Skip to content

Bump Microsoft.IdentityModel.* from 8.18.0 to 8.19.1 - #3879

Merged
Iarek Kovtunenko (iarekk) merged 1 commit into
masterfrom
iarekk/bump-identitymodel-8.19.1
Jun 19, 2026
Merged

Bump Microsoft.IdentityModel.* from 8.18.0 to 8.19.1#3879
Iarek Kovtunenko (iarekk) merged 1 commit into
masterfrom
iarekk/bump-identitymodel-8.19.1

Conversation

@iarekk

@iarekk Iarek Kovtunenko (iarekk) commented Jun 19, 2026

Copy link
Copy Markdown
Collaborator

Bump MicrosoftIdentityModelVersion from 8.18.0 to 8.19.1 in Directory.Build.props.

Recreates the clean single-line version bump from #3877 (which Dependabot closed when it superseded with the cluttered #3878, now also deleted).

Prerequisite: #3875 (System.Formats.Asn1 bump to 10.0.2) already merged.

Release notes (8.19.0 + 8.19.1)

  • ML-DSA (FIPS 204) post-quantum signature support
  • DPoP hardening (fail-closed on replay, RFC 3986 htu normalization)
  • Custom crypto providers cached in CryptoProviderFactory
  • JKU retrieval: automatic redirects disabled on default HttpClient
  • IssuerSigningKeyResolverUsingConfiguration priority fix in JwtSecurityTokenHandler
  • Various null-handling and buffer-management fixes

@iarekk
Bump Microsoft.IdentityModel.* from 8.18.0 to 8.19.1
359e05d 
Recreates the clean version bump from #3877 (closed by Dependabot).
Prerequisite System.Formats.Asn1 bump landed in #3875.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@iarekk
Iarek Kovtunenko (iarekk) requested a review from a team as a code owner June 19, 2026 15:38
@iarekk
Iarek Kovtunenko (iarekk) merged commit d995e69 into master Jun 19, 2026
4 checks passed
@iarekk
Iarek Kovtunenko (iarekk) deleted the iarekk/bump-identitymodel-8.19.1 branch June 19, 2026 17:29
This was referenced Jun 24, 2026
Merged
Merged
Closed
Merged
Closed
Closed
Merged
Merged
Merged
Merged
Merged
Merged
Merged
Merged
Closed
Closed
Closed
Merged
Merged
Closed
Closed
Merged
Merged
Merged
Merged
This was referenced Aug 13, 2026
Closed
Open
Closed
Closed
This was referenced Aug 23, 2026
Open
Closed
Closed
Merged
This was referenced Sep 7, 2026
Closed
Closed
Closed
Closed
Closed
Closed
This was referenced Sep 18, 2026
Closed
Closed
Closed
Closed
Closed
Closed
Merged
This was referenced Sep 28, 2026
Open
Closed
Merged
Closed
Open
This was referenced Oct 6, 2026
Open
Closed
Open
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@neha-bhargava Neha Bhargava (neha-bhargava) neha-bhargava approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@iarekk @neha-bhargava