Update nuget non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
Altinn.Platform.Storage.Interface	3.11.0 -> 3.34.0
Azure.Security.KeyVault.Certificates (source)	4.4.0 -> 4.7.0
Azure.Security.KeyVault.Secrets (source)	4.4.0 -> 4.7.0
Azure.Storage.Blobs (source)	12.14.1 -> 12.23.0
Azure.Storage.Queues (source)	12.12.0 -> 12.21.0
Microsoft.ApplicationInsights (source)	2.21.0 -> 2.22.0
Microsoft.ApplicationInsights.WindowsServer.TelemetryChannel (source)	2.21.0 -> 2.22.0
Microsoft.Azure.Functions.Worker	1.10.0 -> 1.24.0
Microsoft.Azure.Functions.Worker.Extensions.Http	3.0.13 -> 3.3.0
Microsoft.Azure.Functions.Worker.Extensions.SignalRService	1.7.0 -> 1.14.1
Microsoft.Azure.Functions.Worker.Extensions.Timer	4.1.0 -> 4.3.1
Microsoft.Azure.Functions.Worker.Sdk	1.7.0 -> 1.18.1
Microsoft.Azure.WebJobs.Core (source)	3.0.33 -> 3.0.41
Microsoft.IdentityModel.Tokens	6.25.1 -> 6.36.0
Newtonsoft.Json (source)	13.0.2 -> 13.0.3

---

Release Notes

Azure/azure-sdk-for-net (Azure.Security.KeyVault.Certificates)

v4.7.0

Compare Source

4.7.0 (2024-10-14)

Features Added

• Support for Continuous Access Evaluation (CAE).

v4.6.0

Compare Source

4.6.0 (2024-02-14)

Changes from both the last release and the last beta include:

Breaking Changes

• Renamed tags reported on SecretClient activities to follow OpenTelemetry attribute naming conventions:
  • secret to az.keyvault.secret.name
  • version to az.keyvault.secret.version

Other Changes

• The default service version is now "7.5".
• Distributed tracing with ActivitySource is stable and no longer requires the Experimental feature-flag.
• When a Key Vault is moved to another tenant, the client is reauthenticated.

v4.5.1

Compare Source

4.5.1 (2023-03-31)

Bugs Fixed

• Correctly serialize CertificateIssuer.OrganizationId property (#​35245)

v4.5.0

Compare Source

4.5.0 (2023-03-14)

Breaking Changes

• Service version "7.4-preview.1" is not supported.

Other Changes

• The default service version is now "7.4".

Microsoft/ApplicationInsights-dotnet (Microsoft.ApplicationInsights)

v2.22.0

Compare Source

• no changes since beta.

Azure/azure-functions-dotnet-worker (Microsoft.Azure.Functions.Worker)

v1.24.0: Microsoft.Azure.Functions.Worker 1.24.0

Compare Source

What's Changed

Microsoft.Azure.Functions.Worker (metapackage) 1.24.0

• Updating Microsoft.Azure.Functions.Worker.Core to 1.20.0
• Updating Microsoft.Azure.Functions.Worker.Grpc to 1.18.0

Microsoft.Azure.Functions.Worker.Core 1.20.0

• Updated service registrations for bootstrapping methods to ensure idempotency. (#​2820)

Microsoft.Azure.Functions.Worker.Grpc 1.18.0

• Changed exception handling in function invocation path to ensure fatal exceptions bubble up. (#​2789)
• Updated service registrations for bootstrapping methods to ensure idempotency. (#​2820)

v1.23.0: Microsoft.Azure.Functions.Worker 1.23.0

Compare Source

What's Changed

Microsoft.Azure.Functions.Worker (metapackage) 1.23.0

• Updating Microsoft.Azure.Functions.Worker.Core to 1.19.0
• Updating Microsoft.Azure.Functions.Worker.Grpc to 1.17.0
• Updating Azure.Core to 1.41.0

Microsoft.Azure.Functions.Worker.Core 1.19.0

• Updating Azure.Core to 1.41.0

Microsoft.Azure.Functions.Worker.Grpc 1.17.0

• Updating Azure.Core to 1.41.0

v1.22.0: Microsoft.Azure.Functions.Worker 1.22.0

Compare Source

What's Changed

Microsoft.Azure.Functions.Worker (metapackage) 1.22.0

• Updating Microsoft.Azure.Functions.Worker.Core to 1.18.0

Microsoft.Azure.Functions.Worker.Core 1.18.0

• Enabling AAD Authentication for ApplicationInsights (#​2217)
• OpenTelemetry support (#​2395)

v1.21.0

Compare Source

• Updating Microsoft.Azure.Functions.Worker.Core to 1.17.0
• Updating Microsoft.Azure.Functions.Worker.Grpc to 1.16.0
• Updating Azure.Core to 1.37.0

v1.20.1: Microsoft.Azure.Functions.Worker 1.20.1

Compare Source

What's Changed

Microsoft.Azure.Functions.Worker (metapackage) 1.20.1

• Updated to Microsoft.Azure.Functions.Worker.Core 1.16.1

Microsoft.Azure.Functions.Worker.Core 1.16.1

• Populating parameter value for nullable types when input binding data is missing the value for the parameter (#​2155)
• Remove closure in DefaultFunctionExecutor (#​2182) (Thank you @​danielmarbach for this contribution!)

v1.20.0: Microsoft.Azure.Functions.Worker 1.20.0

Compare Source

What's Changed

Microsoft.Azure.Functions.Worker (metapackage) 1.20.0

• Updated to Microsoft.Azure.Functions.Worker.Core 1.16.0
• Updated to Microsoft.Azure.Functions.Worker.Grpc 1.15.0

Microsoft.Azure.Functions.Worker.Core 1.16.0

• Adding optional parameter support (#​1868)
• Unsealed Microsoft.Azure.Functions.Worker.Http.HttpHeadersCollection
• HttpRequestDataExtensions.ReadAsStringAsync updated to use enforce the UTF-8 default if the encoding is not specified. (#​1987)

Microsoft.Azure.Functions.Worker.Grpc 1.15.0

• Added support for handling the new command line arguments with "functions-" prefix. (#​1897)
• Adding optional parameter support (#​1868)
• Enhancements to interop in hosted placeholder scenarios

Thank you @​endizhupani for your contributions to this release!

v1.19.0: Microsoft.Azure.Functions.Worker 1.19.0

Compare Source

What's Changed

Microsoft.Azure.Functions.Worker (metapackage) 1.19.0

• Update Microsoft.Azure.Functions.Worker.Core dependency to 1.15.0
• Update Microsoft.Azure.Functions.Worker.Grpc dependency to 1.14.0

Microsoft.Azure.Functions.Worker.Core 1.15.0

• Auto register auto generated IHostBuilder extension methods. (#​1794)

Microsoft.Azure.Functions.Worker.Grpc 1.14.0

• Updated protobuf file to v1.10.0-protofile (#​1774)
• Add placeholder support for linux platform. (#​1704)
• Remove incorrect failure log during successful cancellation flow (#​1797)

Full Changelog: Azure/azure-functions-dotnet-worker@1.18.0...1.19.0

v1.18.0: Microsoft.Azure.Functions.Worker 1.18.0

Compare Source

What's Changed

Microsoft.Azure.Functions.Worker (metapackage) 1.18.0

Microsoft.Azure.Functions.Worker.Core 1.14.0

• Unsealed InputConverterAttribute. Implementers can now derive from this type to map attributes to custom converters. (#​1712)
• Add support for deferred binding (#​1676)
• Add binding attribute to converter context (#​1660)

Microsoft.Azure.Functions.Worker.Grpc 1.12.0

• Add support for deferred binding (#​1676)

Full Changelog: Azure/azure-functions-dotnet-worker@1.17.0...1.18.0

v1.17.0

Compare Source

• Updating Azure.Core to 1.41.0

v1.16.0

• Updating Azure.Core to 1.37.0
• Updating Google.Protobuf to 3.25.2
• Updating Grpc.Net.Client to 2.60.0
• Updating Grpc.Net.ClientFactory to 2.60.0
• Updating Grpc.Core to 2.46.6 (netstandard2.0 only)

v1.14.1: Microsoft.Azure.Functions.Worker 1.14.1

Compare Source

What's Changed

Microsoft.Azure.Functions.Worker 1.14.1 (meta package)

• Update Microsoft.Azure.Functions.Worker.Core dependency to 1.12.1
• Update Microsoft.Azure.Functions.Worker.Grpc dependency to 1.10.1

Microsoft.Azure.Functions.Worker.Core 1.12.1

• Minor documentation updates (no functional changes)

Microsoft.Azure.Functions.Worker.Grpc 1.10.1

• Fixed an issue causing throughput degradation and for synchronous functions, blocked the execution pipeline. (#​1516)

v1.14.0: Microsoft.Azure.Functions.Worker 1.14.0

Compare Source

What's Changed

Microsoft.Azure.Functions.Worker 1.14.0 (meta package)

• Update Microsoft.Azure.Functions.Worker.Core dependency to 1.12.0
• Update Microsoft.Azure.Functions.Worker.Grpc dependency to 1.10.0

Microsoft.Azure.Functions.Worker.Core 1.12.0

• Fix ArgumentOutOfRangeException when using HttpDataRequestDataExtensions.ReadAsStringAsync in .NET Framework (#​1466)

Microsoft.Azure.Functions.Worker.Grpc 1.10.0

• Including worker metadata & capabilities in env reload response (#​1425)
• Fix race condition causing GrpcWorker initialization failure (#​1508)
• Fix null reference exception when retry context is not set (#​1476)

v1.13.0: Microsoft.Azure.Functions.Worker 1.13.0

Compare Source

What's Changed

Microsoft.Azure.Functions.Worker 1.13.0 (meta package)

• Update Microsoft.Azure.Functions.Worker.Core dependency to 1.11.0
• Update Microsoft.Azure.Functions.Worker.Grpc dependency to 1.9.0

Microsoft.Azure.Functions.Worker.Core 1.11.0

• Exposing IFunctionExecutor and IModelBindingFeature as public types by @​kshyju in https://github.com/Azure/azure-functions-dotnet-worker/pull/1346
• Switch to use FUNCTIONS_APPLICATION_DIRECTORY by @​brettsam in https://github.com/Azure/azure-functions-dotnet-worker/pull/1413
• Adding FunctionActivitySource to Worker; refactoring AppInsights support by @​brettsam in https://github.com/Azure/azure-functions-dotnet-worker/pull/1307
• Add query as property to HttpRequestData by @​madelinegordon in https://github.com/Azure/azure-functions-dotnet-worker/pull/1408
• Logging error upon invocation exception by @​brettsam in https://github.com/Azure/azure-functions-dotnet-worker/pull/1421

Microsoft.Azure.Functions.Worker.Grpc 1.11.0

• Bump protobuf version to v1.5.9-protofile by @​liliankasem in https://github.com/Azure/azure-functions-dotnet-worker/pull/1148
• Bringing in the proto changes from v1.7.1-protofile release. by @​kshyju in #​1289

Microsoft.Azure.Functions.ApplicationInsights 1.0.0-preview4

• Adding FunctionActivitySource to Worker; refactoring AppInsights support by @​brettsam in https://github.com/Azure/azure-functions-dotnet-worker/pull/1307

Full Changelog: Azure/azure-functions-dotnet-worker@1.10.1...1.13.0

v1.10.1: Microsoft.Azure.Functions.Worker 1.10.1

Compare Source

WorkerOptions additions:

• Added support for surfacing user-thrown exception to App Insights (#​939)
• Adding support for opting-in to get empty entries in function trigger payload (#​1091)
• Adding support for modifying Capabilities sent to the host (#​1183)

Full Changelog: Azure/azure-functions-dotnet-worker@1.10.0...1.10.1

Azure/azure-webjobs-sdk (Microsoft.Azure.WebJobs.Core)

v3.0.41: Microsoft.Azure.WebJobs 3.0.41

Microsoft.Azure.WebJobs 3.0.41

v3.0.39: Microsoft.Azure.WebJobs 3.0.39

v3.0.37: Microsoft.Azure.WebJobs 3.0.37

• Opting out TBS
• Scaler apis (https://github.com/Azure/azure-webjobs-sdk/pull/2954[)]
• Update ReleaseAsync call to not pass the function cancellation token
• Update Application Insights flushing method to be FlushAsync
• updating AI assembly version

v3.0.36: Microsoft.Azure.WebJobs 3.0.36

• Adding FunctionId to ScaleMonitorDescriptor (#​2932)

v3.0.35: Microsoft.Azure.WebJobs 3.0.35

• Target base scale support (#​2918)
• Create reference object for SDK-type binding support (#​2923)

AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet (Microsoft.IdentityModel.Tokens)

v6.36.0

6.36.0

CVE package updates

CVE-2024-30105

New feature

• A derived ClaimsIdentity where claim retrieval is case-sensitive. The current ClaimsIdentity, in .NET, retrieves claims in a case-insensitive manner which is different than querying the underlying SecurityToken. The new CaseSensitiveClaimsIdentity class provides consistent retrieval logic with SecurityToken. Opt in to the new behavior via an AppContext switch. See PR #​2710 for details.

Fundamentals

• Update signing info for NuGet packages. See PR #​2696 for details.

v6.35.0

Compare Source

Bug Fix

• fix AadIssuerValidator's handling of trailing forward slashes. See issue [#​2415] for more details.

Feature

• Adds an AppContext switch to control HMAC key size verification. See #​2421 for more details.

v6.34.0

Security fixes

See https://aka.ms/IdentityModel/Jan2024/zip and https://aka.ms/IdentityModel/Jan2024/jku for details.

v6.33.0: 6.33.0

Bug Fixes:

• Clean up log messages. See #​2339 for details.
• Decouple JsonElements from JsonDocument, which causes issues in multi-threaded environments. See #​2340 for details.

v6.32.3

Compare Source

=======

Bug fixes:

• Fix logging messages. See #​2288 for details.

v6.32.2

Compare Source

=======

Bug fixes:

• Underlying JsonDocument is never disposed, causing high latency in large scale services. See #​2258 for details.

v6.32.1

=======

Bug fixes:

• Fix thread safety for JsonClaimSet Claims and JsonWebToken Audiences. See #​2185 for details.

v6.32.0

=======

New features:

• Adding an AAD specific signing key issuer validator. See issue #​2134 for details.
• Better support for WsFederation. See PR for details.

Bug fixes

• Address perf regression introduced in 6.31.0. See PR for details.

v6.31.0

Compare Source

========
This release contains work from the following PRs and commits:

• Introduce ConfigurationValidationException(#​2076)
• Disarm security artifacts(#​2064)
• Throw SecurityTokenMalformedTokenException on malformed tokens(#​2080)
• Add ClaimsMapping to JsonWebTokenHandler

v6.30.1

Compare Source

=========
This release contains work from the following PRs:

• Modified token validation to be async throughout the call graph #​2075
• Enforce key sizes when creating HMAC #​2072
• Fix AotCompatibilityTests #​2066
• Use up-to-date "now", in case take long time to get Metadata #​2063

This release addresses #​1743 and, as such, going forward if the SymmetricKey is smaller than the required size for HMAC IdentityModel will throw an ArgumentOutOfRangeException which is the same exception when the SymmetricKey is smaller than the minimum key size for encryption.

v6.30.0

Compare Source

=========
Beginning in release 6.28.0 the library stopped throwing SecurityTokenUnableToValidateException. This version (6.30.0) marks the exception type as obsolete to make this change more discoverable. Not including it in the release notes explicitly for 6.28.0 was a mistake. This exception type will be removed completely in the next few months as the team moves towards a major version bump. More information on how to replace the usage going forward can be found here: https://aka.ms/SecurityTokenUnableToValidateException

Indicate that a SecurityTokenDescriptor can create JWS or JWE
https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/pull/2055
Specify 'UTC' in log messages
AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@ceb10b1
Fix order of log messages
AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@05eeeb5

Fixed issues with matching Jwt.Kid with a X509SecurityKey.x5t
https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/pull/2057
https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/pull/2061

Marked Exception that is no longer used as obsolete
https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/pull/2060

Added support for AesGcm on .NET 6.0 or higher
AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet@85fa86a

First round of triming analysis preperation for AOT
https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/pull/2042

Added new API on TokenHandler.ValidateTokenAsync(SecurityToken ...) implemented only on JsonWebTokenHandler.
https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/pull/2056

v6.29.0

Compare Source

=========

• Add BootstrapRefreshInterval (#​2052)
• Added net462 target (#​2049)
• Create the configuration cache in the BaseConfigurationManager class (#​2048)

v6.28.1

Compare Source

=========

• Add BootstrapRefreshInterval (#​2052)
• Added net462 target (#​2049)
• Create the configuration cache in the BaseConfigurationManager class (#​2048)

v6.28.0

Compare Source

========

• Update Wilson logs with aka.ms pointers to known wikis in https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/pull/2027
• Fix typo in documentation https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/pull/2034
• Introduce a LKG configuration cache to store each valid base configuration instead of a single entry of configuration https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/pull/2007
• Add encryption keys to base configuration https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/pull/2023
• Updated CHANGELOG link https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/pull/2026

v6.27.0

========
Servicing release
Set maximum depth for Newtonsoft parsing.https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/pull/20244
Improve metadata failure message.https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/pull/20100
Validate size of symmetric signatures.https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/pull/20088
Added property TokenEndpoint to BaseConfiguration.https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/pull/19988

v6.26.1

=========

Bug Fixes:

Releasing a Hotfix for Wilson 6.26.0 that reverts async/await changes made in #​1996 to address a performance reduction issue.

• Changes are in #​2015
• Root cause analysis and fix will be tracked in #​2017

v6.26.0

Compare Source

Servicing release
Introducing a new boolean TokenValidationParameter LogTokenId.
https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/pull/2002
Update System.Text.Encodings.Web
https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/pull/1997
Update ValidateToken call stack fully async
https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/pull/1996
JsonWebTokenHandler to return the JsonWebToken on validation failure
https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/pull/1989
Update documentation of DefaultTokenLifetimeInMinutes
https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/pull/1988

JamesNK/Newtonsoft.Json (Newtonsoft.Json)

v13.0.3

Compare Source

• Fix - Fixed parsed zero decimals losing trailing zeroes
• Fix - Fixed parsed negative zero double losing negative
• Fix - Fixed null string being reported as String rather than JTokenType.Null

---

Configuration

📅 Schedule: Branch creation - "before 07:00 on Thursday" in timezone Europe/Oslo, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.