Skip to content

Bump System.IdentityModel.Tokens.Jwt from 6.22.1 to 6.27.0 - #33

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/System.IdentityModel.Tokens.Jwt-6.27.0
Closed

Bump System.IdentityModel.Tokens.Jwt from 6.22.1 to 6.27.0#33
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/System.IdentityModel.Tokens.Jwt-6.27.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Feb 16, 2023

Copy link
Copy Markdown
Contributor

Bumps System.IdentityModel.Tokens.Jwt from 6.22.1 to 6.27.0.

Release notes

Sourced from System.IdentityModel.Tokens.Jwt's releases.

6.26.1

Releasing a Hotfix for Wilson 6.26.0 that reverts async/await changes made in AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#1996 to address a performance reduction issue.

6.26.0

Servicing release Introducing a new boolean TokenValidationParameter LogTokenId. AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2002 Update System.Text.Encodings.Web AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#1997 Update ValidateToken call stack fully async AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#1996 JsonWebTokenHandler to return the JsonWebToken on validation failure AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#1989 Update documentation of DefaultTokenLifetimeInMinutes AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#1988

6.25.1

Servicing release .net was throwing when JWT tokens contained claims that used escaped characters. AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#1975 Fixed Typo in comments AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#1971 Added inner exception to help diagnose when reading JWT tokens fails. AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#1968 Updated comments to improve understanding of RoleClaimTypeRetriever and NameClaimTypeRetriever AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#1960

6.25.0

Add Instance property bag that is cleared when Clone is called. Added comments to JsonWebTokenHandler and JwtSecurityTokenHandler to emphasize that ReadToken does not validate the token. #1952 #1954

6.24.0

Single feature to control if exceptions are logged for Audience and Issuer failures. Sometimes multiple policies are used, when a subsequent policy succeeds the upper layer can decide if previous exceptions should be logged. #1949

6.23.1

A simple 'dot' release to fix an issue where JsonWebTokenHandler virtual CreateClaimsIdentity was not called. AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#1940

6.23.0

#1934 JsonWebToken and JsonWebTokenHandler use System.Text.Json for JSON parsing for targets Net61+.

... (truncated)

Changelog

Sourced from System.IdentityModel.Tokens.Jwt's changelog.

See the release notes for details on bug fixes and added features.

6.26.1

Bug Fixes:

Releasing a Hotfix for Wilson 6.26.0 that reverts async/await changes made in #1996 to address a performance reduction issue.

  • Changes are in #2015
  • Root cause analysis and fix will be tracked in #2017
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [System.IdentityModel.Tokens.Jwt](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet) from 6.22.1 to 6.27.0.
- [Release notes](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases)
- [Changelog](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/commits)

---
updated-dependencies:
- dependency-name: System.IdentityModel.Tokens.Jwt
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Feb 16, 2023
@sonarqubecloud

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud

@dependabot @github

dependabot Bot commented on behalf of github Sep 8, 2025

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/nuget/System.IdentityModel.Tokens.Jwt-6.27.0 branch September 8, 2025 14:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant