Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 56bc718a-9906-4477-bedb-cd974a527389

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 94610a2f-ffc2-48a7-bae2-aed1c64795a0

Document the preview and GA image changes and their bundled Microsoft.Identity.Web versions.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

…cache hits (#4072)

* Fix FIC telemetry enrichment during warm-up and assertion cache hits

Forward operation-local enrichment to credential loaders and add an early default callback. Delegate built-in OIDC and managed-identity assertion caching to MSAL while preserving fallback and custom-provider caching.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Refine FIC assertion caching and request context

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 7cbc27ae-808b-448b-9eed-2b32355607f3

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 7cbc27ae-808b-448b-9eed-2b32355607f3

* Bump the notsecurity group with 4 updates

Bumps Microsoft.Identity.Client from 4.90.0 to 4.90.1
Bumps Microsoft.Identity.Client.KeyAttestation from 4.90.0 to 4.90.1
Bumps Microsoft.IdentityModel.JsonWebTokens from 8.22.0 to 8.23.0
Bumps Microsoft.IdentityModel.Tokens.Saml from 5.7.1 to 5.7.2

---
updated-dependencies:
- dependency-name: Microsoft.Identity.Client
  dependency-version: 4.90.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: notsecurity
- dependency-name: Microsoft.Identity.Client.KeyAttestation
  dependency-version: 4.90.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: notsecurity
- dependency-name: Microsoft.IdentityModel.JsonWebTokens
  dependency-version: 8.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: notsecurity
- dependency-name: Microsoft.IdentityModel.Tokens.Saml
  dependency-version: 5.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: notsecurity
- dependency-name: Microsoft.IdentityModel.Tokens.Saml
  dependency-version: 5.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: notsecurity
...

Signed-off-by: dependabot[bot] 

* Fix instance discovery mock requeue

Ensure every queued token handler is restored when MSAL performs instance discovery, and cover the multi-request sequence that exhausted the mock queue in CI.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 0916f594-4394-4b78-ae04-2e5a3398135b

* Cover discovery before either FIC token request

Verify discovery at either queue position, preserved token responses and URL expectations, and strict queue exhaustion. Explain why a different cloud can require discovery after a cached first leg.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 0916f594-4394-4b78-ae04-2e5a3398135b

---------

Signed-off-by: dependabot[bot] 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Neha Bhargava <61847233+neha-bhargava@users.noreply.github.com>
Co-authored-by: Neha Bhargava 
Copilot-Session: 0916f594-4394-4b78-ae04-2e5a3398135b