Skip to content

Update IdentityModel to 8.23.0 - #5910

Open
dependencyupdates[bot] wants to merge 1 commit into
masterfrom
renovate/identity-model
Open

dependencyupdates[bot] wants to merge 1 commit into
masterfrom
renovate/identity-model

Conversation

@dependencyupdates

@dependencyupdates dependencyupdates Bot commented Sep 19, 2026 •

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
Microsoft.IdentityModel.Abstractions 8.22.0 → 8.23.0 age adoption passing confidence
Microsoft.IdentityModel.Protocols.OpenIdConnect 8.22.0 → 8.23.0 age adoption passing confidence
Microsoft.IdentityModel.Tokens 8.22.0 → 8.23.0 age adoption passing confidence
System.IdentityModel.Tokens.Jwt 8.22.0 → 8.23.0 age adoption passing confidence

Release Notes

AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet (Microsoft.IdentityModel.Abstractions)

v8.23.0

Compare Source

====

New Features

  • Reinstate Microsoft.IdentityModel.Protocols.WsTrust as a supported 8.x package, preserving the 6.8 public API while adding current target frameworks, compatibility corrections, parser and serializer fixes, and XML resource limits. See PR #​3547.
  • Add SignedHttpRequestValidationParameters.UseCaseSensitivePClaimComparison to configure Signed HTTP Request p claim path comparison per validation. The 8.x default remains case-insensitive unless callers explicitly opt into case-sensitive comparison. See PR #​3577.
  • Resolve supported ML-DSA AKP keys from JsonWebKeySet and preserve structurally valid public keys for downstream cryptographic extensibility when the current runtime cannot materialize them. See PR #​3597.

Bug Fixes

  • Normalize hexadecimal letter casing inside percent-encoded triplets during Signed HTTP Request p claim validation. Literal path-letter comparison remains controlled by UseCaseSensitivePClaimComparison, and p claim creation output is unchanged. See PR #​3579.
  • Log expected per-key IDX10650 authentication-tag failures at Informational instead of Error during multi-key JWE decryption. Terminal all-keys-failed results continue to be reported at Error. See PR #​3582.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

Commands to ignore dependencies

You can trigger dependency actions by commenting on this PR:

  • @particularbot ignore this major version
  • @particularbot ignore this minor version
  • @particularbot ignore this dependency

@dependencyupdates dependencyupdates Bot added dependencies Pull requests that update a dependency file NuGet labels Sep 19, 2026
@dependencyupdates
dependencyupdates Bot force-pushed the renovate/identity-model branch from 62df3b0 to 498c309 Compare October 16, 2026 00:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file NuGet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants