Address dependabot alerts #5503
Conversation
tnorling
requested review from
jo-arroyo,
peterzenz,
sameerag,
hectormmg,
bmahall,
jennyf19,
jmprieur,
bgavrilMS,
Robbie-Microsoft,
derisen and
lalimasharda
as code owners
github-actions
bot
added
extensions
Codecov Report
|
| @@ -12,7 +12,7 @@ | |||
| "typescript": "^4.1.3" | |||
| }, | |||
| "devDependencies": { | |||
| "@azure/identity": "^1.5.2", | |||
| "@azure/identity": "^3.1.2", | |||
There was a problem hiding this comment.
This is a big jump, any risks here?
There was a problem hiding this comment.
Glanced at the changelog and didn't see any breaking changes that would affect us. This package is used to get the test account credentials for the E2E tests so if something did break the tests on this PR would fail.
| @@ -59,7 +59,7 @@ | |||
| }, | |||
| "dependencies": { | |||
| "@azure/msal-common": "^9.0.1", | |||
| "jsonwebtoken": "^8.5.1", | |||
| "jsonwebtoken": "^9.0.0", | |||
There was a problem hiding this comment.
When are you planning on making a release with this change for @azure/msal-node?
There was a problem hiding this comment.
This will be released on Monday, January 9th. Thanks for your patience!
There was a problem hiding this comment.
This will be released on Monday, January 9th. Thanks for your patience!
are you sure? That linked PR just got renamed to the February release rather than January
There was a problem hiding this comment.
Yes. We release on the first Monday of every month, since yesterday was a holiday we've pushed it to the 9th. Ignore the release PR name, it's automated.
There was a problem hiding this comment.
hello, @tnorling. I do not see any new release on the npm registry today. There is a new planned date for publishing the new version? Thank you very much.
There was a problem hiding this comment.
@franher we'll be starting the release in a couple of hours :)
Addresses a number of dependabot alerts