MAINT: Bump the minor-and-patch group in /frontend with 10 updates by dependabot[bot] · Pull Request #2134 · microsoft/PyRIT

dependabot · 2026-07-08T12:46:29Z

Bumps the minor-and-patch group in /frontend with 10 updates:

Package	From	To
@azure/msal-browser	`5.15.0`	`5.16.0`
@azure/msal-react	`5.5.0`	`5.5.1`
@fluentui/react-components	`9.74.2`	`9.74.3`
@fluentui/react-icons	`2.0.330`	`2.0.331`
react-router-dom	`7.18.0`	`7.18.1`
@types/node	`26.0.0`	`26.1.0`
@typescript-eslint/eslint-plugin	`8.62.0`	`8.62.1`
@typescript-eslint/parser	`8.62.0`	`8.62.1`
eslint	`10.5.0`	`10.6.0`
vite	`8.1.0`	`8.1.2`

Updates @azure/msal-browser from 5.15.0 to 5.16.0

Release notes

Sourced from @azure/msal-browser's releases.

@azure/msal-browser v5.16.0

5.16.0

Tue, 30 Jun 2026 21:04:19 GMT

Minor changes

Bump @azure/msal-browser to match @azure/msal-browser-1p (msaljsbuilds@microsoft.com)

Bump @azure/msal-common to v16.11.0 (beachball)

Patches

Add previousLibraryVersion to all telemetry events #8688 (thomas.norling@microsoft.com)

Commits

8bb8acb feat: add previousLibraryVersion to all telemetry events (#8688)
22bc4e3 Fix: include resource in silent request thumbprint to prevent MCP cross-resou...
abb257a Post-release PR (#8675)
See full diff in compare view

Updates @azure/msal-react from 5.5.0 to 5.5.1

Release notes

Sourced from @azure/msal-react's releases.

@azure/msal-react v5.5.1

5.5.1

Tue, 30 Jun 2026 21:04:20 GMT

Patches

Bump @azure/msal-browser to v5.16.0 (beachball)

Commits

8bb8acb feat: add previousLibraryVersion to all telemetry events (#8688)
22bc4e3 Fix: include resource in silent request thumbprint to prevent MCP cross-resou...
abb257a Post-release PR (#8675)
See full diff in compare view

Updates @fluentui/react-components from 9.74.2 to 9.74.3

Commits

c771f58 release: applying package updates - react-components
aedc345 release: applying package updates - web-components
e6a6fa4 fix(web-components): set focus on autofocus element when a dialog is open (#3...
6097519 fix(fluent2-theme): high contrast focus styles for PrimaryButton (#36354)
cb3684e chore(web-components): Upgrade Fluent Web Components to FAST Element v3 (#36351)
7088c40 fix: update link focus style to match latest treatment (#36352)
078dec1 feat(react-headless-components-preview): add headless MenuButton (#36320)
6bc2c66 fix(react-button): do not expose default menuIcon in useMenuButtonBase_unstab...
5d8f8f0 fix(Calendar): year prev/next buttons don't lose focus when they become disab...
131593c release: applying package updates - web-components
Additional commits viewable in compare view

Updates @fluentui/react-icons from 2.0.330 to 2.0.331

Commits

See full diff in compare view

Updates react-router-dom from 7.18.0 to 7.18.1

Changelog

Sourced from react-router-dom's changelog.

v7.18.1

Patch Changes

Fix incorrect package.json main field for CommonJS builds (#15238)

Updated dependencies:

react-router@7.18.1

Commits

afdf85d Release v7.18.1 (#15253)
2ecaa1d Fix react-router-dom main entry metadata (#15238)
See full diff in compare view

Updates @types/node from 26.0.0 to 26.1.0

Commits

See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 8.62.0 to 8.62.1

Release notes

Sourced from @typescript-eslint/eslint-plugin's releases.

v8.62.1

8.62.1 (2026-06-29)

🩹 Fixes

eslint-plugin: [prefer-optional-chain] use suggestion instead of autofix for trailing binary operator (#12328)

eslint-plugin: [no-unnecessary-boolean-literal-compare] preserve boolean result in fixer for nullable true comparisons (#12365)

eslint-plugin: [no-unnecessary-type-assertion] parenthesize object literal at left edge of expression statement (#12443, #12418)

❤️ Thank You

Kirk Waiblinger @kirkwaiblinger

mdm317

Patrick Aleite

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @typescript-eslint/eslint-plugin's changelog.

8.62.1 (2026-06-29)

🩹 Fixes

eslint-plugin: [no-unnecessary-type-assertion] parenthesize object literal at left edge of expression statement (#12443, #12418)

eslint-plugin: [no-unnecessary-boolean-literal-compare] preserve boolean result in fixer for nullable true comparisons (#12365)

eslint-plugin: [prefer-optional-chain] use suggestion instead of autofix for trailing binary operator (#12328)

❤️ Thank You

Kirk Waiblinger @kirkwaiblinger

mdm317

Patrick Aleite

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

3ea32f4 chore(release): publish 8.62.1
4ecca6d fix(eslint-plugin): [no-unnecessary-type-assertion] parenthesize object liter...
f3a7ec7 chore(eslint-plugin-internal): [no-dynamic-tests] restrict where noFormat can...
301f350 fix(eslint-plugin): [no-unnecessary-boolean-literal-compare] preserve boolean...
ebce2d4 fix(eslint-plugin): [prefer-optional-chain] use suggestion instead of autofix...
See full diff in compare view

Updates @typescript-eslint/parser from 8.62.0 to 8.62.1

Release notes

Sourced from @typescript-eslint/parser's releases.

v8.62.1

8.62.1 (2026-06-29)

🩹 Fixes

eslint-plugin: [prefer-optional-chain] use suggestion instead of autofix for trailing binary operator (#12328)

eslint-plugin: [no-unnecessary-boolean-literal-compare] preserve boolean result in fixer for nullable true comparisons (#12365)

eslint-plugin: [no-unnecessary-type-assertion] parenthesize object literal at left edge of expression statement (#12443, #12418)

❤️ Thank You

Kirk Waiblinger @kirkwaiblinger

mdm317

Patrick Aleite

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @typescript-eslint/parser's changelog.

8.62.1 (2026-06-29)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

3ea32f4 chore(release): publish 8.62.1
See full diff in compare view

Updates eslint from 10.5.0 to 10.6.0

Release notes

Sourced from eslint's releases.

v10.6.0

Features

b1f9106 feat: detect Symbol() and BigInt() in no-constant-binary-expression (#20981) (Taejin Kim)

f291007 feat: add checkRelationalComparisons to no-constant-binary-expression (#20948) (sethamus)

Bug Fixes

6b05784 fix: prefer-exponentiation-operator invalid autofix at statement start (#20997) (Milos Djermanovic)

bb9eb2a fix: account for shadowed Boolean in no-extra-boolean-cast (#21013) (den$)

8fd8741 fix: don't report shadowed undefined in radix rule (#21011) (Pixel)

5784980 fix: don't report shadowed undefined in no-throw-literal (#21010) (Pixel)

9cd1e6d fix: suppress invalid class suggestion in no-promise-executor-return (#21008) (Pixel)

d4eb2dc fix: don't report shadowed undefined in prefer-promise-reject-errors (#21006) (Pixel)

2360464 fix: prefer-promise-reject-errors false positives for shadowed Promise (#21003) (den$)

63d52d2 fix: restore max-classes-per-file report range (#21002) (Pixel)

7feaff0 fix: callback detection logic for IIFEs in max-nested-callbacks (#20979) (fnx)

399a2ec fix: don't report inner non-callbacks in max-nested-callbacks (#20995) (Milos Djermanovic)

Documentation

a83683d docs: Update README (GitHub Actions Bot)

f5449f9 docs: document userland patterns for global assertionOptions in RuleT… (#20986) (playgirl)

bea49f7 docs: Update README (GitHub Actions Bot)

e5f70f9 docs: update code-path diagrams (#20984) (Tanuj Kanti)

8890c2d docs: add TypeScript config guidance for MCP server (#20796) (Pierluigi Lenoci)

3eb3d9b docs: Update README (GitHub Actions Bot)

c5bb59c docs: Update README (GitHub Actions Bot)

eb3c97c docs: fix grammar in prefer-const rule description (#20983) (lumir)

Chores

6a42034 ci: run ecosystem tests on main branch (#20891) (sethamus)

3dbacdb ci: bump actions/checkout from 6 to 7 (#21014) (dependabot[bot])

c3abfca chore: correct JSDoc param types in html formatter (#21018) (Minseon Kim)

a832320 ci: split ecosystem tests into separate jobs (#21001) (xbinaryx)

27166e7 chore: update ecosystem plugins (#21005) (ESLint Bot)

865d76e ci: bump pnpm/action-setup from 6.0.8 to 6.0.9 (#20989) (dependabot[bot])

27a88c9 chore: update dependency markdown-it to v14 in root (#20994) (Milos Djermanovic)

970cea6 chore: update dependency markdown-it to v14 (#20993) (Milos Djermanovic)

b482120 chore: update dependency prettier to v3.8.4 (#20990) (renovate[bot])

6993fb3 chore: update ecosystem plugins (#20985) (ESLint Bot)

Commits

5d12a04 10.6.0
f7ca54b Build: changelog update for 10.6.0
6a42034 ci: run ecosystem tests on main branch (#20891)
b1f9106 feat: detect Symbol() and BigInt() in no-constant-binary-expression (#20981)
3dbacdb ci: bump actions/checkout from 6 to 7 (#21014)
c3abfca chore: correct JSDoc param types in html formatter (#21018)
a83683d docs: Update README
a832320 ci: split ecosystem tests into separate jobs (#21001)
6b05784 fix: prefer-exponentiation-operator invalid autofix at statement start (#20997)
bb9eb2a fix: account for shadowed Boolean in no-extra-boolean-cast (#21013)
Additional commits viewable in compare view

Updates vite from 8.1.0 to 8.1.2

Release notes

Sourced from vite's releases.

v8.1.2

Please refer to CHANGELOG.md for details.

v8.1.1

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.1.2 (2026-06-30)

Bug Fixes

deps: revert es-module-lexer to 2.1.0 (#22827) (0d3bd7c)

restore, "fix: resolve pnpm .modules.yaml from workspace root instead of cwd (#22757)" (#22825) (efb98cc)

revert, "fix: escape ids with multiple null bytes (#22687)" (cccef55)

revert, "fix: resolve pnpm .modules.yaml from workspace root instead of cwd (#22757)" (cf97711)

8.1.1 (2026-06-30)

Features

update dynamic import warning to link to Vite docs (#22823) (62bd7af)

Bug Fixes

bundled-dev: avoid stack overflow on import.meta.hot.invalidate() (#22797) (709eb8e)

bundled-dev: serve assets emitted during HMR/lazy compile (#22745) (5876b2c)

bundledDev: skip plugin transform hooks for rolldown-lazy stub modules (#22778) (8f925e2)

css: preserve dollar signs in external @import urls with lightningcss (#22718) (9fa7ab4)

css: resolve tsconfig paths in CSS and Sass @import (#22775) (ef0b891)

deps: update all non-major dependencies (#22734) (e635f49)

deps: update all non-major dependencies (#22804) (8837400)

deps: update rolldown-related dependencies (#22591) (2ce6677)

escape ids with multiple null bytes (#22687) (833fc30)

hide console window when running 'net use' on Windows (#22698) (92b63f2)

ignore bundled config temp dir (#22800) (043a810)

invert esbuild.jsxSideEffects when converting to oxc.jsx.pure (#22809) (33895ba)

optimize-deps: ignore ERR_CLOSED_SERVER in scanner (#22784) (085a0ab)

optimizer: scanner should resolve input from root (#22769) (9722b07)

resolve pnpm .modules.yaml from workspace root instead of cwd (#22757) (2531ac7)

return sourcemap field from some plugins that were lacking (#22782) (7e18bf8)

server: handle malformed URI in indexHtmlMiddleware (#22781) (84f5ccc)

Miscellaneous Chores

improve dependency optimizer messages (#22549) (092cb3b)

Code Refactoring

css: remove lightningcss null byte bug workaround (#22822) (2dafd3b)

use pre-defined environments variable to avoid duplicate Object.values calls (#22790) (1113acf)

Tests

enable "manual chunk path" test and remove "worker.format error" test (#22824) (c088511)

Commits

ba31193 release: v8.1.2
0d3bd7c fix(deps): revert es-module-lexer to 2.1.0 (#22827)
efb98cc fix: restore, "fix: resolve pnpm .modules.yaml from workspace root instead of...
cf97711 fix: revert, "fix: resolve pnpm .modules.yaml from workspace root instead of ...
cccef55 fix: revert, "fix: escape ids with multiple null bytes (#22687)"
4ae9e14 release: v8.1.1
8f925e2 fix(bundledDev): skip plugin transform hooks for rolldown-lazy stub modules (...
c088511 test: enable "manual chunk path" test and remove "worker.format error" test (...
62bd7af feat: update dynamic import warning to link to Vite docs (#22823)
2dafd3b refactor(css): remove lightningcss null byte bug workaround (#22822)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group in /frontend with 10 updates: | Package | From | To | | --- | --- | --- | | [@azure/msal-browser](https://github.com/AzureAD/microsoft-authentication-library-for-js) | `5.15.0` | `5.16.0` | | [@azure/msal-react](https://github.com/AzureAD/microsoft-authentication-library-for-js) | `5.5.0` | `5.5.1` | | [@fluentui/react-components](https://github.com/microsoft/fluentui) | `9.74.2` | `9.74.3` | | [@fluentui/react-icons](https://github.com/microsoft/fluentui-system-icons) | `2.0.330` | `2.0.331` | | [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.18.0` | `7.18.1` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.0.0` | `26.1.0` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.62.0` | `8.62.1` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.62.0` | `8.62.1` | | [eslint](https://github.com/eslint/eslint) | `10.5.0` | `10.6.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.1.0` | `8.1.2` | Updates `@azure/msal-browser` from 5.15.0 to 5.16.0 - [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases) - [Commits](AzureAD/microsoft-authentication-library-for-js@msal-browser-v5.15.0...msal-browser-v5.16.0) Updates `@azure/msal-react` from 5.5.0 to 5.5.1 - [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases) - [Commits](AzureAD/microsoft-authentication-library-for-js@msal-react-v5.5.0...msal-react-v5.5.1) Updates `@fluentui/react-components` from 9.74.2 to 9.74.3 - [Release notes](https://github.com/microsoft/fluentui/releases) - [Commits](https://github.com/microsoft/fluentui/compare/@fluentui/react-components_v9.74.2...@fluentui/react-components_v9.74.3) Updates `@fluentui/react-icons` from 2.0.330 to 2.0.331 - [Changelog](https://github.com/microsoft/fluentui-system-icons/blob/main/docs/releases.md) - [Commits](https://github.com/microsoft/fluentui-system-icons/commits) Updates `react-router-dom` from 7.18.0 to 7.18.1 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.1/packages/react-router-dom/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.1/packages/react-router-dom) Updates `@types/node` from 26.0.0 to 26.1.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@typescript-eslint/eslint-plugin` from 8.62.0 to 8.62.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.1/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.62.0 to 8.62.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.1/packages/parser) Updates `eslint` from 10.5.0 to 10.6.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.5.0...v10.6.0) Updates `vite` from 8.1.0 to 8.1.2 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.1.2/packages/vite) --- updated-dependencies: - dependency-name: "@azure/msal-browser" dependency-version: 5.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@azure/msal-react" dependency-version: 5.5.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@fluentui/react-components" dependency-version: 9.74.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@fluentui/react-icons" dependency-version: 2.0.331 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: react-router-dom dependency-version: 7.18.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@types/node" dependency-version: 26.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.62.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@typescript-eslint/parser" dependency-version: 8.62.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: eslint dependency-version: 10.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: vite dependency-version: 8.1.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 8, 2026

romanlutz approved these changes Jul 8, 2026

View reviewed changes

romanlutz added this pull request to the merge queue Jul 8, 2026

Merged via the queue into main with commit 3dd5806 Jul 8, 2026
47 checks passed

romanlutz deleted the dependabot/npm_and_yarn/frontend/minor-and-patch-4e9d092736 branch July 8, 2026 17:09

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

MAINT: Bump the minor-and-patch group in /frontend with 10 updates#2134

MAINT: Bump the minor-and-patch group in /frontend with 10 updates#2134
romanlutz merged 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/minor-and-patch-4e9d092736

dependabot Bot commented on behalf of github Jul 8, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 8, 2026

@​azure/msal-browser v5.16.0

5.16.0

Minor changes

Patches

@​azure/msal-react v5.5.1

5.5.1

Patches

v7.18.1

Patch Changes

v8.62.1

8.62.1 (2026-06-29)

🩹 Fixes

❤️ Thank You

8.62.1 (2026-06-29)

🩹 Fixes

❤️ Thank You

v8.62.1

8.62.1 (2026-06-29)

🩹 Fixes

❤️ Thank You

8.62.1 (2026-06-29)

v10.6.0

Features

Bug Fixes

Documentation

Chores

v8.1.2

v8.1.1

8.1.2 (2026-06-30)

Bug Fixes

8.1.1 (2026-06-30)

Features

Bug Fixes

Miscellaneous Chores

Code Refactoring

Tests

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`@azure/msal-browser` v5.16.0

`@azure/msal-react` v5.5.1