Update dependency botbuilder to v4.23.1 #17
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
renovate
bot
force-pushed
the
renovate/botbuilder-4.x-lockfile
branch
from
f937f4e to
253066a
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/botbuilder-4.x-lockfile
branch
from
253066a to
0afb611
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/botbuilder-4.x-lockfile
branch
2 times, most recently
from
aec2763 to
83923ee
Compare
renovate
bot
force-pushed
the
renovate/botbuilder-4.x-lockfile
branch
from
83923ee to
0d04305
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/botbuilder-4.x-lockfile
branch
2 times, most recently
from
a62b9b6 to
3989b9e
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/botbuilder-4.x-lockfile
branch
from
3989b9e to
c87d224
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/botbuilder-4.x-lockfile
branch
2 times, most recently
from
7609aff to
dab3d73
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/botbuilder-4.x-lockfile
branch
from
dab3d73 to
c1b1974
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/botbuilder-4.x-lockfile
branch
from
c1b1974 to
9f25db1
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/botbuilder-4.x-lockfile
branch
from
9f25db1 to
84dfaf9
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/botbuilder-4.x-lockfile
branch
from
84dfaf9 to
6379999
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/botbuilder-4.x-lockfile
branch
from
6379999 to
6fc938b
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/botbuilder-4.x-lockfile
branch
from
6fc938b to
a3e8704
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/botbuilder-4.x-lockfile
branch
from
a3e8704 to
a040f80
Compare
renovate
bot
changed the title
renovate
bot
changed the title
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/botbuilder-4.x-lockfile
branch
from
59c0be5 to
a040f80
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
4.4.0->4.23.1Release Notes
Microsoft/botbuilder-js (botbuilder)
v4.23.1: Bot Framework JS SDK 4.23.1Compare Source
What's Changed
v4.23.0: Bot Framework JS SDK 4.23.0Compare Source
This is the August 2024 release of the Bot Framework JS SDK. This release contains Node 18 & 20 support, as well as security fixes.
NOTE
Due to the update to the last Azure Identity and MSAL.Node packages, Node versions prior to Node 18 are no longer supported. This is because those packages don't support out-of-support Node versions.
What's Changed
bump: [#4550] Add Node 18 and 20 support by @sw-joelmut in https://github.com/microsoft/botbuilder-js/pull/4726
fix: Remove CVE-2022-3517 vulnerability by @JhontSouth in https://github.com/microsoft/botbuilder-js/pull/4699
fix: Remove CVE-2022-25881 vulnerability by updating the http-cache-semantics package by @sw-joelmut in https://github.com/microsoft/botbuilder-js/pull/4703
fix: Remove CVE-2020-8203 vulnerability in lodash.set by @andres-robinet-sw in https://github.com/microsoft/botbuilder-js/pull/4704
fix: Remove CVE-2021-3807 vulnerability by @JhontSouth in https://github.com/microsoft/botbuilder-js/pull/4705
fix: Remove CVE-2022-23539 vulnerability by updating the jsonwebtoken packages by @sw-joelmut in https://github.com/microsoft/botbuilder-js/pull/4706
fix: Remove CVE-2022-3517 vulnerability with minimatch by @JhontSouth in https://github.com/microsoft/botbuilder-js/pull/4707
bump: semver from 5.7.1 to 7.6.2 by @dependabot in https://github.com/microsoft/botbuilder-js/pull/4710
bump: hosted-git-info from 2.8.8 to 2.8.9 by @dependabot in https://github.com/microsoft/botbuilder-js/pull/4711
bump: elliptic from 6.5.3 to 6.5.5 by @dependabot in https://github.com/microsoft/botbuilder-js/pull/4712
fix: Remove CVE-2020-28469 vulnerability by updating the glob-parent package by @sw-joelmut in https://github.com/microsoft/botbuilder-js/pull/4713
fix: Remove remaining vulnerabilities by updating the hosted-git-info, tar, semver, ejs, elliptic packages by @sw-joelmut in https://github.com/microsoft/botbuilder-js/pull/4714
fix: [#4684] Remove unnecessary resolutions by @sw-joelmut in https://github.com/microsoft/botbuilder-js/pull/4719
fix: Remove undefined value in @azure/msal-node by @JhontSouth in https://github.com/microsoft/botbuilder-js/pull/4718
bump: fast-xml-parser from 4.2.5 to 4.4.1 by @dependabot in https://github.com/microsoft/botbuilder-js/pull/4721
port: [#6813][#6798] Not able to create instance of BlobsTranscriptStore using TokenCredential instead of connectionString and containerName by @JhontSouth in https://github.com/microsoft/botbuilder-js/pull/4720
fix: Remove browser-echo-bot vulnerabilities by @JhontSouth in https://github.com/microsoft/botbuilder-js/pull/4717
fix: CVE-2024-42460 vulnerability with elliptic by @JhontSouth in https://github.com/microsoft/botbuilder-js/pull/4729
bump: axios from 1.7.2 to 1.7.4 by @dependabot in https://github.com/microsoft/botbuilder-js/pull/4730
port: [#6793][#6792] Composer Bot with QnA Intent recognized triggers duplicate QnA queries by @JhontSouth in https://github.com/microsoft/botbuilder-js/pull/4700
Full Changelog: microsoft/botbuilder-js@4.22.3...4.23.0
v4.22.3: Bot Framework for JS SDK 4.22.3Compare Source
This is the June 2024 patch release of the Bot Framework JS SDK. This release contains security updates.
What's Changed
v4.22.2: Bot Framework JS SDK 4.22.2Compare Source
This is the April 2024 JS SDK patch release. This release contains minor bug fixes and security updates.
What's Changed
Full Changelog: microsoft/botbuilder-js@4.22.1...4.22.2
v4.22.1Compare Source
v4.22.0: Bot Framework JS SDK 4.22.0Compare Source
This is the January 2024 4.22.0 release for the JS SDK. This contains a security fixes, Sharepoint support, and ASE improvements.
What's Changed
feat: Add ASE channel validation in https://github.com/microsoft/botbuilder-js/pull/4589
feat: Add isVisible property to AceData with nanoid in https://github.com/microsoft/botbuilder-js/pull/4606
feat: Support for SharePoint (Viva) Adaptive Card Extension in https://github.com/microsoft/botbuilder-js/pull/4551
fix: USGovSingleTenant OAuthEndpoint in https://github.com/microsoft/botbuilder-js/pull/4588
bump: Update mocha package to avoid vulnerability in https://github.com/microsoft/botbuilder-js/pull/4603
fix: [#4582] UserAssignedIdentity(WorkloadIdentity) auth fails with 'scope https://api.botframework.com is not valid' in https://github.com/microsoft/botbuilder-js/pull/4607
fix: Remove old @microsoft/recognizers-text-number version with postinstall scripts in https://github.com/microsoft/botbuilder-js/pull/4608
fix: [#4544] JwtTokenExtractor.getIdentity:err! FetchError: request to 'login.botframework.com/v1/.well-known/openidconfiguration' in https://github.com/microsoft/botbuilder-js/pull/4583
Proxy notes
The introduction of MSAL in 4.21.0 encountered an issue when used behind a proxy. This version adds an additional way to specify proxy settings. This does require a change to the bot startup code if required.
See this issue for details, and if additional discussion is required: https://github.com/microsoft/botbuilder-js/issues/4544
v4.21.4: Bot Framework JS SDK 4.21.4Compare Source
This is the January 2024 patch release for the JS SDK. This contains a security fix for axios.
What's Changed
NOTICE
Node versions 16 and older no longer have long-term support. Bot Framework SDK still supports Node 16, but users of the SDK should transition to at least Node 18 as soon as possible. We will not be able to continue supporting Node 16 and older bots with this SDK.
v4.21.3: Bot Framework JS SDK 4.21.3Compare Source
This is the December 2023 JS release. This release contains improvements to SN+I functionality.
v4.21.2Compare Source
v4.21.1: Bot Framework JS SDK 4.21.1Compare Source
This is the November 2023 Bot Framework JS SDK patch release. This release contains security related updates.
What's Changed
Full Changelog: microsoft/botbuilder-js@4.21.0...4.21.1
v4.21.0: Bot Framework JS SDK 4.21.0Compare Source
This is the October 2023 of the JS SDK. This release contains new Teams features and security fixes.
What's Changed
Teams
Other Changes
New Contributors
Full Changelog: microsoft/botbuilder-js@4.20.1...4.21.0
v4.20.3Compare Source
v4.20.2Compare Source
v4.20.1: Bot Framework JS SDK 4.20.1Compare Source
What's Changed
New Contributors
Full Changelog: microsoft/botbuilder-js@4.20.0...4.20.1
v4.20.0: Bot Framework for JS SDK 4.20.0Compare Source
This is the June 2023 release of the JavaScript SDK. This release contains Teams features and bug/security fixes.
What's Changed
Teams
Other
New Contributors
Full Changelog: microsoft/botbuilder-js@4.19.0...4.20.0
v4.19.3: Bot Framework JS SDK 4.19.3Compare Source
Welcome to the March 2023 release of the Bot Framework SDK.
What's Changed
v4.19.2: Bot Framework JS SDK 4.19.2Compare Source
Welcome to the February 2023 release of the Bot Framework SDK.
What's Changed
SSO
v4.19.1: Bot Framework JS SDK 4.19.1Compare Source
Welcome to the February 2023 release of the Bot Framework SDK.
What's Changed
Teams
v4.19.0: Bot Framework JS SDK 4.19.0Compare Source
Welcome to the January 2023 release of the Bot Framework SDK. This release has been focused on updating dependencies, bug fixes and general improvements.
What's Changed
Teams
Other
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.