Update nuget (major)

[projectorigin-renovate]

This PR contains the following updates:

Package	Type	Update	Change
Microsoft.Identity.Web	nuget	major	3.14.0 -> 4.0.1
Microsoft.NET.Test.Sdk	nuget	major	17.14.1 -> 18.0.0

---

Release Notes

AzureAD/microsoft-identity-web (Microsoft.Identity.Web)

v4.0.1

Compare Source

=========

Bugs fixes

• Correctly compute Application Key when credential usage fails. #​3487
• Fix bugs where agent user identities didn't work with non-default authentication schemes. #​3487

Fundamentals

• Update .net version to CG compliance #​3487

Entra ID SDK sidecar

• Configure Sidecar to default AllowWebApiToBeAuthorizedByACL to true as the container doesn't do authZ #​3487

v4.0.0

=========

Breaking Changes

Removed support for .NET 6.0 and .NET 7.0 - Microsoft Identity Web 4.0.0 no longer targets .NET 6.0 and .NET 7.0, following Microsoft's support lifecycle. The supported target frameworks are now .NET 8.0, .NET 9.0, .NET Framework 4.6.2, .NET Framework 4.7.2, and .NET Standard 2.0.

New features

• Various improvements to performance logging, authentication, and credential loading capabilities.
• Bumped MSAL.NET to 4.77.1
• Added credential description extensibility. For details, see #​3487
• Added a new CerticateObserverAction type: SuccessfullyUsed and support for multiple certificate observers for improved certificate lifecycle management and telemetry. See #​3505
• Add specification of OID (in addition to upn) when requesting an authorization header for Agent User Identity. See #​3513
• Added ClaimsPrincipal and ClaimsIdentity extension methods for agent identity detection in web APIs enabling developers to easily detect agent identities and retrieve parent agent blueprint from token claims. See #​3515
• Added MicrosoftIdentityMessageHandler for flexible HttpClient authentication. Provides composable alternative to DownstreamApi with per-request authentication configuration. Supports WWW-Authenticate challenge handling. See #​3503
• Support for multiple certificate observers. See #​3506
• The Microsoft.Identity.Web.Sidecar will provide a container solution for validation and token acquisition in any-language. See #​3524

Bug Fixes

• Fixed TokenAcquirerFactory null reference when AppContext.BaseDirectory is root path. See #​3443
• Fixed IDW10405 error when using managed identity with common tenant. See #​3415
• Removed hard dependency on IConfiguration in OidcIdpSignedAssertionLoader. See #​3414

Fundamentals

• Various improvements to .NET support and dependency optimizations.
• Added doc for Agent identities. See Agent identities
• Combined and fixed test collections. See #​3472
• Migrate repository agent rules from .clinerules to agents.md. See #​3475
• Add .NET 6.x setup step to dotnetcore.yml workflow, as the default build agents don't have it any longer. See #​3489
• Renamed NET 7 tests to ThreadingTests for framework independence. See #​3501

v3.14.1

=======

Bug fix

• Support client secrets with agent user identities. See #​3470 for details.

microsoft/vstest (Microsoft.NET.Test.Sdk)

v18.0.0

What's Changed

• Update reporting formatting by @​martincostello in #​15082
• Fix stack trace for Trace.Fail and Debug.Fail by @​nohwnd in #​15103
• Add documentation of environment variables by @​Copilot in #​15095
• IFrameworkHandle.LaunchProcessWithDebuggerAttached allows null for workingDirectory in signature but throws by @​Copilot in #​15091
• Add Dependabot configuration for .NET SDK updates by @​JamieMagee in #​15114
• Handle dotnet_root in testhost version aware way by @​nohwnd in #​15184
• Add magic bytes validation for Mach-O binaries in DotnetHostHelper by @​Copilot in #​15230
• using globbing pattern doesn't work on windows with forward slashes by @​Copilot in #​15088
• Remove tpv0 by @​nohwnd in #​15247
• Cache AssemblyName in ManagedNameHelper by @​Youssef1313 in #​15259
• Add ARM64 support to GetArchitectureForSource methods by @​Copilot in #​15278

Internal fixes and updates

• Fix formatting in two files by @​ViktorHofer in #​15047
• Build TestPlatform packages in VMR by @​ViktorHofer in #​15055
• Condition property on .NET FX MSBuild by @​jaredpar in #​15054
• Migrate to awesome assertions by @​nohwnd in #​15056
• Revert "Build TestPlatform packages in VMR" by @​ViktorHofer in #​15057
• Update package Category by @​ViktorHofer in #​15058
• Revert "Write props of tests into trx" by @​nohwnd in #​15080
• Error on unsupported tfms (#​15072) by @​nohwnd in #​15073
• Use policies from testfx to align by @​nohwnd in #​15085
• Update enable-auto-merge.yml by @​nohwnd in #​15102
• Revert ignoring environment test by @​Copilot in #​15094
• unignore tests by @​Copilot in #​15093
• Update MSTest by @​Youssef1313 in #​15108
• Bump dotnet-sdk from 9.0.106 to 9.0.301 by @​dependabot[bot] in #​15179
• Use Assert.Equals by @​nohwnd in #​15181
• Run VSTest tests with MTP by @​Youssef1313 in #​15079
• Use the standard sdk for architecture switch test by @​nohwnd in #​15188
• Remove CUIT (Coded UI Test) from NuGet packages and test projects by @​Copilot in #​15177
• dump-logs? by @​nohwnd in #​15187
• Moving to version 18 by @​nohwnd in #​15209
• Update fakes version by @​drognanar in #​15227
• Microsoft.Intellitrace.Core should be taken from nuget by @​nohwnd in #​15229
• Remove MSTest.Assert.Extensions by @​Youssef1313 in #​15178
• Sourcebuild fix by @​nohwnd in #​15239
• Set dotnet_root_ only when the architecture of dotnet in the path is the same by @​nohwnd in #​15250
• Remove fakes v1 from FakesUtilities by @​drognanar in #​15251
• Update fakes dependencies by @​drognanar in #​15254
• Do half the work in GetManagedName by @​Youssef1313 in #​15255
• check Vsix only when produced by @​nohwnd in #​15261
• Set dotnet_root_ always by @​nohwnd in #​15266
• Don't hardcode old vswhere version in global.json by @​akoeplinger in #​15267
• Revert dowgrade of fakes by @​nohwnd in #​15263
• Update VSSDK to version with code flow guard by @​nohwnd in #​15279
• Update Fakes to version with code flow guard by @​nohwnd in #​15273
• Add es-metadata.yml by @​Youssef1313 in #​15276
• Avoid iterator in TraitCollection.GetTraits by @​Youssef1313 in #​15249
• MSDia update by @​nohwnd in #​15281
• Use sdk.paths in global.json by @​Youssef1313 in #​15258

New Contributors

• @​jaredpar made their first contribution in #​15054
• @​Copilot made their first contribution in #​15094
• @​JamieMagee made their first contribution in #​15114
• @​dependabot[bot] made their first contribution in #​15179

Full Changelog: microsoft/vstest@v17.14.1...v18.0.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud