fix(deps): update dependency botbuilder to v4.23.1 #297
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
renovate
bot
force-pushed
the
renovate/botbuilder-4.x
branch
from
6697199 to
6a1bfac
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/botbuilder-4.x
branch
from
6a1bfac to
98729a3
Compare
renovate
bot
changed the title
renovate
bot
changed the title
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/botbuilder-4.x
branch
from
98729a3 to
6b4fb07
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/botbuilder-4.x
branch
from
6b4fb07 to
d7d13d6
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/botbuilder-4.x
branch
from
d7d13d6 to
a0f3f5e
Compare
renovate
bot
changed the title
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/botbuilder-4.x
branch
from
a0f3f5e to
32ea440
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/botbuilder-4.x
branch
from
32ea440 to
a731d75
Compare
renovate
bot
force-pushed
the
renovate/botbuilder-4.x
branch
from
a731d75 to
3c22b38
Compare
renovate
bot
changed the title
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/botbuilder-4.x
branch
from
3c22b38 to
d5a2ad4
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/botbuilder-4.x
branch
from
d5a2ad4 to
57684e5
Compare
renovate
bot
force-pushed
the
renovate/botbuilder-4.x
branch
from
57684e5 to
a50a7c0
Compare
renovate
bot
changed the title
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/botbuilder-4.x
branch
from
a50a7c0 to
aad5327
Compare
renovate
bot
force-pushed
the
renovate/botbuilder-4.x
branch
from
aad5327 to
f9b3da7
Compare
renovate
bot
changed the title
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/botbuilder-4.x
branch
from
f9b3da7 to
ac17714
Compare
renovate
bot
force-pushed
the
renovate/botbuilder-4.x
branch
from
ac17714 to
1a847df
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/botbuilder-4.x
branch
from
1a847df to
e7f979e
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/botbuilder-4.x
branch
from
e7f979e to
6b42ec1
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/botbuilder-4.x
branch
from
6b42ec1 to
6dc56e3
Compare
renovate
bot
changed the title
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
4.16.0->4.23.1Release Notes
Microsoft/botbuilder-js (botbuilder)
v4.23.1: Bot Framework JS SDK 4.23.1Compare Source
What's Changed
v4.23.0: Bot Framework JS SDK 4.23.0Compare Source
This is the August 2024 release of the Bot Framework JS SDK. This release contains Node 18 & 20 support, as well as security fixes.
NOTE
Due to the update to the last Azure Identity and MSAL.Node packages, Node versions prior to Node 18 are no longer supported. This is because those packages don't support out-of-support Node versions.
What's Changed
bump: [#4550] Add Node 18 and 20 support by @sw-joelmut in https://github.com/microsoft/botbuilder-js/pull/4726
fix: Remove CVE-2022-3517 vulnerability by @JhontSouth in https://github.com/microsoft/botbuilder-js/pull/4699
fix: Remove CVE-2022-25881 vulnerability by updating the http-cache-semantics package by @sw-joelmut in https://github.com/microsoft/botbuilder-js/pull/4703
fix: Remove CVE-2020-8203 vulnerability in lodash.set by @andres-robinet-sw in https://github.com/microsoft/botbuilder-js/pull/4704
fix: Remove CVE-2021-3807 vulnerability by @JhontSouth in https://github.com/microsoft/botbuilder-js/pull/4705
fix: Remove CVE-2022-23539 vulnerability by updating the jsonwebtoken packages by @sw-joelmut in https://github.com/microsoft/botbuilder-js/pull/4706
fix: Remove CVE-2022-3517 vulnerability with minimatch by @JhontSouth in https://github.com/microsoft/botbuilder-js/pull/4707
bump: semver from 5.7.1 to 7.6.2 by @dependabot in https://github.com/microsoft/botbuilder-js/pull/4710
bump: hosted-git-info from 2.8.8 to 2.8.9 by @dependabot in https://github.com/microsoft/botbuilder-js/pull/4711
bump: elliptic from 6.5.3 to 6.5.5 by @dependabot in https://github.com/microsoft/botbuilder-js/pull/4712
fix: Remove CVE-2020-28469 vulnerability by updating the glob-parent package by @sw-joelmut in https://github.com/microsoft/botbuilder-js/pull/4713
fix: Remove remaining vulnerabilities by updating the hosted-git-info, tar, semver, ejs, elliptic packages by @sw-joelmut in https://github.com/microsoft/botbuilder-js/pull/4714
fix: [#4684] Remove unnecessary resolutions by @sw-joelmut in https://github.com/microsoft/botbuilder-js/pull/4719
fix: Remove undefined value in @azure/msal-node by @JhontSouth in https://github.com/microsoft/botbuilder-js/pull/4718
bump: fast-xml-parser from 4.2.5 to 4.4.1 by @dependabot in https://github.com/microsoft/botbuilder-js/pull/4721
port: [#6813][#6798] Not able to create instance of BlobsTranscriptStore using TokenCredential instead of connectionString and containerName by @JhontSouth in https://github.com/microsoft/botbuilder-js/pull/4720
fix: Remove browser-echo-bot vulnerabilities by @JhontSouth in https://github.com/microsoft/botbuilder-js/pull/4717
fix: CVE-2024-42460 vulnerability with elliptic by @JhontSouth in https://github.com/microsoft/botbuilder-js/pull/4729
bump: axios from 1.7.2 to 1.7.4 by @dependabot in https://github.com/microsoft/botbuilder-js/pull/4730
port: [#6793][#6792] Composer Bot with QnA Intent recognized triggers duplicate QnA queries by @JhontSouth in https://github.com/microsoft/botbuilder-js/pull/4700
Full Changelog: microsoft/botbuilder-js@4.22.3...4.23.0
v4.22.3: Bot Framework for JS SDK 4.22.3Compare Source
This is the June 2024 patch release of the Bot Framework JS SDK. This release contains security updates.
What's Changed
v4.22.2: Bot Framework JS SDK 4.22.2Compare Source
This is the April 2024 JS SDK patch release. This release contains minor bug fixes and security updates.
What's Changed
Full Changelog: microsoft/botbuilder-js@4.22.1...4.22.2
v4.22.1Compare Source
v4.22.0: Bot Framework JS SDK 4.22.0Compare Source
This is the January 2024 4.22.0 release for the JS SDK. This contains a security fixes, Sharepoint support, and ASE improvements.
What's Changed
feat: Add ASE channel validation in https://github.com/microsoft/botbuilder-js/pull/4589
feat: Add isVisible property to AceData with nanoid in https://github.com/microsoft/botbuilder-js/pull/4606
feat: Support for SharePoint (Viva) Adaptive Card Extension in https://github.com/microsoft/botbuilder-js/pull/4551
fix: USGovSingleTenant OAuthEndpoint in https://github.com/microsoft/botbuilder-js/pull/4588
bump: Update mocha package to avoid vulnerability in https://github.com/microsoft/botbuilder-js/pull/4603
fix: [#4582] UserAssignedIdentity(WorkloadIdentity) auth fails with 'scope https://api.botframework.com is not valid' in https://github.com/microsoft/botbuilder-js/pull/4607
fix: Remove old @microsoft/recognizers-text-number version with postinstall scripts in https://github.com/microsoft/botbuilder-js/pull/4608
fix: [#4544] JwtTokenExtractor.getIdentity:err! FetchError: request to 'login.botframework.com/v1/.well-known/openidconfiguration' in https://github.com/microsoft/botbuilder-js/pull/4583
Proxy notes
The introduction of MSAL in 4.21.0 encountered an issue when used behind a proxy. This version adds an additional way to specify proxy settings. This does require a change to the bot startup code if required.
See this issue for details, and if additional discussion is required: https://github.com/microsoft/botbuilder-js/issues/4544
v4.21.4: Bot Framework JS SDK 4.21.4Compare Source
This is the January 2024 patch release for the JS SDK. This contains a security fix for axios.
What's Changed
NOTICE
Node versions 16 and older no longer have long-term support. Bot Framework SDK still supports Node 16, but users of the SDK should transition to at least Node 18 as soon as possible. We will not be able to continue supporting Node 16 and older bots with this SDK.
v4.21.3: Bot Framework JS SDK 4.21.3Compare Source
This is the December 2023 JS release. This release contains improvements to SN+I functionality.
v4.21.2Compare Source
v4.21.1: Bot Framework JS SDK 4.21.1Compare Source
This is the November 2023 Bot Framework JS SDK patch release. This release contains security related updates.
What's Changed
Full Changelog: microsoft/botbuilder-js@4.21.0...4.21.1
v4.21.0: Bot Framework JS SDK 4.21.0Compare Source
This is the October 2023 of the JS SDK. This release contains new Teams features and security fixes.
What's Changed
Teams
Other Changes
New Contributors
Full Changelog: microsoft/botbuilder-js@4.20.1...4.21.0
v4.20.3Compare Source
v4.20.2Compare Source
v4.20.1: Bot Framework JS SDK 4.20.1Compare Source
What's Changed
New Contributors
Full Changelog: microsoft/botbuilder-js@4.20.0...4.20.1
v4.20.0: Bot Framework for JS SDK 4.20.0Compare Source
This is the June 2023 release of the JavaScript SDK. This release contains Teams features and bug/security fixes.
What's Changed
Teams
Other
New Contributors
Full Changelog: microsoft/botbuilder-js@4.19.0...4.20.0
v4.19.3: Bot Framework JS SDK 4.19.3Compare Source
Welcome to the March 2023 release of the Bot Framework SDK.
What's Changed
v4.19.2: Bot Framework JS SDK 4.19.2Compare Source
Welcome to the February 2023 release of the Bot Framework SDK.
What's Changed
SSO
v4.19.1: Bot Framework JS SDK 4.19.1Compare Source
Welcome to the February 2023 release of the Bot Framework SDK.
What's Changed
Teams
v4.19.0: Bot Framework JS SDK 4.19.0Compare Source
Welcome to the January 2023 release of the Bot Framework SDK. This release has been focused on updating dependencies, bug fixes and general improvements.
What's Changed
Teams
Other
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.