Bump com.microsoft.azure:msal4j from 1.18.0 to 1.20.0 in /plugins/repository-azure

[dependabot]

Bumps com.microsoft.azure:msal4j from 1.18.0 to 1.20.0.

Release notes

Sourced from com.microsoft.azure:msal4j's releases.

1.20.0

• Replace some usage of jackson-databind with azure-json (#918)
• Remove Lombok code generation from most classes (#919, #925)
• Remove some usage of nimbusds-oauth2-oidc-sdk (#927, #928)
• Fix refresh metadata not being set in MI flows (#931)
• Add distinct exception type for JSON parsing errors (#933)

1.19.1

What's Changed

• CVE-2023-1370 fix by @​FerencKemeny in AzureAD/microsoft-authentication-library-for-java#914

New Contributors

• @​FerencKemeny made their first contribution in AzureAD/microsoft-authentication-library-for-java#914

Full Changelog: AzureAD/microsoft-authentication-library-for-java@1.19.0...v1.19.1

1.19.0

What's Changed

• Fix potential null pointer exception during cache lookup in AzureAD/microsoft-authentication-library-for-java#894
• Update plugins to be compatible with Java 17 builds in AzureAD/microsoft-authentication-library-for-java#900
• Fix regression issue in IClientCertificate caused by SHA256 changes in AzureAD/microsoft-authentication-library-for-java#898
• Add CacheRefreshReason to telemetry and metadata in AzureAD/microsoft-authentication-library-for-java#901
• Downgrade json-smart dependency due to CVE alert in AzureAD/microsoft-authentication-library-for-java#905

Full Changelog: AzureAD/microsoft-authentication-library-for-java@v1.18.0...1.19.0

Changelog

Sourced from com.microsoft.azure:msal4j's changelog.

Version 1.20.0

• Replace some usage of jackson-databind with azure-json (#918)
• Remove Lombok code generation from most classes (#919, #925)
• Remove some usage of nimbusds-oauth2-oidc-sdk (#927, #928)
• Fix refresh metadata not being set in MI flows (#931)
• Add distinct exception type for JSON parsing errors (#933)

Version 1.19.1

• Update dependencies to avoid CVE-2023-1370 (#914)

Version 1.19.0

• Fix potential regression caused by certificate hashing changes (#898)
• Add token refresh reasons AuthenticationResultMetadata (#901)
• Update build plugins for better compatibility with Java 17+ (#900)
• Downgrade json-smart dependency to avoid CVE (#905)

Commits

• 765852e Merge pull request #934 from AzureAD/avdunn/release-1.20.0
• b85bbed Update version and changelog for release 1.20.0
• bdac7ec Merge pull request #933 from AzureAD/avdunn/mi-exceptions
• c9312d9 Disable test that fails intermittently only in the pipeline
• 58ab763 Fix test
• 1e2bb13 Address PR feedback
• f92da95 Merge branch 'dev' of https://github.com/AzureAD/microsoft-authentication-lib...
• 20ed99e Merge pull request #931 from AzureAD/nebharg/passTokenSourceMI
• 11afa2e Add a distinct MsalJsonParsingException for JSON parsing failures
• 42eee6a Address comments
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

❌ Gradle check result for 7e36bbb: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

[github-actions]

❌ Gradle check result for 7e36bbb: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

[github-actions]

❌ Gradle check result for 94b045a: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

[github-actions]

❌ Gradle check result for 94b045a: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

[github-actions]

❌ Gradle check result for 94b045a: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

[dependabot]

A newer version of com.microsoft.azure:msal4j exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

[gaobinlong]

@dependabot recreate

[github-actions]

❌ Gradle check result for 7cca10f: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

[github-actions]

❌ Gradle check result for e3bdc09: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

[github-actions]

✅ Gradle check result for e3bdc09: SUCCESS

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 72.63%. Comparing base (52b8b05) to head (e3bdc09).
Report is 5 commits behind head on main.

Additional details and impacted files

@@             Coverage Diff              @@
##               main   #17925      +/-   ##
============================================
+ Coverage     72.42%   72.63%   +0.20%     
- Complexity    67058    67184     +126     
============================================
  Files          5478     5478              
  Lines        310137   310130       -7     
  Branches      45087    45087              
============================================
+ Hits         224610   225253     +643     
+ Misses        67140    66554     -586     
+ Partials      18387    18323      -64     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.