Breaking Changes

• Removed support for Python 3.8 in #910

New Features

• Add User Federated Identity Credential (user_fic) grant type support in #918

Bug Fixes and Improvements

• Use unsigned redirect URI for macOS broker silent flows in #907
• Escape username parameter in #901
• Forward MSAL client metadata headers through IMDS to ESTS in #902

Dependency Updates

• Update pymsalruntime minimum version to 0.20.6 in #919
• Bump cryptography dependency ceiling to <50 (N+3) in #906

What's Changed

• Fix the PoP flow in the console app by PetarSDimov in #887
• Add ADO CI, SDL, and release pipelines with e2e test enablement by Ryan Auld (@RyAuld) in #890
• Add documentation for Managed Identity v2 Hackathon by Gladwin Johnson (@gladjohn) in #885
• Potential fix for code scanning alert no. 74: Workflow does not contain permissions by Avery-Dunn in #884
• Added withFmi method for cca app by Nilesh Choudhary (@4gust) in #876
• Use cryptographically secure randomness for PKCE, state, and nonce generation by Ashok Kumar Ramakrishnan (@ashok672) in #894
• Fix OIDC issuer domain spoofing in B2C host validation by Nilesh Choudhary (@4gust) in #896

New Contributors

• PetarSDimov made their first contribution in #887
• Gladwin Johnson (@gladjohn) made their first contribution in #885

Full Changelog: 1.35.1...1.36.0