82.7%|50%| |Microsoft.Identity.Web.MicrosoftGraphExtensions|67.7%|| |Microsoft.Identity.Web.MicrosoftGraphOptions|100%|| |Microsoft.Identity.Web.TokenAcquisitionAuthenticationProvider|13.5%|0%| |Microsoft.Identity.Web.TokenAcquisitionAuthenticationProviderOption|16.6%||

Microsoft.Identity.Web.Test.Common - 69.3%

|**Name**|**Line**|**Branch**| |:---|---:|---:| |**Microsoft.Identity.Web.Test.Common**|**69.3%**|**64.5%**| |Microsoft.Identity.Web.Test.Common.Asserts|100%|| |Microsoft.Identity.Web.Test.Common.Mocks.LoggerMock`1|50%|100%| |Microsoft.Identity.Web.Test.Common.Mocks.MockHttpClientFactory|100%|33.3%| |Microsoft.Identity.Web.Test.Common.Mocks.MockHttpContextAccessor|100%|| |Microsoft.Identity.Web.Test.Common.Mocks.MockHttpCreator|60.8%|| |Microsoft.Identity.Web.Test.Common.Mocks.MockHttpMessageHandler|76.4%|75%| |Microsoft.Identity.Web.Test.Common.Mocks.QueryStringParser|86.8%|85.7%| |Microsoft.Identity.Web.Test.Common.Mocks.QueueHttpMessageHandler|57.1%|37.5%| |Microsoft.Identity.Web.Test.Common.TestConstants|100%|| |Microsoft.Identity.Web.Test.Common.TestHelpers.ExternalApp|0%|0%| |Microsoft.Identity.Web.Test.Common.TestHelpers.HttpContextUtilities|100%|| |Microsoft.Identity.Web.Test.Common.TestHelpers.InMemoryTokenCache|0%|0%| |Microsoft.Identity.Web.Test.Common.TestHelpers.MsalTestTokenCacheProvider|26.6%|| |Microsoft.Identity.Web.Test.Common.TestHelpers.TestMsalDistributedTokenCach
eAdapter|100%|| |Microsoft.Identity.Web.Test.Common.TestHelpers.TestOptionsMonitor`1|50%|0%|

Microsoft.Identity.Web.TokenAcquisition - 53.2%

|**Name**|**Line**|**Branch**| |:---|---:|---:| |**Microsoft.Identity.Web.TokenAcquisition**|**53.2%**|**55.1%**| |Microsoft.Identity.Web.ApplicationBuilderExtensions|0%|| |Microsoft.Identity.Web.AuthCodeRedemptionParameters|100%|| |Microsoft.Identity.Web.CiamAuthorityHelper|100%|92.8%| |Microsoft.Identity.Web.ClientInfo|100%|87.5%| |Microsoft.Identity.Web.ConfidentialClientApplicationBuilderExtension|79%|60.5%| |Microsoft.Identity.Web.ConfidentialClientApplicationOptionsMerger|100%|50%| |Microsoft.Identity.Web.DefaultAuthorizationHeaderProvider|54.9%|26.6%| |Microsoft.Identity.Web.DefaultTokenAcquirerFactoryImplementation|1.6%|0%| |Microsoft.Identity.Web.Experimental.CertificateChangeEventArg|0%|| |Microsoft.Identity.Web.Extensibility.BaseAuthorizationHeaderProvider|45.4%|| |Microsoft.Identity.Web.Hosts.DefaultTokenAcquisitionHost|38.4%|0%| |Microsoft.Identity.Web.HttpContextExtensions|100%|| |Microsoft.Identity.Web.IdHelper|95.8%|50%| |Microsoft.Identity.Web.Internal.WebApiBuilders|100%|100%| |Microsoft.Identity.Web.ITokenAcquisition|0%|| |Microsoft.Identity.Web.JwtBearerOptionsMerger|0%|0%| |Microsoft.Identity.Web.LoggingEventId|100%|| |Microsoft.Identity.Web.LoggingOptions|100%|| |Microsoft.Identity.Web.MergedOptions|93.3%|92%| |Microsoft.Identity.Web.MergedOptionsStore|100%|| |Microsoft.Identity.Web.MicrosoftIdentityAppCallsWebApiAuthenticationBuilder|83.3%|100%| |Microsoft.Identity.Web.MicrosoftIdentityApplicationOptionsMerger|60%|0%| |Microsoft.Identity.Web.MicrosoftIdentityBaseAuthenticationBuilder|85.1%|78.5%| |Microsoft.Identity.Web.MicrosoftIdentityOptions|100%|75%| |Microsoft.Identity.Web.MicrosoftIdentityOptionsMerger|100%|50%| |Microsoft.Identity.Web.MicrosoftIdentityWebChallengeUserException|0%|| |Microsoft.Identity.Web.MsalAspNetCoreHttpClientFactory|50%|| |Microsoft.Identity.Web.MsAuth10AtPop|100%|100%| |Microsoft.Identity.Web.PrincipalExtensionsForSecurityTokens|100%|70%| |Microsoft.Identity.Web.ServiceCollectionExtensions|66.6%|64.2%| |Microsoft.Identity.Web.TokenAcquirer|0%|0%| |Microsoft.Identity.Web.TokenAcquirerFactory|55.4%|50%| |Microsoft.Identity.Web.TokenAcquisition|22.9%|17.2%| |Microsoft.Identity.Web.TokenAcquisitionAspNetCore|4.6%|0%| |Microsoft.Identity.Web.TokenAcquisitionAspnetCoreHost|40.4%|23.6%| |Microsoft.Identity.Web.TokenAcquisitionExtensionOptions|100%|100%| |Microsoft.Identity.Web.TokenAcquisitionOptions|100%|| |Microsoft.Identity.Web.Util.Base64UrlHelpers|93.4%|81.4%|

Microsoft.Identity.Web.TokenCache - 80.8%

|**Name**|**Line**|**Branch**| |:---|---:|---:| |**Microsoft.Identity.Web.TokenCache**|**80.8%**|**82.6%**| |Microsoft.Identity.Web.ClaimsPrincipalExtensions|96.7%|100%| |Microsoft.Identity.Web.LoggingEventId|100%|| |Microsoft.Identity.Web.TokenCacheExtensions|100%|| |Microsoft.Identity.Web.TokenCacheProviders.CacheSerializerHints|100%|| |Microsoft.Identity.Web.TokenCacheProviders.Distributed.DistributedTokenCach
eAdapterExtension|100%|| |Microsoft.Identity.Web.TokenCacheProviders.Distributed.MsalDistributedToken
CacheAdapter|83%|83.3%| |Microsoft.Identity.Web.TokenCacheProviders.Distributed.MsalDistributedToken
CacheAdapterOptions|88.8%|| |Microsoft.Identity.Web.TokenCacheProviders.InMemory.InMemoryTokenCacheProvi
derExtension|100%|| |Microsoft.Identity.Web.TokenCacheProviders.InMemory.MsalMemoryTokenCacheOpt
ions|100%|| |Microsoft.Identity.Web.TokenCacheProviders.InMemory.MsalMemoryTokenCachePro
vider|83.8%|81.8%| |Microsoft.Identity.Web.TokenCacheProviders.MeasureDurationResult|100%|| |Microsoft.Identity.Web.TokenCacheProviders.MeasureDurationResult`1|0%|| |Microsoft.Identity.Web.TokenCacheProviders.MsalAbstractTokenCacheProvider|50.7%|66.6%| |Microsoft.Identity.Web.TokenCacheProviders.Utility|54.5%||

AzureAD / microsoft-identity-web

Bump the notsecurity group with 25 updates #3125

3.3.1

Supportability

Fundamentals

What's Changed

New Contributors

3.3.1

Supportability

Fundamentals

.NET 9.0 RC 2

.NET 9.0 RC 1

.NET 9.0 Preview 7

.NET 9.0 Preview 6

.NET 9.0 Preview 5

.NET 9.0 Preview 4

.NET 9.0 Preview 3

.NET 9.0 Preview 2

.NET 9 Preview 1

.NET 8.0.10

.NET 8.0.8

.NET 8.0.7

.NET 8.0.6

.NET 8.0.5

What's Changed

8.2.0

Fundamentals

Work related to redesign of IdentityModel's token validation logic #2711

What's Changed

8.2.0

Fundamentals

Work related to redesign of IdentityModel's token validation logic #2711

8.2.0

Fundamentals

Work related to redesign of IdentityModel's token validation logic #2711

What's Changed

8.2.0

Fundamentals

Work related to redesign of IdentityModel's token validation logic #2711

.NET 9.0 RC 2

.NET 9.0 RC 1

.NET 9.0 Preview 7

.NET 9.0 Preview 6

.NET 9.0 Preview 5

.NET 9.0 Preview 4

.NET 9.0 Preview 3

.NET 9.0 Preview 2

.NET 9 Preview 1

.NET 8.0.10

.NET 8.0.8

.NET 8.0.7

.NET 8.0.6

.NET 9.0 RC 2

.NET 9.0 RC 1

.NET 9.0 Preview 7

.NET 9.0 Preview 6

.NET 9.0 Preview 5

.NET 9.0 Preview 4

.NET 9.0 Preview 3

.NET 9.0 Preview 2

.NET 9 Preview 1

.NET 8.0.10

.NET 8.0.8

.NET 8.0.7

.NET 8.0.6

.NET 8.0.5

What's Changed

.NET 9.0 RC 2

What's Changed

Summary

Coverage