[dependabot]

Bumps @azure/msal-node to 7.2.1 and updates ancestor dependency @azure/identity. These dependencies need to be updated together.

Updates @azure/msal-node from 5.2.5 to 7.2.1

Release notes

Sourced from @​azure/msal-node's releases.

@​azure/msal-node v7.2.1

7.2.1

Fri, 06 Nov 2026 23:13:16 GMT

Patches

• Bump @​azure/msal-common to v16.16.1 (beachball)

@​azure/msal-node v7.2.0

7.2.0

Thu, 05 Nov 2026 01:03:50 GMT

Minor changes

• Bump @​azure/msal-common to v16.16.0 (beachball)

Patches

• Bind interactive browser authorization responses to per-request state #8952 (undefined)

@​azure/msal-node v7.1.2

7.1.2

Tue, 27 Oct 2026 18:15:10 GMT

Patches

• Bump @​azure/msal-common to v16.15.0 (beachball)

@​azure/msal-node v7.1.1

7.1.1

Wed, 21 Oct 2026 18:37:17 GMT

Patches

• Bump @​azure/msal-common to v16.14.3 (beachball)

@​azure/msal-node v7.1.0

7.1.0

Tue, 13 Oct 2026 22:26:37 GMT

Minor changes

• Sanitize authorization code payloads and reject unsupported instance-aware inputs for confidential clients. #8901 (hemoral@microsoft.com)

@​azure/msal-node v7.0.2

... (truncated)

Commits

• 5901161 Update Angular and Vite tooling dependencies (#8976)
• f0dfcc4 Update Azure Identity in E2E tooling (#8972)
• 1fbbf4f Fix native token-cache isolation for brokered child requests (#8971)
• ae17990 Defer sign-in after reset MFA and sign-up/reset JIT (#8973)
• 9b79aa4 Fix Native Auth V2 error classification (#8961)
• e1616ab Add Native Auth V2 password reset MFA support (#8963)
• 403efba Align Native Auth V2 sign-up start with API (#8940)
• a47ebbf Native Auth V2: add experimental warnings and remove upfront sign-in password...
• 0d0a031 Post-release PR (#8969)
• a8a8141 Upgrade compatible dependencies to address security advisories (#8965)
• Additional commits viewable in compare view

Updates @azure/identity from 4.13.1 to 4.14.1

Changelog

Sourced from @​azure/identity's changelog.

4.14.1 (2026-10-29)

Bugs Fixed

• Restored the fix from 4.13.3 that forwards constructor options from DefaultAzureCredential to ManagedIdentityCredential when selected through AZURE_TOKEN_CREDENTIALS, including managedIdentityClientId and managedIdentityResourceId. #40547

Other Changes

• Updated @azure/msal-node to ^7.1.0. Interactive browser authentication now requires form_post callbacks, as described in the MSAL Node v7 migration guide. #40532

4.15.0-beta.1 (2026-10-14)

Features Added

• Added GitHubActionsCredential for authenticating to Microsoft Entra ID using GitHub Actions OIDC federated identity credentials. This credential reads AZURE_TENANT_ID, AZURE_CLIENT_ID, ACTIONS_ID_TOKEN_REQUEST_URL, and ACTIONS_ID_TOKEN_REQUEST_TOKEN from the environment and exchanges the GitHub OIDC token for an Azure access token. Sovereign cloud audience is derived automatically from authorityHost. #38581

4.14.0 (2026-10-14)

This release includes all changes introduced in versions 4.14.0-beta.1 through 4.14.0-beta.5.

Bugs Fixed

• Fixed AzurePipelinesCredential to include only relevant details in error messages and logs when the OIDC token request fails. #39774
• Fixed InteractiveBrowserCredential failing to authenticate when the user's default browser is already running and only permits a single instance. The browser is no longer launched with newInstance, which on macOS passed open --new. #39814
• Fixed EnvironmentCredential and DefaultAzureCredential ignoring the AZURE_ADDITIONALLY_ALLOWED_TENANTS environment variable. If the additionallyAllowedTenants option is also set, the option takes precedence. #40221

Other Changes

• Preserve caught errors as the cause when wrapping them. #39423
• Updated @azure/msal-node to ^6.0.0. #39965

4.13.3 (2026-09-10)

Features Added

• Bumped the minimum @azure/msal-node dependency to ^6.0.0 to provide Azure Arc user-assigned managed identity support. #39927

Bugs Fixed

• Fixed AzurePipelinesCredential to include only relevant details in error messages and logs when the OIDC token request fails. #39774
• Fixed InteractiveBrowserCredential failing to authenticate when the user's default browser is already running and only permits a single instance. The browser is no longer launched with newInstance, which on macOS passed open --new. #39814
• Fixed an issue where DefaultAzureCredential does not pass constructor options to ManagedIdentityCredential when selected through AZURE_TOKEN_CREDENTIALS. #39927

Other Changes

• Preserve caught errors as the cause when wrapping them. #39423

4.14.0-beta.5 (2026-08-12)

Other Changes

... (truncated)

Commits

• 56472b9 [Identity] Set 4.14.1 release date to October 29, 2026
• 8881515 [Identity] Backport 4.13.3 fixes and finalize 4.14.1 changelog
• 89ef212 [Identity] Backport MSAL Node v7 for 4.14.1
• 4fb292a [Identity] GA Identity Binding Feature (#40297)
• a369673 [Identity] Add AKS Identity Binding Test For Weekly Pipeline (#40256)
• 8a46161 Upgrade dotenv to 18.0.5 (#40240)
• f814748 [identity] Fix EnvironmentCredential ignoring AZURE_ADDITIONALLY_ALLOWED_TENA...
• 5fadd99 Add GitHubActionsCredential for GitHub Actions OIDC federation (#38581)
• 2b86f77 [Identity] Migrate to MSAL v6 (#39965)
• fcb12a4 [identity] Don't force a new browser instance when opening the auth page (#39...
• Additional commits viewable in compare view