Fix package downgrade in consuming libraries

[jmprieur]

Attempt to fix package downgrade in consuming libraries

Description

See #3061

new dependencies:

Project 'Microsoft.IdentityModel.Tokens' has the following package references
[net462]:
Top-level Package Requested Resolved

Microsoft.Bcl.TimeProvider 8.0.1 8.0.1
Microsoft.CodeAnalysis.BannedApiAnalyzers 3.3.4 3.3.4
Microsoft.CodeAnalysis.FxCopAnalyzers 3.3.1 3.3.1
Microsoft.CodeAnalysis.PublicApiAnalyzers 3.3.4 3.3.4
> Microsoft.Extensions.Logging.Abstractions 6.0.0 6.0.0
Microsoft.SourceLink.GitHub 1.0.0 1.0.0
Microsoft.VisualStudio.Threading.Analyzers 17.11.20 17.11.20
System.Memory 4.5.5 4.5.5
System.Text.Json 8.0.5 8.0.5

[net472]:
Top-level Package Requested Resolved

Microsoft.Bcl.TimeProvider 8.0.1 8.0.1
Microsoft.CodeAnalysis.BannedApiAnalyzers 3.3.4 3.3.4
Microsoft.CodeAnalysis.FxCopAnalyzers 3.3.1 3.3.1
Microsoft.CodeAnalysis.PublicApiAnalyzers 3.3.4 3.3.4
> Microsoft.Extensions.Logging.Abstractions 2.1.0 2.1.0
Microsoft.SourceLink.GitHub 1.0.0 1.0.0
Microsoft.VisualStudio.Threading.Analyzers 17.11.20 17.11.20
System.Memory 4.5.5 4.5.5
System.Text.Json 8.0.5 8.0.5

[netstandard2.0]:
Top-level Package Requested Resolved

Microsoft.Bcl.TimeProvider 8.0.1 8.0.1
Microsoft.CodeAnalysis.BannedApiAnalyzers 3.3.4 3.3.4
Microsoft.CodeAnalysis.FxCopAnalyzers 3.3.1 3.3.1
Microsoft.CodeAnalysis.PublicApiAnalyzers 3.3.4 3.3.4
Microsoft.CSharp 4.5.0 4.5.0
> Microsoft.Extensions.Logging.Abstractions 2.1.0 2.1.0
Microsoft.SourceLink.GitHub 1.0.0 1.0.0
Microsoft.VisualStudio.Threading.Analyzers 17.11.20 17.11.20
NETStandard.Library (A) [2.0.3, ) 2.0.3
System.Security.Cryptography.Cng 4.5.0 4.5.0
System.Text.Json 8.0.5 8.0.5

[net6.0]:
Top-level Package Requested Resolved

Microsoft.Bcl.TimeProvider 8.0.1 8.0.1
Microsoft.CodeAnalysis.BannedApiAnalyzers 3.3.4 3.3.4
Microsoft.CodeAnalysis.PublicApiAnalyzers 3.3.4 3.3.4
> Microsoft.Extensions.Logging.Abstractions 6.0.0 6.0.0
Microsoft.SourceLink.GitHub 1.0.0 1.0.0
Microsoft.VisualStudio.Threading.Analyzers 17.11.20 17.11.20

[net8.0]:
Top-level Package Requested Resolved

Microsoft.CodeAnalysis.BannedApiAnalyzers 3.3.4 3.3.4
Microsoft.CodeAnalysis.PublicApiAnalyzers 3.3.4 3.3.4
> Microsoft.Extensions.Logging.Abstractions 8.0.0 8.0.0
Microsoft.NET.ILLink.Tasks (A) [8.0.11, ) 8.0.11
Microsoft.SourceLink.GitHub 1.0.0 1.0.0
Microsoft.VisualStudio.Threading.Analyzers 17.11.20 17.11.20

[net9.0]:
Top-level Package Requested Resolved

Microsoft.CodeAnalysis.BannedApiAnalyzers 3.3.4 3.3.4
Microsoft.CodeAnalysis.PublicApiAnalyzers 3.3.4 3.3.4
> Microsoft.Extensions.Logging.Abstractions 9.0.0 9.0.0
Microsoft.NET.ILLink.Tasks (A) [9.0.0, ) 9.0.0
Microsoft.SourceLink.GitHub 1.0.0 1.0.0
Microsoft.VisualStudio.Threading.Analyzers 17.11.20 17.11.20

(A) : Auto-referenced package.

[iNinja]

Thanks for looking into this. LGTM