Bump Microsoft.Data.SqlClient, Azure.Identity, Azure.Core, Microsoft.Bcl.AsyncInterfaces, Microsoft.Identity.Client and Microsoft.Identity.Client.Extensions.Msal

[dependabot[bot]]

Bumps Microsoft.Data.SqlClient, Azure.Identity, Azure.Core, Microsoft.Bcl.AsyncInterfaces, Microsoft.Identity.Client and Microsoft.Identity.Client.Extensions.Msal. These dependencies needed to be updated together. Updates Microsoft.Data.SqlClient from 5.1.5 to 5.2.1

Updates Azure.Identity from 1.10.3 to 1.11.3

Commits

• 06dd672 Hotfix for DAC probe request
• ae13ec2 Fix ConfidentialClient's AcquireTokenSilent and AcquireTokenOnBehalfOf claims...
• 1835c8f Sync .github/workflows directory with azure-sdk-tools for PR 8131 (#43535)
• 40ff95a prep release (#43534)
• 70f5c48 [AzureMonitorDistro] Add LiveMetricsActivityProcessor only when live metrics ...
• a6c3e59 Respect SupportsOrdering property (#43531)
• 82cc7cf WCF Client/CoreWCF extension packages to use Azure Queue Storage as transport...
• 0de35d0 Increment package version after release of Azure.ResourceManager.AppService (...
• 17cf649 [App Service] Fix for issue #43295 (#43494)
• 3bd55fd Increment version for storage releases (#43518)
• Additional commits viewable in compare view

Updates Azure.Core from 1.35.0 to 1.38.0

Commits

• dae9516 [Azure.Core] Prepare for OOB Release (2024-02-26) (#42169)
• 2eb3630 Fix typo in resource manager readme (#42185)
• 463d0fb Failed Update AutoRest C# version to 3.0.0-beta.20240223.2 (#42172)
• e12511f Add Keywords to ProfilingSessionEventSource (#42116)
• 9793f08 [System.ClientModel] Add implicit cast to T from ClientResult\<T> (#42167)
• b3179dc fix eventsource name spam (#42171)
• b8c19e8 Remove heaths from most services (#42163)
• afa28c6 Update AutoRest C# version to 3.0.0-beta.20240223.1 (#42164)
• 7a40ca3 Update github-event-processor version (#42168)
• 7d8b0c2 [DocumentIntelligence] Updated tspconfig to target the main branch (#42138)
• Additional commits viewable in compare view

Updates Microsoft.Bcl.AsyncInterfaces from 1.1.0 to 1.1.1

Release notes

Sourced from Microsoft.Bcl.AsyncInterfaces's releases.

.NET Core 2.1.0 RC1

• Release Notes
• Known Issues
• Download and Install

Repos

• CoreCLR
• CoreFX
• Core-Setup
• CLI

Commits

• bdaf5f5 Merge pull request #16381 from dotnet-bot/release/1.1.0-UpdateDependencies
• 8f2dddb Update CoreFx to servicing-25009-02
• cbb7309 Merge pull request #16365 from dotnet-bot/release/1.1.0-UpdateDependencies
• d44654e Update CoreFx to servicing-25021-01
• dbf6aa0 Merge pull request #16243 from dotnet/revert-16199-release/1.1.0
• 8d774a8 Revert "Update AspNetCoreHosting keyword"
• 0c2ff97 Merge pull request #16199 from northtyphoon/release/1.1.0
• 0ebc7ad Add httpContext.TraceIdentifier and httpContext.Response.StatusCode keywords ...
• 1e77bb6 Merge pull request #16001 from weshaggard/StablizePackages105
• bf25390 Mark packages stable for 1.1.1 servicing release
• Additional commits viewable in compare view

Updates Microsoft.Identity.Client from 4.56.0 to 4.60.3

Release notes

Sourced from Microsoft.Identity.Client's releases.

4.60.3

Bug Fixes

Updated Android webview attribute.

4.60.2

Bug Fixes

When OnBeforeTokenRequest extensibility API is used, MSAL now correctly uses the user-provided OnBeforeTokenRequestData.RequestUri to set the token request endpoint. See 4701.

4.60.1

Addressed an issue where attempts to acquire a token via certificate authentication resulted in a Microsoft.Identity.Client.MsalServiceException (Error code: AADSTS5002730), signaling an "Invalid JWT token. Unsupported key for the signing algorithm." This was due to a known bug in Microsoft Entra ID (Azure AD) that affects the handling of JWT tokens signed with certain algorithms, specifically SHA2 and PSS. See 4690

4.60.0

New Features

• AAD client assertions are computed using SHA 256 and PSS padding. See 4428
• CorrelationId is available in MsalException. See 4187
• Open telemetry records telemetry for proactive token refresh background process. See 4492
• MSAL.Net now supports generic authorities with query parameters. See 4631

Bug Fixes

• MSAL.Net now logs an error when OBO is performed over common or organizations. See 4606
• MSAL.Net now handles the v2.0 authorization endpoint. See 4416
• Improved logging and error message when the web api received claims challenge. See 4496
• Cloud shell error message from the managed identity endpoint is parsed correctly. See 4402
• Improved error message when CCA certificate is disposed before MSAL can use it. See 4602
• Client id is now accepted as a scope. See 4652

4.59.1

Bug Fixes

Updated Android webview attribute.

4.59.0

New Features

• Removed support for deprecated Xamarin.Android 9 and Xamarin.Android 10 frameworks. MSAL.NET packages will no longer include monoandroid90 and monoandroid10.0 binaries and instead include monoandroid12.0. Xamarin.Android apps should now target framework version 12 (corresponding to Android API level 31) or above. See 3530.
• Removed support for deprecated .NET 4.5 framework. MSAL.NET packages will no longer include net45 binary. Existing applications should target at least .NET 4.6.2. See 4314.

Bug Fixes

• When public client apps persist cache data on Linux platforms, exceptions are now thrown, instead of just logged. This behavior is now consistent with Windows and Mac cache accessors. See 4493.
• Downgraded System.Diagnostics.DiagnosticSource dependency to 6.0.1 from 7.0.2 to enable apps to run in .NET 6 in-process Azure Functions. Added extra checks to prevent crashing if OpenTelemetry dependencies cannot be used in the app's runtime. See 4456.
• MSAL now throws MsalServiceException instead of MsalManagedIdentityException in managed identity flows. See 4483.
• Background proactive token refresh operation can now be cancelled using the cancelation token passed into the parent acquire token call. See 4473.
• Fixed SemaphoreFullException happening in managed identity flows. See 4472.
• Improved exception messages when using non-RSA certificates. See 4407.
• Fixed a scenario when the same tokens are cached under different cache keys when an identity provider sends scopes in a different order. See 4474.

4.58.1

New Features

• Added WithForceRefresh support for silent flows using the Windows broker. See 4457.

Bug Fixes

• Fixed a bug when a x-ms-pkeyauth HTTP header was incorrectly sent on Mac and Linux platforms. See 4445.

... (truncated)

Changelog

Sourced from Microsoft.Identity.Client's changelog.

4.60.3

Bug Fixes

• Updated Android webview attribute.

4.60.2

Bug Fixes

• When OnBeforeTokenRequest extensibility API is used, MSAL now correctly uses the user-provided OnBeforeTokenRequestData.RequestUri to set the token request endpoint. See 4701.

4.60.1

Bug Fixes

• Resolved an issue where MSAL attempts to acquire a token via certificate authentication using SHA2 and PSS resulting in a `MsalServiceException' (Error code: AADSTS5002730). See 4690.

4.60.0

New Features

• AAD client assertions are computed using SHA 256 and PSS padding. See 4428.
• CorrelationId is available in MsalException. See 4187.
• Open telemetry records telemetry for proactive token refresh background process. See 4492.
• MSAL.Net now supports generic authorities with query parameters. See 4631.

Bug Fixes

• MSAL.Net now logs an error when OBO is performed over common or organizations. See 4606.
• MSAL.Net now handles the v2.0 authorization endpoint. See 4416.
• Improved logging and error message when the web api receives a claims challenge. See 4496.
• Cloud shell error message from the managed identity endpoint is now parsed correctly. See 4402.
• Improved error message when CCA certificate is disposed before MSAL can use it. See 4602.
• Client id is now accepted as a scope. See 4652.

4.59.0

New Features

• Removed support for deprecated Xamarin.Android 9 and Xamarin.Android 10 frameworks. MSAL.NET packages will no longer include monoandroid90 and monoandroid10.0 binaries and instead include monoandroid12.0. Xamarin.Android apps should now target framework version 12 (corresponding to Android API level 31) or above. See 3530.
• Removed support for deprecated .NET 4.5 framework. MSAL.NET packages will no longer include net45 binary. Existing applications should target at least .NET 4.6.2. See 4314.

Bug Fixes

• When public client apps persist cache data on Linux platforms, exceptions are now thrown, instead of just logged. This behavior is now consistent with Windows and Mac cache accessors. See 4493.
• Downgraded System.Diagnostics.DiagnosticSource dependency to 6.0.1 from 7.0.2 to enable apps to run in .NET 6 in-process Azure Functions. Added extra checks to prevent crashing if OpenTelemetry dependencies cannot be used in the app's runtime. See 4456.
• MSAL now throws MsalServiceException instead of MsalManagedIdentityException in managed identity flows. See 4483.
• Background proactive token refresh operation can now be cancelled using the cancelation token passed into the parent acquire token call. See 4473.
• Fixed SemaphoreFullException happening in managed identity flows. See 4472.
• Improved exception messages when using non-RSA certificates. See 4407.
• Fixed a scenario when the same tokens are cached under different cache keys when an identity provider sends scopes in a different order. See 4474.

4.58.1

New Features

• Added WithForceRefresh support for silent flows using the Windows broker. See 4457.

... (truncated)

Commits

• 413e319 Ashok's fix (#4714)
• 0876d2b Start updating the documentation comments (QOL) (#4689)
• 31e8552 Add CODEOWNERS file (#4710)
• 5b8db58 Update Selenium dependencies (#4709)
• 726f784 Tests should run in headless mode
• fea5538 4.60.2 changelog (#4704)
• 894758f Fix for #4701 - OnBeforeTokenRequest can change the URI
• 7faa358 Update to use lab app for automation (#4700)
• 49458ce Delete .github/workflows/scorecard.yml
• ab79751 Update CHANGELOG.md for MSAL 4.60.1 (#4693)
• Additional commits viewable in compare view

Updates Microsoft.Identity.Client.Extensions.Msal from 4.56.0 to 4.60.3

Release notes

Sourced from Microsoft.Identity.Client.Extensions.Msal's releases.

4.60.3

Bug Fixes

Updated Android webview attribute.

4.60.2

Bug Fixes

When OnBeforeTokenRequest extensibility API is used, MSAL now correctly uses the user-provided OnBeforeTokenRequestData.RequestUri to set the token request endpoint. See 4701.

4.60.1

Addressed an issue where attempts to acquire a token via certificate authentication resulted in a Microsoft.Identity.Client.MsalServiceException (Error code: AADSTS5002730), signaling an "Invalid JWT token. Unsupported key for the signing algorithm." This was due to a known bug in Microsoft Entra ID (Azure AD) that affects the handling of JWT tokens signed with certain algorithms, specifically SHA2 and PSS. See 4690

4.60.0

New Features

• AAD client assertions are computed using SHA 256 and PSS padding. See 4428
• CorrelationId is available in MsalException. See 4187
• Open telemetry records telemetry for proactive token refresh background process. See 4492
• MSAL.Net now supports generic authorities with query parameters. See 4631

Bug Fixes

• MSAL.Net now logs an error when OBO is performed over common or organizations. See 4606
• MSAL.Net now handles the v2.0 authorization endpoint. See 4416
• Improved logging and error message when the web api received claims challenge. See 4496
• Cloud shell error message from the managed identity endpoint is parsed correctly. See 4402
• Improved error message when CCA certificate is disposed before MSAL can use it. See 4602
• Client id is now accepted as a scope. See 4652

4.59.1

Bug Fixes

Updated Android webview attribute.

4.59.0

New Features

• Removed support for deprecated Xamarin.Android 9 and Xamarin.Android 10 frameworks. MSAL.NET packages will no longer include monoandroid90 and monoandroid10.0 binaries and instead include monoandroid12.0. Xamarin.Android apps should now target framework version 12 (corresponding to Android API level 31) or above. See 3530.
• Removed support for deprecated .NET 4.5 framework. MSAL.NET packages will no longer include net45 binary. Existing applications should target at least .NET 4.6.2. See 4314.

Bug Fixes

• When public client apps persist cache data on Linux platforms, exceptions are now thrown, instead of just logged. This behavior is now consistent with Windows and Mac cache accessors. See 4493.
• Downgraded System.Diagnostics.DiagnosticSource dependency to 6.0.1 from 7.0.2 to enable apps to run in .NET 6 in-process Azure Functions. Added extra checks to prevent crashing if OpenTelemetry dependencies cannot be used in the app's runtime. See 4456.
• MSAL now throws MsalServiceException instead of MsalManagedIdentityException in managed identity flows. See 4483.
• Background proactive token refresh operation can now be cancelled using the cancelation token passed into the parent acquire token call. See 4473.
• Fixed SemaphoreFullException happening in managed identity flows. See 4472.
• Improved exception messages when using non-RSA certificates. See 4407.
• Fixed a scenario when the same tokens are cached under different cache keys when an identity provider sends scopes in a different order. See 4474.

4.58.1

New Features

• Added WithForceRefresh support for silent flows using the Windows broker. See 4457.

Bug Fixes

• Fixed a bug when a x-ms-pkeyauth HTTP header was incorrectly sent on Mac and Linux platforms. See 4445.

... (truncated)

Changelog

Sourced from Microsoft.Identity.Client.Extensions.Msal's changelog.

4.60.3

Bug Fixes

• Updated Android webview attribute.

4.60.2

Bug Fixes

• When OnBeforeTokenRequest extensibility API is used, MSAL now correctly uses the user-provided OnBeforeTokenRequestData.RequestUri to set the token request endpoint. See 4701.

4.60.1

Bug Fixes

• Resolved an issue where MSAL attempts to acquire a token via certificate authentication using SHA2 and PSS resulting in a `MsalServiceException' (Error code: AADSTS5002730). See 4690.

4.60.0

New Features

• AAD client assertions are computed using SHA 256 and PSS padding. See 4428.
• CorrelationId is available in MsalException. See 4187.
• Open telemetry records telemetry for proactive token refresh background process. See 4492.
• MSAL.Net now supports generic authorities with query parameters. See 4631.

Bug Fixes

• MSAL.Net now logs an error when OBO is performed over common or organizations. See 4606.
• MSAL.Net now handles the v2.0 authorization endpoint. See 4416.
• Improved logging and error message when the web api receives a claims challenge. See 4496.
• Cloud shell error message from the managed identity endpoint is now parsed correctly. See 4402.
• Improved error message when CCA certificate is disposed before MSAL can use it. See 4602.
• Client id is now accepted as a scope. See 4652.

4.59.0

New Features

• Removed support for deprecated Xamarin.Android 9 and Xamarin.Android 10 frameworks. MSAL.NET packages will no longer include monoandroid90 and monoandroid10.0 binaries and instead include monoandroid12.0. Xamarin.Android apps should now target framework version 12 (corresponding to Android API level 31) or above. See 3530.
• Removed support for deprecated .NET 4.5 framework. MSAL.NET packages will no longer include net45 binary. Existing applications should target at least .NET 4.6.2. See 4314.

Bug Fixes

• When public client apps persist cache data on Linux platforms, exceptions are now thrown, instead of just logged. This behavior is now consistent with Windows and Mac cache accessors. See 4493.
• Downgraded System.Diagnostics.DiagnosticSource dependency to 6.0.1 from 7.0.2 to enable apps to run in .NET 6 in-process Azure Functions. Added extra checks to prevent crashing if OpenTelemetry dependencies cannot be used in the app's runtime. See 4456.
• MSAL now throws MsalServiceException instead of MsalManagedIdentityException in managed identity flows. See 4483.
• Background proactive token refresh operation can now be cancelled using the cancelation token passed into the parent acquire token call. See 4473.
• Fixed SemaphoreFullException happening in managed identity flows. See 4472.
• Improved exception messages when using non-RSA certificates. See 4407.
• Fixed a scenario when the same tokens are cached under different cache keys when an identity provider sends scopes in a different order. See 4474.

4.58.1

New Features

• Added WithForceRefresh support for silent flows using the Windows broker. See 4457.

... (truncated)

Commits

• 413e319 Ashok's fix (#4714)
• 0876d2b Start updating the documentation comments (QOL) (#4689)
• 31e8552 Add CODEOWNERS file (#4710)
• 5b8db58 Update Selenium dependencies (#4709)
• 726f784 Tests should run in headless mode
• fea5538 4.60.2 changelog (#4704)
• 894758f Fix for #4701 - OnBeforeTokenRequest can change the URI
• 7faa358 Update to use lab app for automation (#4700)
• 49458ce Delete .github/workflows/scorecard.yml
• ab79751 Update CHANGELOG.md for MSAL 4.60.1 (#4693)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot[bot]]

Looks like these dependencies are updatable in another way, so this is no longer needed.