pferron / Case133479

0 stars 0 forks source link

Update dependency Azure.Identity to v1.11.4 #5

Open mend-for-github-com[bot] opened 3 months ago

mend-for-github-com[bot] commented 3 months ago

This PR contains the following updates:

Package Type Update Change
Azure.Identity (source) nuget minor 1.10.4 -> 1.11.4

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score CVE
Medium Medium 5.5 CVE-2024-29992
Medium Medium 5.5 CVE-2024-35255

Release Notes

Azure/azure-sdk-for-net (Azure.Identity) ### [`v1.11.4`](https://togithub.com/Azure/azure-sdk-for-net/releases/tag/Azure.Identity_1.11.4) #### 1.11.4 (2024-06-10) ##### Bugs Fixed - Managed identity bug fixes ### [`v1.11.3`](https://togithub.com/Azure/azure-sdk-for-net/releases/tag/Azure.Identity_1.11.3) #### 1.11.3 (2024-05-07) ##### Bugs Fixed - Fixed a regression in `DefaultAzureCredential` probe request behavior for IMDS managed identity environments. [#​43796](https://togithub.com/Azure/azure-sdk-for-net/issues/43796) ### [`v1.11.2`](https://togithub.com/Azure/azure-sdk-for-net/releases/tag/Azure.Identity_1.11.2) #### 1.11.2 (2024-04-19) ##### Bugs Fixed - Fixed an issue which caused claims to be incorrectly added to confidential client credentials such as `DeviceCodeCredential` [#​43468](https://togithub.com/Azure/azure-sdk-for-net/issues/43468) ### [`v1.11.1`](https://togithub.com/Azure/azure-sdk-for-net/releases/tag/Azure.Identity_1.11.1) #### 1.11.1 (2024-05-07) ##### Other Changes - Updated Microsoft.Identity.Client and related dependencies to version 4.60.3 ### [`v1.11.0`](https://togithub.com/Azure/azure-sdk-for-net/releases/tag/Azure.Identity_1.11.0) #### 1.11.0 (2024-04-09) ##### Bugs Fixed - `AzurePowerShellCredential` now handles the case where it falls back to legacy PowerShell without relying on the error message string. ##### Breaking Changes - `DefaultAzureCredential` now sends a probe request with no retries for IMDS managed identity environments to avoid excessive retry delays when the IMDS endpoint is not available. This should improve credential chain resolution for local development scenarios. See [BREAKING_CHANGES.md](https://togithub.com/Azure/azure-sdk-for-net/blob/main/sdk/identity/Azure.Identity/BREAKING_CHANGES.md#1110).