build(deps): bump @azure/identity from 4.13.3 to 4.14.0 in the azure group across 1 directory by dependabot[bot] · Pull Request #12379 · microsoft/typespec

dependabot · 2026-10-23T13:42:19Z

Bumps the azure group with 1 update in the / directory: @azure/identity.

Updates @azure/identity from 4.13.3 to 4.14.0

Changelog

Sourced from @azure/identity's changelog.

4.14.0 (2026-10-14)

This release includes all changes introduced in versions 4.14.0-beta.1 through 4.14.0-beta.5.

Bugs Fixed

Fixed AzurePipelinesCredential to include only relevant details in error messages and logs when the OIDC token request fails. #39774

Fixed InteractiveBrowserCredential failing to authenticate when the user's default browser is already running and only permits a single instance. The browser is no longer launched with newInstance, which on macOS passed open --new. #39814

Fixed EnvironmentCredential and DefaultAzureCredential ignoring the AZURE_ADDITIONALLY_ALLOWED_TENANTS environment variable. If the additionallyAllowedTenants option is also set, the option takes precedence. #40221

Other Changes

Preserve caught errors as the cause when wrapping them. #39423

Updated @azure/msal-node to ^6.0.0. #39965

4.14.0-beta.5 (2026-08-12)

Other Changes

Bumped the minimum @azure/msal-node dependency to ^5.1.5 so installs no longer resolve older 5.1.x versions that pull in the vulnerable uuid@8.3.0 transitive dependency. #39425

Replaced shell-based developer credential commands with safe, structured process execution. #39279

4.13.2 (2026-08-12)

Other Changes

Bumped the minimum @azure/msal-node dependency to ^5.1.5 so installs no longer resolve older 5.1.x versions that pull in the vulnerable uuid@8.3.0 transitive dependency. #39569

Replaced shell-based developer credential commands with safe, structured process execution. #39279

Migrated platform-specific module resolution to #platform/* imports. #38309

4.14.0-beta.4 (2026-06-08)

Bugs Fixed

Fixed AzureDeveloperCliCredential to correctly parse error messages from Azure Developer CLI v1.23.7 and later, which previously caused raw JSON to surface in the credential error instead of the underlying error text. #38416

Fixed handleMsalError to preserve the original MSAL error via cause on AuthenticationRequiredError, allowing callers to access .claims on the underlying error. #38722

4.14.0-beta.3 (2026-04-08)

Other Changes

Reduced bundle size by optimizing imports from @azure/msal-node, e.g. achieving a ~61kb reduction (from 851kb to 790kb) when importing ClientCertificateCredential. #36942

Updated @azure/msal-node to ^5.1.0 and @azure/msal-browser to ^5.5.0. #37836

4.13.1 (2026-03-18)

Other Changes

Upgraded @azure/msal-node from ^3.5.0 to ^5.1.0 and @azure/msal-browser from ^4.2.0 to ^5.5.0 following the MSAL Node v5 migration guide and the MSAL Browser v5 migration guide. #37685

Removed usage of deprecated storeAuthStateInCookie option in browser cache configuration

... (truncated)

Commits

4fb292a [Identity] GA Identity Binding Feature (#40297)
a369673 [Identity] Add AKS Identity Binding Test For Weekly Pipeline (#40256)
8a46161 Upgrade dotenv to 18.0.5 (#40240)
f814748 [identity] Fix EnvironmentCredential ignoring AZURE_ADDITIONALLY_ALLOWED_TENA...
5fadd99 Add GitHubActionsCredential for GitHub Actions OIDC federation (#38581)
2b86f77 [Identity] Migrate to MSAL v6 (#39965)
See full diff in compare view

azure-pipelines · 2026-10-23T13:42:46Z

Azure Pipelines: Successfully started running 1 pipeline(s). 1 pipeline(s) were filtered out due to trigger conditions. There may be pipelines that require an authorized user to comment /azp run to run.

microsoft-github-policy-service

Approved automatically for a Dependabot update.

Copilot

🟢 Approval recommended

The dependency updates are consistent, with no identified correctness or compatibility issues; runtime validation was not performed.

No open issues 🎉

1 file not reviewed

pnpm-lock.yaml: Generated file

What changed in this PR

Updates the TypeSpec workspace’s shared @azure/identity dependency from resolved version 4.13.3 to 4.14.0, incorporating upstream authentication fixes.

Changes:

Raises the catalog requirement to ^4.14.0.
Updates lockfile resolutions and affected dependency references to 4.14.0.

File	Description
`pnpm-workspace.yaml`	Updates the shared Azure Identity version requirement.
`pnpm-lock.yaml`	Records the new version and updates dependent resolutions.

_{Review effort: Balanced}

Copilot

🟢 Approval recommended

The catalog and lockfile updates are consistent, with unchanged Node.js requirements and no identified compatibility issues.

No open issues 🎉

1 file not reviewed

pnpm-lock.yaml: Generated file

_{Review effort: Balanced}

Copilot

🟢 Approval recommended

No active review issues are reported for the shared Azure Identity dependency update.

No open issues 🎉

1 file not reviewed

pnpm-lock.yaml: Generated file

_{Review effort: Balanced}

Copilot

🟢 Approval recommended

No active review issues are reported for the shared Azure Identity dependency update to 4.14.0.

No open issues 🎉

1 file not reviewed

pnpm-lock.yaml: Generated file

_{Review effort: Balanced}

Bumps the azure group with 1 update in the / directory: [@azure/identity](https://github.com/Azure/azure-sdk-for-js/tree/HEAD/sdk/identity/identity). Updates `@azure/identity` from 4.13.3 to 4.14.0 - [Release notes](https://github.com/Azure/azure-sdk-for-js/releases) - [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/identity/identity/CHANGELOG.md) - [Commits](https://github.com/Azure/azure-sdk-for-js/commits/@azure/identity_4.14.0/sdk/identity/identity) --- updated-dependencies: - dependency-name: "@azure/identity" dependency-version: 4.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: azure ... Signed-off-by: dependabot[bot] <support@github.com>

Copilot

🟢 Approval recommended

The shared Azure Identity dependency update has no active review issues.

No open issues 🎉

1 file not reviewed

pnpm-lock.yaml: Generated file

_{Review effort: Balanced}

Copilot AI balanced review requested due to automatic review settings October 23, 2026 13:42

dependabot Bot requested a review from Mark Cowlishaw (markcowl) as a code owner October 23, 2026 13:42

dependabot Bot added the dependencies label Oct 23, 2026

dependabot Bot requested review from catalinaperalta, iscai-msft, Laurent Mazuel (lmazuel) and Timothee Guerin (timotheeguerin) as code owners October 23, 2026 13:42

dependabot Bot added the javascript label Oct 23, 2026

microsoft-github-policy-service Bot enabled auto-merge October 23, 2026 13:42

microsoft-github-policy-service Bot approved these changes Oct 23, 2026

View reviewed changes

microsoft-github-policy-service Bot added the auto-merge Automatically merge the pull request after all requirements pass label Oct 23, 2026

Copilot started reviewing October 23, 2026 13:43

View session

Copilot AI reviewed Oct 23, 2026

View reviewed changes

dependabot Bot changed the title ~~build(deps): bump @azure/identity from 4.13.3 to 4.14.0 in the azure group~~ build(deps): bump @azure/identity from 4.13.3 to 4.14.0 in the azure group across 1 directory Oct 23, 2026

Copilot AI balanced review requested due to automatic review settings October 23, 2026 18:40

dependabot Bot force-pushed the dependabot/npm_and_yarn/azure-97d4ca6c1e branch from 781f3ed to 7193e9e Compare October 23, 2026 18:40

Copilot started reviewing October 23, 2026 18:41

View session

Copilot AI reviewed Oct 23, 2026

View reviewed changes

github-actions Bot removed javascript labels Oct 24, 2026

Timothee Guerin (timotheeguerin) removed the auto-merge Automatically merge the pull request after all requirements pass label Oct 26, 2026

microsoft-github-policy-service Bot disabled auto-merge October 26, 2026 12:30

dependabot Bot force-pushed the dependabot/npm_and_yarn/azure-97d4ca6c1e branch from 7193e9e to 9727c56 Compare October 28, 2026 03:44

Copilot AI balanced review requested due to automatic review settings October 28, 2026 03:44

Copilot started reviewing October 28, 2026 03:45

View session

Copilot AI reviewed Oct 28, 2026

View reviewed changes

dependabot Bot force-pushed the dependabot/npm_and_yarn/azure-97d4ca6c1e branch from 9727c56 to dd0bca4 Compare October 28, 2026 17:28

Copilot AI balanced review requested due to automatic review settings October 28, 2026 17:28

Copilot started reviewing October 28, 2026 17:30

View session

Copilot AI reviewed Oct 28, 2026

View reviewed changes

dependabot Bot force-pushed the dependabot/npm_and_yarn/azure-97d4ca6c1e branch from dd0bca4 to 27caf18 Compare October 28, 2026 20:02

Copilot AI balanced review requested due to automatic review settings October 28, 2026 20:02

Copilot started reviewing October 28, 2026 20:03

View session

Copilot AI reviewed Oct 28, 2026

View reviewed changes

Timothee Guerin (timotheeguerin) approved these changes Oct 28, 2026

View reviewed changes

Navigation Menu

Repository navigation

build(deps): bump @azure/identity from 4.13.3 to 4.14.0 in the azure group across 1 directory - #12379

build(deps): bump @azure/identity from 4.13.3 to 4.14.0 in the azure group across 1 directory#12379
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/azure-97d4ca6c1e

dependabot Bot commented on behalf of github Oct 23, 2026 •

edited

Loading

Uh oh!

azure-pipelines Bot commented Oct 23, 2026

Uh oh!

microsoft-github-policy-service Bot left a comment

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI left a comment

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot Bot commented on behalf of github Oct 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

4.14.0 (2026-10-14)

Bugs Fixed

Other Changes

4.14.0-beta.5 (2026-08-12)

Other Changes

4.13.2 (2026-08-12)

Other Changes

4.14.0-beta.4 (2026-06-08)

Bugs Fixed

4.14.0-beta.3 (2026-04-08)

Other Changes

4.13.1 (2026-03-18)

Other Changes

Uh oh!

azure-pipelines Bot commented Oct 23, 2026

Uh oh!

microsoft-github-policy-service Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🟢 Approval recommended

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🟢 Approval recommended

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🟢 Approval recommended

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🟢 Approval recommended

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🟢 Approval recommended

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot Bot commented on behalf of github Oct 23, 2026 •

edited

Loading