Skip to content

build(deps): bump @azure/identity and mssql in /03-Azure/01-02 Data/03-Talk_to_your_data/labautomation/src - #451

Merged
Marco Weber (qxsch) merged 1 commit into
mainfrom
dependabot/npm_and_yarn/03-Azure/01-02-Data/03-Talk_to_your_data/labautomation/src/multi-bb78e85d43
Aug 27, 2026
Merged

Marco Weber (qxsch) merged 1 commit into
mainfrom
dependabot/npm_and_yarn/03-Azure/01-02-Data/03-Talk_to_your_data/labautomation/src/multi-bb78e85d43

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 27, 2026

Copy link
Copy Markdown
Contributor

Bumps @azure/identity to 4.13.2 and updates ancestor dependency mssql. These dependencies need to be updated together.

Updates @azure/identity from 3.4.2 to 4.13.2

Changelog

Sourced from @​azure/identity's changelog.

4.13.2 (2026-08-12)

Other Changes

  • Bumped the minimum @azure/msal-node dependency to ^5.1.5 so installs no longer resolve older 5.1.x versions that pull in the vulnerable uuid@8.3.0 transitive dependency. #39569
  • Replaced shell-based developer credential commands with safe, structured process execution. #39279
  • Migrated platform-specific module resolution to #platform/* imports. #38309

4.13.1 (2026-03-18)

Other Changes

  • Upgraded @azure/msal-node from ^3.5.0 to ^5.1.0 and @azure/msal-browser from ^4.2.0 to ^5.5.0 following the MSAL Node v5 migration guide and the MSAL Browser v5 migration guide. #37685
    • Removed usage of deprecated storeAuthStateInCookie option in browser cache configuration
    • Replaced deprecated createPublicClientApplication() with createStandardPublicClientApplication()
    • Updated handleRedirectPromise to use options object instead of string parameter
    • Replaced deprecated tokenQueryParameters with extraQueryParameters in MSAL node flows

4.13.0 (2025-10-07)

Features Added

  • When AZURE_TOKEN_CREDENTIALS is set to only ManagedIdentityCredential, DefaultAzureCredential does not issue a probe request and performs retries with exponential backoff. #36047

Bugs Fixed

  • Fixed an issue where ManagedIdentityCredential will make an additional probe request in the getToken call. #36047

4.12.0 (2025-09-09)

Features Added

  • Added a new requiredEnvVars option to DefaultAzureCredential that can accept a single environment variable or an array of environment variables. All specified variables must be set (and non-empty) before credential instantiation. If any variable is missing or empty, an error is thrown listing all missing variables. #35832
  • Introduced a new DefaultAzureCredentialEnvVars union type that represents the environment variables supported in DefaultAzureCredential. This type is used to specify the required environment variable(s) in the option bag for DefaultAzureCredential via requiredEnvVars. #35832

Bugs Fixed

  • Fixed an issue where AzureDeveloperCliCredential would time out during token requests when azd prompts for user interaction. This issue commonly occurred in environments where the AZD_DEBUG environment variable was set, causing the Azure Developer CLI to display additional prompts that interfered with automated token acquisition. #35637
  • Fixed an issue where VisualStudioCodeCredential will show interactive authentication when the plugin is set but the broker is not available. #35837

Other Changes

  • AzureCliCredential, AzurePowerShellCredential, and AzureDeveloperCliCredential now raise CredentialUnavailableError when claims are provided to getToken, as these credentials do not support claims challenges. The error message includes instructions for handling claims authentication scenarios. #35493 & #35855

4.11.1 (2025-08-05)

Bugs Fixed

  • Fixed an issue in which AzurePowerShellCredential command is not parsed correctly. #35469

... (truncated)

Commits
  • ffeacaf Migrate @​azure/identity from polyfillSuffix to #platform/* imports
  • 3ec2003 [core] Add safe child process execution
  • 1f7253a Update package.json
  • 4b6cf67 Update test expectation
  • 14350c8 Format packages
  • 4fd7288 Update all missing configuration files
  • 8490453 [Identity] Bump @​azure/msal-node to ^5.1.5 to drop vulnerable uuid transitive...
  • d96ae18 Identity GA 4.13.1
  • a46a830 [ESLint] Restore no-unassigned-vars recommended rule to error (#39460)
  • 5316d04 [core] Add safe child process execution (#39279)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for @​azure/identity since your current version.


Updates mssql from 10.0.4 to 12.7.0

Release notes

Sourced from mssql's releases.

v12.7.0

12.7.0 (2026-07-02)

Features

v12.6.0

12.6.0 (2026-06-23)

Features

  • test msnodesqlv8 against v2-v5 across supported Node versions (9ed51d2)

v12.5.5

12.5.5 (2026-05-29)

Bug Fixes

  • prevent TypeError in batch with output parameters when sql errors (0db36a4), closes #1863

v12.5.4

12.5.4 (2026-05-15)

Bug Fixes

  • preserve originalError on EABORT TransactionError (b9e9826), closes #1716

v12.5.3

12.5.3 (2026-05-14)

Bug Fixes

  • parse boolean connection string options correctly (46db5bc), closes #1860

v12.5.2

12.5.2 (2026-05-05)

Bug Fixes

  • prevent TypeError in PreparedStatement.execute() when streaming without callback (7934ff1), closes #1848

v12.5.1

12.5.1 (2026-05-04)

Bug Fixes

  • pass dataLength to getMssqlType in valueCorrection (d8026d3), closes #1853

v12.5.0

... (truncated)

Changelog

Sourced from mssql's changelog.

Changelog

The changelog is not currently maintained. Please see the releases for change details.

Unreleased

[fix] BigInt type in nodemsqlv8 now treated as strings in parity with the tedious driver (#1387)

v11.0.1 (2024-07-03)

[fix] handle bigint types separately to int to avoid TypeError with BigInt param (#1677)

v11.0.0 (2024-06-19)

[removed] Removed NodeJS 16 support (#1667) [feat] support use of native bigint from tedious (#1664)

Commits
  • c6d1e24 Merge pull request #1877 from dhensby/feat/tedious-20
  • 735c3c8 feat: add support for tedious 20 and remove TVP schema workaround
  • 2e1a528 Merge pull request #1876 from tediousjs/dependabot/github_actions/actions/che...
  • a995170 chore(deps): bump actions/checkout from 6 to 7
  • ab570b4 Merge pull request #1874 from tediousjs/dependabot/npm_and_yarn/tarn-3.1.0
  • ed7c3f8 chore(deps): bump tarn from 3.0.2 to 3.1.0
  • 04e1d91 Merge pull request #1871 from tediousjs/dependabot/npm_and_yarn/js-yaml-4.2.0
  • dd425b3 chore(deps-dev): bump js-yaml from 4.1.1 to 4.2.0
  • 6021cd7 Merge pull request #1869 from tediousjs/dependabot/npm_and_yarn/multi-79a8a94197
  • 40e5bf0 chore(deps): bump tar and npm
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for mssql since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [@azure/identity](https://github.com/Azure/azure-sdk-for-js/tree/HEAD/sdk/identity/identity) to 4.13.2 and updates ancestor dependency [mssql](https://github.com/tediousjs/node-mssql). These dependencies need to be updated together.


Updates `@azure/identity` from 3.4.2 to 4.13.2
- [Release notes](https://github.com/Azure/azure-sdk-for-js/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/@azure/identity_4.13.2/sdk/identity/identity/CHANGELOG.md)
- [Commits](https://github.com/Azure/azure-sdk-for-js/commits/@azure/identity_4.13.2/sdk/identity/identity)

Updates `mssql` from 10.0.4 to 12.7.0
- [Release notes](https://github.com/tediousjs/node-mssql/releases)
- [Changelog](https://github.com/tediousjs/node-mssql/blob/master/CHANGELOG.txt)
- [Commits](tediousjs/node-mssql@v10.0.4...v12.7.0)

---
updated-dependencies:
- dependency-name: "@azure/identity"
  dependency-version: 4.13.2
  dependency-type: indirect
- dependency-name: mssql
  dependency-version: 12.7.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 27, 2026
@qxsch
Marco Weber (qxsch) merged commit c97cc73 into main Aug 27, 2026
3 checks passed
@qxsch
Marco Weber (qxsch) deleted the dependabot/npm_and_yarn/03-Azure/01-02-Data/03-Talk_to_your_data/labautomation/src/multi-bb78e85d43 branch August 27, 2026 15:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant