Bump Microsoft.IdentityModel.Protocols.OpenIdConnect from 8.18.0 to 8.19.1 - #42
Conversation
….19.1 --- updated-dependencies: - dependency-name: Microsoft.IdentityModel.Protocols.OpenIdConnect dependency-version: 8.19.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
…agent, gpt-5.6-sol + Priority processing, dep bumps Slowness fixes from App Insights investigation (12.7-min chat turns): (1) ReasoningEffort now read from AzureOpenAI:ReasoningEffort, default 'high' — hardcoded 'xhigh' produced 8+ min single LLM round-trips; (2) Copilot CLI 'task' sub-agent excluded via SessionConfig.ExcludedTools — one call looped 8 min in prod; (3) default model gpt-5.6-sol 2026-07-09 with serviceTier Priority (new Bicep param, default Priority) for faster TTFT; (4) NuGet bumps: IdentityModel 8.19.1 x2 (#41 #42), OpenTelemetry 1.16.0 x2 (#44). Verified: dotnet build Release green; bicep build clean.
…ol Priority (#54) * Upgrade GitHub.Copilot.SDK to 1.0.5 (+ API migration) [skip ci] Migrate from GitHub.Copilot.SDK 1.0.0-beta.4 to 1.0.5. API changes: namespace GitHub.Copilot.SDK -> GitHub.Copilot; CopilotClientOptions.CopilotHome -> BaseDirectory; OnPermissionRequest -> PermissionHandler.ApproveAll (replaces PermissionRequestResult); CopilotSession.GetMessagesAsync -> GetEventsAsync; SessionListFilter.Cwd -> WorkingDirectory; SessionMetadata.Context.Cwd -> WorkingDirectory; SessionConfig.Tools is now ICollection<AIFunctionDeclaration> so tool-list types widened from List<AIFunction> to List<AIFunctionDeclaration>. Behavior-preserving. Verified: dotnet build Release GREEN (0/0). Supersedes #51. [skip ci] to avoid an unattended test-slot deploy; CI runs on merge to main. * docs(changelog): note GitHub.Copilot.SDK 1.0.5 upgrade [skip ci] * perf: configurable reasoning effort (default high), exclude task sub-agent, gpt-5.6-sol + Priority processing, dep bumps Slowness fixes from App Insights investigation (12.7-min chat turns): (1) ReasoningEffort now read from AzureOpenAI:ReasoningEffort, default 'high' — hardcoded 'xhigh' produced 8+ min single LLM round-trips; (2) Copilot CLI 'task' sub-agent excluded via SessionConfig.ExcludedTools — one call looped 8 min in prod; (3) default model gpt-5.6-sol 2026-07-09 with serviceTier Priority (new Bicep param, default Priority) for faster TTFT; (4) NuGet bumps: IdentityModel 8.19.1 x2 (#41 #42), OpenTelemetry 1.16.0 x2 (#44). Verified: dotnet build Release green; bicep build clean.
|
Superseded by #54 (merged) — the same version bump was applied there alongside the SDK 1.0.5 upgrade and perf fixes. Closing. |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
Updated Microsoft.IdentityModel.Protocols.OpenIdConnect from 8.18.0 to 8.19.1.
Release notes
Sourced from Microsoft.IdentityModel.Protocols.OpenIdConnect's releases.
8.19.1
Bug Fixes
JwtSecurityTokenHandlerforIssuerSigningKeyResolverUsingConfigurationto take priority overIssuerSigningKeyResolver, matching the documented contract and the correct behavior already present inJsonWebTokenHandler. See PR #3519.8.19.0
New Features
Bug Fixes
jkuclaim. See PR #3481.htucomparison. See PR #3509.Commits viewable in compare view.
You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)