4.13.2

What's Changed

• Apply reserved-header handling on the request-clone path and cover all X-MS-TOKEN- headers by @iNinja in #3915
• Restore independent PR pipeline + pool-aware MI identity + net462/472 unit tests by @iarekk in #3935
• Post-release 4.13.0: changelog and public API shipped move by @neha-bhargava in #3937
• Remove redundant 'Run unit tests' GitHub Action by @iarekk in #3939
• Apply consistent redirect-URI validation on AccountController.SignIn by @iNinja in #3940
• Fix duplicate logging of MsalUiRequiredException (in-repo copy of #3910) by @iarekk in #3941
• Use MSAL's recent UserFIC API for agentic flows by @Avery-Dunn in #3842
• Restore CustomizeHttpRequestMessage to run after the authorization header by @neha-bhargava in #3943
• Bump Microsoft.IdentityModel.Tokens.Saml from 5.7.0 to 8.19.1 by @dependabot[bot] in #3909
• Revert #3909: keep OWIN Saml/WsFederation on 5.7.0 by @iarekk in #3944
• Bump Microsoft.Identity.Abstractions from 12.4.0 to 12.5.0 by @neha-bhargava in #3947
• Add OnBeforeAuthHeaderCreation / OnAfterAuthHeaderCreation hooks to DownstreamApi by @neha-bhargava in #3942
• Update IdentityModelV5Version and SamlPackageVersion to 5.7.1 in proj… by @trwalke in #3950
• Rename retired MSALMSIV2 agent pool to MISEManagedIdentity by @gladjohn with @Copilot in #3949
• Improve IDW10109 error handling for credential loading failures by @Avery-Dunn in #3946
• Bump MSAL dependencies to 4.86.1 in central props by @gladjohn with @Copilot in #3953
• Bump the notsecurity group with 3 updates by @dependabot[bot] in #3954

Full Changelog: 4.13.0...4.13.2