Update dependency Microsoft.Identity.Web to 3.7.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
Microsoft.Identity.Web	3.4.0 -> 3.7.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

AzureAD/microsoft-identity-web (Microsoft.Identity.Web)

v3.7.1

Compare Source

========

• Updated to Microsoft.IdentityModel.* 8.5.0

v3.7.0

Compare Source

========

• Updated to Microsoft.Identity.Abstractions 8.1.0
• Updated to Microsoft.IdentityModel.* 8.4.0

New Feature

• IdentityWeb now provides extensibility to DefaultCredentialsLoader so that partner teams, or an SDK on top of IdWeb, can bring their own credential providers. See #​3220 for details.

Bug fixes

• The merged options are now being passed to MSAL for the CCA ROPC scenario. See #​3207 for details.

v3.6.2

Compare Source

========

• Updated to Microsoft.Identity.Abstractions 8.0.0

Fundamentals

• Clean-up the tests that were using properties removed in Abstractions 8.0.0. See issue #​3212 for details.

v3.6.1

Compare Source

========

• Updated to Microsoft.Identity.Abstractions 7.2.1

v3.6.0

Compare Source

========

• Updated to Microsoft.IdentityModel.* 8.3.1
• Updated to MSAL.NET 4.67.2

Bug fixes

• Checks that B2C tokens don't contain the claims used by Identity Web to represent the home tenant and object ID (obtained from the UserInfo endpoint). See https://github.com/AzureAD/microsoft-identity-web/pull/3131
• Remove explicit locking in OpenIdConnectCachingSecurityTokenProvider. See Issue #​3078

Fundamentals

• Fix Null Reference Exception in OwinTokenAcquirerFactory + other OWIN cleanup. See https://github.com/AzureAD/microsoft-identity-web/pull/3183
• Re-add code coverage comments & scope to src files. See https://github.com/AzureAD/microsoft-identity-web/issues/3177

v3.5.0

Compare Source

========

• Updated to Microsoft.IdentityModel.* 8.3.0

Bug fixes

• Ensure Singleton registration for TokenAcquisition Services when TokenAcquirerFactory is null. See https://github.com/AzureAD/microsoft-identity-web/pull/3155
• Dont modify the merged options when building the confidential client. See https://github.com/AzureAD/microsoft-identity-web/pull/3137

Fundamentals

• Install all .NET versions in pipeline, including .NET 9. See https://github.com/AzureAD/microsoft-identity-web/pull/3152
• Upgrade to C# 13. See https://github.com/AzureAD/microsoft-identity-web/pull/3138
• Specify sdk version in global.json. See https://github.com/AzureAD/microsoft-identity-web/pull/3156
• Disable Coverage PR comments. See in https://github.com/AzureAD/microsoft-identity-web/pull/3159

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" in timezone Europe/London, Automerge - "after 10am every weekday,before 4pm every weekday" in timezone Europe/London.

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud