Skip to content
This repository was archived by the owner on Jan 10, 2023. It is now read-only.

Bump System.IdentityModel.Tokens.Jwt from 6.11.0 to 6.13.1 in /BrowserCalls.Web.Test #395

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Oct 7, 2021

Bumps System.IdentityModel.Tokens.Jwt from 6.11.0 to 6.13.1.

Release notes

Sourced from System.IdentityModel.Tokens.Jwt's releases.

6.13.1

Updating comments to help improve correct usage #1705

SignedHttpRequests New exceptions and delegate for validation. #1704

Base64UrlEncoder performance improvements #1698

Improve comments to clarify API usage and avoid unintentional validation weakening #1687

Modify how internal caching runs tasks Change to starting the event queue task via the Task.Run() method so it is on the default task scheduler and will not interfere with caller's task scheduler as some custom task schedulers might be single threaded and execution can be blocked. The second change is replacing the BlockingCollection with ConcurrentQueue to prevent resource leaks #1696

Adding the BaseConfigurationManager and BaseConfiguration This simplifies access to first class properties such as RefreshInterval etc. Some of the properties in TokenValidationParameter were left as internal as they are required for a future feature that requires additional work. #1695

NOTE: Version 6.13.0 should NOT be used. In version 6.13.0, users were experiencing an issue where they could not use a ConfigurationManager where T is a custom class. This has been addressed in 6.13.1.

6.12.2

BugFixes

Stop the event queue task when event queue is empty (#1685)

6.12.1

BugFixes

  • Fix double instantiation of Uri in IsHttps() (#1676)

Enhancements and features

  • Enable deterministic builds for CI builds (#1672).
  • Remove wait on first force refresh (#1674)
  • Send additional data to metadata end point (#1678)

6.12.0

Bug fixes

  • Addressed security bugs (#1656, #1661, #1657).
  • Fixed the task leaking issue in the EventBasedLRUCache (#1667).

Enhancements and features

  • Added support for decryption using AesGcm (#1606).

... (truncated)

Commits
  • 3d152e4 Cesar/config fix (#1713)
  • 4f24eae started work on making class internal (#1711)
  • 8d6a36c Adding ConfigurationManager and Configuration classes in M.IM.Tokens (#1695)
  • be1c621 Integrate ServerNonce validation (#1704)
  • e42679d Updating comments to use inclusive terms (#1705)
  • 8b52cd4 Addressing the slow build times and associated test failures (#1702)
  • e2e64e5 Adding BaseConfigurationManager and BaseConfiguration classes in M.IM.Tokens ...
  • 5a77aab Skip tests that are failing
  • 7ec9507 Danny/task 1533722 default task scheduler dev (#1696)
  • 1faf943 Base64UrlEncoder performance improvements (#1698)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [System.IdentityModel.Tokens.Jwt](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet) from 6.11.0 to 6.13.1.
- [Release notes](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases)
- [Changelog](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/blob/dev/CHANGELOG.md)
- [Commits](AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@6.11.0...6.13.1)

---
updated-dependencies:
- dependency-name: System.IdentityModel.Tokens.Jwt
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Oct 7, 2021
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Nov 1, 2021

Superseded by #409.

@dependabot dependabot bot closed this Nov 1, 2021
@dependabot dependabot bot deleted the dependabot/nuget/BrowserCalls.Web.Test/System.IdentityModel.Tokens.Jwt-6.13.1 branch November 1, 2021 11:10
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants