Bot Framework for JS SDK 4.22.3
This is the June 2024 patch release of the Bot Framework JS SDK. This release contains security updates.
What's Changed
- fix: Remove CVE-2020-28469 with with glob-parent 5.1.1 (High) by @JhontSouth in #4670
- fix: CodeQL SM04509 issue by @andres-robinet-sw in #4671
- bump: Upgrade axios version to ^1.7.2 by @JhontSouth in #4680
- fix: Remove CVE-2024-37890 vulnerability by updating the ws package by @sw-joelmut in #4683
- fix: Remove CVE-2020-36632 vulnerability by @JhontSouth in #4687
- fix: Remove CVE-2022-21680 vulnerability by @JhontSouth in #4688
- fix: Remove CVE-2022-21680 vulnerability by @JhontSouth in #4689
- fix: Remove CVE-2023-45133 vulnerability by @JhontSouth in #4691
- fix: CVE-2020-8203 with lodash.pick by @andres-robinet-sw in #4692
- fix: Remove CVE-2020-7774 vulnerability by updating the y18n package by @sw-joelmut in #4693
- fix: Remove CVE-2022-0144 vulnerability by @JhontSouth in #4695
- fix: Remove CVE-2024-4068 vulnerability by @JhontSouth in #4696
- feat: Support Single Tenant authentication through BotFramework-Emulator by @JhontSouth in #4643
- refactor: AgentSettings Circular Structure and improve internals by @sw-joelmut in #4641
- chore: Moved @types/jswebtoken (in both places) to dependencies. by @tracyboehrer in #4646
- chore: [#4636] Add more information to Tenant parameters by @sw-joelmut in #4649
- fix: SM03944 suppression by @tracyboehrer in #4654
- Removed unused build assets by @tracyboehrer in #4658
- fix: [#4657] bump the npm_and_yarn group across 2 directories with 20 updates by @JhontSouth in #4663
- fix: SM04509 suppression by @tracyboehrer in #4667
- fix: SM02383 suppression by @tracyboehrer in #4668
- fix: [#4483] Switching npm dependency bcrypt to bcryptjs by @JhontSouth in #4669