Bump Microsoft.AspNetCore.Authentication.JwtBearer from 8.0.16 to 8.0.31

[dependabot]

Updated Microsoft.AspNetCore.Authentication.JwtBearer from 8.0.16 to 8.0.31.

Release notes

Sourced from Microsoft.AspNetCore.Authentication.JwtBearer's releases.

8.0.31

Release

What's Changed

• [release/8.0] Update branding to 8.0.31 by @​dotnet-bot in [release/8.0] Update branding to 8.0.31 dotnet/aspnetcore#68235
• [release/8.0] Backport FormsInputDateTest fixes by @​ilonatommy in [release/8.0] Backport FormsInputDateTest fixes dotnet/aspnetcore#68125
• [release/8.0] (deps): Bump src/submodules/googletest from 3064a60 to 3940de9 by @​dependabot[bot] in [release/8.0] (deps): Bump src/submodules/googletest from 3064a60 to 3940de9 dotnet/aspnetcore#68173
• [release/8.0] Update dependencies from dotnet/source-build-assets by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/source-build-assets dotnet/aspnetcore#68189
• [release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#67801
• [release/8.0] Quarantine System_UsesProvidedCertificateNotFromStore by @​wtgodbe in [release/8.0] Quarantine System_UsesProvidedCertificateNotFromStore dotnet/aspnetcore#68242
• [8.0] Fix Debian package descriptions by @​wtgodbe in [8.0] Fix Debian package descriptions dotnet/aspnetcore#68255
• Remove Publish-Build-Assets variable group from release/8.0 by @​missymessa in Remove Publish-Build-Assets variable group from release/8.0 dotnet/aspnetcore#68265
• [release/8.0] Drop Microsoft.AspNetCore.Grpc.Swagger by @​Youssef1313 with @​Copilot in [release/8.0] Drop Microsoft.AspNetCore.Grpc.Swagger dotnet/aspnetcore#67955
• Merging internal commits for release/8.0 by @​dotnet-bot in Merging internal commits for release/8.0 dotnet/aspnetcore#68361
• [release/8.0] Update OpenAPI to latest by @​Youssef1313 in [release/8.0] Update OpenAPI to latest dotnet/aspnetcore#68491

Full Changelog: dotnet/aspnetcore@v8.0.30...v8.0.31

8.0.30

Release

What's Changed

• [release/8.0] Update branding to 8.0.30 by @​dotnet-bot in [release/8.0] Update branding to 8.0.30 dotnet/aspnetcore#67621
• [release/8.0] (deps): Bump src/submodules/googletest from 7140cd4 to 973323e by @​dependabot[bot] in [release/8.0] (deps): Bump src/submodules/googletest from 7140cd4 to 973323e dotnet/aspnetcore#67525
• [release/8.0] (deps): Bump src/submodules/MessagePack-CSharp from 9614e6f to 365965f by @​dependabot[bot] in [release/8.0] (deps): Bump src/submodules/MessagePack-CSharp from 9614e6f to 365965f dotnet/aspnetcore#67524
• Update ws package version to 7.5.11 by @​birarroshan in Update ws package version to 7.5.11 dotnet/aspnetcore#67408
• [release/8.0] Update CI pipeline to use Windows 2022 image by @​github-actions[bot] in [release/8.0] Update CI pipeline to use Windows 2022 image dotnet/aspnetcore#67289
• [release/8.0] Update Selenium and Playwright versions to match main by @​wtgodbe in [release/8.0] Update Selenium and Playwright versions to match main dotnet/aspnetcore#67273
• [release/8.0] improve CI flakiness by @​wtgodbe in [release/8.0] improve CI flakiness dotnet/aspnetcore#67645
• [release/8.0] (deps): Bump src/submodules/googletest from 973323e to 3064a60 by @​dependabot[bot] in [release/8.0] (deps): Bump src/submodules/googletest from 973323e to 3064a60 dotnet/aspnetcore#67654
• Merging internal commits for release/8.0 by @​dotnet-bot in Merging internal commits for release/8.0 dotnet/aspnetcore#67796
• Use build identity (System.AccessToken) for internal feed creds instead of expired dn-bot-dnceng-artifact-feeds-rw PAT (release/8.0) by @​missymessa in Use build identity (System.AccessToken) for internal feed creds instead of expired dn-bot-dnceng-artifact-feeds-rw PAT (release/8.0) dotnet/aspnetcore#67854
• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#67943

New Contributors

• @​birarroshan made their first contribution in Update ws package version to 7.5.11 dotnet/aspnetcore#67408

Full Changelog: dotnet/aspnetcore@v8.0.29...v8.0.30

8.0.29

Release

What's Changed

• Update branding to 8.0.29 by @​vseanreesermsft in Update branding to 8.0.29 dotnet/aspnetcore#66982
• [release/8.0] (deps): Bump src/submodules/googletest from d72f9c8 to a721f1b by @​dependabot[bot] in [release/8.0] (deps): Bump src/submodules/googletest from d72f9c8 to a721f1b dotnet/aspnetcore#66973
• [release/8.0] Update System.Security.Cryptography.Xml in RepoTasks by @​wtgodbe in [release/8.0] Update System.Security.Cryptography.Xml in RepoTasks dotnet/aspnetcore#66766
• [release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#66699
• [release/8.0] Update dependencies from dotnet/source-build-assets by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/source-build-assets dotnet/aspnetcore#66664
• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#66946
• [release/8.0] Add 1ES Unofficial pipeline for Components E2E tests by @​wtgodbe in [release/8.0] Add 1ES Unofficial pipeline for Components E2E tests dotnet/aspnetcore#66989
• Merging internal commits for release/8.0 by @​vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#67105
• [release/8.0] Update npm dependencies by @​wtgodbe in [release/8.0] Update npm dependencies dotnet/aspnetcore#67144
• [release/8.0] Update Microsoft Identity Web package versions to 3.15.1 by @​wtgodbe in [release/8.0] Update Microsoft Identity Web package versions to 3.15.1 dotnet/aspnetcore#67164
• [release/8.0] (deps): Bump src/submodules/googletest from a721f1b to 7140cd4 by @​dependabot[bot] in [release/8.0] (deps): Bump src/submodules/googletest from a721f1b to 7140cd4 dotnet/aspnetcore#67222
• [release/8.0] Backport docker image fix by @​wtgodbe in [release/8.0] Backport docker image fix dotnet/aspnetcore#67279
• [release/8.0] Reject ASCII control characters in cookie auth return URLs by @​github-actions[bot] in [release/8.0] Reject ASCII control characters in cookie auth return URLs dotnet/aspnetcore#67157

Full Changelog: dotnet/aspnetcore@v8.0.28...v8.0.29

8.0.28

Release

What's Changed

• Update branding to 8.0.28 by @​vseanreesermsft in Update branding to 8.0.28 dotnet/aspnetcore#66589
• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#66556
• [release/8.0] Update dependencies from dotnet/source-build-assets by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/source-build-assets dotnet/aspnetcore#66471
• [release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#66344
• [release/8.0] Strip UTF-8 BOM from template localization files and remove version override by @​wtgodbe in [release/8.0] Strip UTF-8 BOM from template localization files and remove version override dotnet/aspnetcore#66427
• Merging internal commits for release/8.0 by @​vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#66662

Full Changelog: dotnet/aspnetcore@v8.0.27...v8.0.28

8.0.27

Release

What's Changed

• [release/8.0] Update branding to 8.0.27 by @​vseanreesermsft in [release/8.0] Update branding to 8.0.27 dotnet/aspnetcore#66205
• [release/8.0] Update NPM dependencies by @​wtgodbe in [release/8.0] Update NPM dependencies dotnet/aspnetcore#66052
• [release/8.0] Move off of dead-lettered Windows preview helix queue by @​wtgodbe in [release/8.0] Move off of dead-lettered Windows preview helix queue dotnet/aspnetcore#66220
• [release/8.0] (deps): Bump src/submodules/googletest from 73a63ea to d72f9c8 by @​dependabot[bot] in [release/8.0] (deps): Bump src/submodules/googletest from 73a63ea to d72f9c8 dotnet/aspnetcore#66087
• [release/8.0] Replace dn-bot-dnceng-build-rw-code-rw PAT with WIF service connection in mirror-within-azdo by @​missymessa in [release/8.0] Replace dn-bot-dnceng-build-rw-code-rw PAT with WIF service connection in mirror-within-azdo dotnet/aspnetcore#66115
• [release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#66216
• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#66081
• [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#66131
• [release/8.0] Update @​azure/msal-browser from 2.x to 4.x by @​wtgodbe in [release/8.0] Update @azure/msal-browser from 2.x to 4.x dotnet/aspnetcore#66236
• [release/8.0] Use source-build-assets repo by @​NikolaMilosavljevic in [release/8.0] Use source-build-assets repo dotnet/aspnetcore#66276
• Merging internal commits for release/8.0 by @​vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#66317

Full Changelog: dotnet/aspnetcore@v8.0.26...v8.0.27

8.0.26

Release

What's Changed

• [release/8.0] Update branding to 8.0.26 by @​vseanreesermsft in [release/8.0] Update branding to 8.0.26 dotnet/aspnetcore#65635
• [release/8.0] (deps): Bump src/submodules/googletest from 56efe39 to 73a63ea by @​dependabot[bot] in [release/8.0] (deps): Bump src/submodules/googletest from 56efe39 to 73a63ea dotnet/aspnetcore#65586
• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#65581
• [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#65621
• [release/8.0] Update dependencies from dotnet/source-build-externals by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/source-build-externals dotnet/aspnetcore#65615
• Merging internal commits for release/8.0 by @​vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#65730

Full Changelog: dotnet/aspnetcore@v8.0.25...v8.0.26

8.0.25

Release

What's Changed

• Update branding to 8.0.25 by @​vseanreesermsft in Update branding to 8.0.25 dotnet/aspnetcore#65293
• [release/8.0] (deps): Bump src/submodules/googletest from 9156d4c to 56efe39 by @​dependabot[bot] in [release/8.0] (deps): Bump src/submodules/googletest from 9156d4c to 56efe39 dotnet/aspnetcore#65289
• [release/8.0] Add support for hotfix branding by @​mmitche in [release/8.0] Add support for hotfix branding dotnet/aspnetcore#65252
• [release/8.0] Remove package baseline infrastructure by @​Copilot in [release/8.0] Remove package baseline infrastructure dotnet/aspnetcore#65209
• [release/8.0] Set network isolation policy for aspnetcore-ci by @​github-actions[bot] in [release/8.0] Set network isolation policy for aspnetcore-ci dotnet/aspnetcore#65173
• [release/8.0] Fix URL format for JDK download on linux by @​github-actions[bot] in [release/8.0] Fix URL format for JDK download on linux dotnet/aspnetcore#65076
• [release/8.0] Disable parallel restore for Grpc JsonTranscoding by @​github-actions[bot] in [release/8.0] Disable parallel restore for Grpc JsonTranscoding dotnet/aspnetcore#65073
• [release/8.0] Update Ubuntu queue to 22.04 by @​github-actions[bot] in [release/8.0] Update Ubuntu queue to 22.04 dotnet/aspnetcore#65299
• [release/8.0] Re-enable Nuget Audit by @​wtgodbe in [release/8.0] Re-enable Nuget Audit dotnet/aspnetcore#65328
• [release/8.0] Don't use netcoreapp2.1 in dotnet-getdocument by @​wtgodbe in [release/8.0] Don't use netcoreapp2.1 in dotnet-getdocument dotnet/aspnetcore#65331
• [release/8.0] Update AzureIdentityVersion to 1.11.4 by @​wtgodbe in [release/8.0] Update AzureIdentityVersion to 1.11.4 dotnet/aspnetcore#65332
• [release/8.0] Disable parallel restore for linker tests by @​wtgodbe in [release/8.0] Disable parallel restore for linker tests dotnet/aspnetcore#65375
• Merging internal commits for release/8.0 by @​vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#65382
• [release/8.0] Switch to non-preview 2022 queue by @​github-actions[bot] in [release/8.0] Switch to non-preview 2022 queue dotnet/aspnetcore#65413

Full Changelog: dotnet/aspnetcore@v8.0.24...v8.0.25

8.0.24

Release

8.0.23

Release

What's Changed

https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-january-2026-servicing-updates/#release-changelogs

8.0.22

Release

What's Changed

• Update branding to 8.0.22 by @​vseanreesermsft in Update branding to 8.0.22 dotnet/aspnetcore#63949
• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#63664
• [release/8.0] (http2): Lower WINDOWS_UPDATE received on (half)closed stream to stream abortion by @​DeagleGross in [release/8.0] (http2): Lower WINDOWS_UPDATE received on (half)closed stream to stream abortion dotnet/aspnetcore#63903
• [release/8.0] (deps): Bump src/submodules/googletest from eb2d85e to 9706f75 by @​dependabot[bot] in [release/8.0] (deps): Bump src/submodules/googletest from eb2d85e to 9706f75 dotnet/aspnetcore#63893
• [release/8.0] Fixed devtools url used for debug with chrome and edge by @​github-actions[bot] in [release/8.0] Fixed devtools url used for debug with chrome and edge dotnet/aspnetcore#62080
• [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#63665
• [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#63957
• Merging internal commits for release/8.0 by @​vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#64035
• Mark productVersion.txt as shipping artifact in 8.0 by @​Copilot in Mark productVersion.txt as shipping artifact in 8.0 dotnet/aspnetcore#64067
• Revert log level severity for unknown proxy in ForwardedHeadersMiddleware by @​BrennanConroy in Revert log level severity for unknown proxy in ForwardedHeadersMiddleware dotnet/aspnetcore#64090

Full Changelog: dotnet/aspnetcore@v8.0.21...v8.0.22

8.0.21

Release

What's Changed

• Update branding to 8.0.21 by @​vseanreesermsft in Update branding to 8.0.21 dotnet/aspnetcore#63509
• [release/8.0] (deps): Bump src/submodules/googletest from 373af2e to eb2d85e by @​dependabot[bot] in [release/8.0] (deps): Bump src/submodules/googletest from 373af2e to eb2d85e dotnet/aspnetcore#63500
• [release/8.0] Make duplicate deb/rpm packages so we can sign them with the new PMC key by @​github-actions[bot] in [release/8.0] Make duplicate deb/rpm packages so we can sign them with the new PMC key dotnet/aspnetcore#63250
• [release/8.0] Extend Unofficial 1ES template in IdentityModel nightly tests job by @​github-actions[bot] in [release/8.0] Extend Unofficial 1ES template in IdentityModel nightly tests job dotnet/aspnetcore#63466
• [release/8.0] Quarantine ResponseBody_WriteContentLength_PassedThrough by @​github-actions[bot] in [release/8.0] Quarantine ResponseBody_WriteContentLength_PassedThrough dotnet/aspnetcore#63534
• [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#63261
• [release/8.0] Use wait assert in flaky tests by @​ilonatommy in [release/8.0] Use wait assert in flaky tests dotnet/aspnetcore#63565
• [release/8.0] Update Microsoft.Build versions by @​github-actions[bot] in [release/8.0] Update Microsoft.Build versions dotnet/aspnetcore#62507
• Merging internal commits for release/8.0 by @​vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#63603
• backport(8.0): Fix runtime architecture detection logic in ANCM by @​DeagleGross in backport(8.0): Fix runtime architecture detection logic in ANCM dotnet/aspnetcore#63706

Full Changelog: dotnet/aspnetcore@v8.0.20...v8.0.21

8.0.20

Release

What's Changed

• Update branding to 8.0.20 by @​vseanreesermsft in Update branding to 8.0.20 dotnet/aspnetcore#63106
• [release/8.0] (deps): Bump src/submodules/googletest from c67de11 to 373af2e by @​dependabot[bot] in [release/8.0] (deps): Bump src/submodules/googletest from c67de11 to 373af2e dotnet/aspnetcore#63038
• [release/8.0] Dispose the certificate chain elements with the chain by @​MackinnonBuck in [release/8.0] Dispose the certificate chain elements with the chain dotnet/aspnetcore#62994
• [release/8.0] Update SignalR Redis tests to use internal Docker Hub mirror by @​github-actions[bot] in [release/8.0] Update SignalR Redis tests to use internal Docker Hub mirror dotnet/aspnetcore#63117
• [release/8.0] [SignalR] Don't throw for message headers in Java client by @​github-actions[bot] in [release/8.0] [SignalR] Don't throw for message headers in Java client dotnet/aspnetcore#62784
• Merging internal commits for release/8.0 by @​vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#63152
• [release/8.0] Update dependencies from dotnet/extensions by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/extensions dotnet/aspnetcore#63188
• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro[bot] in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#63189

Full Changelog: dotnet/aspnetcore@v8.0.19...v8.0.20

8.0.18

Release

What's Changed

• Update branding to 8.0.18 by @​vseanreesermsft in Update branding to 8.0.18 dotnet/aspnetcore#62241
• [release/8.0] Update Alpine helix references by @​github-actions in [release/8.0] Update Alpine helix references dotnet/aspnetcore#62243
• [release/8.0] (deps): Bump src/submodules/googletest from 04ee1b4 to e9092b1 by @​dependabot in [release/8.0] (deps): Bump src/submodules/googletest from 04ee1b4 to e9092b1 dotnet/aspnetcore#62201
• [8.0] Delete src/arcade directory by @​akoeplinger in [8.0] Delete src/arcade directory dotnet/aspnetcore#61994
• [Backport 8.0] [IIS] Manually parse exe bitness (#​61894) by @​BrennanConroy in [Backport 8.0] [IIS] Manually parse exe bitness (#61894) dotnet/aspnetcore#62037
• [release/8.0] Update dependencies from dotnet/source-build-reference-packages by @​dotnet-maestro in [release/8.0] Update dependencies from dotnet/source-build-reference-packages dotnet/aspnetcore#62006
• [release/8.0] Update dependencies from dotnet/arcade by @​dotnet-maestro in [release/8.0] Update dependencies from dotnet/arcade dotnet/aspnetcore#61944
• [release/8.0] Associate tagged keys with entries so replacements are not evicted by @​github-actions in [release/8.0] Associate tagged keys with entries so replacements are not evicted dotnet/aspnetcore#62247
• [release/8.0] Block test that is failing after switching to latest-chrome by @​github-actions in [release/8.0] Block test that is failing after switching to latest-chrome dotnet/aspnetcore#62284
• backport(net8.0): http.sys on-demand TLS client hello retrieval by @​DeagleGross in backport(net8.0): http.sys on-demand TLS client hello retrieval dotnet/aspnetcore#62290
• Merging internal commits for release/8.0 by @​vseanreesermsft in Merging internal commits for release/8.0 dotnet/aspnetcore#62302

Full Changelog: dotnet/aspnetcore@v8.0.17...v8.0.18

8.0.17

Bug Fixes

• Forwarded Headers Middleware: Ignore X-Forwarded-Headers from Unknown Proxy (#​61623)
  The Forwarded Headers Middleware now ignores X-Forwarded-Headers sent from unknown proxies. This change improves security by ensuring that only trusted proxies can influence the forwarded headers, preventing potential spoofing or misrouting of requests.

Dependency Updates

• Update dependencies from dotnet/arcade (#​61832)
  This update brings in the latest changes from the dotnet/arcade repository, ensuring that ASP.NET Core benefits from recent improvements, bug fixes, and security patches in the shared build infrastructure.

• Bump src/submodules/googletest from 52204f7 to 04ee1b4 (#​61761)
  The GoogleTest submodule has been updated to a newer commit, providing the latest testing features, bug fixes, and performance improvements for the project's C++ test components.

Miscellaneous

• Update branding to 8.0.17 (#​61830)
  The project version branding has been updated to reflect the new 8.0.17 release, ensuring consistency across build outputs and documentation.

• Merging internal commits for release/8.0 (#​61924)
  This change merges various internal commits into the release/8.0 branch, incorporating minor fixes, documentation updates, and other non-user-facing improvements to keep the release branch up to date.

---

This summary is generated and may contain inaccuracies. For complete details, please review the linked pull requests.

Full Changelog: dotnet/aspnetcore@v8.0.16...v8.0.17

Commits viewable in compare view.

[github-actions]

🚀 Dogfood this PR with:

⚠️ WARNING: Do not do this without first carefully reviewing the code of this PR to satisfy yourself it is safe.

curl -fsSL https://raw.githubusercontent.com/CommunityToolkit/Aspire/main/eng/scripts/dogfood-pr.sh | bash -s -- 2134

Or

• Run remotely in PowerShell:

iex "& { $(irm https://raw.githubusercontent.com/CommunityToolkit/Aspire/main/eng/scripts/dogfood-pr.ps1) } 2134"