Skip to content

Bump Microsoft.Identity.Web.UI from 4.13.2 to 4.14.0 - #421

Merged
mergify[bot] merged 1 commit into
mainfrom
dependabot/nuget/GraphOrgExample/Microsoft.Identity.Web.UI-4.14.0
Jul 28, 2026
Merged

mergify[bot] merged 1 commit into
mainfrom
dependabot/nuget/GraphOrgExample/Microsoft.Identity.Web.UI-4.14.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026 •

Copy link
Copy Markdown
Contributor

Updated Microsoft.Identity.Web.UI from 4.13.2 to 4.14.0.

Release notes

Sourced from Microsoft.Identity.Web.UI's releases.

4.14.0

New features

  • Add MicrosoftIdentityOptions.PartitionAppTokenCacheByAudience to partition the app token cache by resource/audience. See #​3979.
  • Expose MSAL's background token-refresh callback through Id.Web via TokenAcquisitionExtensionOptions.OnBackgroundTokenRefreshCompleted. See #​3973.
  • Add MicrosoftIdentityOptions.UseFastUnboundedCache; stop short-circuiting the in-memory token cache serialization provider. See #​3970.
  • OIDC FIC (Microsoft.Identity.Web.OidcFIC) now supports mTLS token binding. See #​3851.

Bug fixes

  • Token binding: the CCA cache key now distinguishes a bound credential (UseBoundCredential = true) from its unbound equivalent; the certificate-error retry path invalidates the cache entry for the actual request mode (bearer vs mTLS PoP).
  • Forward the OpenTelemetry tags enricher onto the inner FIC client-assertion leg. See #​3968.

Dependencies updates

  • Microsoft.Identity.Client → 4.87.0 (#​3975)
  • Microsoft.Identity.Abstractions → 12.6.0 (#​3976)
  • System.Security.Cryptography.Xml / System.Security.Cryptography.Pkcs → patched (CVE-2026-47302, -47304, -50525, -50648) (#​3964)
  • notsecurity group: 1 update (#​3965)

Full changelog: AzureAD/microsoft-identity-web@4.13.2...4.14.0

Commits viewable in compare view.

@dependabot dependabot Bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Jul 28, 2026

@mergify mergify Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automatically approving dependabot

@mergify

mergify Bot commented Jul 28, 2026

Copy link
Copy Markdown

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

  • Queue this pull request

---
updated-dependencies:
- dependency-name: Microsoft.Identity.Web.UI
  dependency-version: 4.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/nuget/GraphOrgExample/Microsoft.Identity.Web.UI-4.14.0 branch from 9cbd704 to 26aca1f Compare July 28, 2026 01:08
@mergify
mergify Bot merged commit 3890bd0 into main Jul 28, 2026
8 checks passed
@dependabot
dependabot Bot deleted the dependabot/nuget/GraphOrgExample/Microsoft.Identity.Web.UI-4.14.0 branch July 28, 2026 01:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants