From c4638568c2bfa4810f70d99b408b841fa5af3af0 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 23 Apr 2024 13:23:16 +0800
Subject: [PATCH] build(deps): bump Azure.Identity from 1.11.0 to 1.11.2 in
 /Notation.Plugin.AzureKeyVault (#173)

Bumps [Azure.Identity](https://github.com/Azure/azure-sdk-for-net) from
1.11.0 to 1.11.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/Azure/azure-sdk-for-net/releases">Azure.Identity's
releases</a>.</em></p>
<blockquote>
<h2>Azure.Identity_1.11.2</h2>
<h2>1.11.2 (2024-04-19)</h2>
<h3>Bugs Fixed</h3>
<ul>
<li>Fixed an issue which caused claims to be incorrectly added to
confidential client credentials such as
<code>DeviceCodeCredential</code> <a
href="https://redirect.github.com/Azure/azure-sdk-for-net/issues/43468">#43468</a></li>
</ul>
<h2>Azure.Identity_1.11.1</h2>
<h2>1.11.1 (2024-05-07)</h2>
<h3>Other Changes</h3>
<ul>
<li>Updated Microsoft.Identity.Client and related dependencies to
version 4.60.3</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/Azure/azure-sdk-for-net/commit/ae13ec206b7e1452fc76d7d3fbc0c8bcaf02ed78"><code>ae13ec2</code></a>
Fix ConfidentialClient's AcquireTokenSilent and AcquireTokenOnBehalfOf
claims...</li>
<li><a
href="https://github.com/Azure/azure-sdk-for-net/commit/1835c8f1b3ca27967e4919617d5c15b5aefbb8bf"><code>1835c8f</code></a>
Sync .github/workflows directory with azure-sdk-tools for PR 8131 (<a
href="https://redirect.github.com/Azure/azure-sdk-for-net/issues/43535">#43535</a>)</li>
<li><a
href="https://github.com/Azure/azure-sdk-for-net/commit/40ff95af853d21dbf6e25c23617a0719790ff178"><code>40ff95a</code></a>
prep release (<a
href="https://redirect.github.com/Azure/azure-sdk-for-net/issues/43534">#43534</a>)</li>
<li><a
href="https://github.com/Azure/azure-sdk-for-net/commit/70f5c4801197b63b8b425b4e039170098f12fbe3"><code>70f5c48</code></a>
[AzureMonitorDistro] Add LiveMetricsActivityProcessor only when live
metrics ...</li>
<li><a
href="https://github.com/Azure/azure-sdk-for-net/commit/a6c3e5957f75c82dc42260b94e33c302eacf5953"><code>a6c3e59</code></a>
Respect SupportsOrdering property (<a
href="https://redirect.github.com/Azure/azure-sdk-for-net/issues/43531">#43531</a>)</li>
<li><a
href="https://github.com/Azure/azure-sdk-for-net/commit/82cc7cf188d81f45abbbed4faa954123777b85ba"><code>82cc7cf</code></a>
WCF Client/CoreWCF extension packages to use Azure Queue Storage as
transport...</li>
<li><a
href="https://github.com/Azure/azure-sdk-for-net/commit/0de35d057566c2d51ea2d0c88c43a0ec759b2637"><code>0de35d0</code></a>
Increment package version after release of
Azure.ResourceManager.AppService (...</li>
<li><a
href="https://github.com/Azure/azure-sdk-for-net/commit/17cf6490b983b169f9ee1a550faa9eb96c93d87e"><code>17cf649</code></a>
[App Service] Fix for issue <a
href="https://redirect.github.com/Azure/azure-sdk-for-net/issues/43295">#43295</a>
(<a
href="https://redirect.github.com/Azure/azure-sdk-for-net/issues/43494">#43494</a>)</li>
<li><a
href="https://github.com/Azure/azure-sdk-for-net/commit/3bd55fdc73b443322170d53816101ef9af5ea432"><code>3bd55fd</code></a>
Increment version for storage releases (<a
href="https://redirect.github.com/Azure/azure-sdk-for-net/issues/43518">#43518</a>)</li>
<li><a
href="https://github.com/Azure/azure-sdk-for-net/commit/88d92fb31cf91a5028f99373c98dbfb15fd55c0a"><code>88d92fb</code></a>
[AzureMonitorDistro] misc cleanup post LiveMetrics migration (<a
href="https://redirect.github.com/Azure/azure-sdk-for-net/issues/43517">#43517</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/Azure/azure-sdk-for-net/compare/Azure.Identity_1.11.0...Azure.Identity_1.11.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=Azure.Identity&package-manager=nuget&previous-version=1.11.0&new-version=1.11.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Junjie Gao <junjiegao@microsoft.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Junjie Gao <junjiegao@microsoft.com>
---
 .github/workflows/test.yml                                      | 1 +
 .../Notation.Plugin.AzureKeyVault.csproj                        | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 8ff0659..86e888c 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -35,6 +35,7 @@ jobs:
           FILTER_REGEX_EXCLUDE: '.*Tests/.*|.*.yml|.*/scripts/generate-certs.sh|.*.py'
           VALIDATE_CHECKOV: false
           VALIDATE_MARKDOWN: false
+          VALIDATE_JSCPD: false
   test:
     name: Unit Testing and Build
     runs-on: ubuntu-latest
diff --git a/Notation.Plugin.AzureKeyVault/Notation.Plugin.AzureKeyVault.csproj b/Notation.Plugin.AzureKeyVault/Notation.Plugin.AzureKeyVault.csproj
index 17e7a98..2371098 100644
--- a/Notation.Plugin.AzureKeyVault/Notation.Plugin.AzureKeyVault.csproj
+++ b/Notation.Plugin.AzureKeyVault/Notation.Plugin.AzureKeyVault.csproj
@@ -17,7 +17,7 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Azure.Identity" Version="1.11.0" />
+    <PackageReference Include="Azure.Identity" Version="1.11.2" />
     <PackageReference Include="Azure.Security.KeyVault.Certificates" Version="4.6.0" />
     <PackageReference Include="Azure.Security.KeyVault.Keys" Version="4.6.0" />
     <PackageReference Include="Azure.Security.KeyVault.Secrets" Version="4.6.0" />