[dependabot]

Updated Microsoft.Identity.Client from 4.90.1 to 4.92.0.

Release notes

Sourced from Microsoft.Identity.Client's releases.

4.92.0

New Features

• Added COSMIC_LOCATION as a regional auto-detection source, after REGION_NAME and before IMDS. #​6240
• Added ITokenCacheSnapshotProvider and TokenCacheSnapshot for process-local token-cache capture and restore without repeated JSON serialization. Use V3 serialization for persistence. #​6229

Bug Fixes

• Fixed certificate private-key attachment on .NET Framework 4.7.2 to support non-exportable CNG keys. #​6244
• Fixed managed identity KeyGuard attestation endpoint selection to use cloud-specific regional endpoints from IMDS compute metadata. #​6238
• Fixed Android broker request serialization by registering BrokerRequest in the source-generated JSON serializer context. #​6226

Changes

• Updated Microsoft.Identity.Client.NativeInterop from 0.20.6 to 0.20.7. #​6230
• Reduced OpenTelemetry metric-tag allocations using TagList and cached canonical tag-key sets. Custom enrichers should use noncanonical tag names. #​6227

4.91.1

Changes

• Added opt-in reduced token-acquisition logging: set MSAL_REDUCED_LOGGING=true (or 1) before application construction to move selected routine Information-level diagnostics to Verbose. Existing logging behavior is unchanged by default; acquisition summaries, warnings, and errors remain unchanged. #​6208 #​6224

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.91.0...4.91.1

4.91.0

New Features

• Made the dynamic certificate provider and confidential-client callbacks (OnMsalServiceFailure, OnCompletion, and OnBackgroundTokenRefreshCompleted) generally available, removing the experimental feature opt-in requirement. #​6216

Bug Fixes

• Fixed built-in mTLS HttpClient caching to use certificate object identity, ensuring a new certificate instance with a reacquired private-key handle receives a new handler even when its thumbprint is unchanged. #​6217
• Fixed managed identity WithForceRefresh(true) to re-mint the MSI v2 binding certificate before acquiring a new token, while reusing a valid cached attestation token for the current key. #​6215
• Fixed system-browser authentication callbacks in Linux containers by adding opt-in IPv4 port-forwarding support through MSAL_ALLOW_SYSTEM_BROWSER_PORT_FORWARDING, disabled by default. #​6186

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)