Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the nuget group across 1 directories with 1 update #5

Open
wants to merge 32 commits into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Feb 24, 2024

Bumps the nuget group with 1 update in the /src/api/auth/FinancialHub.Auth.Application directory: System.IdentityModel.Tokens.Jwt.

Updates System.IdentityModel.Tokens.Jwt from 6.12.1 to 6.34.0

Release notes

Sourced from System.IdentityModel.Tokens.Jwt's releases.

6.34.0

Security fixes

See https://aka.ms/IdentityModel/Jan2024/zip and https://aka.ms/IdentityModel/Jan2024/jku for details.

6.33.0

Bug Fixes:

  • Clean up log messages. See #2339 for details.
  • Decouple JsonElements from JsonDocument, which causes issues in multi-threaded environments. See #2340 for details.

6.32.3

6.32.2

Bug fixes:

  • Underlying JsonDocument is never disposed, causing high latency in large scale services. See #2258 for details.

6.32.1

6.32.0

New features:

  • Adding an AAD specific signing key issuer validator. See issue #2134 for details.
  • Better support for WsFederation (#2100)

Bug fixes

  • Address perf regression introduced in 6.31.0 (#2131)

6.31.0

This release contains work from the following PRs and commits:

6.30.1

This release contains work from the following PRs:

  • Modified token validation to be async throughout the call graph #2075
  • Enforce key sizes when creating HMAC #2072
  • Fix AotCompatibilityTests #2066
  • Use up-to-date "now", in case take long time to get Metadata #2063

This release addresses #1743 and, as such, going forward if the SymmetricKey is smaller than the required size for HMAC IdentityModel will throw an ArgumentOutOfRangeException which is the same exception when the SymmetricKey is smaller than the minimum key size for encryption.

6.30.0

Beginning in release 6.28.0 the library stopped throwing SecurityTokenUnableToValidateException. This version (6.30.0) marks the exception type as obsolete to make this change more discoverable. Not including it in the release notes explicitly for 6.28.0 was a mistake. This exception type will be removed completely in the next few months as the team moves towards a major version bump. More information on how to replace the usage going forward can be found here: https://aka.ms/SecurityTokenUnableToValidateException

Indicate that a SecurityTokenDescriptor can create JWS or JWE

... (truncated)

Changelog

Sourced from System.IdentityModel.Tokens.Jwt's changelog.

See the releases for details on bug fixes and added features.

7.3.1

Bug Fixes:

  • Replace propertyName with MetadataName constant. See issue #2471 for details.
  • Fix 6x to 7x regression where mixed cases OIDC json was not correctly process. See #2404 and #2402 for details.

Performance Improvements:

  • Update the benchmark configuration. See issue #2468.

Documentation:

  • Update comment for azp in JsonWebToken. See #2475 for details.
  • Link to breaking change announcement. See #2478.
  • Fix typo in log message. See #2479.

7.3.0

New Features:

Addition of the ClientCertificates property to the HttpRequestData class enables exposure of certificate collection involved in authenticating the client against the server and unlock support of new scenarios within the SDK. See PR #2462 for details.

Bug Fixes:

Fixed bug where x5c property is empty in JwtHeader after reading a JWT containing x5c in its header, issue #2447, see PR #2460 for details. Fixed bug where JwtPayload.Claim.Value was not culture invariant #2409. Fixed by PRs #2453 and #2461. Fixed bug where Guid values in JwtPayload caused an exception, issue #2439. Fixed by PR #2440.

Performance Improvements:

Remove linq from BaseConfigurationComparer, improvement #2464, for additional details see PR #2465.

Engineering Excellence:

New benchmark tests for AsymmetricAdapter signatures. For details see PR #2449.

7.2.0

Performance Improvements:

Reduce allocations and transformations when creating a token #2395. Update Esrp Code Signing version to speed up release build #2429.

Engineering Excellence:

Improve benchmark consistency #2428. Adding P50, P90 and P100 percentiles to benchmarks #2411. Decouple benchmark tests from test projects #2413. Include pack step in PR builds #2442.

Fundamentals:

Improve logging in Wilson for failed token validation when key not found #2436. Remove conditional Net8.0 compilation #2424.

7.1.2

... (truncated)

Commits
  • edcac44 release with small r
  • 6fac685 skip suffix for release builds
  • 2f945a4 update version to 6.34.0
  • 74cc160 Merged PR 10242: Update Dev6x to fix the release build
  • 4845cf1 Merged PR 10239: Commenting out a constant which is not used
  • e06dc84 Merged PR 10213: Set MaximumDeflateSize
  • 0b2f269 Merged PR 10182: Don't resolve jku claim by default
  • c3e99cd update build config version (#2350)
  • 8ea36a8 Update CHANGELOG.md (#2348)
  • 9d9925e [Log Scrubbing] Clean up log messages in Wilson (#2339) (#2344)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Chingling152 and others added 30 commits October 10, 2021 20:40
* Add : DDL Script

* Add : Domain architecture

* Add : Database context and startup configurations

* Add: account get all endpoint

* Add : Basic Accounts endpoints

* Add : Repository Unit tests

* Add : BaseRepository Tests : Update

* Change : DDL added account creation/update time

* Fix : small comment changes on AccountsController
* Add : DDL Script

* Change : DDL added account creation/update time

* Add : Domain architecture

* Add : Database context and startup configurations

* Add: account get all endpoint

* Add : Basic Accounts endpoints

* Add : Repository Unit tests

* Add : BaseRepository Tests : Update

* Fix : small comment changes on AccountsController

* Add : category table DDL

* Add : Categories CRUD

* Add : Transactions endpoints

* Fix : NUnit BaseRepository Update Test

* Changes : BaseRepositoryTest base GenerateData method

* Changes : controller params

* Changes : BaseRepository methods are virtual and protected

* Fix : BaseRepositoryTests typos and context verification on CreateAsync

* Changes : BaseRepository Tests are now virtual

* Add : Releashionship between Accounts,Category and Transaction

* Change : Inherits to Create Base Repository tests

* Add : TransactionEntity Relashionships

* Fix : Transaction creating category and account when not found

* Changes : Project using .NET 6.0

* Fix : repository create tests, delete and get by id parameters

* Fix : CreateAsync Tests

* Add : Faker library to generate data

* Fix : All update tests

* Add : Transaction Filters

* Add : Transaction date Filters

* Fix: Transaction Fields types

* Add : Auto Include on Transactions

* Add : Transaction get filters

* Fix : transaction status changed
* Add : DDL Script

* Add : Services Project

* Add : Domain architecture

* Add : Database context and startup configurations

* Add: account get all endpoint

* Add : Basic Accounts endpoints

* Add : Repository Unit tests

* Add : BaseRepository Tests : Update

* Add : Auto Include on Transactions

* Add : Transaction get filters

* Add : category table DDL

* Add : Categories CRUD

* Add : Transactions endpoints

* Add : Transaction Filters

* Add : Transaction date Filters

* Add : Faker library to generate data

* Add : Releashionship between Accounts,Category and Transaction

* Add : TransactionEntity Relashionships

* Change : DDL added account creation/update time

* Changes : BaseRepositoryTest base GenerateData method

* Changes : controller params

* Changes : BaseRepository methods are virtual and protected

* Changes : BaseRepository Tests are now virtual

* Change : Inherits to Create Base Repository tests

* Changes : Project using .NET 6.0

* Changes : IMapper to IMapperWrapper on services

* Changes : Infra project to Infra.Data

* Changes : removed auto mapper & updated entityframework

* Fix : repository create tests, delete and get by id parameters

* Fix : CreateAsync Tests

* Fix : BaseRepositoryTests typos and context verification on CreateAsync

* Fix : All update tests

* Fix: Transaction Fields types

* Fix : Transaction creating category and account when not found

* Fix : api usings & moved mapper

* Fix : NUnit BaseRepository Update Test

* Fix : transaction status changed

* Fix : small comment changes on AccountsController
* Add : Standard API Response

* Add : Standard Service Result

* Add : Api Test Project 

* Add : Accounts , Transaction and Categories Controller Unit Tests
* Add : EntityBuilders

* Add : ModelBuilders

* Add : Integration tests

* Change : Builder Pattern added to UnitTests

* Remove : EntityGenerator

* Remove : Useless Test Projects
* Add : database migrations

* Add : Database Dockerfile & DockerCompose

* Add : SonarCloud Code Analysis
* Add : CHANGELOG.md

* Add : Postman file

* Add :  Account, Category, Transaction & Balance validators

* Add : Services GetById returns not found error

* Add : Account Balance

* Add : BalancesRepository & BalancesService

* Add : IAccountBalanceService to AccountsController

* Add : Balance Database Migration

* Add  : Balance Create/Update Endpoint

* Add : Create an active & commited Transaction updates balance amount

* Add : Transaction Deletion Removes Balance amount

* Update : Currency moved from Account to Balance

* Update : Transactions now holds balanceId

* Update : README.md

* Remove : Old AutoMapper from api project

* Remove : Code Smells in AccountsServiceTests, Builders & TransactionFilter 

* Fix : Code coverage pipeline always 0%

* Fix : TransactionQuery Filter By Start Month

* Known Issue : Change Transaction Amount is creating a new one

* Known Issue : Delete Account is not removing child balances
* Adds : Updates balance when creating a transaction by creating a new service
* Adds : TransactionBalanceService Tests
* Adds : TransactionBalanceService.Update
* Adds  : TransactionBalanceService
* Adds : TransactionBalanceService.CreateAsync service
* Adds : TransactionBalanceTests UpdateAmount Same Balance
* Adds : TransactionBalance.UpdateAsync different balances tests
* Updates : api_basic_flow.yml
* Updates : sonarcloud.yml
* Migrates : the project to the rootfolder
* Fix Balance updates
* Fix : BalanceServiceTest Coverage
* Fix : Unit tests and Fixture
* Fix : BalanceService UnitTests
* Fix : code complexity by separating it into methods
* Removes : /api folder
* Removes : TransactionServiceTests that changes Balance
* Adds : TransactionBalanceService DeleteTransaction
* Fix : BalanceRepository ChangeTracker
* Remove : delete Balances & Accounts endpoints
* Remove : Accounts delete endpoint
* Remove : Balances delete endpoint
* Adds : CategoryEntityMapping, AccountEntityMapping, TransactionEntityMapping e BalanceEntityMapping
* Changes Configuration for Infra.Data and Services project
* Changes : IServiceCollectionExtensions for Infra and Services project
* Removes : Action body for coverage
* Adds Auth/User project
* Adds Basic Auth/User Project structure
* Adds Auth/User features
* Adds Auth/User tests
* Adds EntityFramework Migration Tool
* Adds Signup/Signin endpoint
* Adds "Testing" environment appsettings to Auth project
* Adds ValidatorRulesExtensions
* Adds Token generation
* Adds Token Authentication to User endpoints
* Fix project references
* Fix Sonar Code yaml
* Bump Swashbuckle.AspNetCore.SwaggerUI
* Update SonarCloud analysis file
* Adds tests_workflow.yml
* Adds build-dotnet-project composite action
* Archives api_workflow.yml and sonarcloud.yml
* Adds api_releases.yml to generate versions (obsolete)
* Changes Tests in two files (test_result.yml, coverage_report.yml)
* Changes CI into two files (branch_main_ci.yml, branch_release_ci.yml)
* Move sonarcloud analysis to ubuntu-latest
* Fix sonarcloud analysis integrations tests SQL errors
* fix main branch analysis
* Removes Exception test from UserServiceTests.create

* Removes exception unit tests of Provider layers

* Remove Infra.Data exceptions unit tests

* Removes UserRepository update
* Changes Auth Application Project layer to Presentation

* Changes Services layer name to Application layer
* Adds Core Module
* Adds global using to Core project
* Adds Core Folder to main project
* Adds FinancialHub.Common project
* Adds FinancialHub.Common.Tests project
* Adds null forgiving in code smells (fix it later)
* Changes /src/FinancialHub folder to /src/api
* Changes folder reference in ci files
* Moves builders from FinancialHub.Domain.Tests to FinancialHub.Common.Tests
* Changes DDL file to scr/database
* Remove Migrations from code coverage
* Fix Auth project references to Common
* Fix Core project  references to Common
* Fix ServiceResults & Responses code smells
* Add Testing configuration to Core.Integration tests
* Update NUnit to 3.13.3 in Core Projects
* Break complex unit tests from TransactionRepository
* Moves BaseResponseAssert to Common Project
* Moves Model Assertions to Core.Domain.Tests
* Rename FinancialHub.WebApi to FinancialHub.Core.WebApi
* Rename FinancialHub.WebApi unit and integration tests to 
* Removes BaseControllerTests<T,Y> class
* Removes unit tests with exceptions from AccountsService, CategoriesService and TransactionRepository
* Fix Core project unit and integration tests
* Fix BaseRepository unit tests
* Change Core validation extensions
* Move Validators to Service Project
* Move Migration files to Infra.Data layer
* Rename Core Service name to Application
* Change Core Unit Tests project names
* Change Core.Application, Core.Infra.Data and Core.WebApi Unit Tests name
* Remove Infra.Migration project
* Adds glogal .editorconfig
* Add Full, Core and Auth Solution
* Add matrix test for CI
* Add Category "Unit" for unit test projects 
* Add Category "Integration" for integration test projects 
* Add .editorconfig in projects to prevent constructor code smell in test code
* Separate Test Results in projects (auth and core)
* Move tests to /tests folder
* Move Migrations to Infra.Data
* Change the whole project folder structure
* Separate /api projects in contexts
* Fix projects references
* Fix test projects references
* Remove Core.Infra.Migrations project
* Adds filter test to code coverage
* Fix CS8632 code smells in Core project
* Fix all null-forgiving
* Fix Collection Has.Count code smell
* Adds Unit & integration tests result workaround to get both tests
Chingling152 and others added 2 commits February 24, 2024 02:37
Bumps the nuget group with 1 update in the /src/api/auth/FinancialHub.Auth.Application directory: [System.IdentityModel.Tokens.Jwt](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet).


Updates `System.IdentityModel.Tokens.Jwt` from 6.12.1 to 6.34.0
- [Release notes](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases)
- [Changelog](https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/blob/dev/CHANGELOG.md)
- [Commits](AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@6.12.1...6.34.0)

---
updated-dependencies:
- dependency-name: System.IdentityModel.Tokens.Jwt
  dependency-type: direct:production
  dependency-group: nuget-security-group
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 24, 2024
Copy link

auth project test results

117 tests  ±0   104 ✅  - 13   14s ⏱️ -1s
 10 suites ±0     0 💤 ± 0 
 10 files   ±0    13 ❌ +13 

For more details on these failures, see this check.

Results for commit 6c4ea14. ± Comparison against base commit da75788.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
Status: Backlog
Development

Successfully merging this pull request may close these issues.

1 participant