[deps] Auth: Update Auth dotnet dependencies to v10.0.10

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
Microsoft.AspNetCore.Authentication.JwtBearer (source)	[10.0.8] → [10.0.10]
Microsoft.Extensions.Identity.Stores (source)	[10.0.8] → [10.0.10]

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

dotnet/dotnet (Microsoft.AspNetCore.Authentication.JwtBearer)

v10.0.10

v10.0.9

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "every 2nd week starting on the 2 week of the year before 4am on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: src/Core/packages.lock.json, bitwarden_license/src/Commercial.Core/packages.lock.json, bitwarden_license/test/Commercial.Core.Test/packages.lock.json, src/Billing/packages.lock.json, AppHost/packages.lock.json, test/Billing.IntegrationTest/packages.lock.json, test/Billing.Test/packages.lock.json, bitwarden_license/src/Commercial.Infrastructure.EntityFramework/packages.lock.json, bitwarden_license/src/Scim/packages.lock.json, bitwarden_license/test/Scim.IntegrationTest/packages.lock.json, bitwarden_license/test/Scim.Test/packages.lock.json, bitwarden_license/src/Services/Pam/packages.lock.json, bitwarden_license/test/Services/Pam.Test/packages.lock.json, bitwarden_license/src/Sso/packages.lock.json, bitwarden_license/test/SSO.Test/packages.lock.json, bitwarden_license/test/Sso.IntegrationTest/packages.lock.json, perf/MicroBenchmarks/packages.lock.json, src/Admin/packages.lock.json, test/Admin.Test/packages.lock.json, src/Api/packages.lock.json, test/Api.IntegrationTest/packages.lock.json, test/Api.Test/packages.lock.json, util/SqlServerEFScaffold/packages.lock.json, src/Events/packages.lock.json, test/Events.IntegrationTest/packages.lock.json, test/Events.Test/packages.lock.json, src/EventsProcessor/packages.lock.json, test/EventsProcessor.Test/packages.lock.json, src/Icons/packages.lock.json, test/Icons.Test/packages.lock.json, src/Identity/packages.lock.json, test/Identity.IntegrationTest/packages.lock.json, test/Identity.Test/packages.lock.json, test/IntegrationTestCommon/packages.lock.json, test/SeederApi.IntegrationTest/packages.lock.json, src/Infrastructure.Dapper/packages.lock.json, src/SharedWeb/packages.lock.json, src/Notifications/packages.lock.json, test/Notifications.Test/packages.lock.json, test/SharedWeb.Test/packages.lock.json, util/Seeder/packages.lock.json, util/SeederApi/packages.lock.json, util/SeederUtility/packages.lock.json, test/Infrastructure.Dapper.Test/packages.lock.json, test/Infrastructure.EFIntegration.Test/packages.lock.json, test/Infrastructure.IntegrationTest/packages.lock.json, src/Infrastructure.EntityFramework/packages.lock.json, util/MySqlMigrations/packages.lock.json, util/PostgresMigrations/packages.lock.json, util/SqliteMigrations/packages.lock.json, src/Libraries/OrganizationAuthorization/packages.lock.json, test/Libraries/OrganizationAuthorization.Test/packages.lock.json, test/Common/packages.lock.json, test/Core.Test/packages.lock.json, test/Core.IntegrationTest/packages.lock.json, util/Migrator/packages.lock.json, util/MsSqlMigratorUtility/packages.lock.json, util/Setup/packages.lock.json, test/Setup.Test/packages.lock.json

  Determining projects to restore...
  Restored /tmp/renovate/repos/github/bitwarden/server/util/SqliteMigrations/SqliteMigrations.csproj (in 5.55 sec).
  Restored /tmp/renovate/repos/github/bitwarden/server/util/PostgresMigrations/PostgresMigrations.csproj (in 50 ms).
  Restored /tmp/renovate/repos/github/bitwarden/server/util/MySqlMigrations/MySqlMigrations.csproj (in 42 ms).
/tmp/renovate/repos/github/bitwarden/server/util/Migrator/Migrator.csproj : error NU1605: Warning As Error: Detected package downgrade: Microsoft.Extensions.Logging from 10.0.10 to 10.0.8. Reference the package directly from the project to select a different version.  [/tmp/renovate/repos/github/bitwarden/server/AppHost/AppHost.csproj]
/tmp/renovate/repos/github/bitwarden/server/util/Migrator/Migrator.csproj : error NU1605:  Migrator -> Core -> Microsoft.Extensions.Identity.Stores 10.0.10 -> Microsoft.Extensions.Logging (>= 10.0.10)  [/tmp/renovate/repos/github/bitwarden/server/AppHost/AppHost.csproj]
/tmp/renovate/repos/github/bitwarden/server/util/Migrator/Migrator.csproj : error NU1605:  Migrator -> Microsoft.Extensions.Logging (= 10.0.8) [/tmp/renovate/repos/github/bitwarden/server/AppHost/AppHost.csproj]
  Failed to restore /tmp/renovate/repos/github/bitwarden/server/util/Migrator/Migrator.csproj (in 1.11 sec).
  Restored /tmp/renovate/repos/github/bitwarden/server/src/SharedWeb/SharedWeb.csproj (in 246 ms).
  Restored /tmp/renovate/repos/github/bitwarden/server/src/Notifications/Notifications.csproj (in 1.29 sec).
  Restored /tmp/renovate/repos/github/bitwarden/server/src/Libraries/SsrfProtection/SsrfProtection.csproj (in 30 ms).
  Restored /tmp/renovate/repos/github/bitwarden/server/src/Libraries/SerilogFileLogging/SerilogFileLogging.csproj (in 10 ms).
  Restored /tmp/renovate/repos/github/bitwarden/server/src/Libraries/OrganizationAuthorization/OrganizationAuthorization.csproj (in 16 ms).
  Restored /tmp/renovate/repos/github/bitwarden/server/src/Libraries/ExceptionHandling/ExceptionHandling.csproj (in 4 ms).
  Restored /tmp/renovate/repos/github/bitwarden/server/src/Libraries/Data/Data.csproj (in 2 ms).
  Restored /tmp/renovate/repos/github/bitwarden/server/src/Infrastructure.EntityFramework/Infrastructure.EntityFramework.csproj (in 610 ms).
  Restored /tmp/renovate/repos/github/bitwarden/server/src/Infrastructure.Dapper/Infrastructure.Dapper.csproj (in 21 ms).
  Restored /tmp/renovate/repos/github/bitwarden/server/src/Identity/Identity.csproj (in 21 ms).
  Restored /tmp/renovate/repos/github/bitwarden/server/src/Icons/Icons.csproj (in 128 ms).
  Restored /tmp/renovate/repos/github/bitwarden/server/src/HttpExtensions/HttpExtensions.csproj (in 3 ms).
  Restored /tmp/renovate/repos/github/bitwarden/server/src/EventsProcessor/EventsProcessor.csproj (in 41 ms).
  Restored /tmp/renovate/repos/github/bitwarden/server/src/Events/Events.csproj (in 23 ms).
  Restored /tmp/renovate/repos/github/bitwarden/server/src/Core/Core.csproj (in 46 ms).
  Restored /tmp/renovate/repos/github/bitwarden/server/src/Billing/Billing.csproj (in 698 ms).
  Restored /tmp/renovate/repos/github/bitwarden/server/src/Api/Api.csproj (in 1.01 sec).
  Restored /tmp/renovate/repos/github/bitwarden/server/src/Admin/Admin.csproj (in 51 ms).
  Restored /tmp/renovate/repos/github/bitwarden/server/bitwarden_license/src/Sso/Sso.csproj (in 801 ms).
  Restored /tmp/renovate/repos/github/bitwarden/server/bitwarden_license/src/Services/Pam/Pam.csproj (in 27 ms).
  Restored /tmp/renovate/repos/github/bitwarden/server/bitwarden_license/src/Scim/Scim.csproj (in 49 ms).
  Restored /tmp/renovate/repos/github/bitwarden/server/bitwarden_license/src/Commercial.Infrastructure.EntityFramework/Commercial.Infrastructure.EntityFramework.csproj (in 42 ms).
  Restored /tmp/renovate/repos/github/bitwarden/server/bitwarden_license/src/Commercial.Core/Commercial.Core.csproj (in 36 ms).
  Restored /tmp/renovate/repos/github/bitwarden/server/AppHost/AppHost.csproj (in 13.71 sec).

[bitwarden-bot]

Internal tracking:

• ID: PM-40593
• Link: https://bitwarden.atlassian.net/browse/PM-40593

[github-actions]

🤖 Bitwarden Claude Code Review

Overall Assessment: REQUEST CHANGES

This is a Renovate PR bumping two existing Microsoft dependencies (Microsoft.AspNetCore.Authentication.JwtBearer, Microsoft.Extensions.Identity.Stores) from 10.0.8 to 10.0.9 in src/Core/Core.csproj. Both are patch updates to already-approved dependencies, so no AppSec approval is required. However, the manifest change was not accompanied by a lock file update, which will break locked-mode restore.

Code Review Details

• ⚠️ : Manifest bumped to 10.0.9 but src/Core/packages.lock.json still pins 10.0.8; with RestorePackagesWithLockFile=true, locked-mode restore/build will fail. Regenerate and commit the lock file. (This matches the "Artifact update problem" Renovate reported.)
  • src/Core/Core.csproj:45
  • src/Core/packages.lock.json:191

Dependency Changes

Package	Change	Ecosystem
Microsoft.AspNetCore.Authentication.JwtBearer	10.0.8 → 10.0.9	NuGet
Microsoft.Extensions.Identity.Stores	10.0.8 → 10.0.9	NuGet