Skip to content

auto dependabot: bump @azure/identity from 4.13.1 to 4.14.0 - #1072

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/azure/identity-4.14.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/azure/identity-4.14.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 22, 2026 •

Copy link
Copy Markdown
Contributor

Bumps @azure/identity from 4.13.1 to 4.14.0.

Changelog

Sourced from @​azure/identity's changelog.

4.14.0 (2026-10-14)

This release includes all changes introduced in versions 4.14.0-beta.1 through 4.14.0-beta.5.

Bugs Fixed

  • Fixed AzurePipelinesCredential to include only relevant details in error messages and logs when the OIDC token request fails. #39774
  • Fixed InteractiveBrowserCredential failing to authenticate when the user's default browser is already running and only permits a single instance. The browser is no longer launched with newInstance, which on macOS passed open --new. #39814
  • Fixed EnvironmentCredential and DefaultAzureCredential ignoring the AZURE_ADDITIONALLY_ALLOWED_TENANTS environment variable. If the additionallyAllowedTenants option is also set, the option takes precedence. #40221

Other Changes

  • Preserve caught errors as the cause when wrapping them. #39423
  • Updated @azure/msal-node to ^6.0.0. #39965

4.13.3 (2026-09-10)

Features Added

  • Bumped the minimum @azure/msal-node dependency to ^6.0.0 to provide Azure Arc user-assigned managed identity support. #39927

Bugs Fixed

  • Fixed AzurePipelinesCredential to include only relevant details in error messages and logs when the OIDC token request fails. #39774
  • Fixed InteractiveBrowserCredential failing to authenticate when the user's default browser is already running and only permits a single instance. The browser is no longer launched with newInstance, which on macOS passed open --new. #39814
  • Fixed an issue where DefaultAzureCredential does not pass constructor options to ManagedIdentityCredential when selected through AZURE_TOKEN_CREDENTIALS. #39927

Other Changes

  • Preserve caught errors as the cause when wrapping them. #39423

4.14.0-beta.5 (2026-08-12)

Other Changes

  • Bumped the minimum @azure/msal-node dependency to ^5.1.5 so installs no longer resolve older 5.1.x versions that pull in the vulnerable uuid@8.3.0 transitive dependency. #39425
  • Replaced shell-based developer credential commands with safe, structured process execution. #39279

4.13.2 (2026-08-12)

Other Changes

  • Bumped the minimum @azure/msal-node dependency to ^5.1.5 so installs no longer resolve older 5.1.x versions that pull in the vulnerable uuid@8.3.0 transitive dependency. #39569
  • Replaced shell-based developer credential commands with safe, structured process execution. #39279
  • Migrated platform-specific module resolution to #platform/* imports. #38309

4.14.0-beta.4 (2026-06-08)

Bugs Fixed

... (truncated)

Commits
  • 4fb292a [Identity] GA Identity Binding Feature (#40297)
  • a369673 [Identity] Add AKS Identity Binding Test For Weekly Pipeline (#40256)
  • 8a46161 Upgrade dotenv to 18.0.5 (#40240)
  • f814748 [identity] Fix EnvironmentCredential ignoring AZURE_ADDITIONALLY_ALLOWED_TENA...
  • 5fadd99 Add GitHubActionsCredential for GitHub Actions OIDC federation (#38581)
  • 2b86f77 [Identity] Migrate to MSAL v6 (#39965)
  • fcb12a4 [identity] Don't force a new browser instance when opening the auth page (#39...
  • 96a244f [ESLint] Restore no-useless-assignment recommended rule to error (#39784)
  • 2e6883d [Identity] Unify changelog (#39816)
  • ae994a8 [identity] Response format Azure Pipelines Credential (#39774)
  • Additional commits viewable in compare view

@dependabot
dependabot Bot requested a review from a team as a code owner October 22, 2026 11:53
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 22, 2026
@dependabot
dependabot Bot deployed to build_test October 22, 2026 11:53 Active
@dependabot
dependabot Bot deployed to build_test October 22, 2026 11:53 Active
@github-actions
github-actions Bot enabled auto-merge October 22, 2026 11:53
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/azure/identity-4.14.0 branch from 5c0d7fa to bdc70bb Compare October 22, 2026 22:09
@dependabot
dependabot Bot deployed to build_test October 22, 2026 22:10 Active
@dependabot
dependabot Bot deployed to build_test October 22, 2026 22:10 Active
Bumps [@azure/identity](https://github.com/Azure/azure-sdk-for-js/tree/HEAD/sdk/identity/identity) from 4.13.1 to 4.14.0.
- [Release notes](https://github.com/Azure/azure-sdk-for-js/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/identity/identity/CHANGELOG.md)
- [Commits](https://github.com/Azure/azure-sdk-for-js/commits/@azure/identity_4.14.0/sdk/identity/identity)

---
updated-dependencies:
- dependency-name: "@azure/identity"
  dependency-version: 4.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/azure/identity-4.14.0 branch from bdc70bb to 8b6c592 Compare October 29, 2026 21:36
@dependabot
dependabot Bot deployed to build_test October 29, 2026 21:36 Active
@dependabot
dependabot Bot deployed to build_test October 29, 2026 21:36 Active
@dependabot
dependabot Bot deployed to build_test October 29, 2026 21:36 Active

This branch was successfully deployed

1 active deployment
build_test — 8b6c5925 Deployed Oct 29, 2026 by dependabot[bot] via build (24.x) #2088
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants