Skip to content

build: bump the frontend-deps group across 1 directory with 15 updates - #1065

Open
dependabot[bot] wants to merge 1 commit into
dependabotchangesfrom
dependabot/npm_and_yarn/src/App/dependabotchanges/frontend-deps-86e7cb9f87
Open

build: bump the frontend-deps group across 1 directory with 15 updates#1065
dependabot[bot] wants to merge 1 commit into
dependabotchangesfrom
dependabot/npm_and_yarn/src/App/dependabotchanges/frontend-deps-86e7cb9f87

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the frontend-deps group with 15 updates in the /src/App directory:

Package From To
@azure/msal-browser 5.11.0 5.20.0
@azure/msal-react 5.4.2 5.7.0
@fluentui/react 8.125.6 8.125.7
@fluentui/react-components 9.74.1 9.74.7
@fluentui/react-icons 2.0.328 2.0.339
@testing-library/jest-dom 6.9.1 7.0.1
@testing-library/react 16.3.2 16.3.3
@testing-library/user-event 14.6.1 14.6.6
@types/node 25.9.1 26.4.0
react 19.2.7 19.2.8
@types/react 19.2.16 19.2.18
react-dom 19.2.7 19.2.8
@types/react-dom 19.2.3 19.2.5
typescript 6.0.3 7.0.2
web-vitals 5.3.0 6.2.1

Updates @azure/msal-browser from 5.11.0 to 5.20.0

Release notes

Sourced from @​azure/msal-browser's releases.

@​azure/msal-browser v5.20.0

5.20.0

Fri, 28 Aug 2026 21:29:53 GMT

Minor changes

Patches

@​azure/msal-browser v5.19.0

5.19.0

Tue, 18 Aug 2026 20:10:56 GMT

Minor changes

  • Add browser token-binding key lifecycle support for keyId-bound ES256 DPoP keys #8708 (hectormmg@microsoft.com)
  • Bump @​azure/msal-common to v16.13.0 (beachball)

Patches

  • Route NAA BridgeProxy through the shared webBrokerBridge PendingRequestRegistry and consolidate NestedAppAuthAdapter.fromBridgeError through the shared WebBrokerBridgeErrorMap — internal-only, no NAA public API or on-wire changes #8748 (shylasummers@microsoft.com)

@​azure/msal-browser v5.18.0

5.18.0

Tue, 04 Aug 2026 20:17:38 GMT

Minor changes

Patches

  • Add internal webBrokerBridge scaffold (shared message interfaces, error taxonomy, pending-request registry) — no callers yet, no public API surface change #8729 (shylasummers@microsoft.com)

@​azure/msal-browser v5.17.3

5.17.3

Wed, 29 Jul 2026 00:26:30 GMT

Patches

... (truncated)

Commits
  • 5931aa7 Remove legacy authority references (#8794)
  • b972fbf Discard local storage events from another client ids (#8795)
  • 1d07b68 feat(msal-node)!: default responseMode to form_post and remove ILoopbackClien...
  • b2c73e9 Fix @​azure/msal-common DOM type dependency (#8784)
  • ee74861 fix(deps): SFI CVE remediation — js-yaml, undici, brace-expansion (#8778)
  • 4359701 fix(deps): bump @​angular-devkit/build-angular to 22.1.x (patched http-proxy-m...
  • 7bfd824 chore(msal-node): remove disallowedChangeTypes guard to allow v6 major releas...
  • 8d562d6 [NAA/PWB One Bridge] PR 4/6: Export shared bridge message interface (#8780)
  • 62a6c85 Add gated EAR + platform broker (WAM) e2e tests (#8774)
  • 0a0adec build(deps-dev): bump fast-uri from 3.1.4 to 3.1.5 (#8753)
  • Additional commits viewable in compare view

Updates @azure/msal-react from 5.4.2 to 5.7.0

Release notes

Sourced from @​azure/msal-react's releases.

@​azure/msal-react v5.7.0

5.7.0

Fri, 28 Aug 2026 21:29:54 GMT

Minor changes

  • Bump @​azure/msal-browser to v5.20.0 (beachball)

@​azure/msal-node v5.6.0

5.6.0

Tue, 18 Aug 2026 20:10:56 GMT

Minor changes

  • Add Azure Arc user-assigned managed identity support: forward the client_id/object_id/msi_res_id selector and fail closed when the token response does not confirm the requested identity #8761 (90415114+gladjohn@users.noreply.github.com)
  • Align node token-binding stubs with the keyId-only DPoP key contract #8708 (hectormmg@microsoft.com)
  • Bump @​azure/msal-common to v16.13.0 (beachball)

Patches

@​azure/msal-react v5.6.0

5.6.0

Tue, 18 Aug 2026 20:10:56 GMT

Minor changes

  • Bump @​azure/msal-browser to v5.19.0 (beachball)

@​azure/msal-react v5.5.5

5.5.5

Tue, 04 Aug 2026 20:17:39 GMT

Patches

  • Bump @​azure/msal-browser to v5.18.0 (beachball)

@​azure/msal-react v5.5.4

5.5.4

Wed, 29 Jul 2026 00:26:31 GMT

Patches

  • Bump @​azure/msal-browser to v5.17.3 (beachball)

... (truncated)

Commits
  • 5931aa7 Remove legacy authority references (#8794)
  • b972fbf Discard local storage events from another client ids (#8795)
  • 1d07b68 feat(msal-node)!: default responseMode to form_post and remove ILoopbackClien...
  • b2c73e9 Fix @​azure/msal-common DOM type dependency (#8784)
  • ee74861 fix(deps): SFI CVE remediation — js-yaml, undici, brace-expansion (#8778)
  • 4359701 fix(deps): bump @​angular-devkit/build-angular to 22.1.x (patched http-proxy-m...
  • 7bfd824 chore(msal-node): remove disallowedChangeTypes guard to allow v6 major releas...
  • 8d562d6 [NAA/PWB One Bridge] PR 4/6: Export shared bridge message interface (#8780)
  • 62a6c85 Add gated EAR + platform broker (WAM) e2e tests (#8774)
  • 0a0adec build(deps-dev): bump fast-uri from 3.1.4 to 3.1.5 (#8753)
  • Additional commits viewable in compare view

Updates @fluentui/react from 8.125.6 to 8.125.7

Commits

Updates @fluentui/react-components from 9.74.1 to 9.74.7

Commits

Updates @fluentui/react-icons from 2.0.328 to 2.0.339

Commits

Updates @testing-library/jest-dom from 6.9.1 to 7.0.1

Release notes

Sourced from @​testing-library/jest-dom's releases.

v7.0.1

7.0.1 (2026-08-09)

Bug Fixes

  • declare vitest as an optional peer dependency (#733) (3782c78)

v7.0.0

7.0.0 (2026-07-20)

Features

  • add toContainAnyBy* and toContainOneBy* query matchers (1e39089)

BREAKING CHANGES

  • @​testing-library/dom is now a required peer dependency. The minimum supported Node.js version is now 22.

Repaired release for testing-library/jest-dom#731

v6.10.0

6.10.0 (2026-07-20)

Features

  • add toContainAnyBy* and toContainOneBy* query matchers (#731) (cae44df)
Commits
  • 3782c78 fix: declare vitest as an optional peer dependency (#733)
  • 1e39089 feat: add toContainAnyBy* and toContainOneBy* query matchers
  • cae44df feat: add toContainAnyBy* and toContainOneBy* query matchers (#731)
  • 55c07ce ci: switch release to npm trusted publishing (#726)
  • 213256f docs: move toHaveSelection from the deprecated section (#717)
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​testing-library/jest-dom since your current version.


Updates @testing-library/react from 16.3.2 to 16.3.3

Release notes

Sourced from @​testing-library/react's releases.

v16.3.3

16.3.3 (2026-08-27)

Bug Fixes

  • Avoid act() re-entrant when dispatching events (#1468) (20ce75f)
Commits

Updates @testing-library/user-event from 14.6.1 to 14.6.6

Release notes

Sourced from @​testing-library/user-event's releases.

v14.6.6

14.6.6 (2026-08-22)

Bug Fixes

  • default pointer event pointerType to empty string instead of the string "undefined" (#1325) (71a5475)

v14.6.5

14.6.5 (2026-08-18)

Bug Fixes

  • tab retargeting if focus moved during keydown (#1296) (43efda7)

v14.6.4

14.6.4 (2026-08-11)

Bug Fixes

v14.6.3

14.6.3 (2026-08-03)

Bug Fixes

v14.6.2

14.6.2 (2026-08-03)

Commits
  • 71a5475 fix: default pointer event pointerType to empty string instead of the string ...
  • 43efda7 fix: tab retargeting if focus moved during keydown (#1296)
  • d7e80e3 fix: keyboard event repeat property (#1312)
  • 43d8e6c ci: remove broken npm backfill step (#1322)
  • 1d18b1f fix(release): manually release a patch version (#1321)
  • 232f3e6 docs: add migration note and clean up README badges (#1320)
  • 83e2b22 ci: remove deprecated CodeSandbox CI (#1318)
  • e8da819 ci: publish to npm via OIDC trusted publishing (#1317)
  • 13fa4bc ci: stop lint errors from blocking release (#1316)
  • c3cec18 chore(ci): make releases work with full git history (#1315)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​testing-library/user-event since your current version.


Updates @types/node from 25.9.1 to 26.4.0

Commits

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

Updates @types/react from 19.2.16 to 19.2.18

Commits

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

Updates @types/react-dom from 19.2.3 to 19.2.5

Commits

Updates typescript from 6.0.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

Commits
  • 1e4744d Merge branch 'main' into ts7-release
  • a5a219cmicrosoft/typescript-go#4558
  • ecfe30d Update status localization
  • 5de25b5 Hide executable name in TypeScript status
  • d7ce74a Show bundled TypeScript version for packaged servers
  • 29be66a Correct TS 7 release version to 7.0.2
  • ed2bd1b Merge branch 'main' into ts7-release
  • 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
  • 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
  • d4eaca5microsoft/typescript-go#4549
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


Updates web-vitals from 5.3.0 to 6.2.1

Changelog

Sourced from web-vitals's changelog.

v6.2.1 (2026-08-26)

  • Fix negative inputDelay in INP attribution (#789)

v6.2.0 (2026-08-24)

  • Prevent spurious CLS report of 0 after bfcache restore (#786)
  • Guard supportedEntryTypes for older browsers (#787)

v6.1.1 (2026-08-15)

  • Scope the navigation interaction count to each InteractionManager (#783)

v6.1.0 (2026-08-05)

  • Add Resource Timing buffer for LCP attribution (#776)

v6.0.1 (2026-07-27)

  • Prevent JavaScript error if PerformanceObserver not available (#772)

v6.0.0 (2026-07-21)

v6 introduces Soft Navigation support for the Web Vitals metrics when supported by the browser.

[!NOTE] See the upgrading to v6 guide for a complete list of all API changes in version 6.

  • [BREAKING] Remove unneeded modules with tsconfig verbatimModuleSyntax (#741)
  • Add source maps (#771)
  • Cap RequestIdleCallback to 1 second to ensure metrics report even when busy (#755)
  • Flip default for includeProcessedEventEntries to false for v6 (#763)
  • Add Soft Navigation support (#308)
  • Add bfcache support for reporting small INP interactions (part of #308)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build: bump the frontend-deps group across 1 directory with 15 updates
5de1d8a 
Bumps the frontend-deps group with 15 updates in the /src/App directory:

| Package | From | To |
| --- | --- | --- |
| [@azure/msal-browser](https://github.com/AzureAD/microsoft-authentication-library-for-js) | `5.11.0` | `5.20.0` |
| [@azure/msal-react](https://github.com/AzureAD/microsoft-authentication-library-for-js) | `5.4.2` | `5.7.0` |
| [@fluentui/react](https://github.com/microsoft/fluentui) | `8.125.6` | `8.125.7` |
| [@fluentui/react-components](https://github.com/microsoft/fluentui) | `9.74.1` | `9.74.7` |
| [@fluentui/react-icons](https://github.com/microsoft/fluentui-system-icons) | `2.0.328` | `2.0.339` |
| [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) | `6.9.1` | `7.0.1` |
| [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.2` | `16.3.3` |
| [@testing-library/user-event](https://github.com/testing-library/user-event) | `14.6.1` | `14.6.6` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.1` | `26.4.0` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.16` | `19.2.18` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.2.5` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |
| [web-vitals](https://github.com/GoogleChrome/web-vitals) | `5.3.0` | `6.2.1` |



Updates `@azure/msal-browser` from 5.11.0 to 5.20.0
- [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases)
- [Commits](AzureAD/microsoft-authentication-library-for-js@msal-browser-v5.11.0...msal-browser-v5.20.0)

Updates `@azure/msal-react` from 5.4.2 to 5.7.0
- [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases)
- [Commits](AzureAD/microsoft-authentication-library-for-js@msal-node-v5.4.2...msal-react-v5.7.0)

Updates `@fluentui/react` from 8.125.6 to 8.125.7
- [Release notes](https://github.com/microsoft/fluentui/releases)
- [Commits](https://github.com/microsoft/fluentui/commits)

Updates `@fluentui/react-components` from 9.74.1 to 9.74.7
- [Release notes](https://github.com/microsoft/fluentui/releases)
- [Commits](https://github.com/microsoft/fluentui/commits)

Updates `@fluentui/react-icons` from 2.0.328 to 2.0.339
- [Changelog](https://github.com/microsoft/fluentui-system-icons/blob/main/docs/releases.md)
- [Commits](https://github.com/microsoft/fluentui-system-icons/commits)

Updates `@testing-library/jest-dom` from 6.9.1 to 7.0.1
- [Release notes](https://github.com/testing-library/jest-dom/releases)
- [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md)
- [Commits](testing-library/jest-dom@v6.9.1...v7.0.1)

Updates `@testing-library/react` from 16.3.2 to 16.3.3
- [Release notes](https://github.com/testing-library/react-testing-library/releases)
- [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md)
- [Commits](testing-library/react-testing-library@v16.3.2...v16.3.3)

Updates `@testing-library/user-event` from 14.6.1 to 14.6.6
- [Release notes](https://github.com/testing-library/user-event/releases)
- [Changelog](https://github.com/testing-library/user-event/blob/main/CHANGELOG.md)
- [Commits](testing-library/user-event@v14.6.1...v14.6.6)

Updates `@types/node` from 25.9.1 to 26.4.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `react` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `@types/react` from 19.2.16 to 19.2.18
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

Updates `@types/react-dom` from 19.2.3 to 19.2.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.3...v7.0.2)

Updates `web-vitals` from 5.3.0 to 6.2.1
- [Changelog](https://github.com/GoogleChrome/web-vitals/blob/main/CHANGELOG.md)
- [Commits](GoogleChrome/web-vitals@v5.3.0...v6.2.1)

---
updated-dependencies:
- dependency-name: "@azure/msal-browser"
  dependency-version: 5.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-deps
- dependency-name: "@azure/msal-react"
  dependency-version: 5.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-deps
- dependency-name: "@fluentui/react"
  dependency-version: 8.125.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-deps
- dependency-name: "@fluentui/react-components"
  dependency-version: 9.74.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-deps
- dependency-name: "@fluentui/react-icons"
  dependency-version: 2.0.339
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-deps
- dependency-name: "@testing-library/jest-dom"
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: frontend-deps
- dependency-name: "@testing-library/react"
  dependency-version: 16.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-deps
- dependency-name: "@testing-library/user-event"
  dependency-version: 14.6.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-deps
- dependency-name: "@types/node"
  dependency-version: 26.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: frontend-deps
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-deps
- dependency-name: "@types/react"
  dependency-version: 19.2.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-deps
- dependency-name: react-dom
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-deps
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-deps
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: frontend-deps
- dependency-name: web-vitals
  dependency-version: 6.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: frontend-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 1, 2026
@dependabot dependabot Bot added the javascript Pull requests that update Javascript code label Sep 1, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Avijit-Microsoft Avijit-Microsoft Awaiting requested review from Avijit-Microsoft Avijit-Microsoft is a code owner
@Roopan-Microsoft Roopan-Microsoft Awaiting requested review from Roopan-Microsoft Roopan-Microsoft is a code owner
@Prajwal-Microsoft Prajwal-Microsoft Awaiting requested review from Prajwal-Microsoft Prajwal-Microsoft is a code owner
@aniaroramsft Anish Arora (aniaroramsft) Awaiting requested review from aniaroramsft aniaroramsft is a code owner
@Vinay-Microsoft Vinay Sharma (Vinay-Microsoft) Awaiting requested review from Vinay-Microsoft Vinay-Microsoft is a code owner
@toherman-msft Todd Herman (toherman-msft) Awaiting requested review from toherman-msft toherman-msft is a code owner
@nchandhi nchandhi Awaiting requested review from nchandhi nchandhi is a code owner
@dgp10801 dgp10801 Awaiting requested review from dgp10801 dgp10801 is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants