From 29ad4410ed4156ca11f38cd3910fa74ade8da3a1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 23 Oct 2026 01:23:44 +0000 Subject: [PATCH 1/2] Bump ip-address from 10.7.1 to 10.7.4 Bumps [ip-address](https://github.com/beaugunderson/ip-address) from 10.7.1 to 10.7.4. - [Release notes](https://github.com/beaugunderson/ip-address/releases) - [Commits](https://github.com/beaugunderson/ip-address/compare/v10.7.1...v10.7.4) --- updated-dependencies: - dependency-name: ip-address dependency-version: 10.7.4 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- package-lock.json | 14 +++++++------- package.json | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package-lock.json b/package-lock.json index 83f4cb2e4..e9201cbc3 100644 --- a/package-lock.json +++ b/package-lock.json @@ -17,7 +17,7 @@ "extract-opts": "2.2.0", "flatten-source-map": "0.0.2", "glob": ">=10.5.0", - "ip-address": "^10.7.1", + "ip-address": "^10.7.4", "js-base64": "3.6.0", "json5": "^1.0.2", "jsonc-parser": "3.0.0", @@ -7744,9 +7744,9 @@ } }, "node_modules/ip-address": { - "version": "10.7.1", - "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.7.1.tgz", - "integrity": "sha512-4OUAqU9Z1i3vCnS05hzGiFnEMDpQ+62pAD/MVQOp83fYyNC8GleCqaS0QikQBmcWCrKFiUs/B8ztRRiYOAXuCA==", + "version": "10.7.4", + "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.7.4.tgz", + "integrity": "sha512-DWBMKyeM25D70nrIiTkgQth59/G+naKOTep6huF9j+GmeK3DMD60Zvxg5d5qQnz+38AHgou6ean2LECX+lrKDg==", "license": "MIT", "engines": { "node": ">= 12" @@ -19324,9 +19324,9 @@ "dev": true }, "ip-address": { - "version": "10.7.1", - "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.7.1.tgz", - "integrity": "sha512-4OUAqU9Z1i3vCnS05hzGiFnEMDpQ+62pAD/MVQOp83fYyNC8GleCqaS0QikQBmcWCrKFiUs/B8ztRRiYOAXuCA==" + "version": "10.7.4", + "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.7.4.tgz", + "integrity": "sha512-DWBMKyeM25D70nrIiTkgQth59/G+naKOTep6huF9j+GmeK3DMD60Zvxg5d5qQnz+38AHgou6ean2LECX+lrKDg==" }, "is": { "version": "3.3.0", diff --git a/package.json b/package.json index 1cdadfc28..90efd5c30 100644 --- a/package.json +++ b/package.json @@ -1434,7 +1434,7 @@ "extract-opts": "2.2.0", "flatten-source-map": "0.0.2", "glob": ">=10.5.0", - "ip-address": "^10.7.1", + "ip-address": "^10.7.4", "js-base64": "3.6.0", "json5": "^1.0.2", "jsonc-parser": "3.0.0", From 7631fa9d016d8c89ca76497f0b45e06f510883b5 Mon Sep 17 00:00:00 2001 From: EmmaYuan1015 Date: Mon, 26 Oct 2026 10:19:14 +0800 Subject: [PATCH 2/2] fix: upgrade msal-node to 7.1.0 for security update Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- package-lock.json | 37 ++++++++++++++++++++++++++++--------- package.json | 1 + 2 files changed, 29 insertions(+), 9 deletions(-) diff --git a/package-lock.json b/package-lock.json index e9201cbc3..72cc3aceb 100644 --- a/package-lock.json +++ b/package-lock.json @@ -346,18 +346,29 @@ } }, "node_modules/@azure/msal-node": { - "version": "5.2.4", - "resolved": "https://registry.npmjs.org/@azure/msal-node/-/msal-node-5.2.4.tgz", - "integrity": "sha512-rpBUg9dA8UpC2WiFt3KeDKVQmmmVrfxdRnW+F1ebgou/jX/0tAvYuonaq5RUo8OaqzOrj4x/HaI8DmY56RXZ2Q==", + "version": "7.1.0", + "resolved": "https://ms-feed-25.pkgs.visualstudio.com/1es-public/_packaging/npm-public/npm/registry/@azure/msal-node/-/msal-node-7.1.0.tgz", + "integrity": "sha512-s1O6hSY/C/dmqykTmmeHY6GhSkDuY8N1gxyhuLyaCwbY7N+UBvU2Wu4flas7+NxZiAPcXNPVpgt3n/HP/5yL+w==", "dev": true, + "license": "MIT", "dependencies": { - "@azure/msal-common": "16.8.0", + "@azure/msal-common": "16.14.2", "jsonwebtoken": "^9.0.0" }, "engines": { "node": ">=20" } }, + "node_modules/@azure/msal-node/node_modules/@azure/msal-common": { + "version": "16.14.2", + "resolved": "https://ms-feed-25.pkgs.visualstudio.com/1es-public/_packaging/npm-public/npm/registry/@azure/msal-common/-/msal-common-16.14.2.tgz", + "integrity": "sha512-HOBR0Gfo39TMrkxNG8k6cfjRkrRjXZc3JQs3ebMWQc9S4cihuknMYra3sgmzbZB752oQBqBN9+WF7c826p2vIQ==", + "dev": true, + "license": "MIT", + "engines": { + "node": ">=0.8.0" + } + }, "node_modules/@babel/code-frame": { "version": "7.29.7", "resolved": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.29.7.tgz", @@ -13887,7 +13898,7 @@ "@azure/core-util": "^1.11.0", "@azure/logger": "^1.0.0", "@azure/msal-browser": "^5.5.0", - "@azure/msal-node": "^5.1.0", + "@azure/msal-node": "7.1.0", "open": "^10.1.0", "tslib": "^2.2.0" }, @@ -13946,13 +13957,21 @@ "dev": true }, "@azure/msal-node": { - "version": "5.2.4", - "resolved": "https://registry.npmjs.org/@azure/msal-node/-/msal-node-5.2.4.tgz", - "integrity": "sha512-rpBUg9dA8UpC2WiFt3KeDKVQmmmVrfxdRnW+F1ebgou/jX/0tAvYuonaq5RUo8OaqzOrj4x/HaI8DmY56RXZ2Q==", + "version": "7.1.0", + "resolved": "https://ms-feed-25.pkgs.visualstudio.com/1es-public/_packaging/npm-public/npm/registry/@azure/msal-node/-/msal-node-7.1.0.tgz", + "integrity": "sha512-s1O6hSY/C/dmqykTmmeHY6GhSkDuY8N1gxyhuLyaCwbY7N+UBvU2Wu4flas7+NxZiAPcXNPVpgt3n/HP/5yL+w==", "dev": true, "requires": { - "@azure/msal-common": "16.8.0", + "@azure/msal-common": "16.14.2", "jsonwebtoken": "^9.0.0" + }, + "dependencies": { + "@azure/msal-common": { + "version": "16.14.2", + "resolved": "https://ms-feed-25.pkgs.visualstudio.com/1es-public/_packaging/npm-public/npm/registry/@azure/msal-common/-/msal-common-16.14.2.tgz", + "integrity": "sha512-HOBR0Gfo39TMrkxNG8k6cfjRkrRjXZc3JQs3ebMWQc9S4cihuknMYra3sgmzbZB752oQBqBN9+WF7c826p2vIQ==", + "dev": true + } } }, "@babel/code-frame": { diff --git a/package.json b/package.json index 90efd5c30..dc9c77383 100644 --- a/package.json +++ b/package.json @@ -1537,6 +1537,7 @@ "ms-vscode.js-debug" ], "overrides": { + "@azure/msal-node": "7.1.0", "@babel/core": "7.29.6", "brace-expansion": "5.0.12", "decode-uri-component": "0.5.0",