[dependabot]

Bumps @azure/msal-node and @azure/identity. These dependencies needed to be updated together.
Updates @azure/msal-node from 5.6.0 to 7.2.0

Release notes

Sourced from @​azure/msal-node's releases.

@​azure/msal-node v7.2.0

7.2.0

Thu, 05 Nov 2026 01:03:50 GMT

Minor changes

• Bump @​azure/msal-common to v16.16.0 (beachball)

Patches

• Bind interactive browser authorization responses to per-request state #8952 (undefined)

@​azure/msal-node v7.1.2

7.1.2

Tue, 27 Oct 2026 18:15:10 GMT

Patches

• Bump @​azure/msal-common to v16.15.0 (beachball)

@​azure/msal-node v7.1.1

7.1.1

Wed, 21 Oct 2026 18:37:17 GMT

Patches

• Bump @​azure/msal-common to v16.14.3 (beachball)

@​azure/msal-node v7.1.0

7.1.0

Tue, 13 Oct 2026 22:26:37 GMT

Minor changes

• Sanitize authorization code payloads and reject unsupported instance-aware inputs for confidential clients. #8901 (hemoral@microsoft.com)

@​azure/msal-node v7.0.2

7.0.2

Tue, 13 Oct 2026 19:04:36 GMT

Patches

• Sanitize authorization code payloads and reject unsupported instance-aware inputs for confidential clients. #8901 (rginsburg@microsoft.com)

@​azure/msal-node v7.0.1

... (truncated)

Commits

• a8a8141 Upgrade compatible dependencies to address security advisories (#8965)
• fd18de7 AB#3715428: WI-2 Implement WAM DPoP routing outcome handling and cache policy...
• e554958 Fix device-code approval prompt handling in E2E tests (#8964)
• 32368ef Document Markdown link rules for Git submodule boundaries (#8922)
• 306f818 Bind interactive browser authorization responses to per-request state (#8952)
• 6d1e176 build(deps): bump benchmark-action/github-action-benchmark from 1.22.1 to 1.2...
• ee1fa0f Add weekly npm updates with a seven-day cooldown (#8949)
• c432013 build(deps-dev): bump electron from 42.11.4 to 42.11.18 (#8950)
• 83edb9d KMSI broker E2E corrections and NAA coverage (2 PBIs) (#8924)
• 11bbd90 build(deps): bump ip-address from 10.7.3 to 10.7.5 in /samples/e2eTestUtils (...
• Additional commits viewable in compare view

Updates @azure/identity from 4.13.2 to 4.14.1

Changelog

Sourced from @​azure/identity's changelog.

4.14.1 (2026-10-29)

Bugs Fixed

• Restored the fix from 4.13.3 that forwards constructor options from DefaultAzureCredential to ManagedIdentityCredential when selected through AZURE_TOKEN_CREDENTIALS, including managedIdentityClientId and managedIdentityResourceId. #40547

Other Changes

• Updated @azure/msal-node to ^7.1.0. Interactive browser authentication now requires form_post callbacks, as described in the MSAL Node v7 migration guide. #40532

4.15.0-beta.1 (2026-10-14)

Features Added

• Added GitHubActionsCredential for authenticating to Microsoft Entra ID using GitHub Actions OIDC federated identity credentials. This credential reads AZURE_TENANT_ID, AZURE_CLIENT_ID, ACTIONS_ID_TOKEN_REQUEST_URL, and ACTIONS_ID_TOKEN_REQUEST_TOKEN from the environment and exchanges the GitHub OIDC token for an Azure access token. Sovereign cloud audience is derived automatically from authorityHost. #38581

4.14.0 (2026-10-14)

This release includes all changes introduced in versions 4.14.0-beta.1 through 4.14.0-beta.5.

Bugs Fixed

• Fixed AzurePipelinesCredential to include only relevant details in error messages and logs when the OIDC token request fails. #39774
• Fixed InteractiveBrowserCredential failing to authenticate when the user's default browser is already running and only permits a single instance. The browser is no longer launched with newInstance, which on macOS passed open --new. #39814
• Fixed EnvironmentCredential and DefaultAzureCredential ignoring the AZURE_ADDITIONALLY_ALLOWED_TENANTS environment variable. If the additionallyAllowedTenants option is also set, the option takes precedence. #40221

Other Changes

• Preserve caught errors as the cause when wrapping them. #39423
• Updated @azure/msal-node to ^6.0.0. #39965

4.13.3 (2026-09-10)

Features Added

• Bumped the minimum @azure/msal-node dependency to ^6.0.0 to provide Azure Arc user-assigned managed identity support. #39927

Bugs Fixed

• Fixed AzurePipelinesCredential to include only relevant details in error messages and logs when the OIDC token request fails. #39774
• Fixed InteractiveBrowserCredential failing to authenticate when the user's default browser is already running and only permits a single instance. The browser is no longer launched with newInstance, which on macOS passed open --new. #39814
• Fixed an issue where DefaultAzureCredential does not pass constructor options to ManagedIdentityCredential when selected through AZURE_TOKEN_CREDENTIALS. #39927

Other Changes

• Preserve caught errors as the cause when wrapping them. #39423

4.14.0-beta.5 (2026-08-12)

Other Changes

... (truncated)

Commits

• 56472b9 [Identity] Set 4.14.1 release date to October 29, 2026
• 8881515 [Identity] Backport 4.13.3 fixes and finalize 4.14.1 changelog
• 89ef212 [Identity] Backport MSAL Node v7 for 4.14.1
• 4fb292a [Identity] GA Identity Binding Feature (#40297)
• a369673 [Identity] Add AKS Identity Binding Test For Weekly Pipeline (#40256)
• 8a46161 Upgrade dotenv to 18.0.5 (#40240)
• f814748 [identity] Fix EnvironmentCredential ignoring AZURE_ADDITIONALLY_ALLOWED_TENA...
• 5fadd99 Add GitHubActionsCredential for GitHub Actions OIDC federation (#38581)
• 2b86f77 [Identity] Migrate to MSAL v6 (#39965)
• fcb12a4 [identity] Don't force a new browser instance when opening the auth page (#39...
• Additional commits viewable in compare view

[Copilot]

Copilot wasn't able to review any files in this pull request. Check if the Files changed in this pull request are included in default exclusions.