From 9fc05ec185a80e317c96169e6719e5f5dcdb3e9e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 15 Jul 2026 06:28:46 +0000
Subject: [PATCH] Bump Microsoft.IdentityModel.JsonWebTokens to 5.7.1, 8.19.2

---
updated-dependencies:
- dependency-name: Microsoft.IdentityModel.JsonWebTokens
  dependency-version: 8.19.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: notsecurity
- dependency-name: Microsoft.IdentityModel.JsonWebTokens
  dependency-version: 5.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: notsecurity
- dependency-name: Microsoft.IdentityModel.JsonWebTokens
  dependency-version: 5.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: notsecurity
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Directory.Build.props                                           | 2 +-
 .../Microsoft.Identity.Web.DownstreamApi.csproj                 | 1 +
 src/Microsoft.Identity.Web/Microsoft.Identity.Web.csproj        | 1 +
 tests/DevApps/aspnet-mvc/OwinWebApi/OwinWebApi.csproj           | 1 +
 tests/DevApps/aspnet-mvc/OwinWebApp/OwinWebApp.csproj           | 1 +
 5 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/Directory.Build.props b/Directory.Build.props
index 65046e121..c7c65c938 100644
--- a/Directory.Build.props
+++ b/Directory.Build.props
@@ -79,7 +79,7 @@
   </PropertyGroup>
 
   <PropertyGroup Label="Common dependency versions">
-    <MicrosoftIdentityModelVersion Condition="'$(MicrosoftIdentityModelVersion)' == ''">8.19.1</MicrosoftIdentityModelVersion>
+    <MicrosoftIdentityModelVersion Condition="'$(MicrosoftIdentityModelVersion)' == ''">8.19.2</MicrosoftIdentityModelVersion>
     <MicrosoftIdentityClientVersion Condition="'$(MicrosoftIdentityClientVersion)' == ''">4.86.0</MicrosoftIdentityClientVersion>
     <MicrosoftIdentityClientKeyAttestationVersion Condition="'$(MicrosoftIdentityClientKeyAttestationVersion)' == ''">4.86.0</MicrosoftIdentityClientKeyAttestationVersion>
     <MicrosoftIdentityAbstractionsVersion Condition="'$(MicrosoftIdentityAbstractionsVersion)' == ''">12.5.0</MicrosoftIdentityAbstractionsVersion>
diff --git a/src/Microsoft.Identity.Web.DownstreamApi/Microsoft.Identity.Web.DownstreamApi.csproj b/src/Microsoft.Identity.Web.DownstreamApi/Microsoft.Identity.Web.DownstreamApi.csproj
index aff69e63c..e2d5a3a16 100644
--- a/src/Microsoft.Identity.Web.DownstreamApi/Microsoft.Identity.Web.DownstreamApi.csproj
+++ b/src/Microsoft.Identity.Web.DownstreamApi/Microsoft.Identity.Web.DownstreamApi.csproj
@@ -18,6 +18,7 @@
   </ItemGroup>
   <ItemGroup>
     <PackageReference Include="Microsoft.Extensions.Options.ConfigurationExtensions" Version="$(MicrosoftExtensionsDependencyInjectionVersion)" />
+    <PackageReference Include="Microsoft.IdentityModel.JsonWebTokens" Version="8.19.2" />
   </ItemGroup>
   <ItemGroup>
     <ProjectReference Include="..\Microsoft.Identity.Web.TokenAcquisition\Microsoft.Identity.Web.TokenAcquisition.csproj" />
diff --git a/src/Microsoft.Identity.Web/Microsoft.Identity.Web.csproj b/src/Microsoft.Identity.Web/Microsoft.Identity.Web.csproj
index 4f26bae25..8b7ca8c2a 100644
--- a/src/Microsoft.Identity.Web/Microsoft.Identity.Web.csproj
+++ b/src/Microsoft.Identity.Web/Microsoft.Identity.Web.csproj
@@ -59,6 +59,7 @@
   </Choose>
 
   <ItemGroup Condition="'$(TargetFrameworkIdentifier)' == '.NETFramework' Or '$(TargetFramework)' == 'netstandard2.0'">
+    <PackageReference Include="Microsoft.IdentityModel.JsonWebTokens" Version="8.19.2" />
     <Compile Remove="*.cs" />
     <Compile Remove="AppServicesAuth\**" />
     <Compile Remove="AzureSdkSupport\**" />
diff --git a/tests/DevApps/aspnet-mvc/OwinWebApi/OwinWebApi.csproj b/tests/DevApps/aspnet-mvc/OwinWebApi/OwinWebApi.csproj
index d387d04b2..0be81b218 100644
--- a/tests/DevApps/aspnet-mvc/OwinWebApi/OwinWebApi.csproj
+++ b/tests/DevApps/aspnet-mvc/OwinWebApi/OwinWebApi.csproj
@@ -119,6 +119,7 @@
     <PackageReference Include="Microsoft.AspNet.WebApi.HelpPage" Version="5.2.7" />
     <PackageReference Include="Microsoft.AspNetCore.Mvc.Abstractions" Version="2.2.0" />
     <PackageReference Include="Microsoft.CodeDom.Providers.DotNetCompilerPlatform" Version="2.0.1" />
+    <PackageReference Include="Microsoft.IdentityModel.JsonWebTokens" Version="5.7.1" />
     <PackageReference Include="Microsoft.IdentityModel.Protocols.WsFederation" Version="5.5.0" />
     <PackageReference Include="Microsoft.IdentityModel.Tokens.Saml" Version="$(SamlPackageVersion)" />
     <PackageReference Include="Microsoft.Owin.Host.SystemWeb" Version="4.2.2" />
diff --git a/tests/DevApps/aspnet-mvc/OwinWebApp/OwinWebApp.csproj b/tests/DevApps/aspnet-mvc/OwinWebApp/OwinWebApp.csproj
index 6f0898428..14d6032c5 100644
--- a/tests/DevApps/aspnet-mvc/OwinWebApp/OwinWebApp.csproj
+++ b/tests/DevApps/aspnet-mvc/OwinWebApp/OwinWebApp.csproj
@@ -147,6 +147,7 @@
     <PackageReference Include="Microsoft.AspNet.Mvc" Version="5.2.7" />
     <PackageReference Include="Microsoft.AspNet.Web.Optimization" Version="1.1.3" />
     <PackageReference Include="Microsoft.CodeDom.Providers.DotNetCompilerPlatform" Version="2.0.1" />
+    <PackageReference Include="Microsoft.IdentityModel.JsonWebTokens" Version="5.7.1" />
     <PackageReference Include="Microsoft.IdentityModel.Protocol.Extensions" Version="1.0.4.403061554" />
     <PackageReference Include="Microsoft.jQuery.Unobtrusive.Validation" Version="3.2.11" />
     <PackageReference Include="Microsoft.Owin.Host.SystemWeb" Version="4.2.2" />