Skip to content

Bump Azure.Identity from 1.12.1 to 1.17.0#803

Merged
intellitect-bot merged 1 commit intomainfrom
dependabot/nuget/Azure.Identity-1.17.0
Oct 27, 2025
Merged

Bump Azure.Identity from 1.12.1 to 1.17.0#803
intellitect-bot merged 1 commit intomainfrom
dependabot/nuget/Azure.Identity-1.17.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Oct 27, 2025

Updated Azure.Identity from 1.12.1 to 1.17.0.

Release notes

Sourced from Azure.Identity's releases.

1.17.0

1.17.0 (2025-10-07)

Bugs Fixed

  • TenantId is now configured via MSAL's WithTenantId instead of WithTenantIdFromAuthority to prevent malformed Uris to the authority.

Other Changes

  • Deprecated BrowserCustomizationOptions.UseEmbeddedWebView property. This option requires additional dependencies on Microsoft.Identity.Client.Desktop and is no longer supported. Consider using brokered authentication instead.

1.16.0

1.16.0 (2025-09-09)

Features Added

  • Added a new DefaultAzureCredential constructor that accepts a custom environment variable name for credential configuration. This provides flexibility beyond the default AZURE_TOKEN_CREDENTIALS environment variable. The constructor accepts any environment variable name and uses the same credential selection logic as the existing AZURE_TOKEN_CREDENTIALS processing.
  • Added DefaultAzureCredential.DefaultEnvironmentVariableName constant property that returns "AZURE_TOKEN_CREDENTIALS" for convenience when referencing the default environment variable name.
  • AzureCliCredential, AzurePowerShellCredential, and AzureDeveloperCliCredential now throw an AuthenticationFailedException when the TokenRequestContext includes claims, as these credentials do not support claims challenges. The exception message includes guidance for handling such scenarios.
  • When AZURE_TOKEN_CREDENTIALS or the equivalent custom environment variable is configured to ManagedIdentityCredential, the DefaultAzureCredential does not issue a probe request and performs retries with exponential backoff.

Bugs Fixed

  • Fixed AzureDeveloperCliCredential hanging when the AZD_DEBUG environment variable is set by adding the --no-prompt flag to prevent interactive prompts (#​52005).
  • BrokerCredential is now included in the chain when AZURE_TOKEN_CREDENTIALS is set to dev.
  • Fixed an issue that prevented ManagedIdentityCredential from utilizing the token cache in Workload Identity Federation environments.
  • Fixed a bug in DefaultAzureCredential that caused the credential chain to be constructed incorrectly when using AZURE_TOKEN_CREDENTIALS in combination with DefaultAzureCredentialOptions.

Other Changes

  • The BrokerCredential is now always included in the DefaultAzureCredential chain. If the Azure.Identity.Broker package is not referenced, an exception will be thrown when GetToken is called, making its behavior consistent with the rest of the credentials in the chain.
  • Updated Microsoft.Identity.Client dependency to version 4.76.0.
  • Updated Microsoft.Identity.Client.Extensions.Msal dependency to version 4.76.0.

1.13.0

1.13.0 (2025-09-22)

Other Changes

  • Updated the Azure.Identity dependency to version 1.16.0

1.13.0-beta.1

1.13.0-beta.1 (2025-10-22)

Features Added

Commits viewable in compare view.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---
updated-dependencies:
- dependency-name: Azure.Identity
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Oct 27, 2025
@intellitect-bot intellitect-bot enabled auto-merge (squash) October 27, 2025 12:29
@intellitect-bot intellitect-bot merged commit ab62aa7 into main Oct 27, 2025
5 checks passed
@intellitect-bot intellitect-bot deleted the dependabot/nuget/Azure.Identity-1.17.0 branch October 27, 2025 12:33
BenjaminMichaelis pushed a commit that referenced this pull request Apr 25, 2026
Updated [Azure.Identity](https://github.com/Azure/azure-sdk-for-net)
from 1.12.1 to 1.17.0.

<details>
<summary>Release notes</summary>

_Sourced from [Azure.Identity's
releases](https://github.com/Azure/azure-sdk-for-net/releases)._

## 1.17.0

## 1.17.0 (2025-10-07)

### Bugs Fixed

- TenantId is now configured via MSAL's `WithTenantId` instead of
`WithTenantIdFromAuthority` to prevent malformed Uris to the authority.

### Other Changes

- Deprecated `BrowserCustomizationOptions.UseEmbeddedWebView` property.
This option requires additional dependencies on
Microsoft.Identity.Client.Desktop and is no longer supported. Consider
using brokered authentication instead.


## 1.16.0

## 1.16.0 (2025-09-09)

### Features Added

- Added a new `DefaultAzureCredential` constructor that accepts a custom
environment variable name for credential configuration. This provides
flexibility beyond the default `AZURE_TOKEN_CREDENTIALS` environment
variable. The constructor accepts any environment variable name and uses
the same credential selection logic as the existing
`AZURE_TOKEN_CREDENTIALS` processing.
- Added `DefaultAzureCredential.DefaultEnvironmentVariableName` constant
property that returns `"AZURE_TOKEN_CREDENTIALS"` for convenience when
referencing the default environment variable name.
- `AzureCliCredential`, `AzurePowerShellCredential`, and
`AzureDeveloperCliCredential` now throw an
`AuthenticationFailedException` when the `TokenRequestContext` includes
claims, as these credentials do not support claims challenges. The
exception message includes guidance for handling such scenarios.
- When `AZURE_TOKEN_CREDENTIALS` or the equivalent custom environment
variable is configured to `ManagedIdentityCredential`, the
`DefaultAzureCredential` does not issue a probe request and performs
retries with exponential backoff.

### Bugs Fixed

- Fixed `AzureDeveloperCliCredential` hanging when the `AZD_DEBUG`
environment variable is set by adding the `--no-prompt` flag to prevent
interactive prompts
([#​52005](Azure/azure-sdk-for-net#52005)).
- `BrokerCredential` is now included in the chain when
`AZURE_TOKEN_CREDENTIALS` is set to `dev`.
- Fixed an issue that prevented ManagedIdentityCredential from utilizing
the token cache in Workload Identity Federation environments.
- Fixed a bug in `DefaultAzureCredential` that caused the credential
chain to be constructed incorrectly when using AZURE_TOKEN_CREDENTIALS
in combination with `DefaultAzureCredentialOptions`.

### Other Changes

- The `BrokerCredential` is now always included in the
`DefaultAzureCredential` chain. If the `Azure.Identity.Broker` package
is not referenced, an exception will be thrown when `GetToken` is
called, making its behavior consistent with the rest of the credentials
in the chain.
- Updated `Microsoft.Identity.Client` dependency to version 4.76.0.
- Updated `Microsoft.Identity.Client.Extensions.Msal` dependency to
version 4.76.0.


## 1.13.0

## 1.13.0 (2025-09-22)

### Other Changes

- Updated the Azure.Identity dependency to version 1.16.0


## 1.13.0-beta.1

## 1.13.0-beta.1 (2025-10-22)

### Features Added
- Upgraded api-version tag from 'package-2025-06-01' to
'package-2025-07-01-preview'. Tag detail available at
https://github.com/Azure/azure-rest-api-specs/blob/c2c7ee70dea80830fe9ea94aed2cec6182c4e9e6/specification/netapp/resource-manager/readme.md.
- Added `Bucket` resource type
- Added `GetNetAppResourceQuotaLimitsAccountsAsync` to
`NetAppAccountResource`


Commits viewable in [compare
view](https://github.com/Azure/azure-sdk-for-net/commits/Azure.Identity_1.17.0).
</details>

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=Azure.Identity&package-manager=nuget&previous-version=1.12.1&new-version=1.17.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant