Skip to content

auto dependabot: bump @azure/identity from 4.13.1 to 4.13.2 - #1037

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/azure/identity-4.13.2
Open

auto dependabot: bump @azure/identity from 4.13.1 to 4.13.2#1037
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/azure/identity-4.13.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor

Bumps @azure/identity from 4.13.1 to 4.13.2.

Changelog

Sourced from @​azure/identity's changelog.

4.13.2 (2026-08-12)

Other Changes

  • Bumped the minimum @azure/msal-node dependency to ^5.1.5 so installs no longer resolve older 5.1.x versions that pull in the vulnerable uuid@8.3.0 transitive dependency. #39569
  • Replaced shell-based developer credential commands with safe, structured process execution. #39279
  • Migrated platform-specific module resolution to #platform/* imports. #38309

4.14.0-beta.5 (2026-08-12)

Other Changes

  • Bumped the minimum @azure/msal-node dependency to ^5.1.5 so installs no longer resolve older 5.1.x versions that pull in the vulnerable uuid@8.3.0 transitive dependency. #39425
  • Replaced shell-based developer credential commands with safe, structured process execution. #39279

4.14.0-beta.4 (2026-06-08)

Bugs Fixed

  • Fixed AzureDeveloperCliCredential to correctly parse error messages from Azure Developer CLI v1.23.7 and later, which previously caused raw JSON to surface in the credential error instead of the underlying error text. #38416
  • Fixed handleMsalError to preserve the original MSAL error via cause on AuthenticationRequiredError, allowing callers to access .claims on the underlying error. #38722

4.14.0-beta.3 (2026-04-08)

Other Changes

  • Reduced bundle size by optimizing imports from @azure/msal-node, e.g. achieving a ~61kb reduction (from 851kb to 790kb) when importing ClientCertificateCredential. #36942
  • Updated @azure/msal-node to ^5.1.0 and @azure/msal-browser to ^5.5.0. #37836
Commits
  • ffeacaf Migrate @​azure/identity from polyfillSuffix to #platform/* imports
  • 3ec2003 [core] Add safe child process execution
  • 1f7253a Update package.json
  • 4b6cf67 Update test expectation
  • 14350c8 Format packages
  • 4fd7288 Update all missing configuration files
  • 8490453 [Identity] Bump @​azure/msal-node to ^5.1.5 to drop vulnerable uuid transitive...
  • d96ae18 Identity GA 4.13.1
  • a46a830 [ESLint] Restore no-unassigned-vars recommended rule to error (#39460)
  • 5316d04 [core] Add safe child process execution (#39279)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 24, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 24, 2026 11:53
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 24, 2026
@dependabot
dependabot Bot deployed to build_test August 24, 2026 11:53 Active
@dependabot
dependabot Bot deployed to build_test August 24, 2026 11:53 Active
@github-actions
github-actions Bot enabled auto-merge August 24, 2026 11:53
Bumps [@azure/identity](https://github.com/Azure/azure-sdk-for-js/tree/HEAD/sdk/identity/identity) from 4.13.1 to 4.13.2.
- [Release notes](https://github.com/Azure/azure-sdk-for-js/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/identity/identity/CHANGELOG.md)
- [Commits](https://github.com/Azure/azure-sdk-for-js/commits/@azure/identity_4.13.2/sdk/identity/identity)

---
updated-dependencies:
- dependency-name: "@azure/identity"
  dependency-version: 4.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/azure/identity-4.13.2 branch from 2373a50 to 8334202 Compare September 2, 2026 17:50
@dependabot
dependabot Bot deployed to build_test September 2, 2026 17:50 Active
@dependabot
dependabot Bot deployed to build_test September 2, 2026 17:50 Active
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants