Merge to release by Rick-Kirkham · Pull Request #82 · OfficeDev/Excel-Custom-Functions-Shared-JS

Rick-Kirkham · 2026-06-23T22:16:35Z

Change Description:

Getting backlog of changes into release

Do these changes impact any npm scripts commands (in package.json)? (e.g., running 'npm run start')
no
Do these changes impact VS Code debugging options (launch.json)?
no.
Do these changes impact template output? (e.g., add/remove file, update file location, update file contents)
yes
Do these changes impact documentation? (e.g., a tutorial on https://docs.microsoft.com/en-us/office/dev/add-ins/overview/office-add-ins)
yes

If you answered yes to any of these please do the following:
> Include 'Rick-Kirkham' in the review
> Make sure the README file is correct

Validation/testing performed:

N/A

Bumps [tar-fs](https://github.com/mafintosh/tar-fs) from 2.1.2 to 2.1.3. - [Commits](https://github.com/mafintosh/tar-fs/commits) --- updated-dependencies: - dependency-name: tar-fs dependency-version: 2.1.3 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server) from 5.1.0 to 5.2.1. - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v5.1.0...v5.2.1) --- updated-dependencies: - dependency-name: webpack-dev-server dependency-version: 5.2.1 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [on-headers](https://github.com/jshttp/on-headers) and [compression](https://github.com/expressjs/compression). These dependencies needed to be updated together. Updates `on-headers` from 1.0.2 to 1.1.0 - [Release notes](https://github.com/jshttp/on-headers/releases) - [Changelog](https://github.com/jshttp/on-headers/blob/master/HISTORY.md) - [Commits](jshttp/on-headers@v1.0.2...v1.1.0) Updates `compression` from 1.8.0 to 1.8.1 - [Release notes](https://github.com/expressjs/compression/releases) - [Changelog](https://github.com/expressjs/compression/blob/master/HISTORY.md) - [Commits](expressjs/compression@1.8.0...v1.8.1) --- updated-dependencies: - dependency-name: on-headers dependency-version: 1.1.0 dependency-type: indirect - dependency-name: compression dependency-version: 1.8.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Co-authored-by: github-actions <github-actions@github.com>

Update pipeline, node version, and scripts

Bumps [glob](https://github.com/isaacs/node-glob) from 10.4.5 to 10.5.0. - [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md) - [Commits](isaacs/node-glob@v10.4.5...v10.5.0) --- updated-dependencies: - dependency-name: glob dependency-version: 10.5.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.0 to 4.1.1. - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.1.0...4.1.1) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [express](https://github.com/expressjs/express) from 4.21.2 to 4.22.0. - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.22.0/History.md) - [Commits](expressjs/express@4.21.2...4.22.0) --- updated-dependencies: - dependency-name: express dependency-version: 4.22.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [node-forge](https://github.com/digitalbazaar/forge) from 1.3.1 to 1.3.2. - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](digitalbazaar/forge@v1.3.1...v1.3.2) --- updated-dependencies: - dependency-name: node-forge dependency-version: 1.3.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…rge-1.3.2 Bump node-forge from 1.3.1 to 1.3.2

Bumps [jws](https://github.com/brianloveswords/node-jws) from 3.2.2 to 3.2.3. - [Release notes](https://github.com/brianloveswords/node-jws/releases) - [Changelog](https://github.com/auth0/node-jws/blob/master/CHANGELOG.md) - [Commits](auth0/node-jws@v3.2.2...v3.2.3) --- updated-dependencies: - dependency-name: jws dependency-version: 3.2.3 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.2 to 7.5.6. - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v7.5.2...v7.5.6) --- updated-dependencies: - dependency-name: tar dependency-version: 7.5.6 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.17.23) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.17.23 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bump tar from 7.5.2 to 7.5.6

Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.6 to 7.5.7. - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v7.5.6...v7.5.7) --- updated-dependencies: - dependency-name: tar dependency-version: 7.5.7 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bump tar from 7.5.6 to 7.5.7

Bumps [webpack](https://github.com/webpack/webpack) from 5.98.0 to 5.105.0. - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.98.0...v5.105.0) --- updated-dependencies: - dependency-name: webpack dependency-version: 5.105.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

…-4.1.1 Bump js-yaml from 4.1.0 to 4.1.1

Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.3.2 to 5.3.6. - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v5.3.2...v5.3.6) --- updated-dependencies: - dependency-name: fast-xml-parser dependency-version: 5.3.6 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

….5.0 Bump glob from 10.4.5 to 10.5.0

…l-parser-5.3.6 Bump fast-xml-parser from 5.3.2 to 5.3.6

…-4.22.0 Bump express from 4.21.2 to 4.22.0

Bump jws from 3.2.2 to 3.2.3

…4.17.23 Bump lodash from 4.17.21 to 4.17.23

…-5.105.0 Bump webpack from 5.98.0 to 5.105.0

Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.7 to 7.5.9. - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v7.5.7...v7.5.9) --- updated-dependencies: - dependency-name: tar dependency-version: 7.5.9 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bump tar from 7.5.7 to 7.5.9

Automatically run npm audit fix

Bumps [ip-address](https://github.com/beaugunderson/ip-address) and [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit). These dependencies needed to be updated together. Updates `ip-address` from 10.1.0 to 10.2.0 - [Commits](https://github.com/beaugunderson/ip-address/commits) Updates `express-rate-limit` from 8.4.1 to 8.5.1 - [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases) - [Commits](express-rate-limit/express-rate-limit@v8.4.1...v8.5.1) --- updated-dependencies: - dependency-name: ip-address dependency-version: 10.2.0 dependency-type: indirect - dependency-name: express-rate-limit dependency-version: 8.5.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [fast-xml-builder](https://github.com/NaturalIntelligence/fast-xml-builder) from 1.1.5 to 1.2.0. - [Changelog](https://github.com/NaturalIntelligence/fast-xml-builder/blob/main/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-builder@v1.1.5...v1.2.0) --- updated-dependencies: - dependency-name: fast-xml-builder dependency-version: 1.2.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…l-builder-1.2.0 Bump fast-xml-builder from 1.1.5 to 1.2.0

Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.0.6 to 3.1.2. - [Release notes](https://github.com/fastify/fast-uri/releases) - [Commits](fastify/fast-uri@v3.0.6...v3.1.2) --- updated-dependencies: - dependency-name: fast-uri dependency-version: 3.1.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [hono](https://github.com/honojs/hono) from 4.12.16 to 4.12.18. - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.12.16...v4.12.18) --- updated-dependencies: - dependency-name: hono dependency-version: 4.12.18 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…i-3.1.2 Bump fast-uri from 3.0.6 to 3.1.2

…12.18 Bump hono from 4.12.16 to 4.12.18

Bumps [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs) from 7.25.9 to 7.29.4. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.4/packages/babel-plugin-transform-modules-systemjs) --- updated-dependencies: - dependency-name: "@babel/plugin-transform-modules-systemjs" dependency-version: 7.29.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…lugin-transform-modules-systemjs-7.29.4 Bump @babel/plugin-transform-modules-systemjs from 7.25.9 to 7.29.4

Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server) from 5.2.1 to 5.2.4. - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v5.2.1...v5.2.4) --- updated-dependencies: - dependency-name: webpack-dev-server dependency-version: 5.2.4 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…bdfbe8666 Bump ip-address and express-rate-limit

Bumps [axios](https://github.com/axios/axios) from 1.15.2 to 1.16.1. - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.15.2...v1.16.1) --- updated-dependencies: - dependency-name: axios dependency-version: 1.16.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [hono](https://github.com/honojs/hono) from 4.12.18 to 4.12.23. - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.12.18...v4.12.23) --- updated-dependencies: - dependency-name: hono dependency-version: 4.12.23 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Automatically run npm audit fix

…12.23 Bump hono from 4.12.18 to 4.12.23

Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.8.2 to 1.8.4. - [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md) - [Commits](ljharb/shell-quote@v1.8.2...v1.8.4) --- updated-dependencies: - dependency-name: shell-quote dependency-version: 1.8.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [launch-editor](https://github.com/vitejs/launch-editor) from 2.10.0 to 2.14.1. - [Commits](vitejs/launch-editor@v2.10.0...v2.14.1) --- updated-dependencies: - dependency-name: launch-editor dependency-version: 2.14.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [hono](https://github.com/honojs/hono) from 4.12.23 to 4.12.26. - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.12.23...v4.12.26) --- updated-dependencies: - dependency-name: hono dependency-version: 4.12.26 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.1 to 4.2.0. - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/commits) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 4.2.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server) from 5.2.4 to 5.2.5. - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v5.2.4...v5.2.5) --- updated-dependencies: - dependency-name: webpack-dev-server dependency-version: 5.2.5 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

…12.26 Bump hono from 4.12.23 to 4.12.26

Automatically run npm audit fix

…-dev-server-5.2.5 Bump webpack-dev-server from 5.2.4 to 5.2.5

…-4.2.0 Bump js-yaml from 4.1.1 to 4.2.0

dependabot Bot and others added 30 commits July 24, 2025 10:27

Add workflow to autorun npm audit fix (#24)

24dc694

Automatically run npm audit fix (#25)

0a1ba2d

Co-authored-by: github-actions <github-actions@github.com>

Update pipeline, node version, and scripts

f1c8dfc

Merge pull request #31 from OfficeDev/update-pipeline-node-scripts

d717e56

Update pipeline, node version, and scripts

Merge pull request #32 from OfficeDev/dependabot/npm_and_yarn/node-fo…

b332adf

…rge-1.3.2 Bump node-forge from 1.3.1 to 1.3.2

Add ability to manually run npm-audit-fix workflow (#35)

5181611

Merge pull request #37 from OfficeDev/dependabot/npm_and_yarn/tar-7.5.6

c4ce03f

Bump tar from 7.5.2 to 7.5.6

Merge pull request #39 from OfficeDev/dependabot/npm_and_yarn/tar-7.5.7

e6f8d6b

Bump tar from 7.5.6 to 7.5.7

Merge pull request #29 from OfficeDev/dependabot/npm_and_yarn/js-yaml…

47ede31

…-4.1.1 Bump js-yaml from 4.1.0 to 4.1.1

Merge pull request #30 from OfficeDev/dependabot/npm_and_yarn/glob-10…

d5857ce

….5.0 Bump glob from 10.4.5 to 10.5.0

Merge pull request #42 from OfficeDev/dependabot/npm_and_yarn/fast-xm…

f62bbf1

…l-parser-5.3.6 Bump fast-xml-parser from 5.3.2 to 5.3.6

Merge pull request #33 from OfficeDev/dependabot/npm_and_yarn/express…

e42cfd3

…-4.22.0 Bump express from 4.21.2 to 4.22.0

Merge pull request #34 from OfficeDev/dependabot/npm_and_yarn/jws-3.2.3

7015cfd

Bump jws from 3.2.2 to 3.2.3

Merge pull request #38 from OfficeDev/dependabot/npm_and_yarn/lodash-…

b2594d9

…4.17.23 Bump lodash from 4.17.21 to 4.17.23

Merge pull request #41 from OfficeDev/dependabot/npm_and_yarn/webpack…

4050d3f

…-5.105.0 Bump webpack from 5.98.0 to 5.105.0

Merge pull request #43 from OfficeDev/dependabot/npm_and_yarn/tar-7.5.9

d10ff86

Bump tar from 7.5.7 to 7.5.9

Rick-Kirkham and others added 27 commits May 4, 2026 10:42

Merge pull request #64 from OfficeDev/autorun-npm-audit-fix

35a31b3

Automatically run npm audit fix

Merge pull request #66 from OfficeDev/dependabot/npm_and_yarn/fast-xm…

a246bb6

…l-builder-1.2.0 Bump fast-xml-builder from 1.1.5 to 1.2.0

Merge pull request #67 from OfficeDev/dependabot/npm_and_yarn/fast-ur…

8ce5fc7

…i-3.1.2 Bump fast-uri from 3.0.6 to 3.1.2

Merge pull request #68 from OfficeDev/dependabot/npm_and_yarn/hono-4.…

50653ae

…12.18 Bump hono from 4.12.16 to 4.12.18

Merge pull request #69 from OfficeDev/dependabot/npm_and_yarn/babel/p…

4d4570a

…lugin-transform-modules-systemjs-7.29.4 Bump @babel/plugin-transform-modules-systemjs from 7.25.9 to 7.29.4

Merge pull request #65 from OfficeDev/dependabot/npm_and_yarn/multi-7…

252f791

…bdfbe8666 Bump ip-address and express-rate-limit

Automatically run npm audit fix

e4a701a

Merge pull request #72 from OfficeDev/autorun-npm-audit-fix

8329da7

Automatically run npm audit fix

Merge pull request #73 from OfficeDev/dependabot/npm_and_yarn/hono-4.…

9ca2bd2

…12.23 Bump hono from 4.12.18 to 4.12.23

Automatically run npm audit fix

4bcda57

Merge pull request #76 from OfficeDev/dependabot/npm_and_yarn/hono-4.…

563a65d

…12.26 Bump hono from 4.12.23 to 4.12.26

Merge pull request #81 from OfficeDev/autorun-npm-audit-fix

6db9e0b

Automatically run npm audit fix

Merge pull request #80 from OfficeDev/dependabot/npm_and_yarn/webpack…

1104b38

…-dev-server-5.2.5 Bump webpack-dev-server from 5.2.4 to 5.2.5

Merge pull request #77 from OfficeDev/dependabot/npm_and_yarn/js-yaml…

2650223

…-4.2.0 Bump js-yaml from 4.1.1 to 4.2.0

Rick-Kirkham requested a review from a team as a code owner June 23, 2026 22:16

millerds approved these changes Jun 24, 2026

View reviewed changes

Rick-Kirkham merged commit 0bd3e19 into release Jun 24, 2026
5 of 7 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Merge to release#82

Merge to release#82
Rick-Kirkham merged 89 commits into
releasefrom
main

Rick-Kirkham commented Jun 23, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Uh oh!

Conversation

Rick-Kirkham commented Jun 23, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants