pferron / Case133479

0 stars 0 forks source link

Update dependency Azure.Identity to 1.11.4 #5

Open mend-for-github-com[bot] opened 7 months ago

mend-for-github-com[bot] commented 7 months ago

This PR contains the following updates:

Package Type Update Change
Azure.Identity (source) nuget minor 1.10.4 -> 1.11.4

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score CVE
Medium Medium 5.5 CVE-2024-29992
Medium Medium 5.5 CVE-2024-35255

Release Notes

Azure/azure-sdk-for-net (Azure.Identity) ### [`v1.11.4`](https://redirect.github.com/Azure/azure-sdk-for-net/releases/tag/Azure.Identity_1.11.4) [Compare Source](https://redirect.github.com/Azure/azure-sdk-for-net/compare/Azure.Identity_1.11.3...Azure.Identity_1.11.4) #### 1.11.4 (2024-06-10) ##### Bugs Fixed - Managed identity bug fixes ### [`v1.11.3`](https://redirect.github.com/Azure/azure-sdk-for-net/releases/tag/Azure.Identity_1.11.3) [Compare Source](https://redirect.github.com/Azure/azure-sdk-for-net/compare/Azure.Identity_1.11.2...Azure.Identity_1.11.3) #### 1.11.3 (2024-05-07) ##### Bugs Fixed - Fixed a regression in `DefaultAzureCredential` probe request behavior for IMDS managed identity environments. [#​43796](https://redirect.github.com/Azure/azure-sdk-for-net/issues/43796) ### [`v1.11.2`](https://redirect.github.com/Azure/azure-sdk-for-net/releases/tag/Azure.Identity_1.11.2) [Compare Source](https://redirect.github.com/Azure/azure-sdk-for-net/compare/Azure.Identity_1.11.1...Azure.Identity_1.11.2) #### 1.11.2 (2024-04-19) ##### Bugs Fixed - Fixed an issue which caused claims to be incorrectly added to confidential client credentials such as `DeviceCodeCredential` [#​43468](https://redirect.github.com/Azure/azure-sdk-for-net/issues/43468) ### [`v1.11.1`](https://redirect.github.com/Azure/azure-sdk-for-net/releases/tag/Azure.Identity_1.11.1) [Compare Source](https://redirect.github.com/Azure/azure-sdk-for-net/compare/Azure.Identity_1.11.0...Azure.Identity_1.11.1) #### 1.11.1 (2024-05-07) ##### Other Changes - Updated Microsoft.Identity.Client and related dependencies to version 4.60.3 ### [`v1.11.0`](https://redirect.github.com/Azure/azure-sdk-for-net/releases/tag/Azure.Identity_1.11.0) [Compare Source](https://redirect.github.com/Azure/azure-sdk-for-net/compare/Azure.Identity_1.10.4...Azure.Identity_1.11.0) #### 1.11.0 (2024-04-09) ##### Bugs Fixed - `AzurePowerShellCredential` now handles the case where it falls back to legacy PowerShell without relying on the error message string. ##### Breaking Changes - `DefaultAzureCredential` now sends a probe request with no retries for IMDS managed identity environments to avoid excessive retry delays when the IMDS endpoint is not available. This should improve credential chain resolution for local development scenarios. See [BREAKING_CHANGES.md](https://redirect.github.com/Azure/azure-sdk-for-net/blob/main/sdk/identity/Azure.Identity/BREAKING_CHANGES.md#1110).