[dependabot]

Updated Microsoft.Identity.Client from 4.91.1 to 4.92.0.

Release notes

Sourced from Microsoft.Identity.Client's releases.

4.92.0

New Features

• Added COSMIC_LOCATION as a regional auto-detection source, after REGION_NAME and before IMDS. #​6240
• Added ITokenCacheSnapshotProvider and TokenCacheSnapshot for process-local token-cache capture and restore without repeated JSON serialization. Use V3 serialization for persistence. #​6229

Bug Fixes

• Fixed certificate private-key attachment on .NET Framework 4.7.2 to support non-exportable CNG keys. #​6244
• Fixed managed identity KeyGuard attestation endpoint selection to use cloud-specific regional endpoints from IMDS compute metadata. #​6238
• Fixed Android broker request serialization by registering BrokerRequest in the source-generated JSON serializer context. #​6226

Changes

• Updated Microsoft.Identity.Client.NativeInterop from 0.20.6 to 0.20.7. #​6230
• Reduced OpenTelemetry metric-tag allocations using TagList and cached canonical tag-key sets. Custom enrichers should use noncanonical tag names. #​6227

Commits viewable in compare view.

Updated Microsoft.Identity.Client.Extensions.Msal from 4.91.1 to 4.92.0.

Release notes

Sourced from Microsoft.Identity.Client.Extensions.Msal's releases.

4.92.0

New Features

• Added COSMIC_LOCATION as a regional auto-detection source, after REGION_NAME and before IMDS. #​6240
• Added ITokenCacheSnapshotProvider and TokenCacheSnapshot for process-local token-cache capture and restore without repeated JSON serialization. Use V3 serialization for persistence. #​6229

Bug Fixes

• Fixed certificate private-key attachment on .NET Framework 4.7.2 to support non-exportable CNG keys. #​6244
• Fixed managed identity KeyGuard attestation endpoint selection to use cloud-specific regional endpoints from IMDS compute metadata. #​6238
• Fixed Android broker request serialization by registering BrokerRequest in the source-generated JSON serializer context. #​6226

Changes

• Updated Microsoft.Identity.Client.NativeInterop from 0.20.6 to 0.20.7. #​6230
• Reduced OpenTelemetry metric-tag allocations using TagList and cached canonical tag-key sets. Custom enrichers should use noncanonical tag names. #​6227

Commits viewable in compare view.

Updated Nullable.Extended.Analyzer from 1.17.0 to 1.19.0.

Release notes

Sourced from Nullable.Extended.Analyzer's releases.

1.19.0

• New: MCP server: The check_required tool
• New: MCP server: The annotate tool writes justification comments for null-forgiving operators, and replaces TODO: placeholders.
• Fix: MCP server: The configuration suggested by nuget.org no longer asks for the optional --root and --solution arguments.

1.18.2

• Fix: MCP server: Workspace folders reported by VS Code (file:///d%3A/...) were not converted to a valid local path.

1.18.1

• MCP server: No command line arguments are required any more, the server uses the workspace folder of the client. --root and --solution are optional overrides.
• MCP server: Log the working directory, arguments, and the root used for every call to stderr, to simplify troubleshooting.
• Fix: Add the missing icon, license and readme to the NuGet packages of the MCP server and the analyzer, and add a readme for the Visual Studio extension.

1.18.0

• New: Nullable.Extended.Mcp, an MCP server that finds unjustified null-forgiving operators in large solutions, see Documentation.
• Fix: Results of multi-targeted projects are merged again, a null-forgiving operator is required if it is required in any target framework.

1.17.1

• Performance improvements of the VS extension.

Commits viewable in compare view.

Updated xunit from 2.4.2 to 2.9.3.

Release notes

Sourced from xunit's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated xunit.runner.visualstudio from 2.4.3 to 2.8.2.

Release notes

Sourced from xunit.runner.visualstudio's releases.

No release notes found for this version range.

Commits viewable in compare view.

[Copilot]

🟢 Approval recommended

No active review issues remain for the centralized NuGet dependency updates.

No open issues 🎉

What changed in this PR

Updates five centrally managed NuGet dependencies used by the Copilot Studio extension’s .NET components and tests.

Changes:

• Updates Microsoft.Identity.Client and its MSAL extensions from 4.91.1 to 4.92.0.
• Updates Nullable.Extended.Analyzer from 1.17.0 to 1.19.0.
• Updates xUnit from 2.4.2 to 2.9.3 and its Visual Studio runner from 2.4.3 to 2.8.2.

File	Description
src/​Packages.props	Raises shared authentication, nullable analyzer, and test dependency versions.

_{Review effort: Balanced}

[Copilot]

🟢 Approval recommended

The centralized .NET dependency updates have no active review issues.

No open issues 🎉

_{Review effort: Balanced}