Skip to content

[JS] bump: (deps): Bump the production group across 1 directory with 15 updates #31

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
dependabot wants to merge 1 commit into from
Closed

[JS] bump: (deps): Bump the production group across 1 directory with 15 updates #31

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 8, 2025 •
edited
Loading

Bumps the production group with 11 updates in the /js directory:

Package From To
botbuilder 4.23.2 4.23.3
openai 4.77.4 4.104.0
@azure/msal-node 2.16.2 2.16.3
botbuilder-dialogs 4.23.2 4.23.3
yaml 2.7.1 2.8.1
dotenv 16.4.7 16.6.1
@microsoft/teams-js 2.35.0 2.44.0
vectra 0.9.0 0.11.1
debug 4.4.0 4.4.1
@azure/identity 4.8.0 4.11.1
botbuilder-azure-blobs 4.23.2 4.23.3

Updates botbuilder from 4.23.2 to 4.23.3

Release notes

Sourced from botbuilder's releases.

Bot Framework JS SDK 4.23.3

Notable in this release

  • Added supporet for TS 5.9

    Note: In order to support new TS version, we had to drop support for TS 4.7 as it is incompatible with the new node/types version.

  • Package updates to resolve security alerts

What's Changed

Full Changelog: microsoft/botbuilder-js@4.23.2...4.23.3

Commits

Updates openai from 4.77.4 to 4.104.0

Release notes

Sourced from openai's releases.

v4.104.0

4.104.0 (2025-05-29)

Full Changelog: v4.103.0...v4.104.0

Features

  • api: Config update for pakrym-stream-param (469ad7b)

Bug Fixes

  • azure: add /images/edits to deployments endpoints (#1509) (84fc31a)
  • client: return binary content from get /containers/{container_id}/files/{file_id}/content (83129d7)

Chores

  • deprecate Assistants API (5b34fcd)
  • improve publish-npm script --latest tag logic (6207a2a)
  • internal: fix release workflows (353349d)

v4.103.0

4.103.0 (2025-05-22)

Full Changelog: v4.102.0...v4.103.0

Features

  • api: new streaming helpers for background responses (1ddd6ff)

v4.102.0

4.102.0 (2025-05-21)

Full Changelog: v4.101.0...v4.102.0

Features

  • api: add container endpoint (e973476)

v4.101.0

4.101.0 (2025-05-21)

Full Changelog: v4.100.0...v4.101.0

Features

... (truncated)

Changelog

Sourced from openai's changelog.

4.104.0 (2025-05-29)

Full Changelog: v4.103.0...v4.104.0

Features

  • api: Config update for pakrym-stream-param (469ad7b)

Bug Fixes

  • azure: add /images/edits to deployments endpoints (#1509) (84fc31a)
  • client: return binary content from get /containers/{container_id}/files/{file_id}/content (83129d7)

Chores

  • deprecate Assistants API (5b34fcd)
  • improve publish-npm script --latest tag logic (6207a2a)
  • internal: fix release workflows (353349d)

4.103.0 (2025-05-22)

Full Changelog: v4.102.0...v4.103.0

Features

  • api: new streaming helpers for background responses (1ddd6ff)

4.102.0 (2025-05-21)

Full Changelog: v4.101.0...v4.102.0

Features

  • api: add container endpoint (e973476)

4.101.0 (2025-05-21)

Full Changelog: v4.100.0...v4.101.0

Features

Chores

  • docs: grammar improvements (7761cfb)
  • internal: version bump (b40e830)

... (truncated)

Commits
  • 7704e54 release: 4.104.0
  • 8502966 fix(client): return binary content from `get /containers/{container_id}/files...
  • 71c3d31 feat(api): Config update for pakrym-stream-param
  • 0be23b9 chore: deprecate Assistants API
  • 6d3cc5c chore: improve publish-npm script --latest tag logic
  • 4b18059 fix(azure): add /images/edits to deployments endpoints (#1509)
  • 0e4b982 chore(internal): fix release workflows
  • ce9f114 codegen metadata
  • f3c6ba8 Merge pull request #1506 from openai/release-please--branches--master--change...
  • 00b63f4 release: 4.103.0
  • Additional commits viewable in compare view

Updates @azure/msal-node from 2.16.2 to 2.16.3

Commits

Updates axios from 1.8.4 to 1.11.0

Release notes

Sourced from axios's releases.

Release v1.11.0

Release notes:

Bug Fixes

  • form-data npm pakcage (#6970) (e72c193)
  • prevent RangeError when using large Buffers (#6961) (a2214ca)
  • types: resolve type discrepancies between ESM and CJS TypeScript declaration files (#6956) (8517aa1)

Contributors to this release

Release v1.10.0

Release notes:

Bug Fixes

  • adapter: pass fetchOptions to fetch function (#6883) (0f50af8)
  • form-data: convert boolean values to strings in FormData serialization (#6917) (5064b10)
  • package: add module entry point for React Native; (#6933) (3d343b8)

Features

Contributors to this release

Release v1.9.0

Release notes:

Bug Fixes

  • core: fix the Axios constructor implementation to treat the config argument as optional; (#6881) (6c5d4cd)
  • fetch: fixed ERR_NETWORK mapping for Safari browsers; (#6767) (dfe8411)
  • headers: allow iterable objects to be a data source for the set method; (#6873) (1b1f9cc)
  • headers: fix getSetCookie by using 'get' method for caseless access; (#6874) (d4f7df4)
  • headers: fixed support for setting multiple header values from an iterated source; (#6885) (f7a3b5e)
  • http: send minimal end multipart boundary (#6661) (987d2e2)
  • types: fix autocomplete for adapter config (#6855) (e61a893)

... (truncated)

Changelog

Sourced from axios's changelog.

1.11.0 (2025-07-22)

Bug Fixes

  • form-data npm pakcage (#6970) (e72c193)
  • prevent RangeError when using large Buffers (#6961) (a2214ca)
  • types: resolve type discrepancies between ESM and CJS TypeScript declaration files (#6956) (8517aa1)

Contributors to this release

1.10.0 (2025-06-14)

Bug Fixes

  • adapter: pass fetchOptions to fetch function (#6883) (0f50af8)
  • form-data: convert boolean values to strings in FormData serialization (#6917) (5064b10)
  • package: add module entry point for React Native; (#6933) (3d343b8)

Features

Contributors to this release

1.9.0 (2025-04-24)

Bug Fixes

  • core: fix the Axios constructor implementation to treat the config argument as optional; (#6881) (6c5d4cd)
  • fetch: fixed ERR_NETWORK mapping for Safari browsers; (#6767) (dfe8411)
  • headers: allow iterable objects to be a data source for the set method; (#6873) (1b1f9cc)
  • headers: fix getSetCookie by using 'get' method for caseless access; (#6874) (d4f7df4)

... (truncated)

Commits
  • b76c4ac chore(release): v1.11.0 (#6974)
  • e72c193 fix: form-data npm pakcage (#6970)
  • 8517aa1 fix(types): resolve type discrepancies between ESM and CJS TypeScript declara...
  • a2214ca fix: prevent RangeError when using large Buffers (#6961)
  • 6161947 refactor: use spread operator instead of '.apply()' (#6938)
  • a1d16dd refactor: use an object spread instead of Object.assign (#6939)
  • 07183cd chore(sponsor): update sponsor block (#6952)
  • ef36347 docs(CONTRIBUTING): update docs link for accuracy (#6894)
  • b29bd6a chore(sponsor): update sponsor block (#6948)
  • a406a93 chore(sponsor): update sponsor block (#6937)
  • Additional commits viewable in compare view

Updates botbuilder-dialogs from 4.23.2 to 4.23.3

Release notes

Sourced from botbuilder-dialogs's releases.

Bot Framework JS SDK 4.23.3

Notable in this release

  • Added supporet for TS 5.9

    Note: In order to support new TS version, we had to drop support for TS 4.7 as it is incompatible with the new node/types version.

  • Package updates to resolve security alerts

What's Changed

Full Changelog: microsoft/botbuilder-js@4.23.2...4.23.3

Commits

Updates botframework-connector from 4.23.2 to 4.23.3

Release notes

Sourced from botframework-connector's releases.

Bot Framework JS SDK 4.23.3

Notable in this release

  • Added supporet for TS 5.9

    Note: In order to support new TS version, we had to drop support for TS 4.7 as it is incompatible with the new node/types version.

  • Package updates to resolve security alerts

What's Changed

Full Changelog: microsoft/botbuilder-js@4.23.2...4.23.3

Commits

Updates botframework-schema from 4.23.2 to 4.23.3

Release notes

Sourced from botframework-schema's releases.

Bot Framework JS SDK 4.23.3

Notable in this release

  • Added supporet for TS 5.9

    Note: In order to support new TS version, we had to drop support for TS 4.7 as it is incompatible with the new node/types version.

  • Package updates to resolve security alerts

What's Changed

Full Changelog: microsoft/botbuilder-js@4.23.2...4.23.3

Commits

Updates botframework-streaming from 4.23.2 to 4.23.3

Release notes

Sourced from botframework-streaming's releases.

Bot Framework JS SDK 4.23.3

Notable in this release

  • Added supporet for TS 5.9

    Note: In order to support new TS version, we had to drop support for TS 4.7 as it is incompatible with the new node/types version.

  • Package updates to resolve security alerts

What's Changed

Full Changelog: microsoft/botbuilder-js@4.23.2...4.23.3

Commits

Updates yaml from 2.7.1 to 2.8.1

Release notes

Sourced from yaml's releases.

v2.8.1

  • Preserve empty block literals (#634)

v2.8.0

  • Add node cache for faster alias resolution (#612)
  • Re-introduce compatibility with Node.js 14.6 (#614)
  • Add --merge option to CLI tool (#611)
  • Improve error for tag resolution error on null value (#616)
  • Allow empty string as plain scalar representation, for failsafe schema (#616)
  • docs: include cli example (#617)
Commits
  • 1dc3c3b 2.8.1
  • 5bbb1cb chore: Add explicit jest-resolve@29 dev dependency to keep Node.js 15 compati...
  • b3ba632 chore: Refresh lockfile
  • de8a0ab fix: Preserve empty block literals (#634)
  • 81eb3bf docs: Update site intro
  • ef23196 docs: Update README & docs/CONTRIBUTING
  • aa29f42 docs: Note that schema can be a Schema
  • cad823e docs: Update instructions on vulnerability reporting
  • c000eb7 2.8.0
  • 1e85fc8 style: Apply updated lint rules
  • Additional commits viewable in compare view

Updates dotenv from 16.4.7 to 16.6.1

Changelog

Sourced from dotenv's changelog.

16.6.1 (2025-06-27)

Changed

  • Default quiet to true – hiding the runtime log message (#874)
  • NOTICE: 17.0.0 will be released with quiet defaulting to false. Use config({ quiet: true }) to suppress.
  • And check out the new dotenvx. As coding workflows evolve and agents increasingly handle secrets, encrypted .env files offer a much safer way to deploy both agents and code together with secure secrets. Simply switch require('dotenv').config() for require('@dotenvx/dotenvx').config().

16.6.0 (2025-06-26)

Added

  • Default log helpful message [dotenv@16.6.0] injecting env (1) from .env (#870)
  • Use { quiet: true } to suppress
  • Aligns dotenv more closely with dotenvx.

16.5.0 (2025-04-07)

Added

  • 🎉 Added new sponsor Graphite - the AI developer productivity platform helping teams on GitHub ship higher quality software, faster.

[!TIP] Become a sponsor

The dotenvx README is viewed thousands of times DAILY on GitHub and NPM. Sponsoring dotenv is a great way to get in front of developers and give back to the developer community at the same time.

Changed

  • Remove _log method. Use _debug #862
Commits

Updates @microsoft/teams-js from 2.35.0 to 2.44.0

Release notes

Sourced from @​microsoft/teams-js's releases.

v2.44.0

2.44.0

Wed, 27 Aug 2025 21:57:44 GMT

Minor changes

  • Added optional Settings field to AppEligibilityInformation interface
  • Bump eslint-plugin-recommend-no-namespaces to v0.1.0

2.43.0

Minor changes

  • Added shortcutRelay capability to support host shortcuts in apps.
  • Bump eslint-plugin-recommend-no-namespaces to v0.1.0

v2.42.0

2.42.0

Thu, 07 Aug 2025 02:09:13 GMT

Minor changes

  • Added messageId to app context.
  • Updated validDomains list to support the catalyst consumer domains
  • Bump eslint-plugin-recommend-no-namespaces to v0.1.0

Patches

  • Add Outlook DoD domains to validDomains
  • Fixed the typo from NonAdult to NotAdult in LegalAgeGroupClassification Enum.

v2.41.0

Minor changes

  • Added view copilot API with function to close the side panel.
  • Bumped eslint-plugin-recommend-no-namespaces to v0.1.0

V2.40.0

Minor changes

  • Added contextType in TeamsContent interface to {copilot.sidePanel} capability.
  • Added TeamsContent interface for {copilot.sidePanel} capability.
  • Bump eslint-plugin-recommend-no-namespaces to v0.1.0

Patches

  • Removed message source check but kept origin validation in nested app auth standalone bridge
  • Added Outlook OCDI domain to validDomains.json
  • Updated valid domains CDN fetch logic to prevent duplicate requests.

... (truncated)

Changelog

Sourced from @​microsoft/teams-js's changelog.

2.44.0

Wed, 27 Aug 2025 21:57:44 GMT

Minor changes

  • Added optional Settings field to AppEligibilityInformation interface
  • Bump eslint-plugin-recommend-no-namespaces to v0.1.0

2.43.0

Tue, 19 Aug 2025 15:18:35 GMT

Minor changes

  • Added shortcutRelay capability to support host shortcuts in apps.
  • Bump eslint-plugin-recommend-no-namespaces to v0.1.0

2.42.0

Thu, 07 Aug 2025 04:45:52 GMT

Minor changes

  • Updated validDomains list to support the catalyst consumer domains
  • Added messageId to app context.
  • Bump eslint-plugin-recommend-no-namespaces to v0.1.0

Patches

  • Add Outlook DoD domains to validDomains
  • Fixed the typo from NonAdult to NotAdult in LegalAgeGroupClassification Enum.

2.41.0

Mon, 21 Jul 2025 20:57:12 GMT

Minor changes

  • Added view copilot API with function to close the side panel.
  • Bumped eslint-plugin-recommend-no-namespaces to v0.1.0

2.40.0

Mon, 07 Jul 2025 23:19:06 GMT

Minor changes

  • Added contextType in TeamsContent interface to {copilot.sidePanel} capability.
  • Added TeamsContent interface for {copilot.sidePanel} capability.

... (truncated)

Commits

Updates vectra from 0.9.0 to 0.11.1

Release notes

Sourced from vectra's releases.

v0.10.0

https://www.npmjs.com/package/vectra

What's Changed

New Contributors

@dependabot
[JS] bump: (deps): Bump the production group across 1 directory with …
ea90692 
…15 updates

Bumps the production group with 11 updates in the /js directory:

| Package | From | To |
| --- | --- | --- |
| [botbuilder](https://github.com/Microsoft/botbuilder-js) | `4.23.2` | `4.23.3` |
| [openai](https://github.com/openai/openai-node) | `4.77.4` | `4.104.0` |
| [@azure/msal-node](https://github.com/AzureAD/microsoft-authentication-library-for-js) | `2.16.2` | `2.16.3` |
| [botbuilder-dialogs](https://github.com/Microsoft/botbuilder-js) | `4.23.2` | `4.23.3` |
| [yaml](https://github.com/eemeli/yaml) | `2.7.1` | `2.8.1` |
| [dotenv](https://github.com/motdotla/dotenv) | `16.4.7` | `16.6.1` |
| [@microsoft/teams-js](https://github.com/OfficeDev/microsoft-teams-library-js/tree/HEAD/packages/teams-js) | `2.35.0` | `2.44.0` |
| [vectra](https://github.com/Stevenic/vectra) | `0.9.0` | `0.11.1` |
| [debug](https://github.com/debug-js/debug) | `4.4.0` | `4.4.1` |
| [@azure/identity](https://github.com/Azure/azure-sdk-for-js) | `4.8.0` | `4.11.1` |
| [botbuilder-azure-blobs](https://github.com/Microsoft/botbuilder-js) | `4.23.2` | `4.23.3` |



Updates `botbuilder` from 4.23.2 to 4.23.3
- [Release notes](https://github.com/Microsoft/botbuilder-js/releases)
- [Commits](microsoft/botbuilder-js@4.23.2...4.23.3)

Updates `openai` from 4.77.4 to 4.104.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/master/CHANGELOG.md)
- [Commits](openai/openai-node@v4.77.4...v4.104.0)

Updates `@azure/msal-node` from 2.16.2 to 2.16.3
- [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases)
- [Commits](https://github.com/AzureAD/microsoft-authentication-library-for-js/commits)

Updates `axios` from 1.8.4 to 1.11.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.8.4...v1.11.0)

Updates `botbuilder-dialogs` from 4.23.2 to 4.23.3
- [Release notes](https://github.com/Microsoft/botbuilder-js/releases)
- [Commits](microsoft/botbuilder-js@4.23.2...4.23.3)

Updates `botframework-connector` from 4.23.2 to 4.23.3
- [Release notes](https://github.com/Microsoft/botbuilder-js/releases)
- [Commits](microsoft/botbuilder-js@4.23.2...4.23.3)

Updates `botframework-schema` from 4.23.2 to 4.23.3
- [Release notes](https://github.com/Microsoft/botbuilder-js/releases)
- [Commits](microsoft/botbuilder-js@4.23.2...4.23.3)

Updates `botframework-streaming` from 4.23.2 to 4.23.3
- [Release notes](https://github.com/microsoft/botbuilder-js/releases)
- [Commits](microsoft/botbuilder-js@4.23.2...4.23.3)

Updates `yaml` from 2.7.1 to 2.8.1
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.7.1...v2.8.1)

Updates `dotenv` from 16.4.7 to 16.6.1
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v16.4.7...v16.6.1)

Updates `@microsoft/teams-js` from 2.35.0 to 2.44.0
- [Release notes](https://github.com/OfficeDev/microsoft-teams-library-js/releases)
- [Changelog](https://github.com/OfficeDev/microsoft-teams-library-js/blob/v2.44.0/packages/teams-js/CHANGELOG.md)
- [Commits](https://github.com/OfficeDev/microsoft-teams-library-js/commits/v2.44.0/packages/teams-js)

Updates `vectra` from 0.9.0 to 0.11.1
- [Release notes](https://github.com/Stevenic/vectra/releases)
- [Commits](https://github.com/Stevenic/vectra/commits)

Updates `debug` from 4.4.0 to 4.4.1
- [Release notes](https://github.com/debug-js/debug/releases)
- [Commits](debug-js/debug@4.4.0...4.4.1)

Updates `@azure/identity` from 4.8.0 to 4.11.1
- [Release notes](https://github.com/Azure/azure-sdk-for-js/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/documentation/Changelog-for-next-generation.md)
- [Commits](https://github.com/Azure/azure-sdk-for-js/compare/@azure/identity_4.8.0...@azure/identity_4.11.1)

Updates `botbuilder-azure-blobs` from 4.23.2 to 4.23.3
- [Release notes](https://github.com/Microsoft/botbuilder-js/releases)
- [Commits](microsoft/botbuilder-js@4.23.2...4.23.3)

---
updated-dependencies:
- dependency-name: botbuilder
  dependency-version: 4.23.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: openai
  dependency-version: 4.104.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: "@azure/msal-node"
  dependency-version: 2.16.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: axios
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: botbuilder-dialogs
  dependency-version: 4.23.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: botframework-connector
  dependency-version: 4.23.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: botframework-schema
  dependency-version: 4.23.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: botframework-streaming
  dependency-version: 4.23.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: yaml
  dependency-version: 2.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: dotenv
  dependency-version: 16.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: "@microsoft/teams-js"
  dependency-version: 2.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: vectra
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: debug
  dependency-version: 4.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: "@azure/identity"
  dependency-version: 4.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: botbuilder-azure-blobs
  dependency-version: 4.23.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 8, 2025

Labels

The following labels could not be found: JS, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 13, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Oct 13, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/js/production-be84525697 branch October 13, 2025 09:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant