Skip to content

build: bump the frontend-deps group in /App/frontend-app with 27 updates#675

Open
dependabot[bot] wants to merge 1 commit into
dependabotchangesfrom
dependabot/npm_and_yarn/App/frontend-app/dependabotchanges/frontend-deps-518d6b4650
Open

build: bump the frontend-deps group in /App/frontend-app with 27 updates#675
dependabot[bot] wants to merge 1 commit into
dependabotchangesfrom
dependabot/npm_and_yarn/App/frontend-app/dependabotchanges/frontend-deps-518d6b4650

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the frontend-deps group in /App/frontend-app with 27 updates:

Package From To
@azure/msal-browser 5.11.0 5.16.0
@azure/msal-react 5.4.2 5.5.1
@fluentui/react 8.125.6 8.125.7
@fluentui/react-components 9.74.1 9.74.3
@fluentui/react-datepicker-compat 0.6.32 0.6.34
@fluentui/react-file-type-icons 8.18.0 8.18.1
@fluentui/react-icons 2.0.328 2.0.331
@microsoft/applicationinsights-react-js 19.4.0 19.4.1
@microsoft/applicationinsights-web 3.4.1 3.4.2
i18next 26.3.0 26.3.4
marked 18.0.4 18.0.5
pdfjs-dist 6.0.227 6.1.200
react-router-dom 7.16.0 7.18.1
react-tiff 0.0.16 0.0.17
@types/react 19.2.16 19.2.17
@typescript-eslint/eslint-plugin 8.60.1 8.62.1
@typescript-eslint/parser 8.60.1 8.62.1
@vitejs/plugin-react 6.0.2 6.0.3
autoprefixer 10.5.0 10.5.2
body-parser 2.2.2 2.3.0
eslint 10.4.1 10.6.0
eslint-plugin-react-refresh 0.5.2 0.5.3
postcss 8.5.15 8.5.16
prettier 3.8.3 3.9.4
sass 1.100.0 1.101.0
tailwindcss 4.3.0 4.3.2
vite 8.0.16 8.1.2

Updates @azure/msal-browser from 5.11.0 to 5.16.0

Release notes

Sourced from @​azure/msal-browser's releases.

@​azure/msal-browser v5.16.0

5.16.0

Tue, 30 Jun 2026 21:04:19 GMT

Minor changes

  • Bump @​azure/msal-browser to match @​azure/msal-browser-1p (msaljsbuilds@microsoft.com)
  • Bump @​azure/msal-common to v16.11.0 (beachball)

Patches

@​azure/msal-browser v5.15.0

5.15.0

Tue, 23 Jun 2026 22:19:29 GMT

Minor changes

@​azure/msal-browser v5.14.0

5.14.0

Tue, 16 Jun 2026 19:46:34 GMT

Minor changes

Patches

@​azure/msal-browser v5.13.0

5.13.0

Wed, 10 Jun 2026 22:41:33 GMT

Minor changes

... (truncated)

Commits
  • 8bb8acb feat: add previousLibraryVersion to all telemetry events (#8688)
  • 22bc4e3 Fix: include resource in silent request thumbprint to prevent MCP cross-resou...
  • abb257a Post-release PR (#8675)
  • f8cf6a4 feat: add default idToken claims (signin_state, login_hint) and kmsi on Accou...
  • 906f4d8 Migrate region discovery to IMDS /compute JSON endpoint (#8660)
  • 6d53ace Deprecate the max_age request parameter and stop validating tokens (#8664)
  • 27c074b [correlationId] Make correlationId a required parameter on AuthError construc...
  • e5eb6fd Add Native Account Id to TenantProfile (#8649)
  • f06838b Post-release PR (#8657)
  • 9941501 docs: warn that events should not be used for telemetry (#8641)
  • Additional commits viewable in compare view

Updates @azure/msal-react from 5.4.2 to 5.5.1

Release notes

Sourced from @​azure/msal-react's releases.

@​azure/msal-react v5.5.1

5.5.1

Tue, 30 Jun 2026 21:04:20 GMT

Patches

  • Bump @​azure/msal-browser to v5.16.0 (beachball)

@​azure/msal-browser v5.5.0

5.5.0

Fri, 13 Mar 2026 22:36:58 GMT

Minor changes

  • Add MCP Support #8363 (shylasummers@microsoft.com)
  • Bump @​azure/msal-common to v16.3.0 (beachball)
  • Bump eslint-config-msal to v0.0.0 (beachball)
  • Bump msal-test-utils to v0.0.1 (beachball)
  • Bump rollup-msal to v0.0.0 (beachball)

Patches

@​azure/msal-react v5.5.0

5.5.0

Tue, 23 Jun 2026 22:19:30 GMT

Minor changes

@​azure/msal-react v5.4.5

5.4.5

Tue, 16 Jun 2026 19:46:35 GMT

Patches

  • Bump @​azure/msal-browser to v5.14.0 (beachball)

@​azure/msal-react v5.4.4

5.4.4

Wed, 10 Jun 2026 22:41:34 GMT

... (truncated)

Commits
  • 8bb8acb feat: add previousLibraryVersion to all telemetry events (#8688)
  • 22bc4e3 Fix: include resource in silent request thumbprint to prevent MCP cross-resou...
  • abb257a Post-release PR (#8675)
  • f8cf6a4 feat: add default idToken claims (signin_state, login_hint) and kmsi on Accou...
  • 906f4d8 Migrate region discovery to IMDS /compute JSON endpoint (#8660)
  • 6d53ace Deprecate the max_age request parameter and stop validating tokens (#8664)
  • 27c074b [correlationId] Make correlationId a required parameter on AuthError construc...
  • e5eb6fd Add Native Account Id to TenantProfile (#8649)
  • f06838b Post-release PR (#8657)
  • 9941501 docs: warn that events should not be used for telemetry (#8641)
  • Additional commits viewable in compare view

Updates @fluentui/react from 8.125.6 to 8.125.7

Commits

Updates @fluentui/react-components from 9.74.1 to 9.74.3

Commits
  • c771f58 release: applying package updates - react-components
  • aedc345 release: applying package updates - web-components
  • e6a6fa4 fix(web-components): set focus on autofocus element when a dialog is open (#3...
  • 6097519 fix(fluent2-theme): high contrast focus styles for PrimaryButton (#36354)
  • cb3684e chore(web-components): Upgrade Fluent Web Components to FAST Element v3 (#36351)
  • 7088c40 fix: update link focus style to match latest treatment (#36352)
  • 078dec1 feat(react-headless-components-preview): add headless MenuButton (#36320)
  • 6bc2c66 fix(react-button): do not expose default menuIcon in useMenuButtonBase_unstab...
  • 5d8f8f0 fix(Calendar): year prev/next buttons don't lose focus when they become disab...
  • 131593c release: applying package updates - web-components
  • Additional commits viewable in compare view

Updates @fluentui/react-datepicker-compat from 0.6.32 to 0.6.34

Commits
  • c771f58 release: applying package updates - react-components
  • aedc345 release: applying package updates - web-components
  • e6a6fa4 fix(web-components): set focus on autofocus element when a dialog is open (#3...
  • 6097519 fix(fluent2-theme): high contrast focus styles for PrimaryButton (#36354)
  • cb3684e chore(web-components): Upgrade Fluent Web Components to FAST Element v3 (#36351)
  • 7088c40 fix: update link focus style to match latest treatment (#36352)
  • 078dec1 feat(react-headless-components-preview): add headless MenuButton (#36320)
  • 6bc2c66 fix(react-button): do not expose default menuIcon in useMenuButtonBase_unstab...
  • 5d8f8f0 fix(Calendar): year prev/next buttons don't lose focus when they become disab...
  • 131593c release: applying package updates - web-components
  • Additional commits viewable in compare view

Updates @fluentui/react-file-type-icons from 8.18.0 to 8.18.1

Commits
  • 0490111 applying package updates
  • 2cef92d Publish docs pipeline artifact after azure upload (#17881)
  • f40b8af Reassign joschect's owned items (#17880)
  • df8bf99 Bump ssri from 6.0.1 to 6.0.2 (#17852)
  • 58e5e19 Fix bug where adding an item from outside of UPP forces focus on the input (#...
  • 222c38f DetailsList Example: removed text only menu item from CommandBar so it's no l...
  • c47093e fix(makeStyles): DOM renderer should not throw in SSR (#17904)
  • 0156818 Export Portal from react-components (#17870)
  • 619ff0a Remove default document in useOnClickOutside (#17898)
  • 10a1982 feat(Popup): add data-popup-trapfocus to differentiate beween dialog and popu...
  • Additional commits viewable in compare view

Updates @fluentui/react-icons from 2.0.328 to 2.0.331

Commits

Updates @microsoft/applicationinsights-react-js from 19.4.0 to 19.4.1

Changelog

Sourced from @​microsoft/applicationinsights-react-js's changelog.

19.4.1 (June 22nd, 2026)

Changes

  • Bump @microsoft/applicationinsights-core-js and @microsoft/applicationinsights-properties-js dependency from ^3.4.1 to ^3.4.2.
  • Resolved all reported npm audit vulnerabilities (ws, @babel/core, markdown-it, and the js-yaml transitive chain) with no breaking changes to consumers.
Commits

Updates @microsoft/applicationinsights-web from 3.4.1 to 3.4.2

Changelog

Sourced from @​microsoft/applicationinsights-web's changelog.

3.4.2 (June 18th, 2026)

This is a maintenance release for the 3.4.x version line containing security hardening, bug fixes, build tooling improvements, and CI updates. The @microsoft/1ds-post-js channel is numbered 4.4.2 and requires v3.4.2.

Commits

Updates i18next from 26.3.0 to 26.3.4

Release notes

Sourced from i18next's releases.

v26.3.4

  • fix(security): deepExtend (used by addResourceBundle(..., deep, overwrite)) no longer recurses into inherited properties. It checked key existence with the in operator, which walks the prototype chain, so a source key matching an inherited built-in (e.g. hasOwnProperty, toString) caused recursion into the shared Object.prototype function and, with overwrite: true, could overwrite e.g. Object.prototype.hasOwnProperty.call with a non-callable value — corrupting a shared built-in process-wide (DoS). Existence is now checked with Object.prototype.hasOwnProperty.call, so such keys are copied as plain own data instead. This complements the existing __proto__/constructor guard and is also strictly more correct for an own-property merge. Only affects applications that pass attacker-controlled data with deep: true and overwrite: true; no standard backend/integration does this. Distinct from CVE-2026-48713 / CVE-2026-48714 (different packages, setPath mechanism). Thanks to zx (Jace) for the responsible disclosure.

v26.3.3

  • fix(types): selector t($ => $.arr, { returnObjects: true, context }) on a JSON array of heterogeneous objects now preserves each element's full shape (e.g. { transKey1: string; transKey2: string }[]) instead of collapsing to a union of partial element types. Two type-level causes: (1) FilterKeys evaluated the whole array element type at once, so keyof (A | B) only saw the keys common to every element — it now distributes over the object union and filters each element independently; (2) when TypeScript merges mismatched array element types it injects phantom optional undefined keys (e.g. transKey1_withContext?: undefined on elements that don't define it), which the context-detection helpers mistook for real context variants — they now skip keys typed as undefined. Also adds a dedicated context + returnObjects: true selector overload using const Fn + ReturnType<Fn>, so Target is no longer collapsed to unknown via ApplyTarget. Resolves Problem 1 of #2398 (Problem 2 was already fixed on master). Thanks @​sauravgupta-dotcom (#2438). Fixes #2398.

v26.3.2

  • fix: chained formatters with a parenthesised option that contains the format separator (e.g. join(separator: ', ')) now work at any position in the chain, not just first. Previously the comma-in-parens reassembly only repaired formats[0], so {{v, uppercase, join(separator: ', ')}} split the join(...) option on the inner comma and never rejoined it, producing corrupt output. Replaced the first-position-only repair with a position-independent pass that re-joins fragments until each open paren closes. Thanks @​spokodev (#2437).

v26.3.1

  • fix(types): t() with a keyPrefix no longer pollutes its return type with sibling keys' values. A regression in 26.3.0 — the [Res] extends [never] guards added to KeysBuilderWithReturnObjects / KeysBuilderWithoutReturnObjects turned the builders into deferred conditional types, so KeyPrefix<Ns> stopped resolving to a literal union and keyPrefix inference widened to the whole namespace. Symptom: useTranslation(ns, { keyPrefix: 'a.b' }) then t('title') would resolve to '<a.b>.title' | '<other.path>.title' | ... instead of just the scoped value. Affected every react-i18next user using keyPrefix. Restored to the eager 26.2.0 form. The same-namespace conflict handling from #2434 still works via _DropConflictKeys at the merge layer (in options.d.ts). Thanks @​aaronrosenthal (#2436).
Changelog

Sourced from i18next's changelog.

26.3.4

  • fix(security): deepExtend (used by addResourceBundle(..., deep, overwrite)) no longer recurses into inherited properties. It checked key existence with the in operator, which walks the prototype chain, so a source key matching an inherited built-in (e.g. hasOwnProperty, toString) caused recursion into the shared Object.prototype function and, with overwrite: true, could overwrite e.g. Object.prototype.hasOwnProperty.call with a non-callable value — corrupting a shared built-in process-wide (DoS). Existence is now checked with Object.prototype.hasOwnProperty.call, so such keys are copied as plain own data instead. This complements the existing __proto__/constructor guard and is also strictly more correct for an own-property merge. Only affects applications that pass attacker-controlled data with deep: true and overwrite: true; no standard backend/integration does this. Distinct from CVE-2026-48713 / CVE-2026-48714 (different packages, setPath mechanism). See advisory GHSA-6jcc-5g8w-32mx, CVSS 5.9 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H). Thanks to zx (Jace) @​manus-use for the responsible disclosure.

26.3.3

  • fix(types): selector t($ => $.arr, { returnObjects: true, context }) on a JSON array of heterogeneous objects now preserves each element's full shape (e.g. { transKey1: string; transKey2: string }[]) instead of collapsing to a union of partial element types. Two type-level causes: (1) FilterKeys evaluated the whole array element type at once, so keyof (A | B) only saw the keys common to every element — it now distributes over the object union and filters each element independently; (2) when TypeScript merges mismatched array element types it injects phantom optional undefined keys (e.g. transKey1_withContext?: undefined on elements that don't define it), which the context-detection helpers mistook for real context variants — they now skip keys typed as undefined. Also adds a dedicated context + returnObjects: true selector overload using const Fn + ReturnType<Fn>, so Target is no longer collapsed to unknown via ApplyTarget. Resolves Problem 1 of #2398 (Problem 2 was already fixed on master). Thanks @​sauravgupta-dotcom (#2438). Fixes #2398.

26.3.2

  • fix: chained formatters with a parenthesised option that contains the format separator (e.g. join(separator: ', ')) now work at any position in the chain, not just first. Previously the comma-in-parens reassembly only repaired formats[0], so {{v, uppercase, join(separator: ', ')}} split the join(...) option on the inner comma and never rejoined it, producing corrupt output. Replaced the first-position-only repair with a position-independent pass that re-joins fragments until each open paren closes. Thanks @​spokodev (#2437).

26.3.1

  • fix(types): t() with a keyPrefix no longer pollutes its return type with sibling keys' values. A regression in 26.3.0 — the [Res] extends [never] guards added to KeysBuilderWithReturnObjects / KeysBuilderWithoutReturnObjects turned the builders into deferred conditional types, so KeyPrefix<Ns> stopped resolving to a literal union and keyPrefix inference widened to the whole namespace. Symptom: useTranslation(ns, { keyPrefix: 'a.b' }) then t('title') would resolve to '<a.b>.title' | '<other.path>.title' | ... instead of just the scoped value. Affected every react-i18next user using keyPrefix. Restored to the eager 26.2.0 form. The same-namespace conflict handling from #2434 still works via _DropConflictKeys at the merge layer (in options.d.ts). Thanks @​aaronrosenthal (#2436).
Commits

Updates marked from 18.0.4 to 18.0.5

Release notes

Sourced from marked's releases.

v18.0.5

18.0.5 (2026-06-04)

Bug Fixes

  • parse empty list item with trailing space (#3984) (b55410f)
Commits
  • 4063c63 chore(release): 18.0.5 [skip ci]
  • b55410f fix: parse empty list item with trailing space (#3984)
  • c6e667b chore(deps-dev): bump eslint from 10.4.0 to 10.4.1 (#3986)
  • 95f98ec chore(deps-dev): bump @​arethetypeswrong/cli from 0.18.2 to 0.18.3 (#3985)
  • c1a86f0 Add Node.js usage example to README (#3983)
  • 763f729 chore(deps-dev): bump marked-man from 2.1.0 to 2.1.1 (#3978)
  • 2cf1fd0 chore(deps-dev): bump markdown-it from 14.1.1 to 14.2.0 (#3977)
  • See full diff in compare view

Updates pdfjs-dist from 6.0.227 to 6.1.200

Release notes

Sourced from pdfjs-dist's releases.

v6.1.200

This release contains improvements for annotation rendering, annotation editing, font conversion, image conversion, merging files, SMask rendering and the viewer.

Changes since v6.0.227

... (truncated)

Commits
  • 6353ace Merge pull request #21508 from Snuffleupagus/optional-chaining-not-length
  • b7b3a4c Use more optional chaining in the src/ and web/ folders
  • 8bdd159 Merge pull request #21505 from Snuffleupagus/StructTreeRoot-rm-init
  • 195226e Merge pull request #21500 from calixteman/bug2050191
  • d852613 Merge pull request #21487 from calixteman/issue17333
  • 8232440 Inline the init method in the StructTreeRoot constructor
  • 86ffd68 Merge pull request #21504 from nicolo-ribaudo/move-selection-styles
  • 5d81fe5 Move SVG text selection styles to pdf_viewer.css
  • a1953e7 Merge pull request #21502 from Snuffleupagus/issue17906-test-forms
  • beb332a Change issue17906 to test "forms" rendering
  • Additional commits viewable in compare view

Updates react-router-dom from 7.16.0 to 7.18.1

Changelog

Sourced from react-router-dom's changelog.

v7.18.1

Patch Changes

v7.18.0

Patch Changes

v7.17.0

Patch Changes

Commits

Updates react-tiff from 0.0.16 to 0.0.17

Commits

Updates @types/react from 19.2.16 to 19.2.17

Commits

Updates @typescript-eslint/eslint-plugin from 8.60.1 to 8.62.1

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.62.1

8.62.1 (2026-06-29)

🩹 Fixes

  • eslint-plugin: [prefer-optional-chain] use suggestion instead of autofix for trailing binary operator (#12328)
  • eslint-plugin: [no-unnecessary-boolean-literal-compare] preserve boolean result in fixer for nullable true comparisons (#12365)
  • eslint-plugin: [no-unnecessary-type-assertion] parenthesize object literal at left edge of expression statement (#12443, #12418)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.62.0

8.62.0 (2026-06-22)

🚀 Features

  • remove redundant package.json "files" (#12444)

🩹 Fixes

  • add "files" to rule-schema-to-typescript-types (#12441)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.61.1

8.61.1 (2026-06-15)

🩹 Fixes

  • eslint-plugin: [consistent-indexed-object-style] do not remove comments when fixing (#12396, #10577)
  • eslint-plugin: [no-unnecessary-type-assertion] avoid false positive for template literal expressions (#12281)
  • eslint-plugin: [no-unnecessary-type-assertion] wrap object literal in parens when removing TSTypeAssertion in arrow body (#12394, #12393)
  • eslint-plugin: [no-unnecessary-boolean-literal-compare] fix precedence bug in autofix (#12413)
  • eslint-plugin: [no-unnecessary-template-expression] respect ECMAScript line terminators (#12388)

... (truncated)

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.62.1 (2026-06-29)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-type-assertion] parenthesize object literal at left edge of expression statement (#12443, #12418)
  • eslint-plugin: [no-unnecessary-boolean-literal-compare] preserve boolean result in fixer for nullable true comparisons (#12365)
  • eslint-plugin: [prefer-optional-chain] use suggestion instead of autofix for trailing binary operator (#12328)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.62.0 (2026-06-22)

🚀 Features

  • remove redundant package.json "files" (#12444)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.61.1 (2026-06-15)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-template-expression] respect ECMAScript line terminators (#12388)
  • eslint-plugin: [no-unnecessary-boolean-literal-compare] fix precedence bug in autofix (#12413)
  • eslint-plugin: [no-unnecessary-type-assertion] wrap object literal in parens when removing TSTypeAssertion in arrow body (#12394, #12393)
  • eslint-plugin: [no-unnecessary-type-assertion] avoid false positive for template literal expressions (#12281)
  • eslint-plugin: [consistent-indexed-object-style] do not remove comments when fixing (#12396, #10577)

❤️ Thank You

  • Anas

@dependabot
build: bump the frontend-deps group in /App/frontend-app with 27 updates
9cb87c2 
Bumps the frontend-deps group in /App/frontend-app with 27 updates:

| Package | From | To |
| --- | --- | --- |
| [@azure/msal-browser](https://github.com/AzureAD/microsoft-authentication-library-for-js) | `5.11.0` | `5.16.0` |
| [@azure/msal-react](https://github.com/AzureAD/microsoft-authentication-library-for-js) | `5.4.2` | `5.5.1` |
| [@fluentui/react](https://github.com/microsoft/fluentui) | `8.125.6` | `8.125.7` |
| [@fluentui/react-components](https://github.com/microsoft/fluentui) | `9.74.1` | `9.74.3` |
| [@fluentui/react-datepicker-compat](https://github.com/microsoft/fluentui) | `0.6.32` | `0.6.34` |
| [@fluentui/react-file-type-icons](https://github.com/microsoft/fluentui) | `8.18.0` | `8.18.1` |
| [@fluentui/react-icons](https://github.com/microsoft/fluentui-system-icons) | `2.0.328` | `2.0.331` |
| [@microsoft/applicationinsights-react-js](https://github.com/microsoft/applicationinsights-react-js) | `19.4.0` | `19.4.1` |
| [@microsoft/applicationinsights-web](https://github.com/microsoft/ApplicationInsights-JS) | `3.4.1` | `3.4.2` |
| [i18next](https://github.com/i18next/i18next) | `26.3.0` | `26.3.4` |
| [marked](https://github.com/markedjs/marked) | `18.0.4` | `18.0.5` |
| [pdfjs-dist](https://github.com/mozilla/pdf.js) | `6.0.227` | `6.1.200` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.16.0` | `7.18.1` |
| [react-tiff](https://github.com/harundogdu/react-tiff) | `0.0.16` | `0.0.17` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.16` | `19.2.17` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.60.1` | `8.62.1` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.60.1` | `8.62.1` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.2` | `6.0.3` |
| [autoprefixer](https://github.com/postcss/autoprefixer) | `10.5.0` | `10.5.2` |
| [body-parser](https://github.com/expressjs/body-parser) | `2.2.2` | `2.3.0` |
| [eslint](https://github.com/eslint/eslint) | `10.4.1` | `10.6.0` |
| [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.5.2` | `0.5.3` |
| [postcss](https://github.com/postcss/postcss) | `8.5.15` | `8.5.16` |
| [prettier](https://github.com/prettier/prettier) | `3.8.3` | `3.9.4` |
| [sass](https://github.com/sass/dart-sass) | `1.100.0` | `1.101.0` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.3.0` | `4.3.2` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.16` | `8.1.2` |


Updates `@azure/msal-browser` from 5.11.0 to 5.16.0
- [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases)
- [Commits](AzureAD/microsoft-authentication-library-for-js@msal-browser-v5.11.0...msal-browser-v5.16.0)

Updates `@azure/msal-react` from 5.4.2 to 5.5.1
- [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases)
- [Commits](AzureAD/microsoft-authentication-library-for-js@msal-react-v5.4.2...msal-react-v5.5.1)

Updates `@fluentui/react` from 8.125.6 to 8.125.7
- [Release notes](https://github.com/microsoft/fluentui/releases)
- [Commits](https://github.com/microsoft/fluentui/commits)

Updates `@fluentui/react-components` from 9.74.1 to 9.74.3
- [Release notes](https://github.com/microsoft/fluentui/releases)
- [Commits](https://github.com/microsoft/fluentui/compare/@fluentui/react-components_v9.74.1...@fluentui/react-components_v9.74.3)

Updates `@fluentui/react-datepicker-compat` from 0.6.32 to 0.6.34
- [Release notes](https://github.com/microsoft/fluentui/releases)
- [Commits](https://github.com/microsoft/fluentui/compare/@fluentui/react-datepicker-compat_v0.6.32...@fluentui/react-datepicker-compat_v0.6.34)

Updates `@fluentui/react-file-type-icons` from 8.18.0 to 8.18.1
- [Release notes](https://github.com/microsoft/fluentui/releases)
- [Commits](https://github.com/microsoft/fluentui/compare/@fluentui/react-file-type-icons_v8.18.0...@fluentui/react-examples_v8.18.1)

Updates `@fluentui/react-icons` from 2.0.328 to 2.0.331
- [Changelog](https://github.com/microsoft/fluentui-system-icons/blob/main/docs/releases.md)
- [Commits](https://github.com/microsoft/fluentui-system-icons/commits)

Updates `@microsoft/applicationinsights-react-js` from 19.4.0 to 19.4.1
- [Release notes](https://github.com/microsoft/applicationinsights-react-js/releases)
- [Changelog](https://github.com/microsoft/applicationinsights-react-js/blob/main/RELEASES.md)
- [Commits](https://github.com/microsoft/applicationinsights-react-js/commits)

Updates `@microsoft/applicationinsights-web` from 3.4.1 to 3.4.2
- [Release notes](https://github.com/microsoft/ApplicationInsights-JS/releases)
- [Changelog](https://github.com/microsoft/ApplicationInsights-JS/blob/main/RELEASES.md)
- [Commits](https://github.com/microsoft/ApplicationInsights-JS/commits)

Updates `i18next` from 26.3.0 to 26.3.4
- [Release notes](https://github.com/i18next/i18next/releases)
- [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/i18next@v26.3.0...v26.3.4)

Updates `marked` from 18.0.4 to 18.0.5
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v18.0.4...v18.0.5)

Updates `pdfjs-dist` from 6.0.227 to 6.1.200
- [Release notes](https://github.com/mozilla/pdf.js/releases)
- [Commits](mozilla/pdf.js@v6.0.227...v6.1.200)

Updates `react-router-dom` from 7.16.0 to 7.18.1
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.1/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.1/packages/react-router-dom)

Updates `react-tiff` from 0.0.16 to 0.0.17
- [Commits](https://github.com/harundogdu/react-tiff/commits)

Updates `@types/react` from 19.2.16 to 19.2.17
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@typescript-eslint/eslint-plugin` from 8.60.1 to 8.62.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.1/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.60.1 to 8.62.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.1/packages/parser)

Updates `@vitejs/plugin-react` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.3/packages/plugin-react)

Updates `autoprefixer` from 10.5.0 to 10.5.2
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.5.0...10.5.2)

Updates `body-parser` from 2.2.2 to 2.3.0
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@v2.2.2...v2.3.0)

Updates `eslint` from 10.4.1 to 10.6.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.4.1...v10.6.0)

Updates `eslint-plugin-react-refresh` from 0.5.2 to 0.5.3
- [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases)
- [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md)
- [Commits](ArnaudBarre/eslint-plugin-react-refresh@v0.5.2...v0.5.3)

Updates `postcss` from 8.5.15 to 8.5.16
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.15...8.5.16)

Updates `prettier` from 3.8.3 to 3.9.4
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.3...3.9.4)

Updates `sass` from 1.100.0 to 1.101.0
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.100.0...1.101.0)

Updates `tailwindcss` from 4.3.0 to 4.3.2
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.2/packages/tailwindcss)

Updates `vite` from 8.0.16 to 8.1.2
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.1.2/packages/vite)

---
updated-dependencies:
- dependency-name: "@azure/msal-browser"
  dependency-version: 5.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-deps
- dependency-name: "@azure/msal-react"
  dependency-version: 5.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-deps
- dependency-name: "@fluentui/react"
  dependency-version: 8.125.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-deps
- dependency-name: "@fluentui/react-components"
  dependency-version: 9.74.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-deps
- dependency-name: "@fluentui/react-datepicker-compat"
  dependency-version: 0.6.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-deps
- dependency-name: "@fluentui/react-file-type-icons"
  dependency-version: 8.18.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-deps
- dependency-name: "@fluentui/react-icons"
  dependency-version: 2.0.331
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-deps
- dependency-name: "@microsoft/applicationinsights-react-js"
  dependency-version: 19.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-deps
- dependency-name: "@microsoft/applicationinsights-web"
  dependency-version: 3.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-deps
- dependency-name: i18next
  dependency-version: 26.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-deps
- dependency-name: marked
  dependency-version: 18.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-deps
- dependency-name: pdfjs-dist
  dependency-version: 6.1.200
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-deps
- dependency-name: react-router-dom
  dependency-version: 7.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: frontend-deps
- dependency-name: react-tiff
  dependency-version: 0.0.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: frontend-deps
- dependency-name: "@types/react"
  dependency-version: 19.2.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-deps
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.62.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-deps
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.62.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-deps
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-deps
- dependency-name: autoprefixer
  dependency-version: 10.5.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-deps
- dependency-name: body-parser
  dependency-version: 2.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-deps
- dependency-name: eslint
  dependency-version: 10.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-deps
- dependency-name: eslint-plugin-react-refresh
  dependency-version: 0.5.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-deps
- dependency-name: postcss
  dependency-version: 8.5.16
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-deps
- dependency-name: prettier
  dependency-version: 3.9.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-deps
- dependency-name: sass
  dependency-version: 1.101.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-deps
- dependency-name: tailwindcss
  dependency-version: 4.3.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-deps
- dependency-name: vite
  dependency-version: 8.1.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 1, 2026
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 1, 2026
@dependabot dependabot Bot added the javascript Pull requests that update Javascript code label Jul 1, 2026
@dependabot
dependabot Bot requested a review from dgp10801 as a code owner July 1, 2026 19:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Avijit-Microsoft Avijit-Microsoft Awaiting requested review from Avijit-Microsoft Avijit-Microsoft is a code owner
@Roopan-Microsoft Roopan-Microsoft Awaiting requested review from Roopan-Microsoft Roopan-Microsoft is a code owner
@aniaroramsft aniaroramsft Awaiting requested review from aniaroramsft aniaroramsft is a code owner
@toherman-msft toherman-msft Awaiting requested review from toherman-msft toherman-msft is a code owner
@nchandhi nchandhi Awaiting requested review from nchandhi nchandhi is a code owner
@dgp10801 dgp10801 Awaiting requested review from dgp10801 dgp10801 is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants