[deps]: Update nuget minor by renovate[bot] · Pull Request #48 · bitwarden/key-connector

renovate · 2023-06-11T02:12:28Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
AWSSDK.KeyManagementService	`[3.7.2.6]` → `[3.7.506.4]`
Azure.Identity (source)	`[1.11.4]` → `[1.17.1]`
Azure.Security.KeyVault.Certificates (source)	`[4.5.1]` → `[4.8.0]`
Azure.Security.KeyVault.Keys (source)	`[4.5.0]` → `[4.8.0]`
Azure.Security.KeyVault.Secrets (source)	`[4.5.0]` → `[4.8.0]`
Azure.Storage.Blobs (source)	`[12.19.1]` → `[12.27.0]`
Google.Cloud.Kms.V1	`[3.7.0]` → `[3.23.0]`
Microsoft.EntityFrameworkCore.Design (source)	`[8.0.11]` → `[8.0.24]`
Microsoft.EntityFrameworkCore.Relational (source)	`[8.0.11]` → `[8.0.24]`
Microsoft.EntityFrameworkCore.SqlServer (source)	`[8.0.2]` → `[8.0.24]`
Microsoft.EntityFrameworkCore.Sqlite (source)	`[8.0.2]` → `[8.0.24]`
Microsoft.NET.Test.Sdk	`[17.10.0]` → `[17.14.1]`
MongoDB.Driver (source)	`[2.22.0]` → `[2.30.0]`
NSubstitute (source)	`[5.1.0]` → `[5.3.0]`
Pkcs11Interop (source)	`[5.1.2]` → `[5.3.0]`
Pomelo.EntityFrameworkCore.MySql	`[8.0.1]` → `[8.0.3]`
Serilog.AspNetCore	`[8.0.1]` → `[8.0.3]`
Serilog.Settings.Configuration	`[8.0.0]` → `[8.0.4]`
VaultSharp	`[1.7.0]` → `[1.17.5.1]`
coverlet.collector	`[6.0.2]` → `[6.0.4]`
dotnet-ef (source)	`8.0.2` → `8.0.24`
xunit	`[2.8.1]` → `[2.9.2]`
xunit.runner.visualstudio	`[3.0.2]` → `[3.1.5]`

Release Notes

aws/aws-sdk-net (AWSSDK.KeyManagementService)

`v3.7.506`

`v3.7.504`

`v3.7.503`

`v3.7.502`

`v3.7.500`

`v3.7.403.1`

Compare Source

`v3.7.403`

`v3.7.402`

Compare Source

`v3.7.401`

`v3.7.400`

`v3.7.304`

`v3.7.303`

`v3.7.302`

`v3.7.301`

`v3.7.300`

`v3.7.200`

`v3.7.104`

`v3.7.103`

`v3.7.102`

`v3.7.101`

`v3.7.4`

`v3.7.3`

Azure/azure-sdk-for-net (Azure.Identity)

`v1.17.1`

Compare Source

1.17.1 (2025-11-18)

Other Changes

Updated Microsoft.Identity.Client and Microsoft.Identity.Client.Extensions.Msal dependencies to version 4.78.0.

`v1.17.0`

Compare Source

1.17.0 (2025-10-07)

Bugs Fixed

TenantId is now configured via MSAL's WithTenantId instead of WithTenantIdFromAuthority to prevent malformed Uris to the authority.

Other Changes

Deprecated BrowserCustomizationOptions.UseEmbeddedWebView property. This option requires additional dependencies on Microsoft.Identity.Client.Desktop and is no longer supported. Consider using brokered authentication instead.

`v1.16.0`

Compare Source

1.16.0 (2025-09-09)

Features Added

Added a new DefaultAzureCredential constructor that accepts a custom environment variable name for credential configuration. This provides flexibility beyond the default AZURE_TOKEN_CREDENTIALS environment variable. The constructor accepts any environment variable name and uses the same credential selection logic as the existing AZURE_TOKEN_CREDENTIALS processing.
Added DefaultAzureCredential.DefaultEnvironmentVariableName constant property that returns "AZURE_TOKEN_CREDENTIALS" for convenience when referencing the default environment variable name.
AzureCliCredential, AzurePowerShellCredential, and AzureDeveloperCliCredential now throw an AuthenticationFailedException when the TokenRequestContext includes claims, as these credentials do not support claims challenges. The exception message includes guidance for handling such scenarios.
When AZURE_TOKEN_CREDENTIALS or the equivalent custom environment variable is configured to ManagedIdentityCredential, the DefaultAzureCredential does not issue a probe request and performs retries with exponential backoff.

Bugs Fixed

Fixed AzureDeveloperCliCredential hanging when the AZD_DEBUG environment variable is set by adding the --no-prompt flag to prevent interactive prompts (#52005).
BrokerCredential is now included in the chain when AZURE_TOKEN_CREDENTIALS is set to dev.
Fixed an issue that prevented ManagedIdentityCredential from utilizing the token cache in Workload Identity Federation environments.
Fixed a bug in DefaultAzureCredential that caused the credential chain to be constructed incorrectly when using AZURE_TOKEN_CREDENTIALS in combination with DefaultAzureCredentialOptions.

Other Changes

The BrokerCredential is now always included in the DefaultAzureCredential chain. If the Azure.Identity.Broker package is not referenced, an exception will be thrown when GetToken is called, making its behavior consistent with the rest of the credentials in the chain.
Updated Microsoft.Identity.Client dependency to version 4.76.0.
Updated Microsoft.Identity.Client.Extensions.Msal dependency to version 4.76.0.

`v1.15.0`

Compare Source

1.15.0 (2025-08-07)

Breaking Changes

Behavioral Breaking Changes

Deprecated SharedTokenCacheCredential. The supporting credential (SharedTokenCacheCredential) was a legacy mechanism for authenticating clients using credentials provided to Visual Studio. For brokered authentication, consider using InteractiveBrowserCredential instead. The following changes have been made:
- SharedTokenCacheCredential class is marked as [Obsolete] and [EditorBrowsable(EditorBrowsableState.Never)]
- SharedTokenCacheCredentialOptions class is marked as [Obsolete] and [EditorBrowsable(EditorBrowsableState.Never)]
- DefaultAzureCredentialOptions.ExcludeSharedTokenCacheCredential property is marked as [Obsolete] and [EditorBrowsable(EditorBrowsableState.Never)]
- SharedTokenCacheUsername property is marked as [Obsolete] and [EditorBrowsable(EditorBrowsableState.Never)]
- SharedTokenCacheCredential is no longer included in the DefaultAzureCredential authentication flow

Bugs Fixed

Tenant ID comparisons in credential options are now case-insensitive. This affects AdditionallyAllowedTenants values which will now be matched against tenant IDs without case sensitivity, making the authentication more resilient to case differences in tenant IDs returned from WWW-Authenticate challenges (#51693).

Other Changes

BrokerAuthenticationCredential has been renamed as BrokerCredential.
Added the EditorBrowsable(Never) attribute to property VisualStudioCodeTenantId as TenantId is preferred. The VisualStudioCodeTenantId property exists only to provide backwards compatibility.

`v1.14.2`

Compare Source

1.14.2 (2025-07-10)

Other changes

Updated Microsoft.Identity.Client dependency to version 4.73.1

`v1.14.1`

Compare Source

1.14.1 (2025-07-08)

Bugs Fixed

Added support in AzurePowerShellCredential for the Az.Accounts 5.0.0+ (Az 14.0.0+) breaking change where Get-AzAccessToken returns PSSecureAccessToken with a SecureString Token property instead of plaintext.

`v1.14.0`

Compare Source

1.14.0 (2025-05-13)

Other Changes

Removed references to Username, Password, AZURE_USERNAME, and AZURE_PASSWORD in XML comments from EnvironmentCredentialOptions and EnvironmentCredential due to lack of MFA support. See MFA enforcement details.
Marked AZURE_USERNAME and AZURE_PASSWORD as obsolete due to lack of MFA support. See MFA enforcement details.
Added support for the AZURE_TOKEN_CREDENTIALS environment variable to DefaultAzureCredential, which allows for choosing between 'deployed service' and 'developer tools' credentials. Valid values are 'dev' for developer tools and 'prod' for deployed service.

`v1.13.2`

Compare Source

1.13.2 (2025-01-14)

Bugs Fixed

Fixed an issue where setting DefaultAzureCredentialOptions.TenantId twice throws an InvalidOperationException (#47035)
Fixed an issue where ManagedIdentityCredential does not honor the CancellationToken passed to GetToken and GetTokenAsync. (#47156)
Fixed an issue where some credentials in DefaultAzureCredential would not fall through to the next credential in the chain under certain exception conditions.
Fixed a regression in ManagedIdentityCredential when used in a ChainedTokenCredential where the invalid json responses do not fall through to the next credential in the chain. (#47470)

`v1.13.1`

Compare Source

1.13.1 (2025-11-19)

Other Changes

Updated Azure.Identity dependency to version 1.17.1

`v1.13.0`

Compare Source

1.13.0 (2024-10-14)

Features Added

ManagedIdentityCredential now supports specifying a user-assigned managed identity by object ID.

Bugs Fixed

If DefaultAzureCredential attempts to authenticate with the MangagedIdentityCredential and it receives either a failed response that is not json, it will now fall through to the next credential in the chain. #45184
Fixed the request sent in AzurePipelinesCredential so it doesn't result in a redirect response when an invalid system access token is provided.
Updated to version 4.65.0 of Microsoft.Identity.Client to address a bug preventing the use of alternate authority types such as dStS (4927) .

Other Changes

The logging level passed to MSAL now correlates to the log level configured on your configured AzureEventSourceListener. Previously, the log level was always set to Microsoft.Identity.Client.LogLevel.Info.
AzurePowerShellCredential now utilizes the AsSecureString parameter to Get-AzAccessToken for version 2.17.0 and greater of the Az.Accounts module.
Improved error logging for AzurePipelinesCredential.

`v1.12.1`

Compare Source

1.12.1 (2024-09-26)

Bugs Fixed

Updated to version 4.65.0 of Microsoft.Identity.Client to address a bug preventing the use of alternate authority types such as dStS (4927) .

`v1.12.0`

Compare Source

1.12.0 (2024-06-17)

Features Added

Added AzurePipelinesCredential for authenticating with Azure Pipelines service connections.
OnBehalfOfCredential now supports client assertion callbacks for acquiring tokens on behalf of a user.
All credentials now support setting RefreshOn value if received from MSAL.
ManagedIdentityCredential sets RefreshOn value of half the token lifetime for AccessTokens with an ExpiresOn value greater than 2 hours in the future.
ClientAssertionCredentialOptions now supports TokenCachePersistenceOptions for configuring token cache persistence.

googleapis/google-cloud-dotnet (Google.Cloud.Kms.V1)

`v3.23.0`: Google.Cloud.AIPlatform.V1 version 3.23.0

Compare Source

Changes in this release:

New features

Add VertexAISearch.engine option (commit 1fe1f81)
Add reranker config to RAG v1 API (commit 2e97dd3)

`v3.22.0`: Google.Cloud.PubSub.V1 version 3.22.0

Compare Source

Changes in this release:

New features

Deprecate enabled field for message transforms and add disabled field (commit d75a0b0)

Documentation improvements

Deprecate enabled field for message transforms and add disabled field (commit d75a0b0)
A comment for field code in message .google.pubsub.v1.JavaScriptUDF is changed (commit e82746a)

`v3.21.0`: Google.Cloud.PubSub.V1 version 3.21.0

Compare Source

Changes in this release:

New features

Add support for message transforms to Topic and Subscription (commit 97502ea)

Documentation improvements

Fix link for AnalyticsHubSubscriptionInfo (commit 97502ea)

`v3.20.0`: Google.Cloud.PubSub.V1 version 3.20.0

Compare Source

Changes in this release:

New features

Add Kafka-based sources to IngestionDataSourceSettings proto and IngestionFailureEvent proto (commit 9324e45)

`v3.19.0`: Google.Cloud.PubSub.V1 version 3.19.0

Compare Source

Changes in this release:

Bug fixes

Do not throw if a subscriber is disposed before being started (commit 04b8d8a)

New features

Add IngestionFailureEvent to the external proto (commit a51bbfd)
Support connection sharing across gRPC channels (commit 2e16e74)

`v3.18.0`: Google.Cloud.BigQuery.Storage.V1 version 3.18.0

Compare Source

New features

Update dependencies

`v3.17.0`: Google.Cloud.PubSub.V1 version 3.17.0

Compare Source

Changes in this release:

New features

Add ingestion Cloud Storage fields and Platform Logging fields to Topic (commit 5098b56)
Return listing information for subscriptions created via Analytics Hub (commit ce5de77)

Documentation improvements

Update documentation for 31 day subscription message retention (commit 950f588)

`v3.16.0`: Google.Cloud.PubSub.V1 version 3.16.0

Compare Source

Changes in this release:

New features

Add max messages batching for Cloud Storage subscriptions (commit 953eefe)

`v3.15.0`: Google.Cloud.PubSub.V1 version 3.15.0

Compare Source

Changes in this release:

New features

Add use_topic_schema for Cloud Storage Subscriptions (commit d557116)

`v3.14.0`: Google.Cloud.PubSub.V1 version 3.14.0

Compare Source

Changes in this release:

Bug fixes

Fix possible race condition when restarting the stream (commit 4410bb1)

New features

Add service_account_email for export subscriptions (commit f73410e)
Make StreamingPull fail after 100 consecutive failures (commit d9d658b)
Improve Pub/Sub streaming pull retries (commit 8537ed4)

The last two of these features can cause user-visible changes. In particular:

Persistently-failing streaming pulls will eventually cause a SubscriberClient to fail
Authentication-based failures (e.g. using an expired service account) will now cause a SubscriberClient to fail
SubscriberClient will retry immediately after a streaming pull stream is terminated server-side, if the pull was active for 45 seconds or more before being terminated. This should improve responsiveness in some situations.

All of these changes should be "net positive", but if they cause any issues, please file a bug.

`v3.13.0`: Google.Cloud.Firestore version 3.13.0

Compare Source

New features

Update documentation with .NET 10 compatibility workaround

`v3.12.0`: Google.Cloud.PubSub.V1 version 3.12.0

Compare Source

Changes in this release:

New features

Change netstandard2.1 target to netstandard2.0 (commit 82bea85)
Add custom datetime format for Cloud Storage subscriptions (commit cb33d77)

`v3.11.0`: Google.Cloud.Firestore version 3.11.0

Compare Source

New features

Implement support for Firestore type discriminators

`v3.10.0`: Google.Cloud.Kms.V1 version 3.10.0

Compare Source

Changes in this release:

New features

Change netstandard2.1 target to netstandard2.0 (commit 82bea85)

`v3.9.0`: Google.Cloud.BigQuery.V2 version 3.9.0

Compare Source

Changes in this release:

New features

Change netstandard2.1 target to netstandard2.0 (commit 82bea85)

`v3.8.0`: Google.Cloud.Kms.V1 version 3.8.0

Compare Source

Changes in this release:

Documentation improvements

Update comments (commit 38d35cd)
Minor formatting (commit 5f3c5d6)
Minor formatting (commit 21481f5)

dotnet/dotnet (Microsoft.EntityFrameworkCore.Design)

`v8.0.18`: .NET 8.0.18

You can build .NET 8.0 from the repository by cloning the release tag v8.0.18 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.