Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump System.IdentityModel.Tokens.Jwt from 6.22.1 to 6.27.0 #136

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 17, 2023

Bumps System.IdentityModel.Tokens.Jwt from 6.22.1 to 6.27.0.

Release notes

Sourced from System.IdentityModel.Tokens.Jwt's releases.

6.26.1

Releasing a Hotfix for Wilson 6.26.0 that reverts async/await changes made in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#1996 to address a performance reduction issue.

6.26.0

Servicing release Introducing a new boolean TokenValidationParameter LogTokenId. AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2002 Update System.Text.Encodings.Web AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#1997 Update ValidateToken call stack fully async AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#1996 JsonWebTokenHandler to return the JsonWebToken on validation failure AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#1989 Update documentation of DefaultTokenLifetimeInMinutes AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#1988

6.25.1

Servicing release .net was throwing when JWT tokens contained claims that used escaped characters. AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#1975 Fixed Typo in comments AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#1971 Added inner exception to help diagnose when reading JWT tokens fails. AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#1968 Updated comments to improve understanding of RoleClaimTypeRetriever and NameClaimTypeRetriever AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#1960

6.25.0

Add Instance property bag that is cleared when Clone is called. Added comments to JsonWebTokenHandler and JwtSecurityTokenHandler to emphasize that ReadToken does not validate the token. #1952 #1954

6.24.0

Single feature to control if exceptions are logged for Audience and Issuer failures. Sometimes multiple policies are used, when a subsequent policy succeeds the upper layer can decide if previous exceptions should be logged. #1949

6.23.1

A simple 'dot' release to fix an issue where JsonWebTokenHandler virtual CreateClaimsIdentity was not called. AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#1940

6.23.0

#1934 JsonWebToken and JsonWebTokenHandler use System.Text.Json for JSON parsing for targets Net61+.

... (truncated)

Changelog

Sourced from System.IdentityModel.Tokens.Jwt's changelog.

See the release notes for details on bug fixes and added features.

6.26.1

Bug Fixes:

Releasing a Hotfix for Wilson 6.26.0 that reverts async/await changes made in #1996 to address a performance reduction issue.

  • Changes are in #2015
  • Root cause analysis and fix will be tracked in #2017
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 17, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants