Bump Microsoft.Identity.Web from 1.25.10 to 2.6.1 in /SamplesDashboard/SamplesDashboard

[dependabot]

Bumps Microsoft.Identity.Web from 1.25.10 to 2.6.1.

Release notes

Sourced from Microsoft.Identity.Web's releases.

2.6.1

• Update to Wilson 6.27.0 and MSAL.NET 4.51.0

New Features:

• GetClientAssertion is now public, which enables inheritance of ClientAssertionProviderBase. See PR for details.
• Id Web now uses TryAdd instead of Add in the InMemory and Distributed caches, this is to not overwrite previously added caches. See issue for details.
• Id Web now supports MsAuth10ATPop. See PR for details.

Bug Fixes:

• Fix a regression from v1.16.x to v2.5.0 with auth code redemption when the ResponseType == "code". See issue #2096 for details.

Fundamentals:

• Address compliance and build issues: #2113, #2116, #2120, #2121, #2122, #2128, #2125, and #2137.

2.5.0

Official GA on NuGet of Microsoft.Identity.Web 2.5.0 brings a variety of new higher-level APIs, including support for .NET Framework (Owin), Daemon scenarios, and the new DownstreamApi.

New Feature

• Make ClientAssertion public, see for details.

2.0.8-preview

• Update Microsoft.Identity.Abstractions 1.0.5-preview, which has breaking changes.

2.0.7-preview

• Use ConcurrentDictionary for MergedOptions to resolve #1957

2.0.6-preview

New Feature:

• Enable using the TokenAcquireFactory default instance from anywhere in an ASP.NET Core application #1958

Bug Fixes:

• Fixes a race condition only present in .NET 7 - #1957
• Fix from @​rvplauborg to DownstreamWebApiOptions.Clone, which was missing two properties. #1970
• Updates to OWIN and 1P extensibility

2.0.4-preview

• Fix Component Governance alerts due to dependent packages. CVE-2022-1941 in Google.Protobuf and CVE-2022-34716 for netcoreapp3.1, cve-2022-29117 for OWIN and cve-2021-24112 for data protection.

New Features:

• Add support for private keys in certificates.

Bug Fix:

• #749

... (truncated)

Changelog

Sourced from Microsoft.Identity.Web's changelog.

2.6.1

• Update to Wilson 6.27.0 and MSAL.NET 4.51.0

New Features:

• GetClientAssertion is now public, which enables inheritance of ClientAssertionProviderBase. See PR for details.
• Id Web now uses TryAdd instead of Add in the InMemory and Distributed caches, this is to not overwrite previously added caches. See issue for details.
• Id Web now supports MsAuth10ATPop. See PR for details.

Bug Fixes:

• Fix a regression from v1.16.x to v2.5.0 with auth code redemption when the ResponseType == "code". See issue #2096 for details.

Fundamentals:

• Address compliance and build issues: #2113, #2116, #2120, #2121, #2122, #2128, #2125, and #2137.

2.5.0

• Make ClientAssertion public, see for details.

2.4.0

• Fix for #2035

2.3.0

• TokenAcquirerFactory.GetDefaultInstance now takes the default configuration section AzureAd from where to get the application configuration.

2.2.0

• Re-add netcoreapp3.1 target framework.
• Update to Microsoft.Identity.Abstractions 2.0.1 which includes API change moving from IDownstreamRestApi to IDownstreamApi.

2.1.0

Id Web v2.1.0 brings a varity of new higher-level APIs, including support for .NET Framework (Owin), Daemon scenarios, and the new DownstreamRestApi.

2.0.8-preview

• Update Microsoft.Identity.Abstractions 1.0.5-preview, which has breaking changes.

2.0.7-preview

• Use ConcurrentDictionary for MergedOptions to resolve #1957

Commits

• 3a48a6d Update changelog.md (#2138)
• 307ef45 add tests and fix warnings (#2140)
• e9bcf43 fix #2096 auth code redemption issue (#2139)
• 5c38def Update values for build (#2118)
• 28fd15c add license info automatically (#2129)
• b2c03e1 add a few more tests (#2128)
• 8021a03 Update MSAL and IdentityModel (#2126)
• fd10981 test for github action (#2127)
• 4b9947f address code ql warning in test (#2125)
• 6f76fe5 fix codeQL analysis (#2124)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #1022.