Skip to content

Bump Azure.Core from 1.58.0 to 1.59.0#3830

Merged
polatengin merged 1 commit into
mainfrom
dependabot/nuget/src/PSRule.Rules.Azure.Patterns/Azure.Core-1.59.0
Jun 14, 2026
Merged

Bump Azure.Core from 1.58.0 to 1.59.0#3830
polatengin merged 1 commit into
mainfrom
dependabot/nuget/src/PSRule.Rules.Azure.Patterns/Azure.Core-1.59.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 10, 2026

Copy link
Copy Markdown
Contributor

Updated Azure.Core from 1.58.0 to 1.59.0.

Release notes

Sourced from Azure.Core's releases.

1.59.0

1.59.0 (2026-06-09)

Features Added

  • Added experimental (AZID0004) mTLS Proof-of-Possession token binding support for managed identity scenarios, including dynamic host capability detection via MSAL and transport certificate rotation APIs on BearerTokenAuthenticationPolicy.

Bugs Fixed

  • Fixed BearerTokenAuthenticationPolicy so that the Authorization header is no longer re-attached to a request that has been redirected to a different host. Previously, RedirectPolicy would strip the Authorization header before following a redirect, but the per-retry BearerTokenAuthenticationPolicy would re-add the cached bearer token to the redirected request — including when the redirect target was a different host. The policy now detects when the request URI authority has changed since it last authorized the message, defensively strips any Authorization header, and skips both re-authorization and the WWW-Authenticate (CAE) 401 handler so that no bearer token is sent to — or fetched in response to a challenge from — the redirect target. Same-host redirects, normal (non-redirected) requests, and CAE handling against the original host are unchanged. Callers who explicitly enabled auto-redirect (via HttpPipelineTransportOptions.IsClientRedirectEnabled = true or RedirectPolicy.SetAllowAutoRedirect(message, true)) and depended on the bearer token being re-attached on cross-host redirects should construct a separate client targeting the redirect-target host with a credential bound to that host's resource.

Other Changes

  • Updated Microsoft.Identity.Client dependency to 4.84.2.

Commits viewable in compare view.

@dependabot dependabot Bot added the dependencies Changes for a dependency update label Jun 10, 2026
@dependabot dependabot Bot requested a review from a team as a code owner June 10, 2026 15:27
@dependabot dependabot Bot added the dependencies Changes for a dependency update label Jun 10, 2026
@dependabot dependabot Bot force-pushed the dependabot/nuget/src/PSRule.Rules.Azure.Patterns/Azure.Core-1.59.0 branch from 2bfbf79 to 6f4ef5b Compare June 14, 2026 15:17
@polatengin

Copy link
Copy Markdown
Member

@dependabot rebase

---
updated-dependencies:
- dependency-name: Azure.Core
  dependency-version: 1.59.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/nuget/src/PSRule.Rules.Azure.Patterns/Azure.Core-1.59.0 branch from 6f4ef5b to 289d4ea Compare June 14, 2026 15:38
@polatengin polatengin merged commit 87fc377 into main Jun 14, 2026
14 checks passed
@polatengin polatengin deleted the dependabot/nuget/src/PSRule.Rules.Azure.Patterns/Azure.Core-1.59.0 branch June 14, 2026 16:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Changes for a dependency update

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant