Bump Microsoft.Identity.Client from 4.41.0 to 4.48.0

[dependabot]

Bumps Microsoft.Identity.Client from 4.41.0 to 4.48.0.

Release notes

Sourced from Microsoft.Identity.Client's releases.

4.48.0

New Features

• Removed support for deprecated net5.0-windows10.0.17763.0 target. See 3770 and note below.
• Added support for net6.0 and net6.0-windows10.0.17763.0 targets. See 3682 and note below.
• Removed support for old xamarinmac20 target. See 3722.
• WithProofOfPossession for public client applications is now generally available. See 3767.
• Added telemetry to log Proof-of-Possession usage. See 3718.
• Exposed tenant profiles for all authorities which are tenanted (B2C and dSTS). See 3703.
• Now logging MSAL version to common telemetry client. See 3745.
• Updated guidance on retry policies. See Retry Policy wiki and 3561.

Bug Fixes

• Fixed a NullReferenceException related to authority URLs when calling AcquireTokenSilent with an Operating System account in apps using WAM. See 3769.
• Fixed a NullReferenceException when using preview broker and calling AcquireTokenSilent with MSA account and MSA-PT enabled. See 3743.
• Added an Exported attribute to Android activities to be compliant with Android OS 12.1 (API 32) and above requirements. See 3680.
• Fixed incorrect home account details in AuthenticationResult of AcquireTokenByRefreshToken. See 3736.

.NET 5 and .NET 6 public client applications

If you have a Windows application which targets net5.0, net5.0-windows, net5.0-windowsX, net6.0, or net6.0-windows and would like to use either WAM or embedded browser, you must change the app target to at least net6.0-windows10.0.17763.0. System browser works on all of the above targets.
The recommendation is to use new Windows broker preview, as it offers better experience than current WAM implementation and will be generally available in the near future. If you want to try the new broker preview, install the NuGet package Microsoft.Identity.Client.Broker and call the .WithBrokerPreview() method. For details, see https://aka.ms/msal-net-wam.

4.47.2

New Features

• Hide legacy API's that are available only to internal Microsoft only (1P) applications. See 3670.
• Soft deprecate WithAuthority API on AcquireTokenXXX methods. Instead use WithTenantId or WithTenantIdFromAuthority, or WithB2CAuthority for B2C authorities. See #3716
• Logging error codes to MSAL Telemetry. See 3595
• Add more logging around client creds and claims. See 3707.
• Improve extensibility APIs to support new POP

Bug Fixes

• Improved error messages when new preview broker exceptions are thrown. #3696
• MSAL will now throw an exception if no scopes are passed for the new preview Broker or for B2C scenarios. See #3675
• Removed .NET 6 MacCatalyst target because MSAL.NET doesn't currently support it. See #3693
• Throw an exception when new WAM DLLs are not loaded when invoking the new WAM preview broker. See #3699

4.47.1

Fixes an internal (Microsoft 1P only) NuGet feed issue. See #3689

4.47.0

New Features

• Support for .NET MAUI is now generally available for iOS, Windows and Android targets. The package also works with UWP. Refer to MauiStatus.md for details.
• The new MSAL logging feature is now generally available. WithExperimentalFeatures() is no longer required when calling WithLogging(). See 3548, wiki.
• Adding IsProofOfPosessionSupportedByClient api to be used to determine if the current broker is able to support Proof-of-Posession. See 3496
• Adding ability to turn off the default retry-once policy on 5xx errors. See 2877

... (truncated)

Changelog

Sourced from Microsoft.Identity.Client's changelog.

4.48.0

New Features

• Removed support for deprecated net5.0-windows10.0.17763.0 target. See 3770 and note below.
• Added support for net6.0 and net6.0-windows10.0.17763.0 targets. See 3682 and note below.
• Removed support for old xamarinmac20 target. See 3722.
• WithProofOfPossession for public client applications is now generally available. See 3767.
• Added telemetry to log Proof-of-Possession usage. See 3718.
• Exposed tenant profiles for all authorities which are tenanted (B2C and dSTS). See 3703.
• Now logging MSAL version to common telemetry client. See 3745.
• Updated guidance on retry policies. See Retry Policy wiki and 3561.

Bug Fixes

• Fixed a NullReferenceException related to authority URLs when calling AcquireTokenSilent with an Operating System account in apps using WAM. See 3769.
• Fixed a NullReferenceException when using preview broker and calling AcquireTokenSilent with MSA account and MSA-PT enabled. See 3743.
• Added an Exported attribute to Android activities to be compliant with Android OS 12.1 (API 32) and above requirements. See 3680.
• Fixed incorrect home account details in AuthenticationResult of AcquireTokenByRefreshToken. See 3736.

.NET 5 and .NET 6 public client applications

If you have a Windows application which targets net5.0, net5.0-windows, net5.0-windowsX, net6.0, or net6.0-windows and would like to use either WAM or embedded browser, you must change the app target to at least net6.0-windows10.0.17763.0. System browser works on all of the above targets.
The recommendation is to use new Windows broker preview, as it offers better experience than current WAM implementation and will be generally available in the near future. If you want to try the new broker preview, install the NuGet package Microsoft.Identity.Client.Broker and call the .WithBrokerPreview() method. For details, see https://aka.ms/msal-net-wam.

4.47.2

New Features

• Hide legacy API's that are available only to internal Microsoft only (1P) applications. See 3670.
• Soft deprecate WithAuthority API on AcquireTokenXXX methods. Instead use WithTenantId or WithTenantIdFromAuthority, or WithB2CAuthority for B2C authorities. See #3716
• Logging error codes to MSAL Telemetry. See 3595
• Add more logging around client creds and claims. See 3707.
• Improve extensibility APIs to support new POP

Bug Fixes

• Improved error messages when new preview broker exceptions are thrown. #3696
• MSAL will now throw an exception if no scopes are passed for the new preview Broker or for B2C scenarios. See #3675
• Removed .NET 6 MacCatalyst target because MSAL.NET doesn't currently support it. See #3693
• Throw an exception when new WAM DLLs are not loaded when invoking the new WAM preview broker. See #3699

4.47.1

Supportability

• Fixes an internal (Microsoft 1P only) NuGet feed issue. See #3689

4.47.0

New Features

... (truncated)

Commits

• 2a0d410 NRE fix in authority creation logic when using ATS with OS account. (#3779)
• bf67d67 Make the enum internal (#3776)
• 1fd3cf5 Log token type to indicate pop usage (#3771)
• f6ac12f Refactor IsConfidentialClient and remove experimental flag from PCA POP (#3768)
• 21f344d Broker Silent NRE (#3763)
• fdcfeeb Add net6 and net6-winX, remove net5-winX target (#3700)
• 8a47b20 Resolving issue with IByRefreshToken (#3756)
• a19b288 Expose tenant profiles on all authorities which are tenanted (B2C and dSTS) ...
• c2edfdc Log MsalVersion to ITelemetryClient (#3747)
• 479f5af Add a test demonstrating retry policy (#3733)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #415.