Skip to content

[JS] bump: (deps): Bump the production group across 1 directory with 17 updates #60

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[JS] bump: (deps): Bump the production group across 1 directory with 17 updates #60

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 8, 2025 •
edited
Loading

Bumps the production group with 13 updates in the /js directory:

Package From To
botbuilder 4.23.2 4.23.3
openai 4.77.4 4.104.0
@azure/msal-node 2.16.2 2.16.3
botbuilder-dialogs 4.23.2 4.23.3
yaml 2.7.1 2.8.2
jsonwebtoken 9.0.2 9.0.3
dotenv 16.4.7 16.6.1
@microsoft/teams-js 2.35.0 2.47.1
vectra 0.9.0 0.11.1
@azure/search-documents 12.1.0 12.2.0
debug 4.4.0 4.4.3
@azure/identity 4.8.0 4.13.0
botbuilder-azure-blobs 4.23.2 4.23.3

Updates botbuilder from 4.23.2 to 4.23.3

Release notes

Sourced from botbuilder's releases.

Bot Framework JS SDK 4.23.3

Notable in this release

  • Added supporet for TS 5.9

    Note: In order to support new TS version, we had to drop support for TS 4.7 as it is incompatible with the new node/types version.

  • Package updates to resolve security alerts

What's Changed

Full Changelog: microsoft/botbuilder-js@4.23.2...4.23.3

Commits

Updates openai from 4.77.4 to 4.104.0

Release notes

Sourced from openai's releases.

v4.104.0

4.104.0 (2025-05-29)

Full Changelog: v4.103.0...v4.104.0

Features

  • api: Config update for pakrym-stream-param (469ad7b)

Bug Fixes

  • azure: add /images/edits to deployments endpoints (#1509) (84fc31a)
  • client: return binary content from get /containers/{container_id}/files/{file_id}/content (83129d7)

Chores

  • deprecate Assistants API (5b34fcd)
  • improve publish-npm script --latest tag logic (6207a2a)
  • internal: fix release workflows (353349d)

v4.103.0

4.103.0 (2025-05-22)

Full Changelog: v4.102.0...v4.103.0

Features

  • api: new streaming helpers for background responses (1ddd6ff)

v4.102.0

4.102.0 (2025-05-21)

Full Changelog: v4.101.0...v4.102.0

Features

  • api: add container endpoint (e973476)

v4.101.0

4.101.0 (2025-05-21)

Full Changelog: v4.100.0...v4.101.0

Features

... (truncated)

Changelog

Sourced from openai's changelog.

4.104.0 (2025-05-29)

Full Changelog: v4.103.0...v4.104.0

Features

  • api: Config update for pakrym-stream-param (469ad7b)

Bug Fixes

  • azure: add /images/edits to deployments endpoints (#1509) (84fc31a)
  • client: return binary content from get /containers/{container_id}/files/{file_id}/content (83129d7)

Chores

  • deprecate Assistants API (5b34fcd)
  • improve publish-npm script --latest tag logic (6207a2a)
  • internal: fix release workflows (353349d)

4.103.0 (2025-05-22)

Full Changelog: v4.102.0...v4.103.0

Features

  • api: new streaming helpers for background responses (1ddd6ff)

4.102.0 (2025-05-21)

Full Changelog: v4.101.0...v4.102.0

Features

  • api: add container endpoint (e973476)

4.101.0 (2025-05-21)

Full Changelog: v4.100.0...v4.101.0

Features

Chores

  • docs: grammar improvements (7761cfb)
  • internal: version bump (b40e830)

... (truncated)

Commits
  • 7704e54 release: 4.104.0
  • 8502966 fix(client): return binary content from `get /containers/{container_id}/files...
  • 71c3d31 feat(api): Config update for pakrym-stream-param
  • 0be23b9 chore: deprecate Assistants API
  • 6d3cc5c chore: improve publish-npm script --latest tag logic
  • 4b18059 fix(azure): add /images/edits to deployments endpoints (#1509)
  • 0e4b982 chore(internal): fix release workflows
  • ce9f114 codegen metadata
  • f3c6ba8 Merge pull request #1506 from openai/release-please--branches--master--change...
  • 00b63f4 release: 4.103.0
  • Additional commits viewable in compare view

Updates @azure/msal-node from 2.16.2 to 2.16.3

Commits

Updates axios from 1.8.4 to 1.13.2

Release notes

Sourced from axios's releases.

Release v1.13.2

Release notes:

Bug Fixes

  • http: fix 'socket hang up' bug for keep-alive requests when using timeouts; (#7206) (8d37233)
  • http: use default export for http2 module to support stubs; (#7196) (0588880)

Performance Improvements

Contributors to this release

Release v1.13.1

Release notes:

Bug Fixes

  • http: fixed a regression that caused the data stream to be interrupted for responses with non-OK HTTP statuses; (#7193) (bcd5581)

Contributors to this release

Release v1.13.0

Release notes:

Bug Fixes

  • fetch: prevent TypeError when config.env is undefined (#7155) (015faec)
  • resolve issue #7131 (added spacing in mergeConfig.js) (#7133) (9b9ec98)

Features

Contributors to this release

... (truncated)

Changelog

Sourced from axios's changelog.

1.13.2 (2025-11-04)

Bug Fixes

  • http: fix 'socket hang up' bug for keep-alive requests when using timeouts; (#7206) (8d37233)
  • http: use default export for http2 module to support stubs; (#7196) (0588880)

Performance Improvements

Contributors to this release

1.13.1 (2025-10-28)

Bug Fixes

  • http: fixed a regression that caused the data stream to be interrupted for responses with non-OK HTTP statuses; (#7193) (bcd5581)

Contributors to this release

1.13.0 (2025-10-27)

Bug Fixes

  • fetch: prevent TypeError when config.env is undefined (#7155) (015faec)
  • resolve issue #7131 (added spacing in mergeConfig.js) (#7133) (9b9ec98)

Features

Contributors to this release

... (truncated)

Commits
  • 08b84b5 chore(release): v1.13.2 (#7207)
  • 8d37233 fix(http): fix 'socket hang up' bug for keep-alive requests when using timeou...
  • 12c314b perf(http): fix early loop exit; (#7202)
  • f6d79e7 chore(sponsor): update sponsor block (#7203)
  • 0588880 fix(http): use default export for http2 module to support stubs; (#7196)
  • 1ef8e72 chore(release): v1.13.1 (#7194)
  • bcd5581 fix(http): fixed a regression that caused the data stream to be interrupted f...
  • c9b3371 chore: enhance styling and responsiveness in client.html (#7173)
  • 9ead04d [Release] v1.13.0 (#7189)
  • d000fbf fix(http2): fix possible race condition when handling http2 stream on almost ...
  • Additional commits viewable in compare view

Updates botbuilder-dialogs from 4.23.2 to 4.23.3

Release notes

Sourced from botbuilder-dialogs's releases.

Bot Framework JS SDK 4.23.3

Notable in this release

  • Added supporet for TS 5.9

    Note: In order to support new TS version, we had to drop support for TS 4.7 as it is incompatible with the new node/types version.

  • Package updates to resolve security alerts

What's Changed

Full Changelog: microsoft/botbuilder-js@4.23.2...4.23.3

Commits

Updates botframework-connector from 4.23.2 to 4.23.3

Release notes

Sourced from botframework-connector's releases.

Bot Framework JS SDK 4.23.3

Notable in this release

  • Added supporet for TS 5.9

    Note: In order to support new TS version, we had to drop support for TS 4.7 as it is incompatible with the new node/types version.

  • Package updates to resolve security alerts

What's Changed

Full Changelog: microsoft/botbuilder-js@4.23.2...4.23.3

Commits

Updates botframework-schema from 4.23.2 to 4.23.3

Release notes

Sourced from botframework-schema's releases.

Bot Framework JS SDK 4.23.3

Notable in this release

  • Added supporet for TS 5.9

    Note: In order to support new TS version, we had to drop support for TS 4.7 as it is incompatible with the new node/types version.

  • Package updates to resolve security alerts

What's Changed

Full Changelog: microsoft/botbuilder-js@4.23.2...4.23.3

Commits

Updates botframework-streaming from 4.23.2 to 4.23.3

Release notes

Sourced from botframework-streaming's releases.

Bot Framework JS SDK 4.23.3

Notable in this release

  • Added supporet for TS 5.9

    Note: In order to support new TS version, we had to drop support for TS 4.7 as it is incompatible with the new node/types version.

  • Package updates to resolve security alerts

What's Changed

Full Changelog: microsoft/botbuilder-js@4.23.2...4.23.3

Commits

Updates yaml from 2.7.1 to 2.8.2

Release notes

Sourced from yaml's releases.

v2.8.2

  • Serialize -0 as -0 (#638)
  • Do not double newlines for empty map values (#642)

v2.8.1

  • Preserve empty block literals (#634)

v2.8.0

  • Add node cache for faster alias resolution (#612)
  • Re-introduce compatibility with Node.js 14.6 (#614)
  • Add --merge option to CLI tool (#611)
  • Improve error for tag resolution error on null value (#616)
  • Allow empty string as plain scalar representation, for failsafe schema (#616)
  • docs: include cli example (#617)
Commits
  • 086fa6b 2.8.2
  • 95f01e9 chore: Add funding to package.json
  • 152e204 style: Apply updated Prettier rules & satisfy updated ESLint
  • 3f3378c chore: Drop unused dependency cross-env
  • f0b9af7 chore: Update to @​rollup/plugin-replace v6
  • e3cafc7 chore: Update to eslint-config-prettier v10
  • 553c1b5 chore: Refresh lockfile
  • 70a8db3 fix: Do not double newlines for empty map values (#642)
  • 92821f2 ci: Limit action permissions to minimum required
  • 95285f8 fix: Serialize -0 as -0 (fixes #638)
  • Additional commits viewable in compare view

Updates jsonwebtoken from 9.0.2 to 9.0.3

Changelog

Sourced from jsonwebtoken's changelog.

9.0.3 - 2025-12-04

  • updates jws version to 4.0.1.
Commits

Updates dotenv from 16.4.7 to 16.6.1

Changelog

Sourced from dotenv's changelog.

16.6.1 (2025-06-27)

Changed

  • Default quiet to true – hiding the runtime log message (#874)
  • NOTICE: 17.0.0 will be released with quiet defaulting to false. Use config({ quiet: true }) to suppress.
  • And check out the new dotenvx. As coding workflows evolve and agents increasingly handle secrets, encrypted .env files offer a much safer way to deploy both agents and code together with secure secrets. Simply switch require('dotenv').config() for require('@dotenvx/dotenvx').config().

16.6.0 (2025-06-26)

Added

  • Default log helpful message [dotenv@16.6.0] injecting env (1) from .env (#870)
  • Use { quiet: true } to suppress
  • Aligns dotenv more closely with dotenvx.

16.5.0 (2025-04-07)

Added

  • 🎉 Added new sponsor Graphite - the AI developer productivity platform helping teams on GitHub ship higher quality software, faster.

[!TIP] Become a sponsor

The dotenvx README is viewed thousands of times DAILY on GitHub and NPM. Sponsoring dotenv is a great way to get in front of developers and give back to the developer community at the same time.

Changed

  • Remove _log method. Use _debug #862
Commits

Updates @microsoft/teams-js from 2.35.0 to 2.47.1

Release notes

Sourced from @​microsoft/teams-js's releases.

v2.47.1

2.47.1

Wed, 03 Dec 2025 21:10:55 GMT

Patches

  • Fixed error handling in getConfigSetting teams full trust api.
  • Bump eslint-plugin-recommend-no-namespaces to v0.1.0

v2.47.0

2.47.0

Wed, 12 Nov 2025 19:23:55 GMT

Minor changes

  • Updated Copilot preCheckUserConsent function to accept an optional UserConsentRequest parameter and updated ContentRequest interface to support flexible properties via index signature. Deprecated localEndpointInfo property in favor of the index signature approach.
  • Bump eslint-plugin-recommend-no-namespaces to v0.1.0

v2.46.0

2.46.0

Wed, 01 Oct 2025 22:58:28 GMT

Minor changes

  • Added disconnectConnector to {externalAppAuthentication} capability that will disconnect the external app connector. The capability is still awaiting support in one or more host applications. To track availability of this capability across different hosts see https://aka.ms/capmatrix
  • Bump eslint-plugin-recommend-no-namespaces to v0.1.0

v2.45.0

2.45.0

Wed, 10 Sep 2025 22:10:41 GMT

Minor changes

  • Added {authenticateWithConnector} and { getUserAuthenticationStateForConnector} to externalAppAuthentication capability that will authenticate the user and get user authentication status for copilot connectors. The capability is still awaiting support in one or most host applications. To track availability of this capability across different hosts see https://aka.ms/capmatrix
  • Bump eslint-plugin-recommend-no-namespaces to v0.1.0

Patches

  • Added sidePanel to openFilePreview's ensureInitialized FrameContexts

v2.44.0

2.44.0

Wed, 27 Aug 2025 21:57:44 GMT

Minor changes

... (truncated)

Changelog

Sourced from @​microsoft/teams-js's changelog.

2.47.1

Wed, 03 Dec 2025 21:10:55 GMT

Patches

  • Fixed error handling in getConfigSetting teams full trust api.
  • Bump eslint-plugin-recommend-no-namespaces to v0.1.0

2.47.0

Wed, 12 Nov 2025 19:23:55 GMT

Minor changes

  • Updated Copilot preCheckUserConsent function to accept an optional UserConsentRequest parameter and updated ContentRequest interface to support flexible properties via index signature. Deprecated localEndpointInfo property in favor of the index signature approach.
  • Bump eslint-plugin-recommend-no-namespaces to v0.1.0

2.46.0

Wed, 01 Oct 2025 22:58:28 GMT

Minor changes

  • Added disconnectConnector to {externalAppAuthentication} capability that will disconnect the external app connector. The capability is still awaiting support in one or more host applications. To track availability of this capability across different hosts see https://aka.ms/capmatrix
  • Bump eslint-plugin-recommend-no-namespaces to v0.1.0

2.45.0

Wed, 10 Sep 2025 22:10:41 GMT

Minor changes

  • Added {authenticateWithConnector} and { getUserAuthenticationStateForConnector} to externalAppAuthentication capability that will authenticate the user and get user authentication status for copilot connectors. The capability is still awaiting support in one or most host applications. To track availability of this capability across different hosts see https://aka.ms/capmatrix
  • Bump eslint-plugin-recommend-no-namespaces to v0.1.0

Patches

  • Added sidePanel to openFilePreview's ensureInitialized FrameContexts

2.44.0

Wed, 27 Aug 2025 21:57:44 GMT

Minor changes

  • Added optional Settings field to AppEligibilityInformation interface
  • Bump eslint-plugin-recommend-no-namespaces to v0.1.0

2.43.0

... (truncated)

Commits

Updates vectra from 0.9.0 to 0.11.1

Release notes

Sourced from vectra's releases.

v0.10.0

https://www.npmjs.com/package/vectra

What's Changed

New Contributors

@dependabot
[JS] bump: (deps): Bump the production group across 1 directory with …
7baaf13 
…17 updates

Bumps the production group with 13 updates in the /js directory:

| Package | From | To |
| --- | --- | --- |
| [botbuilder](https://github.com/Microsoft/botbuilder-js) | `4.23.2` | `4.23.3` |
| [openai](https://github.com/openai/openai-node) | `4.77.4` | `4.104.0` |
| [@azure/msal-node](https://github.com/AzureAD/microsoft-authentication-library-for-js) | `2.16.2` | `2.16.3` |
| [botbuilder-dialogs](https://github.com/Microsoft/botbuilder-js) | `4.23.2` | `4.23.3` |
| [yaml](https://github.com/eemeli/yaml) | `2.7.1` | `2.8.2` |
| [jsonwebtoken](https://github.com/auth0/node-jsonwebtoken) | `9.0.2` | `9.0.3` |
| [dotenv](https://github.com/motdotla/dotenv) | `16.4.7` | `16.6.1` |
| [@microsoft/teams-js](https://github.com/OfficeDev/microsoft-teams-library-js/tree/HEAD/packages/teams-js) | `2.35.0` | `2.47.1` |
| [vectra](https://github.com/Stevenic/vectra) | `0.9.0` | `0.11.1` |
| [@azure/search-documents](https://github.com/Azure/azure-sdk-for-js) | `12.1.0` | `12.2.0` |
| [debug](https://github.com/debug-js/debug) | `4.4.0` | `4.4.3` |
| [@azure/identity](https://github.com/Azure/azure-sdk-for-js) | `4.8.0` | `4.13.0` |
| [botbuilder-azure-blobs](https://github.com/Microsoft/botbuilder-js) | `4.23.2` | `4.23.3` |



Updates `botbuilder` from 4.23.2 to 4.23.3
- [Release notes](https://github.com/Microsoft/botbuilder-js/releases)
- [Commits](microsoft/botbuilder-js@4.23.2...4.23.3)

Updates `openai` from 4.77.4 to 4.104.0
- [Release notes](https://github.com/openai/openai-node/releases)
- [Changelog](https://github.com/openai/openai-node/blob/master/CHANGELOG.md)
- [Commits](openai/openai-node@v4.77.4...v4.104.0)

Updates `@azure/msal-node` from 2.16.2 to 2.16.3
- [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases)
- [Commits](https://github.com/AzureAD/microsoft-authentication-library-for-js/commits)

Updates `axios` from 1.8.4 to 1.13.2
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.8.4...v1.13.2)

Updates `botbuilder-dialogs` from 4.23.2 to 4.23.3
- [Release notes](https://github.com/Microsoft/botbuilder-js/releases)
- [Commits](microsoft/botbuilder-js@4.23.2...4.23.3)

Updates `botframework-connector` from 4.23.2 to 4.23.3
- [Release notes](https://github.com/Microsoft/botbuilder-js/releases)
- [Commits](microsoft/botbuilder-js@4.23.2...4.23.3)

Updates `botframework-schema` from 4.23.2 to 4.23.3
- [Release notes](https://github.com/Microsoft/botbuilder-js/releases)
- [Commits](microsoft/botbuilder-js@4.23.2...4.23.3)

Updates `botframework-streaming` from 4.23.2 to 4.23.3
- [Release notes](https://github.com/microsoft/botbuilder-js/releases)
- [Commits](microsoft/botbuilder-js@4.23.2...4.23.3)

Updates `yaml` from 2.7.1 to 2.8.2
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.7.1...v2.8.2)

Updates `jsonwebtoken` from 9.0.2 to 9.0.3
- [Changelog](https://github.com/auth0/node-jsonwebtoken/blob/master/CHANGELOG.md)
- [Commits](auth0/node-jsonwebtoken@v9.0.2...v9.0.3)

Updates `dotenv` from 16.4.7 to 16.6.1
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v16.4.7...v16.6.1)

Updates `@microsoft/teams-js` from 2.35.0 to 2.47.1
- [Release notes](https://github.com/OfficeDev/microsoft-teams-library-js/releases)
- [Changelog](https://github.com/OfficeDev/microsoft-teams-library-js/blob/v2.47.1/packages/teams-js/CHANGELOG.md)
- [Commits](https://github.com/OfficeDev/microsoft-teams-library-js/commits/v2.47.1/packages/teams-js)

Updates `vectra` from 0.9.0 to 0.11.1
- [Release notes](https://github.com/Stevenic/vectra/releases)
- [Commits](https://github.com/Stevenic/vectra/commits)

Updates `@azure/search-documents` from 12.1.0 to 12.2.0
- [Release notes](https://github.com/Azure/azure-sdk-for-js/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/documentation/Changelog-for-next-generation.md)
- [Commits](https://github.com/Azure/azure-sdk-for-js/compare/@azure/search-documents_12.1.0...@azure/search-documents_12.2.0)

Updates `debug` from 4.4.0 to 4.4.3
- [Release notes](https://github.com/debug-js/debug/releases)
- [Commits](debug-js/debug@4.4.0...4.4.3)

Updates `@azure/identity` from 4.8.0 to 4.13.0
- [Release notes](https://github.com/Azure/azure-sdk-for-js/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/documentation/Changelog-for-next-generation.md)
- [Commits](https://github.com/Azure/azure-sdk-for-js/compare/@azure/identity_4.8.0...@azure/identity_4.13.0)

Updates `botbuilder-azure-blobs` from 4.23.2 to 4.23.3
- [Release notes](https://github.com/Microsoft/botbuilder-js/releases)
- [Commits](microsoft/botbuilder-js@4.23.2...4.23.3)

---
updated-dependencies:
- dependency-name: botbuilder
  dependency-version: 4.23.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: openai
  dependency-version: 4.104.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: "@azure/msal-node"
  dependency-version: 2.16.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: axios
  dependency-version: 1.13.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: botbuilder-dialogs
  dependency-version: 4.23.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: botframework-connector
  dependency-version: 4.23.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: botframework-schema
  dependency-version: 4.23.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: botframework-streaming
  dependency-version: 4.23.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: yaml
  dependency-version: 2.8.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: jsonwebtoken
  dependency-version: 9.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: dotenv
  dependency-version: 16.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: "@microsoft/teams-js"
  dependency-version: 2.47.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: vectra
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: "@azure/search-documents"
  dependency-version: 12.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: debug
  dependency-version: 4.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: "@azure/identity"
  dependency-version: 4.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: botbuilder-azure-blobs
  dependency-version: 4.23.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 8, 2025

Labels

The following labels could not be found: JS, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant