ycrumeyrolle
commented
5 years ago @dependabot recreate
Closed dependabot-preview[bot] closed 5 years ago
ycrumeyrolle
commented
5 years ago @dependabot recreate
Bumps Microsoft.IdentityModel.JsonWebTokens from 5.4.0 to 5.5.0.
Release notes
*Sourced from [Microsoft.IdentityModel.JsonWebTokens's releases](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases).* > ## 5.5.0 > ## Features > * SignatureProvider caching is turned ON by default. > * Added support for JWE decompression in JwtSecurityTokenHandler. > * Added support for RSA-PSS. > * Added support for reading and writing multiple signatures in XML envelopes. > * Saml(2)SecurityTokenHandlers can consume a token using an XmlReader. > * Improved support for converting JsonWebKey to SecurityKey for crypto operations. > * Support for ECDSA keys from JsonWebKeySet. > * Added GetClaim() and TryGetClaim() methods to JsonWebToken. > * Improved exception messages. > > ### Build and Test > * Added performance and stress test framework. > * Published symbol packages to the NuGet.org symbol server, hence reducing size of main NuGet packages. > * Reduced the netstandard 2.0 dependency graph. > > ## Bug Fixes > * Intermittent signature validation failures in multi-threaded environments when SignatureProvider caching is enabled. > > Click [here](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/issues?utf8=%E2%9C%93&q=is%3Aissue+sort%3Aupdated-desc+milestone%3A5.5.0+is%3Aclosed) for a full list of issues that were fixed.Commits
- [`5810cd8`](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/commit/5810cd81dd3d7a802f111005f42990dc8ebb0aa7) unused resource - [`066fa66`](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/commit/066fa66a7be9aa3a2e2b032c5997996d2d71f9d4) 5.4.0 base assemblies - [`be734fc`](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/commit/be734fcf48d00bc8f930ef079e2d6d7dbd61a791) simple environment for perf and stress - [`f8ccc8f`](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/commit/f8ccc8fbb16ed30f4595304ef63e981431a82be4) Support Signature as an inner element with EnvelopedSignatureWriter - [`4eb3c80`](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/commit/4eb3c8002ed4bf193756e456f43198e8769f0c1d) added back resource verification - [`e96ff45`](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/commit/e96ff45053cd6395cce2e06a8fb1e756eae26426) removed unused logmessages - [`aa92858`](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/commit/aa9285813db1e08a8d6c4e244b535d4ca9b278a2) JsonWebKey conversions use JsonWebKeyConverter - [`e973fd9`](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/commit/e973fd9e87126b3a01ed664e1da8a795220ac945) added locks for signing and verifying - [`b5000db`](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/commit/b5000dbe5ad3fe7196aade0ad31fe0041a0b3094) Changed the logging verbosity on tests to detailed - [`e598bed`](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/commit/e598bed89cb1ebde3a401b973a56538617df8ff5) Added some tests that turn caching off and check that SignatureProviders are ... - Additional commits viewable in [compare view](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/compare/5.4.0...5.5.0)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot will not automatically merge this PR because it includes a minor update to a production dependency.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Automerge options (never/patch/minor, and dev/runtime dependencies) - Pull request limits (per update run and/or open at any time) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired) Finally, you can contact us by mentioning @dependabot.