Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the all-dependencies group with 7 updates #16304

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 12, 2024

Bumps the all-dependencies group with 7 updates:

Package From To
Markdig 0.36.2 0.37.0
AWSSDK.S3 3.7.104.11 3.7.309.3
Microsoft.Identity.Web 2.19.0 2.19.1
Microsoft.IdentityModel.Protocols.OpenIdConnect 7.5.1 7.6.0
Microsoft.Extensions.Http.Resilience 8.5.0 8.6.0
AWSSDK.Extensions.NETCore.Setup 3.7.7 3.7.301
AWSSDK.SecurityToken 3.7.101.60 3.7.300.105

Updates Markdig from 0.36.2 to 0.37.0

Release notes

Sourced from Markdig's releases.

0.37.0

Changes

馃悰 Bug Fixes

馃殌 Enhancements

馃О Misc

  • Update readme.md (fd226d53)
  • Update parsing-extensions.md (c75a11ec)

Full Changelog: 0.36.2...0.37.0

Published with dotnet-releaser

Commits
  • 1a1bbec Merge pull request #786 from MartinZikmund/feature/youtube-short-support
  • 68bd307 Add support for YouTube Shorts embedding
  • e486903 Test support for YouTube Shorts embedding
  • 8e22754 Merge pull request #785 from toothache/fix_issues
  • 93d88ab Fix math span calculation.
  • 000393f Fix invalid setext heading (#785)
  • a579689 Merge pull request #784 from Abrynos/case-invariant-alerts
  • c19ba5b Add fallback value in order to mark unknown alert kinds in some way as well
  • 03390e4 Misc.
  • 42bd65c Apply feedback
  • Additional commits viewable in compare view

Updates AWSSDK.S3 from 3.7.104.11 to 3.7.309.3

Commits

Updates Microsoft.Identity.Web from 2.19.0 to 2.19.1

Release notes

Sourced from Microsoft.Identity.Web's releases.

2.19.1

  • Updated MSAL .Net to 4.61.3
  • Updated Azure.Identity to 1.11.4
Changelog

Sourced from Microsoft.Identity.Web's changelog.

3.0.0-preview2

  • Updated MSAL .Net to 4.61.3
  • Updated Azure.Identity to 1.11.4

New features:

  • Change GetSignedAssertion public API. See issue #2853 for details.
  • Update to latest .NET 9 preview 4. See issue #2877 for details.

Pending Next Release

Commits

Updates Microsoft.IdentityModel.Protocols.OpenIdConnect from 7.5.1 to 7.6.0

Release notes

Sourced from Microsoft.IdentityModel.Protocols.OpenIdConnect's releases.

7.6.0

New Features:

  • Update JsonWebToken - extract and expose the method that reads the header/payload property values from the reader so it can be overridden in children classes to add any extra own logic. See issues #2581, #2583, and #2495 for details.

Bug Fixes:

  • JWE header algorithm is now compliant to IANA document. See issue #2089 for details.

Performance Improvements:

  • Reduce the number of internal array allocations that need to happen for each claim set, see PR #2596.

Fundamentals:

  • Add an AOT compatibility check on each PR to ensure only AOT compatible code is checked-in. See PR #2598.
  • Update perl scrip for OneBranch build. See PR #2602.
  • Add langversion 12 to benchmark tests. See PR #2601.
  • Removed unused build.cmd file. See PR #2605.
  • Create CodeQL exclusions file. See PR #2609.
  • Fix variable usage in AOT script. See PR #2610.
  • Move Microsoft.IdentityModel.Tokens delegates to a new file. See PR #2606

7.5.2

Bug Fixes:

Fundamentals:

Performance Improvements:

  • In .NET 6 or greater, use a temporary buffer to reduce intermediate allocation in VerifyRsa/VerifyECDsa. See PR #2589 for more details. By @鈥媏erhardt
  • Reduce allocations in ValidateSignature by using a collection expression instead of new List<SecurityKey> { key }, to optimize for the single element case. See PR #2586 for more details. By @鈥媏erhardt
  • Remove Task allocation in AadIssuerValidator. See PR #2584 for more details. By @鈥媏erhardt
Changelog

Sourced from Microsoft.IdentityModel.Protocols.OpenIdConnect's changelog.

7.6.0

New Features:

  • Update JsonWebToken - extract and expose the method that reads the header/payload property values from the reader so it can be overridden in children classes to add any extra own logic. See issues #2581, #2583, and #2495 for details.

Bug Fixes:

  • JWE header algorithm is now compliant to IANA document. See issue #2089 for details.

Performance Improvements:

  • Reduce the number of internal array allocations that need to happen for each claim set, see PR #2596.

Fundamentals:

  • Add an AOT compatibility check on each PR to ensure only AOT compatible code is checked-in. See PR #2598.
  • Update perl scrip for OneBranch build. See PR #2602.
  • Add langversion 12 to benchmark tests. See PR #2601.
  • Removed unused build.cmd file. See PR #2605.
  • Create CodeQL exclusions file. See PR #2609.
  • Fix variable usage in AOT script. See PR #2610.
  • Move Microsoft.IdentityModel.Tokens delegates to a new file. See PR #2606

7.5.2

Bug Fixes:

Fundamentals:

  • App Context Switches in Identity Model 7x are now documented here.

Performance Improvements:

  • In .NET 6 or greater, use a temporary buffer to reduce intermediate allocation in VerifyRsa/VerifyECDsa. See PR #2589 for more details.
  • Reduce allocations in ValidateSignature by using a collection expression instead of new List<SecurityKey> { key }, to optimize for the single element case. See PR #2586 for more details.
  • Remove Task allocation in AadIssuerValidator. See PR #2584 for more details.
Commits

Updates Microsoft.Extensions.Http.Resilience from 8.5.0 to 8.6.0

Commits

Updates AWSSDK.Extensions.NETCore.Setup from 3.7.7 to 3.7.301

Commits
  • 259d3b5 Commit version number update changes
  • 6ca0210 This release adds the new API UpdateRoute that allows route to be updated to ...
  • dabe47b AWS Elemental MediaConvert SDK has released support for automatic DolbyVision...
  • 06a8b39 New and modified APIs for the Post-Migration Framework
  • 12a6e3f SageMaker Ground Truth now supports Virtual Private Cloud. Customers can laun...
  • 0ff327e This release adds visualizations to the scheduled inference results. Users wi...
  • 8a25e07 Commit version number update changes
  • 750067a This release introduces 1 update to the GetProducts API. The serviceCode attr...
  • f8b7773 Until today, the service supported only RSA host keys and user keys. Now with...
  • facbbd4 Documentation updates for Amazon API Gateway
  • Additional commits viewable in compare view

Updates AWSSDK.SecurityToken from 3.7.101.60 to 3.7.300.105

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [Markdig](https://github.com/xoofx/markdig) | `0.36.2` | `0.37.0` |
| [AWSSDK.S3](https://github.com/aws/aws-sdk-net) | `3.7.104.11` | `3.7.309.3` |
| [Microsoft.Identity.Web](https://github.com/AzureAD/microsoft-identity-web) | `2.19.0` | `2.19.1` |
| [Microsoft.IdentityModel.Protocols.OpenIdConnect](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet) | `7.5.1` | `7.6.0` |
| [Microsoft.Extensions.Http.Resilience](https://github.com/dotnet/extensions) | `8.5.0` | `8.6.0` |
| [AWSSDK.Extensions.NETCore.Setup](https://github.com/aws/aws-sdk-net) | `3.7.7` | `3.7.301` |
| [AWSSDK.SecurityToken](https://github.com/aws/aws-sdk-net) | `3.7.101.60` | `3.7.300.105` |


Updates `Markdig` from 0.36.2 to 0.37.0
- [Release notes](https://github.com/xoofx/markdig/releases)
- [Changelog](https://github.com/xoofx/markdig/blob/master/changelog.md)
- [Commits](xoofx/markdig@0.36.2...0.37.0)

Updates `AWSSDK.S3` from 3.7.104.11 to 3.7.309.3
- [Changelog](https://github.com/aws/aws-sdk-net/blob/main/SDK.CHANGELOG.MD)
- [Commits](https://github.com/aws/aws-sdk-net/commits)

Updates `Microsoft.Identity.Web` from 2.19.0 to 2.19.1
- [Release notes](https://github.com/AzureAD/microsoft-identity-web/releases)
- [Changelog](https://github.com/AzureAD/microsoft-identity-web/blob/master/changelog.md)
- [Commits](https://github.com/AzureAD/microsoft-identity-web/commits)

Updates `Microsoft.IdentityModel.Protocols.OpenIdConnect` from 7.5.1 to 7.6.0
- [Release notes](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases)
- [Changelog](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/blob/dev/CHANGELOG.md)
- [Commits](AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@7.5.1...7.6.0)

Updates `Microsoft.Extensions.Http.Resilience` from 8.5.0 to 8.6.0
- [Release notes](https://github.com/dotnet/extensions/releases)
- [Commits](https://github.com/dotnet/extensions/commits)

Updates `AWSSDK.Extensions.NETCore.Setup` from 3.7.7 to 3.7.301
- [Changelog](https://github.com/aws/aws-sdk-net/blob/main/SDK.CHANGELOG.MD)
- [Commits](aws/aws-sdk-net@3.7.7.0...3.7.301.0)

Updates `AWSSDK.SecurityToken` from 3.7.101.60 to 3.7.300.105
- [Changelog](https://github.com/aws/aws-sdk-net/blob/main/SDK.CHANGELOG.MD)
- [Commits](https://github.com/aws/aws-sdk-net/commits)

---
updated-dependencies:
- dependency-name: Markdig
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: AWSSDK.S3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: Microsoft.Identity.Web
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: Microsoft.IdentityModel.Protocols.OpenIdConnect
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: Microsoft.Extensions.Http.Resilience
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: AWSSDK.Extensions.NETCore.Setup
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: AWSSDK.SecurityToken
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Jun 12, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github Jun 13, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file .NET Pull requests that update .net code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant