Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings

Bump Azure.Core from 1.58.0 to 1.59.0 - #6399

#6399
Merged
premun merged 1 commit into
maindotnet/arcade-services:mainfrom
dependabot/nuget/Azure.Core-1.59.0dotnet/arcade-services:dependabot/nuget/Azure.Core-1.59.0Copy head branch name to clipboard
Jun 16, 2026
Merged

Bump Azure.Core from 1.58.0 to 1.59.0#6399
premun merged 1 commit into
maindotnet/arcade-services:mainfrom
dependabot/nuget/Azure.Core-1.59.0dotnet/arcade-services:dependabot/nuget/Azure.Core-1.59.0Copy head branch name to clipboard

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 15, 2026

Copy link
Copy Markdown
Contributor

Updated Azure.Core from 1.58.0 to 1.59.0.

Release notes

Sourced from Azure.Core's releases.

1.59.0

1.59.0 (2026-06-09)

Features Added

  • Added experimental (AZID0004) mTLS Proof-of-Possession token binding support for managed identity scenarios, including dynamic host capability detection via MSAL and transport certificate rotation APIs on BearerTokenAuthenticationPolicy.

Bugs Fixed

  • Fixed BearerTokenAuthenticationPolicy so that the Authorization header is no longer re-attached to a request that has been redirected to a different host. Previously, RedirectPolicy would strip the Authorization header before following a redirect, but the per-retry BearerTokenAuthenticationPolicy would re-add the cached bearer token to the redirected request — including when the redirect target was a different host. The policy now detects when the request URI authority has changed since it last authorized the message, defensively strips any Authorization header, and skips both re-authorization and the WWW-Authenticate (CAE) 401 handler so that no bearer token is sent to — or fetched in response to a challenge from — the redirect target. Same-host redirects, normal (non-redirected) requests, and CAE handling against the original host are unchanged. Callers who explicitly enabled auto-redirect (via HttpPipelineTransportOptions.IsClientRedirectEnabled = true or RedirectPolicy.SetAllowAutoRedirect(message, true)) and depended on the bearer token being re-attached on cross-host redirects should construct a separate client targeting the redirect-target host with a credential bound to that host's resource.

Other Changes

  • Updated Microsoft.Identity.Client dependency to 4.84.2.

Commits viewable in compare view.

@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Jun 15, 2026
@premun

premun commented Jun 16, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

---
updated-dependencies:
- dependency-name: Azure.Core
  dependency-version: 1.59.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/nuget/Azure.Core-1.59.0 branch from 8d06d6a to fc985be Compare June 16, 2026 09:08
@premun
premun merged commit 0797d09 into main Jun 16, 2026
9 of 11 checks passed
@premun
premun deleted the dependabot/nuget/Azure.Core-1.59.0 branch June 16, 2026 09:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

Morty Proxy This is a proxified and sanitized view of the page, visit original site.