Skip to content

build: bump the all-npm group across 1 directory with 40 updates#268

Open
dependabot[bot] wants to merge 1 commit into
dependabotchangesfrom
dependabot/npm_and_yarn/src/frontend/dependabotchanges/all-npm-4d99f4b028
Open

build: bump the all-npm group across 1 directory with 40 updates#268
dependabot[bot] wants to merge 1 commit into
dependabotchangesfrom
dependabot/npm_and_yarn/src/frontend/dependabotchanges/all-npm-4d99f4b028

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Jun 2, 2026

Updates the requirements on @azure/msal-browser, @azure/msal-react, @fluentui/react, @fluentui/react-components, @fluentui/react-file-type-icons, @fluentui/react-icons, @reduxjs/toolkit, @tailwindcss/vite, autoprefixer, axios, js-yaml, lottie-react, lucide-react, messagebar, postcss, react, @types/react, react-dom, @types/react-dom, react-dropzone, react-icons, react-markdown, react-redux, react-router-dom, react-syntax-highlighter, sql-formatter, tailwind-merge, tailwindcss, uuid, @eslint/js, @vitejs/plugin-react, eslint, eslint-plugin-react, eslint-plugin-react-hooks, eslint-plugin-react-refresh, globals, rollup, rollup-plugin-dts, vite and vite-plugin-svgr to permit the latest version.
Updates @azure/msal-browser from 4.7.0 to 5.11.0

Release notes

Sourced from @​azure/msal-browser's releases.

@​azure/msal-browser v5.11.0

5.11.0

Tue, 19 May 2026 19:29:14 GMT

Minor changes

  • Add allowPlatformBrokerWithDOM experimental config flag for DOM-based platform brokering #8589 (lalimasharda@microsoft.com)
  • Custom Auth: add requestInterceptor configuration option that lets apps attach additional x-* headers to custom-auth backend requests (e.g., for fraud/bot-detection vendors). Headers without the x- prefix and headers starting with reserved prefixes (x-client-, x-ms-, x-broker-, x-app-) are filtered out. #8587 (shen.jian@live.com)
  • Bump @​azure/msal-common to v16.6.2 (beachball)

Patches

@​azure/msal-browser v5.10.1

5.10.1

Mon, 11 May 2026 21:48:15 GMT

Patches

  • Bump @​azure/msal-common to v16.6.1 (beachball)

@​azure/msal-browser v5.10.0

5.10.0

Thu, 07 May 2026 19:01:04 GMT

Minor changes

Patches

  • Stop looking in localStorage for temporary cache #8579 (-g)

@​azure/msal-browser v5.9.0

5.9.0

Tue, 28 Apr 2026 21:30:31 GMT

Minor changes

  • Bump @​azure/msal-browser to match @​azure/msal-browser-1p (msaljsbuilds@microsoft.com)
  • Bump @​azure/msal-common to v16.5.2 (beachball)

Patches

... (truncated)

Commits
  • 738ade6 check account loginHint before idTokenClaims setting logoutHint (#8591)
  • 1fff290 Add allowPlatformBrokerWithDOM experimental config flag (#8589)
  • 99e0895 Custom Auth: add requestInterceptor for custom x-* request headers (#8587)
  • ce50f41 Post-release PR (#8585)
  • c661401 Complete test tenant migration (#8584)
  • bbcc105 Add browser compatibility guidelines and review instructions for msal-browser...
  • d7a7eb5 Add issuer validation check whenever MSAL JS performs OIDC endpoint discovery...
  • 9884a71 Post-release PR (#8583)
  • b4e498c Stop looking in localStorage for temporary cache (#8579)
  • 1b261b4 Bump uuid and @​actions/core in /.github/actions/issue_template_bot (#8571)
  • Additional commits viewable in compare view

Updates @azure/msal-react from 3.0.6 to 5.4.2

Release notes

Sourced from @​azure/msal-react's releases.

@​azure/msal-react v5.4.2

5.4.2

Tue, 19 May 2026 19:29:14 GMT

Patches

  • Bump @​azure/msal-browser to v5.11.0 (beachball)

@​azure/msal-react v5.4.1

5.4.1

Mon, 11 May 2026 21:48:15 GMT

Patches

  • Bump @​azure/msal-browser to v5.10.1 (beachball)

@​azure/msal-browser v5.4.0

5.4.0

Mon, 02 Mar 2026 19:25:47 GMT

Minor changes

  • Bump @​azure/msal-browser to match @​azure/msal-browser-1p (msaljsbuilds@microsoft.com)
  • Bump @​azure/msal-common to v16.2.0 (beachball)
  • Bump eslint-config-msal to v0.0.0 (beachball)
  • Bump msal-test-utils to v0.0.1 (beachball)
  • Bump rollup-msal to v0.0.0 (beachball)

@​azure/msal-react v5.4.0

5.4.0

Thu, 07 May 2026 19:01:04 GMT

Minor changes

@​azure/msal-react v5.3.2

5.3.2

Tue, 28 Apr 2026 21:30:33 GMT

Patches

  • Bump @​azure/msal-browser to v5.9.0 (beachball)

... (truncated)

Commits
  • 738ade6 check account loginHint before idTokenClaims setting logoutHint (#8591)
  • 1fff290 Add allowPlatformBrokerWithDOM experimental config flag (#8589)
  • 99e0895 Custom Auth: add requestInterceptor for custom x-* request headers (#8587)
  • ce50f41 Post-release PR (#8585)
  • c661401 Complete test tenant migration (#8584)
  • bbcc105 Add browser compatibility guidelines and review instructions for msal-browser...
  • d7a7eb5 Add issuer validation check whenever MSAL JS performs OIDC endpoint discovery...
  • 9884a71 Post-release PR (#8583)
  • b4e498c Stop looking in localStorage for temporary cache (#8579)
  • 1b261b4 Bump uuid and @​actions/core in /.github/actions/issue_template_bot (#8571)
  • Additional commits viewable in compare view

Updates @fluentui/react from 8.122.9 to 8.125.6

Release notes

Sourced from @​fluentui/react's releases.

@​fluentui/react v8.125.6

Patches

  • Bump @​fluentui/foundation-legacy to v8.6.6 (commit)
  • Bump @​fluentui/font-icons-mdl2 to v8.5.73 (commit)
  • Bump @​fluentui/react-focus to v8.10.6 (commit)
  • Bump @​fluentui/style-utilities to v8.15.1 (commit)
Commits
  • 6c654e6 release: applying package updates - react v8
  • 04bf7a7 release: applying package updates - web-components
  • 39041d7 fix: update CDN bundle configurations, enable setTheme on globalThis (#36113)
  • db347c7 fix(docs): Card examples reflow at small widths (#36086)
  • 7b586d7 Updates for shortcut folders, markdown and other filetype icon fixes. (#35945)
  • 094b22f feat(react-storybook-addon): add render-prop slots to FluentDocsPage (#36115)
  • 3f57751 fix(react-combobox): use role attribute instead of classname for active desce...
  • b9cadd1 release: applying package updates - react-headless
  • 6411342 fix(Menu): Highlight expanded menuitem (#36098)
  • 4fa64db docs(motion): home pages for motion system & motion components (#35737)
  • Additional commits viewable in compare view

Updates @fluentui/react-components from 9.58.2 to 9.74.1

Release notes

Sourced from @​fluentui/react-components's releases.

@​fluentui/react-components v9.74.0

Minor changes

  • feat: export contexts for headless (PR #36229 by mainframev)
  • feat: export base hooks (PR #36200 by mainframev)
  • feat: expose react-menu base hooks (PR #36087 by mainframev)
  • feat(react-motion): add replayKey prop to replay motion without remounting (PR #36108 by robertpenner)
  • feat: add base hooks and expose them (PR #35812 by dmytrokirpa)
  • feat: add OverflowReorderObserver to recompute overflow when items are reordered via React state without a container resize (PR #36231 by layershifter)
  • chore: fix after broken release (PR #36037 by layershifter)
  • Make Card base hooks tabster-free; expose shouldRestrictTriggerAction on CardBaseProps (PR #36004 by dmytrokirpa)
  • feat: re-export motionSlot and presenceMotionSlot from @​fluentui/react-motion (PR #35922 by robertpenner)
  • feat: re-export OverflowReorderObserver from @​fluentui/react-overflow (PR #36231 by layershifter)
  • feat: expose inline drawer types and base hooks (PR #36042 by dmytrokirpa)

Patches

  • chore: bump tabster to ^8.8.0 and keyborg to ^2.14.1 (PR #36082 by layershifter)
  • fix: dismiss Tooltip when the document becomes hidden (e.g. tab backgrounded or app switched on mobile) (PR #36023 by Copilot)
  • fix(react-tree): support indentation for TreeItem levels greater than 10 via inline CSS variable fallback (PR #36014 by Copilot)
  • style: replace deprecated assertion syntax that causes issues to babel tsx (PR #36185 by Hotell)
  • fix(Menu): Menu item with expanded submenu should be highlighted (PR #36098 by jurokapsiar)
  • fix: update useMenuTriggerBase hook signature (PR #36237 by dmytrokirpa)
  • feat: add headless Menu components (PR #36110 by mainframev)
  • chore: extract useMenuItemBase_unstable into a separate module (PR #36234 by mainframev)
  • fix: close Popover when focus escapes outside while trapFocus is enabled (PR #35995 by petdud)
  • revert: revert removal of Griffel dependency from usePortalMount #35994 (PR #36235 by dmytrokirpa)
  • fix: avoid pulling griffel in CardHeader and CardPreview base hooks (PR #36194 by dmytrokirpa)
  • refactor: move isSafeUrl to chart-utilities package and update imports (PR #36206 by dmytrokirpa)
  • safeurl related bug fix (PR #36121 by v-baambati)
  • fix(Option): when disabled, hover styles should not show (PR #36077 by smhigley)
  • fix: use role attribute instead of classname for active descendant (PR #36109 by dmytrokirpa)
Commits
  • 277f63a release: applying package updates - react-components
  • 5e0f816 release: applying package updates - web-components
  • 1d15557 feat(react-toast): add base hooks/types and re-exports for headless compositi...
  • 0aa62de feat: add triage-issues + triage-board skills (+ visual-test hardening) (#36012)
  • c70f899 fix(react-tags): decouple useTagGroupBase_unstable from Tabster + export cont...
  • 6cdfd51 fix(react-headless-components-preview): update non-modal dialog implementatio...
  • 1321fff fix(react-headless-components-preview): descendant clicks no longer trigger d...
  • 980c56f release: applying package updates - react v8
  • 9317e51 release: applying package updates - react-components
  • 116265d fix(ci): install latest 22.x Node to satisfy @​microsoft/fast-build engines (#...
  • Additional commits viewable in compare view

Updates @fluentui/react-file-type-icons from 8.12.7 to 8.18.0

Release notes

Sourced from @​fluentui/react-file-type-icons's releases.

@​fluentui/react-file-type-icons v8.18.0

Minor changes

  • Support for new markdown, "special folder" filetype icon (default "shortcuts" folder) and other fixes (PR #35945 by bigbadcapers)
  • Bump @​fluentui/style-utilities to v8.15.1 (commit)
Commits
  • 6c654e6 release: applying package updates - react v8
  • 04bf7a7 release: applying package updates - web-components
  • 39041d7 fix: update CDN bundle configurations, enable setTheme on globalThis (#36113)
  • db347c7 fix(docs): Card examples reflow at small widths (#36086)
  • 7b586d7 Updates for shortcut folders, markdown and other filetype icon fixes. (#35945)
  • 094b22f feat(react-storybook-addon): add render-prop slots to FluentDocsPage (#36115)
  • 3f57751 fix(react-combobox): use role attribute instead of classname for active desce...
  • b9cadd1 release: applying package updates - react-headless
  • 6411342 fix(Menu): Highlight expanded menuitem (#36098)
  • 4fa64db docs(motion): home pages for motion system & motion components (#35737)
  • Additional commits viewable in compare view

Updates @fluentui/react-icons from 2.0.274 to 2.0.328

Commits

Updates @reduxjs/toolkit from 2.5.1 to 2.12.0

Release notes

Sourced from @​reduxjs/toolkit's releases.

v2.12.0

This feature release adds RTK usage skills files (via TanStack Intent) exports the RTK Query hook options types for reusability, fixes issues with infinite query status flags and batching handling, and makes some small TS improvements.

Changelog

Skills Files

We've generated agent skill files that are now included in the RTK package itself in a skills folder. They cover using and migrating to modern RTK, client and server state management, and handling side effects. You can point your agent at these skills yourself, or use TanStack Intent to pick them up.

TypeScript Improvements

The types for our RTK Query hook options are now exported, which lets you stop using Parameters to extract those types for use in your own code.

The types for listener middleware matchers were tweaked to allow interface-based type guards, not just type-based definitions.

The internal IgnorePaths type was renamed to IgnoredPaths for consistency.

We now use the built-in NoInfer util that comes with TS 5.4+.

Fixes

We fixed handling of the isSuccess status flag when switching infinite query cache entries. This should prevent accidental UI flashes that were occurring due to this flag accidentally flipping.

We've added a 100ms timeout fallback to the autoBatch enhancer's requestAnimationFrame timer. We had several reports that rAF didn't work correctly when used in background tabs / opened windows, and that RTK never updated the UI. This should ensure that the updates flush correctly.

What's Changed

Full Changelog: reduxjs/redux-toolkit@v2.11.2...v2.12.0

v2.11.2

This bugfix release updates the AbortSignal handling to fall back if DOMException isn't available (such as RN environments), and updates the TypedUseInfiniteQueryHookResult type to correctly include fetchNextPage/fetchPreviousPage fields.

Changelog

Bugfixes

The AbortSignal changes in 2.11.1 used DOMException in a couple places to match the expected behavior of AbortSignal, but turns out that's not available in environments like React Native. We've updated the logic to fall back to a plain Error if DOMException isn't available.

The TypedUseInfiniteQueryHookResult type wasn't correctly including the fetchNextPage/fetchPreviousPage fields, and now it does.

What's Changed

... (truncated)

Commits
  • 576a02f Release 2.12.0
  • de2d55e Merge pull request #5237 from aryaemami59/fix/codegen/generateEndpoints-retur...
  • ac807c3 fix(codegen): narrow generateEndpoints return type
  • 01ed3ba Merge pull request #5289 from aryaemami59/feat/toolkit/switch-to-native-NoInfer
  • 1f16db1 Merge pull request #5290 from aryaemami59/build/toolkit/exclude-test-files-fr...
  • 23783c1 build(toolkit): exclude test files from final bundle
  • 91b8b0a feat(toolkit)!: switch to native NoInfer utility type
  • 0b37f1a Merge pull request #5286 from aryaemami59/docs/toolkit/fix-typos
  • 3cd62c8 fix unforwardedActions
  • 64853cc chore: fix various typos
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​reduxjs/toolkit since your current version.


Updates @tailwindcss/vite from 4.0.3 to 4.3.0

Release notes

Sourced from @​tailwindcss/vite's releases.

v4.3.0

Added

  • Add @container-size utility (#18901)
  • Add scrollbar-{auto,thin,none} utilities for scrollbar-width, and scrollbar-thumb-* / scrollbar-track-* color utilities for scrollbar-color (#19981, #20019)
  • Add scrollbar-gutter-* utilities (#20018)
  • Add zoom-* utilities (#20020)
  • Add tab-* utilities (#20022)
  • Allow using @variant with stacked variants (e.g. @variant hover:focus { … }) (#19996)
  • Allow using @variant with compound variants (e.g. @variant hover, focus { … }) (#19996)
  • Support --default(…) in --value(…) and --modifier(…) for functional @utility definitions (#19989)

Fixed

  • Ensure @plugin resolves package JavaScript entries instead of browser CSS entries when using @tailwindcss/vite (#19949)
  • Fix relative @import and @plugin paths resolving from the wrong directory when using @tailwindcss/vite (#19965)
  • Ensure CSS files containing @variant are processed by @tailwindcss/vite (#19966)
  • Resolve imports relative to base when result.opts.from is not provided when using @tailwindcss/postcss (#19980)
  • Canonicalization: preserve significant _ whitespace in arbitrary values (#19986)
  • Canonicalization: add parentheses when removing whitespace from arbitrary values would hurt readability (e.g. w-[calc(100%---spacing(60))]w-[calc(100%-(--spacing(60)))]) (#19986)
  • Canonicalization: preserve the original unit in arbitrary values instead of normalizing to base units (e.g. -mt-[20in]mt-[-20in], not mt-[-1920px]) (#19988)
  • Canonicalization: migrate arbitrary :has() variants from [&:has(…)] to has-[…] (#19991)
  • Upgrade: don’t migrate inline style attributes (e.g. style="flex-grow: 1"style="flex-grow: 1", not style="grow: 1") (#19918)
  • Allow multiple @utility definitions with the same name but different value types (#19777)
  • Export missing PluginWithConfig type from tailwindcss/plugin to fix errors when inferring plugin config types (#19707)
  • Ensure start and end legacy utilities without values do not generate CSS (#20003)
  • Ensure --value(…) is required in functional @utility definitions (#20005)
  • Canonicalization: preserve required whitespace around operators in negated arbitrary values (e.g. -left-[(var(--a)+var(--b))]) (#20011)

v4.2.4

Fixed

  • Ensure imports in @import and @plugin still resolve correctly when using Vite aliases in @tailwindcss/vite (#19947)

v4.2.3

Fixed

  • Canonicalization: improve canonicalizations for tracking-* utilities by preferring non-negative utilities (e.g. -tracking-tightertracking-wider) (#19827)
  • Fix crash due to invalid characters in candidate (exceeding valid unicode code point range) (#19829)
  • Ensure query params in imports are considered unique resources when using @tailwindcss/webpack (#19723)
  • Canonicalization: collapse arbitrary values into shorthand utilities (e.g. px-[1.2rem] py-[1.2rem]p-[1.2rem]) (#19837)
  • Canonicalization: collapse border-{t,b}-* into border-y-*, border-{l,r}-* into border-x-*, and border-{t,r,b,l}-* into border-* (#19842)
  • Canonicalization: collapse scroll-m{t,b}-* into scroll-my-*, scroll-m{l,r}-* into scroll-mx-*, and scroll-m{t,r,b,l}-* into scroll-m-* (#19842)
  • Canonicalization: collapse scroll-p{t,b}-* into scroll-py-*, scroll-p{l,r}-* into scroll-px-*, and scroll-p{t,r,b,l}-* into scroll-p-* (#19842)
  • Canonicalization: collapse overflow-{x,y}-* into overflow-* (#19842)
  • Canonicalization: collapse overscroll-{x,y}-* into overscroll-* (#19842)
  • Read from --placeholder-color instead of --background-color for placeholder-* utilities (#19843)
  • Upgrade: ensure files are not emptied out when killing the upgrade process while it's running (#19846)
  • Upgrade: use config.content when migrating from Tailwind CSS v3 to Tailwind CSS v4 (#19846)
  • Upgrade: never migrate files that are ignored by git (#19846)

... (truncated)

Changelog

Sourced from @​tailwindcss/vite's changelog.

[4.3.0] - 2026-05-08

Added

  • Add @container-size utility (#18901)
  • Add scrollbar-{auto,thin,none} utilities for scrollbar-width, and scrollbar-thumb-* / scrollbar-track-* color utilities for scrollbar-color (#19981, #20019)
  • Add scrollbar-gutter-* utilities (#20018)
  • Add zoom-* utilities (#20020)
  • Add tab-* utilities (#20022)
  • Allow using @variant with stacked variants (e.g. @variant hover:focus { … }) (#19996)
  • Allow using @variant with compound variants (e.g. @variant hover, focus { … }) (#19996)
  • Support --default(…) in --value(…) and --modifier(…) for functional @utility definitions (#19989)

Fixed

  • Ensure @plugin resolves package JavaScript entries instead of browser CSS entries when using @tailwindcss/vite (#19949)
  • Fix relative @import and @plugin paths resolving from the wrong directory when using @tailwindcss/vite (#19965)
  • Ensure CSS files containing @variant are processed by @tailwindcss/vite (#19966)
  • Resolve imports relative to base when result.opts.from is not provided when using @tailwindcss/postcss (#19980)
  • Canonicalization: preserve significant _ whitespace in arbitrary values (#19986)
  • Canonicalization: add parentheses when removing whitespace from arbitrary values would hurt readability (e.g. w-[calc(100%---spacing(60))]w-[calc(100%-(--spacing(60)))]) (#19986)
  • Canonicalization: preserve the original unit in arbitrary values instead of normalizing to base units (e.g. -mt-[20in]mt-[-20in], not mt-[-1920px]) (#19988)
  • Canonicalization: migrate arbitrary :has() variants from [&:has(…)] to has-[…] (#19991)
  • Upgrade: don’t migrate inline style attributes (e.g. style="flex-grow: 1"style="flex-grow: 1", not style="grow: 1") (#19918)
  • Allow multiple @utility definitions with the same name but different value types (#19777)
  • Export missing PluginWithConfig type from tailwindcss/plugin to fix errors when inferring plugin config types (#19707)
  • Ensure start and end legacy utilities without values do not generate CSS (#20003)
  • Ensure --value(…) is required in functional @utility definitions (#20005)
  • Canonicalization: preserve required whitespace around operators in negated arbitrary values (e.g. -left-[(var(--a)+var(--b))]) (#20011)

[4.2.4] - 2026-04-21

Fixed

  • Ensure imports in @import and @plugin still resolve correctly when using Vite aliases in @tailwindcss/vite (#19947)

[4.2.3] - 2026-04-20

Fixed

  • Canonicalization: improve canonicalization for tracking-* utilities by preferring non-negative utilities (e.g. -tracking-tightertracking-wider) (#19827)
  • Fix crash due to invalid characters in candidate (exceeding valid unicode code point range) (#19829)
  • Ensure query params in imports are considered unique resources when using @tailwindcss/webpack (#19723)
  • Canonicalization: collapse arbitrary values into shorthand utilities (e.g. px-[1.2rem] py-[1.2rem]p-[1.2rem]) (#19837)
  • Canonicalization: collapse border-{t,b}-* into border-y-*, border-{l,r}-* into border-x-*, and border-{t,r,b,l}-* into border-* (#19842)
  • Canonicalization: collapse scroll-m{t,b}-* into scroll-my-*, scroll-m{l,r}-* into scroll-mx-*, and scroll-m{t,r,b,l}-* into scroll-m-* (#19842)
  • Canonicalization: collapse scroll-p{t,b}-* into scroll-py-*, scroll-p{l,r}-* into scroll-px-*, and scroll-p{t,r,b,l}-* into scroll-p-* (#19842)
  • Canonicalization: collapse overflow-{x,y}-* into overflow-* (#19842)
  • Canonicalization: collapse overscroll-{x,y}-* into overscroll-* (#19842)
  • Read from --placeholder-color instead of --background-color for placeholder-* utilities (#19843)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​tailwindcss/vite since your current version.


Updates autoprefixer from 10.4.20 to 10.5.0

Release notes

Sourced from autoprefixer's releases.

10.5.0 “Each Endeavouring, All Achieving”

  • Added mask-position-x and mask-position-y support (by @​toporek).

10.4.27

  • Removed development key from package.json.

10.4.26

  • Reduced package size.

10.4.25

  • Fixed broken gradients on CSS Custom Properties (by @​serger777).

10.4.24

  • Made Autoprefixer a little faster (by @​Cherry).

10.4.23

10.4.22

  • Fixed stretch prefixes on new Can I Use database.
  • Updated fraction.js.

10.4.21

Changelog

Sourced from autoprefixer's changelog.

10.5.0 “Each Endeavouring, All Achieving”

  • Added mask-position-x and mask-position-y support (by @​toporek).

10.4.27

  • Removed development key from package.json.

10.4.26

  • Reduced package size.

10.4.25

  • Fixed broken gradients on CSS Custom Properties (by @​serger777).

10.4.24

  • Made Autoprefixer a little faster (by @​Cherry).

10.4.23

10.4.22

  • Fixed stretch prefixes on new Can I Use database.
  • Updated fraction.js.

10.4.21

Commits

Updates axios from 1.7.9 to 1.16.1

Release notes

Sourced from axios's releases.

v1.16.1 — May 13, 2026

This release ships a defence-in-depth fix for prototype pollution in formDataToJSON, hardens proxy and CI workflows, restores Webpack 4 compatibility for the fetch adapter, and includes several small bug fixes and maintenance improvements.

🔒 Security Fixes

  • Prototype Pollution Defence-in-Depth: Hardened formDataToJSON against already-polluted Object.prototype by walking own properties only, so attacker-controlled keys inherited from a poisoned prototype cannot propagate through deserialization. (#7413)
  • Proxy Cleartext Leak: Fixed an issue where HTTPS request data could be transmitted in cleartext to an HTTP proxy under certain configurations. (#10858)
  • CI Cache Removal: Removed all GitHub Actions caches as a defence-in-depth measure against cache poisoning vectors in the build pipeline. (#10882)

🐛 Bug Fixes

  • Data URI Parsing: Updated the fromDataURI regex to match RFC 2397 more strictly, fixing edge cases in data: URL handling. (#10829)
  • Unicode Headers: Preserved Unicode header values when running through request interceptors, so non-ASCII header content is no longer corrupted before dispatch. (#10850)
  • XHR Upload Progress: Guarded against malformed ProgressEvent payloads emitted by some environments during XHR upload, preventing crashes when loaded / total are missing or invalid. (#10868)
  • Webpack 4 Fetch Adapter: Fixed an "unexpected token" error caused by syntax in the fetch adapter that Webpack 4 could not parse, restoring compatibility for legacy bundler users. (#10864)
  • Type Definitions: Made parseReviver context.source optional in the type definitions to align with the ES2023 specification. (#10837)
  • URL Object Support Reverted: Reverted the change that allowed passing a URL object as config.url (originally #10866) due to regressions; this support will be reintroduced in a later release once the underlying issues are addressed. (Description has been truncated

Updates the requirements on [@azure/msal-browser](https://github.com/AzureAD/microsoft-authentication-library-for-js), [@azure/msal-react](https://github.com/AzureAD/microsoft-authentication-library-for-js), [@fluentui/react](https://github.com/microsoft/fluentui), [@fluentui/react-components](https://github.com/microsoft/fluentui), [@fluentui/react-file-type-icons](https://github.com/microsoft/fluentui), [@fluentui/react-icons](https://github.com/microsoft/fluentui-system-icons), [@reduxjs/toolkit](https://github.com/reduxjs/redux-toolkit), [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite), [autoprefixer](https://github.com/postcss/autoprefixer), [axios](https://github.com/axios/axios), [js-yaml](https://github.com/nodeca/js-yaml), [lottie-react](https://github.com/Gamote/lottie-react), [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react), [messagebar](https://github.com/audreyr/messagebar), [postcss](https://github.com/postcss/postcss), [react](https://github.com/facebook/react/tree/HEAD/packages/react), [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react), [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom), [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom), [react-dropzone](https://github.com/react-dropzone/react-dropzone), [react-icons](https://github.com/react-icons/react-icons), [react-markdown](https://github.com/remarkjs/react-markdown), [react-redux](https://github.com/reduxjs/react-redux), [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom), [react-syntax-highlighter](https://github.com/react-syntax-highlighter/react-syntax-highlighter), [sql-formatter](https://github.com/sql-formatter-org/sql-formatter), [tailwind-merge](https://github.com/dcastil/tailwind-merge), [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss), [uuid](https://github.com/uuidjs/uuid), [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js), [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react), [eslint](https://github.com/eslint/eslint), [eslint-plugin-react](https://github.com/jsx-eslint/eslint-plugin-react), [eslint-plugin-react-hooks](https://github.com/facebook/react/tree/HEAD/packages/eslint-plugin-react-hooks), [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh), [globals](https://github.com/sindresorhus/globals), [rollup](https://github.com/rollup/rollup), [rollup-plugin-dts](https://github.com/Swatinem/rollup-plugin-dts), [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [vite-plugin-svgr](https://github.com/pd4d10/vite-plugin-svgr) to permit the latest version.

Updates `@azure/msal-browser` from 4.7.0 to 5.11.0
- [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases)
- [Commits](AzureAD/microsoft-authentication-library-for-js@msal-browser-v4.7.0...msal-browser-v5.11.0)

Updates `@azure/msal-react` from 3.0.6 to 5.4.2
- [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases)
- [Commits](AzureAD/microsoft-authentication-library-for-js@msal-react-v3.0.6...msal-react-v5.4.2)

Updates `@fluentui/react` from 8.122.9 to 8.125.6
- [Release notes](https://github.com/microsoft/fluentui/releases)
- [Commits](https://github.com/microsoft/fluentui/compare/@fluentui/react_v8.122.9...@fluentui/react_v8.125.6)

Updates `@fluentui/react-components` from 9.58.2 to 9.74.1
- [Release notes](https://github.com/microsoft/fluentui/releases)
- [Commits](https://github.com/microsoft/fluentui/compare/@fluentui/react-components_v9.58.2...@fluentui/react-components_v9.74.1)

Updates `@fluentui/react-file-type-icons` from 8.12.7 to 8.18.0
- [Release notes](https://github.com/microsoft/fluentui/releases)
- [Commits](https://github.com/microsoft/fluentui/compare/@fluentui/react-file-type-icons_v8.12.7...@fluentui/react-file-type-icons_v8.18.0)

Updates `@fluentui/react-icons` from 2.0.274 to 2.0.328
- [Changelog](https://github.com/microsoft/fluentui-system-icons/blob/main/docs/releases.md)
- [Commits](https://github.com/microsoft/fluentui-system-icons/commits)

Updates `@reduxjs/toolkit` from 2.5.1 to 2.12.0
- [Release notes](https://github.com/reduxjs/redux-toolkit/releases)
- [Commits](reduxjs/redux-toolkit@v2.5.1...v2.12.0)

Updates `@tailwindcss/vite` from 4.0.3 to 4.3.0
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.0/packages/@tailwindcss-vite)

Updates `autoprefixer` from 10.4.20 to 10.5.0
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.4.20...10.5.0)

Updates `axios` from 1.7.9 to 1.16.1
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.7.9...v1.16.1)

Updates `js-yaml` from 4.1.0 to 4.2.0
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/commits)

Updates `lottie-react` to 2.4.1
- [Release notes](https://github.com/Gamote/lottie-react/releases)
- [Commits](Gamote/lottie-react@v2.4.1...v2.4.1)

Updates `lucide-react` from 0.471.2 to 1.17.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.17.0/packages/lucide-react)

Updates `messagebar` to 0.2.1
- [Commits](audreyfeldroy/messagebar@0.2.1...0.2.1)

Updates `postcss` from 8.5.1 to 8.5.15
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.1...8.5.15)

Updates `react` from 18.3.1 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react)

Updates `@types/react` from 18.3.18 to 19.2.16
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 18.3.1 to 19.2.7
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom)

Updates `@types/react-dom` from 18.3.5 to 19.2.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `react-dropzone` from 14.3.5 to 15.0.0
- [Release notes](https://github.com/react-dropzone/react-dropzone/releases)
- [Commits](react-dropzone/react-dropzone@v14.3.5...v15.0.0)

Updates `react-icons` from 5.5.0 to 5.6.0
- [Release notes](https://github.com/react-icons/react-icons/releases)
- [Commits](react-icons/react-icons@v5.5.0...v5.6.0)

Updates `react-markdown` to 10.1.0
- [Release notes](https://github.com/remarkjs/react-markdown/releases)
- [Changelog](https://github.com/remarkjs/react-markdown/blob/main/changelog.md)
- [Commits](remarkjs/react-markdown@10.1.0...10.1.0)

Updates `react-redux` from 9.2.0 to 9.3.0
- [Release notes](https://github.com/reduxjs/react-redux/releases)
- [Changelog](https://github.com/reduxjs/react-redux/blob/master/CHANGELOG.md)
- [Commits](reduxjs/react-redux@v9.2.0...v9.3.0)

Updates `react-router-dom` from 7.1.5 to 7.16.0
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.16.0/packages/react-router-dom)

Updates `react-syntax-highlighter` from 15.6.1 to 16.1.1
- [Release notes](https://github.com/react-syntax-highlighter/react-syntax-highlighter/releases)
- [Changelog](https://github.com/react-syntax-highlighter/react-syntax-highlighter/blob/master/CHANGELOG.MD)
- [Commits](react-syntax-highlighter/react-syntax-highlighter@v15.6.1...v16.1.1)

Updates `sql-formatter` from 15.4.11 to 15.8.0
- [Release notes](https://github.com/sql-formatter-org/sql-formatter/releases)
- [Commits](sql-formatter-org/sql-formatter@v15.4.11...v15.8.0)

Updates `tailwind-merge` from 2.6.0 to 3.6.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](dcastil/tailwind-merge@v2.6.0...v3.6.0)

Updates `tailwindcss` from 3.4.17 to 4.3.0
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.0/packages/tailwindcss)

Updates `uuid` from 11.0.5 to 14.0.0
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v11.0.5...v14.0.0)

Updates `@eslint/js` from 9.19.0 to 10.0.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/commits/v10.0.1/packages/js)

Updates `@types/react` from 18.3.18 to 19.2.16
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 18.3.5 to 19.2.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `@vitejs/plugin-react` from 4.3.4 to 6.0.2
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.2/packages/plugin-react)

Updates `eslint` from 9.19.0 to 10.4.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.19.0...v10.4.1)

Updates `eslint-plugin-react` from 7.37.4 to 7.37.5
- [Release notes](https://github.com/jsx-eslint/eslint-plugin-react/releases)
- [Changelog](https://github.com/jsx-eslint/eslint-plugin-react/blob/master/CHANGELOG.md)
- [Commits](jsx-eslint/eslint-plugin-react@v7.37.4...v7.37.5)

Updates `eslint-plugin-react-hooks` from 5.1.0 to 7.1.1
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/packages/eslint-plugin-react-hooks/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/eslint-plugin-react-hooks@7.1.1/packages/eslint-plugin-react-hooks)

Updates `eslint-plugin-react-refresh` from 0.4.18 to 0.5.2
- [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases)
- [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md)
- [Commits](ArnaudBarre/eslint-plugin-react-refresh@v0.4.18...v0.5.2)

Updates `globals` from 15.14.0 to 17.6.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v15.14.0...v17.6.0)

Updates `rollup` from 4.34.4 to 4.61.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.34.4...v4.61.0)

Updates `rollup-plugin-dts` from 6.1.1 to 6.4.1
- [Changelog](https://github.com/Swatinem/rollup-plugin-dts/blob/master/CHANGELOG.md)
- [Commits](Swatinem/rollup-plugin-dts@v6.1.1...v6.4.1)

Updates `vite` from 6.1.0 to 8.0.16
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.0.16/packages/vite)

Updates `vite-plugin-svgr` from 4.3.0 to 5.2.0
- [Release notes](https://github.com/pd4d10/vite-plugin-svgr/releases)
- [Commits](pd4d10/vite-plugin-svgr@v4.3.0...v5.2.0)

---
updated-dependencies:
- dependency-name: "@azure/msal-browser"
  dependency-version: 5.11.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-npm
- dependency-name: "@azure/msal-react"
  dependency-version: 5.4.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-npm
- dependency-name: "@fluentui/react"
  dependency-version: 8.125.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: "@fluentui/react-components"
  dependency-version: 9.74.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: "@fluentui/react-file-type-icons"
  dependency-version: 8.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: "@fluentui/react-icons"
  dependency-version: 2.0.328
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: "@reduxjs/toolkit"
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: "@tailwindcss/vite"
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: autoprefixer
  dependency-version: 10.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: axios
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: js-yaml
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: lottie-react
  dependency-version: 2.4.1
  dependency-type: direct:production
  dependency-group: all-npm
- dependency-name: lucide-react
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-npm
- dependency-name: messagebar
  dependency-version: 0.2.1
  dependency-type: direct:production
  dependency-group: all-npm
- dependency-name: postcss
  dependency-version: 8.5.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: react
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-npm
- dependency-name: "@types/react"
  dependency-version: 19.2.16
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-npm
- dependency-name: react-dom
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-npm
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-npm
- dependency-name: react-dropzone
  dependency-version: 15.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-npm
- dependency-name: react-icons
  dependency-version: 5.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: react-markdown
  dependency-version: 10.1.0
  dependency-type: direct:production
  dependency-group: all-npm
- dependency-name: react-redux
  dependency-version: 9.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: react-router-dom
  dependency-version: 7.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: react-syntax-highlighter
  dependency-version: 16.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-npm
- dependency-name: sql-formatter
  dependency-version: 15.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: tailwind-merge
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-npm
- dependency-name: tailwindcss
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-npm
- dependency-name: uuid
  dependency-version: 14.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-npm
- dependency-name: "@eslint/js"
  dependency-version: 10.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-npm
- dependency-name: "@types/react"
  dependency-version: 19.2.16
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-npm
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-npm
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-npm
- dependency-name: eslint
  dependency-version: 10.4.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-npm
- dependency-name: eslint-plugin-react
  dependency-version: 7.37.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: eslint-plugin-react-hooks
  dependency-version: 7.1.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-npm
- dependency-name: eslint-plugin-react-refresh
  dependency-version: 0.5.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: globals
  dependency-version: 17.6.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-npm
- dependency-name: rollup
  dependency-version: 4.61.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: rollup-plugin-dts
  dependency-version: 6.4.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: vite
  dependency-version: 8.0.16
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-npm
- dependency-name: vite-plugin-svgr
  dependency-version: 5.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 2, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants