Skip to content

Bump uuid, @azure/cosmos, @azure/identity and @azure/msal-node in /build#17

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/build/multi-73c4f18b78
Open

Bump uuid, @azure/cosmos, @azure/identity and @azure/msal-node in /build#17
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/build/multi-73c4f18b78

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 25, 2026

Removes uuid. It's no longer used after updating ancestor dependencies uuid, @azure/cosmos, @azure/identity and @azure/msal-node. These dependencies need to be updated together.

Removes uuid

Updates @azure/cosmos from 3.17.3 to 4.9.3

Commits
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for @​azure/cosmos since your current version.


Updates @azure/identity from 4.2.1 to 4.13.1

Commits
  • 0604e47 Sync eng/common directory with azure-sdk-tools for PR 13235 (#36861)
  • 85a1361 Silence 1ESPT non-blocking error (#36342)
  • a6ce3c7 [Identity] Bump MSAL dependency to v5 (#37685)
  • 6d2d180 restore assets.json from @​azure/storage-blob_12.31.0
  • 980d126 [Identity] Prepare release Oct 25 (#36121)
  • 29a8eab Azure.Communication.Email 1.1.0 - 2025-09-01 (#36008)
  • 05a9860 [notification-hubs] fix TypeError when parsing AppleTemplateRegistrationDescr...
  • cdbd31b [EngSys] automatic pnpm update (#36119)
  • 953fcf9 Sync eng/common directory with azure-sdk-tools for PR 12337 (#36113)
  • 259da84 [Identity] Remove inappropriate @​internal tags from non-exported members (#36...
  • Additional commits viewable in compare view

Updates @azure/msal-node from 2.16.1 to 5.2.2

Release notes

Sourced from @​azure/msal-node's releases.

@​azure/msal-angular v5.2.2

5.2.2

Tue, 28 Apr 2026 21:30:33 GMT

Patches

  • Bump @​azure/msal-browser to v5.9.0 (beachball)

@​azure/msal-node-extensions v5.2.2

5.2.2

Tue, 19 May 2026 19:29:14 GMT

Patches

  • Bump @​azure/msal-common to v16.6.2 (beachball)

@​azure/msal-node v5.2.2

5.2.2

Tue, 19 May 2026 19:29:14 GMT

Patches

  • Bump @​azure/msal-common to v16.6.2 (beachball)

@​azure/msal-react v5.2.1

5.2.1

Wed, 01 Apr 2026 20:09:00 GMT

Patches

@​azure/msal-angular v5.2.1

5.2.1

Tue, 21 Apr 2026 22:41:19 GMT

Patches

  • Bump @​azure/msal-browser to v5.8.0 (beachball)

@​azure/msal-node-extensions v5.2.1

5.2.1

Mon, 11 May 2026 21:48:15 GMT

... (truncated)

Commits
  • 738ade6 check account loginHint before idTokenClaims setting logoutHint (#8591)
  • 1fff290 Add allowPlatformBrokerWithDOM experimental config flag (#8589)
  • 99e0895 Custom Auth: add requestInterceptor for custom x-* request headers (#8587)
  • ce50f41 Post-release PR (#8585)
  • c661401 Complete test tenant migration (#8584)
  • bbcc105 Add browser compatibility guidelines and review instructions for msal-browser...
  • d7a7eb5 Add issuer validation check whenever MSAL JS performs OIDC endpoint discovery...
  • 9884a71 Post-release PR (#8583)
  • b4e498c Stop looking in localStorage for temporary cache (#8579)
  • 1b261b4 Bump uuid and @​actions/core in /.github/actions/issue_template_bot (#8571)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Summary by CodeRabbit

  • Chores
    • Updated core Azure SDK dependencies to their latest stable versions for improved stability and compatibility.

Review Change Stack

Removes [uuid](https://github.com/uuidjs/uuid). It's no longer used after updating ancestor dependencies [uuid](https://github.com/uuidjs/uuid), [@azure/cosmos](https://github.com/Azure/azure-sdk-for-js), [@azure/identity](https://github.com/Azure/azure-sdk-for-js) and [@azure/msal-node](https://github.com/AzureAD/microsoft-authentication-library-for-js). These dependencies need to be updated together.


Removes `uuid`

Updates `@azure/cosmos` from 3.17.3 to 4.9.3
- [Release notes](https://github.com/Azure/azure-sdk-for-js/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/documentation/Changelog-for-next-generation.md)
- [Commits](https://github.com/Azure/azure-sdk-for-js/compare/@azure/cosmos_3.17.3...@azure/cosmos_4.9.3)

Updates `@azure/identity` from 4.2.1 to 4.13.1
- [Release notes](https://github.com/Azure/azure-sdk-for-js/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/documentation/Changelog-for-next-generation.md)
- [Commits](https://github.com/Azure/azure-sdk-for-js/compare/@azure/identity_4.2.1...@azure/identity_4.13.1)

Updates `@azure/msal-node` from 2.16.1 to 5.2.2
- [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases)
- [Commits](AzureAD/microsoft-authentication-library-for-js@msal-node-v2.16.1...msal-node-v5.2.2)

---
updated-dependencies:
- dependency-name: uuid
  dependency-version:
  dependency-type: indirect
- dependency-name: "@azure/cosmos"
  dependency-version: 4.9.3
  dependency-type: direct:development
- dependency-name: "@azure/identity"
  dependency-version: 4.13.1
  dependency-type: direct:development
- dependency-name: "@azure/msal-node"
  dependency-version: 5.2.2
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 25, 2026
@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented May 25, 2026

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 0529a642-3f49-4304-b08c-82c2da786677

📥 Commits

Reviewing files that changed from the base of the PR and between a7a48c5 and a995105.

⛔ Files ignored due to path filters (1)
  • build/package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing (1)
  • build/package.json

📝 Walkthrough

Walkthrough

Three Azure SDK packages in build/package.json are updated to newer versions: @azure/cosmos to ^4, @azure/identity to ^4.13.1, and @azure/msal-node to ^5.2.2.

Changes

Azure SDK dependencies

Layer / File(s) Summary
Azure SDK package version updates
build/package.json
Updated devDependencies for @azure/cosmos, @azure/identity, and @azure/msal-node to newer release versions in the build configuration.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~5 minutes

Poem

🐰 Three Azure friends hop into the light,
Cosmos, Identity, MSAL take flight,
Versions bump up with a mighty bound,
Modern SDKs, new and profound!
Dependency dreams, oh what a sight! ✨

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Title check ✅ Passed The title accurately describes the main changes: bumping uuid and three Azure dependencies in the /build directory, matching the PR's primary objective.
Description check ✅ Passed The description provides comprehensive details about dependency removals and updates with links to release notes, commits, and changelogs, though it lacks explicit testing instructions and issue association as suggested by the template.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/npm_and_yarn/build/multi-73c4f18b78

Comment @coderabbitai help to get the list of available commands and usage tips.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants