Skip to content

Bump MSAL Node to v5#603

Open
heyitsaamir wants to merge 1 commit into
mainfrom
bump-msal-node-5
Open

Bump MSAL Node to v5#603
heyitsaamir wants to merge 1 commit into
mainfrom
bump-msal-node-5

Conversation

@heyitsaamir
Copy link
Copy Markdown
Collaborator

Summary

  • Bumps @azure/msal-node in @microsoft/teams.apps to v5.2.2.
  • Updates the token manager test mock for MSAL's fromNativeBroker -> fromPlatformBroker rename.

Why

  • Gets our direct MSAL dependency onto the current v5 line and removes the direct vulnerable uuid dependency path from @microsoft/teams.apps.

Interesting bits

  • I left BotBuilder alone, so npm audit still reports the existing BotBuilder/Restify transitive stuff. No spicy force-downgrades today.

Testing

  • npx turbo build --filter=@microsoft/teams.apps
  • npx turbo test --filter=@microsoft/teams.apps
  • npx npm@11.12.1 audit still reports remaining BotBuilder/Restify transitive advisories

Copilot AI review requested due to automatic review settings May 30, 2026 00:46
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Bumps @azure/msal-node from v3 to v5.2.2 in @microsoft/teams.apps to drop the vulnerable transitive uuid dependency, and updates the token-manager test mock to match MSAL v5's fromNativeBrokerfromPlatformBroker rename.

Changes:

  • Upgrade @azure/msal-node dependency to ^5.2.2 in packages/apps/package.json.
  • Update test mock field name fromNativeBrokerfromPlatformBroker in token-manager.spec.ts.
  • Refresh package-lock.json to reflect new MSAL v5 / msal-common 16 versions.

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated no comments.

File Description
packages/apps/package.json Bumps @azure/msal-node to ^5.2.2.
packages/apps/src/token-manager.spec.ts Renames mocked field to fromPlatformBroker for MSAL v5 compatibility.
package-lock.json Lockfile updated to MSAL v5.2.2 / msal-common 16.6.2; removes nested uuid dep.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants