Bump the all group across 1 directory with 55 updates

[dependabot]

Bumps the all group with 52 updates in the / directory:

Package	From	To
@anthropic-ai/claude-agent-sdk	0.2.5	0.2.19
@github/copilot	0.0.388	0.0.393
@google/genai	1.25.0	1.38.0
@sinclair/typebox	0.34.41	0.34.48
@vscode/extension-telemetry	1.2.0	1.3.0
@vscode/tree-sitter-wasm	0.0.5-php.2	0.0.5
@xterm/headless	5.5.0	6.0.0
applicationinsights	2.9.7	2.9.8
dompurify	3.3.0	3.3.1
isbinaryfile	5.0.4	6.0.0
lru-cache	11.1.0	11.2.4
undici	7.18.2	7.19.0
@azure/msal-node	3.6.3	5.0.2
@fluentui/react-components	9.66.6	9.72.10
@fluentui/react-icons	2.0.305	2.0.317
@keyv/sqlite	4.0.5	4.0.8
@octokit/types	14.1.0	16.0.0
@parcel/watcher	2.5.1	2.5.6
@types/node	22.16.3	22.19.7
@types/picomatch	4.0.0	4.0.2
@typescript-eslint/eslint-plugin	8.36.0	8.53.1
@typescript-eslint/parser	8.36.0	8.53.1
@typescript-eslint/typescript-estree	8.36.0	8.53.1
@vitest/coverage-v8	3.2.4	4.0.18
@vscode/test-cli	0.0.11	0.0.12
@vscode/test-web	0.0.71	0.0.78
@vscode/vsce	3.6.0	3.7.1
csv-parse	6.0.0	6.1.0
dotenv	17.2.0	17.2.3
electron	37.8.0	40.0.0
esbuild	0.25.6	0.27.2
eslint	9.30.1	9.39.2
eslint-plugin-jsdoc	51.3.4	62.4.0
fastq	1.19.1	1.20.1
glob	11.1.0	13.0.0
mobx	6.13.7	6.15.0
mobx-react-lite	4.1.0	4.1.1
open	10.1.2	11.0.0
openai	6.7.0	6.16.0
prettier	3.6.2	3.8.1
rimraf	6.0.1	6.1.2
shiki	1.15.2	3.21.0
sinon	21.0.0	21.0.1
@types/sinon	17.0.4	21.0.0
tar	7.5.4	7.5.6
tsx	4.20.3	4.21.0
typescript	5.8.3	5.9.3
typescript-eslint	8.36.0	8.53.1
vite-plugin-top-level-await	1.5.0	1.6.0
vitest	3.2.4	4.0.18
yaml	2.8.0	2.8.2
yargs	17.7.2	18.0.0

Updates @anthropic-ai/claude-agent-sdk from 0.2.5 to 0.2.19

Release notes

Sourced from @​anthropic-ai/claude-agent-sdk's releases.

v0.2.19

What's changed

• Added CLAUDE_CODE_ENABLE_TASKS env var, set to true to opt into the new task system

Update

npm install @anthropic-ai/claude-agent-sdk@0.2.19
# or
yarn add @anthropic-ai/claude-agent-sdk@0.2.19
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.2.19
# or
bun add @anthropic-ai/claude-agent-sdk@0.2.19

v0.2.17

What's changed

• Updated to parity with Claude Code v2.1.17

Update

npm install @anthropic-ai/claude-agent-sdk@0.2.17
# or
yarn add @anthropic-ai/claude-agent-sdk@0.2.17
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.2.17
# or
bun add @anthropic-ai/claude-agent-sdk@0.2.17

v0.2.16

What's changed

• Updated to parity with Claude Code v2.1.16

Update

npm install @anthropic-ai/claude-agent-sdk@0.2.16
# or
yarn add @anthropic-ai/claude-agent-sdk@0.2.16
# or
pnpm add @anthropic-ai/claude-agent-sdk@0.2.16
# or
bun add @anthropic-ai/claude-agent-sdk@0.2.16

... (truncated)

Changelog

Sourced from @​anthropic-ai/claude-agent-sdk's changelog.

0.2.19

• Added CLAUDE_CODE_ENABLE_TASKS env var, set to true to opt into the new task system

0.2.17

• Updated to parity with Claude Code v2.1.17

0.2.16

• Updated to parity with Claude Code v2.1.16

0.2.15

• Added notification hook support
• Added close() method to Query interface for forcefully terminating running queries
• Updated to parity with Claude Code v2.1.15

0.2.14

• Updated to parity with Claude Code v2.1.14

0.2.12

• Updated to parity with Claude Code v2.1.12

0.2.11

• Updated to parity with Claude Code v2.1.11

0.2.10

• Added skills and maxTurns configuration options to custom agent definitions.

0.2.9

• Updated to parity with Claude Code v2.1.9

0.2.8

• Updated to parity with Claude Code v2.1.8

0.2.7

• Updated to parity with Claude Code v2.1.7

0.2.6

• Updated to parity with Claude Code v2.1.6
• Added claudeCodeVersion field to package.json for programmatically determining compatible CLI version

Commits

• 3f6bc84 chore: Update CHANGELOG.md
• afc75b5 chore: Update CHANGELOG.md
• 913bcd4 chore: Update CHANGELOG.md
• 89c9605 chore: Update CHANGELOG.md
• d7ef093 chore: Update CHANGELOG.md
• 38d2c2d chore: Update CHANGELOG.md
• 77771ed chore: Update CHANGELOG.md
• 606b24c chore: Update CHANGELOG.md
• 11564de chore: Update CHANGELOG.md
• 45a3ab0 chore: Update CHANGELOG.md
• See full diff in compare view

Updates @github/copilot from 0.0.388 to 0.0.393

Release notes

Sourced from @​github/copilot's releases.

0.0.393

2026-01-23

• Show conversation compaction status as timeline messages instead of header indicator
• Memory loading no longer warns when outside a Git repository
• Add support for GHE Cloud (*.ghe.com) remote custom agents
• Plugin uninstall now works correctly
• Expose MCP server and tool names in tool.execution_start events for better error handling
• Add Esc-Esc to undo file changes to any previous snapshot

0.0.392

2026-01-22

• Add /plugin command for plugin marketplace management
• Add /rename command as alias for /session rename
• Add /plugin update command to update installed plugins
• Edit tool now displays diffs when expanded in timeline

0.0.390

2026-01-22

• Preserve extended thinking after compaction
• Custom agents with MCP servers avoid unnecessary restarts
• Enable steering during plan mode

0.0.389

2026-01-22

• Improve /session command visual hierarchy and colors
• Subagents receive correct tools when using different models
• grep and glob tools now find hidden files and dotfiles
• Add MSI installer for Windows
• Remove Node version requirement from npm package
• MCP servers can now authenticate using OAuth 2.0 with automatic token management and refresh
• Display progress messages from MCP tools in timeline
• Plugins can bundle MCP servers that load automatically when installed
• Invoke skills using slash commands like /skill-name
• Add /diff command to review changes made during the current session
• Show warning when repository memory fails to load
• Subagents no longer hang on user input requests
• Rate limit errors now show retry timing in user-friendly messages
• Messages sent during /compact are automatically queued
• Add /models as alias for /model command
• Change license to MIT License
• Reduce padding in welcome header
• Shell commands (!) can run in parallel while agent is working

0.0.389-1

Pre-release 0.0.389-1

... (truncated)

Changelog

Sourced from @​github/copilot's changelog.

0.0.393 - 2026-01-23

• Show conversation compaction status as timeline messages instead of header indicator
• Memory loading no longer warns when outside a Git repository
• Add support for GHE Cloud (*.ghe.com) remote custom agents
• Plugin uninstall now works correctly
• Expose MCP server and tool names in tool.execution_start events for better error handling
• Add Esc-Esc to undo file changes to any previous snapshot

0.0.392 - 2026-01-22

• Add /plugin command for plugin marketplace management
• Add /rename command as alias for /session rename
• Add /plugin update command to update installed plugins
• Edit tool now displays diffs when expanded in timeline

0.0.390 - 2026-01-22

• Preserve extended thinking after compaction
• Custom agents with MCP servers avoid unnecessary restarts
• Enable steering during plan mode

0.0.389 - 2026-01-22

• Improve /session command visual hierarchy and colors
• Subagents receive correct tools when using different models
• grep and glob tools now find hidden files and dotfiles
• Add MSI installer for Windows
• Remove Node version requirement from npm package
• MCP servers can now authenticate using OAuth 2.0 with automatic token management and refresh
• Display progress messages from MCP tools in timeline
• Plugins can bundle MCP servers that load automatically when installed
• Invoke skills using slash commands like /skill-name
• Add /diff command to review changes made during the current session
• Show warning when repository memory fails to load
• Subagents no longer hang on user input requests
• Rate limit errors now show retry timing in user-friendly messages
• Messages sent during /compact are automatically queued
• Add /models as alias for /model command
• Change license to MIT License
• Reduce padding in welcome header
• Shell commands (!) can run in parallel while agent is working

Commits

• 7b4edbe Update changelog.md for version 0.0.392
• bac618d Merge pull request #1078 from github/RyanHecht-patch-1
• 9497418 Update LICENSE.md
• d3fe864 Update changelog.md for version 0.0.390
• 8409aaf Merge pull request #1066 from github/devm33-patch-1
• 800ee0d Change splash screen image for Copilot CLI
• 7e5e619 Change splash screen image for Copilot CLI
• 2d5b487 Merge pull request #1060 from github/fix-changelog
• cf2d163 Correct changelog
• 80859fc Update changelog.md for version 0.0.389
• Additional commits viewable in compare view

Updates @google/genai from 1.25.0 to 1.38.0

Release notes

Sourced from @​google/genai's releases.

v1.38.0

1.38.0 (2026-01-20)

Features

• Add ModelArmorConfig support for prompt and response sanitization via the Model Armor service (be65c24)
• Allow custom endpoints for authentication with Vertex AI in Typescript (891e32d), closes #1137
• Update data types from discovery doc. (a16a180)
• Update data types from discovery doc. (a4eaa8c)

v1.37.0

1.37.0 (2026-01-15)

Features

• Support 4:5 and 5:4 aspect ratio in Interactions (5294da2)

v1.36.0

1.36.0 (2026-01-14)

Features

• Add FileSearchCallContent to Interactions (ccf11a4)
• Add ImageConfig to GenerationConfig for image generation in Interactions (f34b6fb)
• Support JS local tokenizer (bb429ad)
• voice activity support (3ad1011)

v1.35.0

1.35.0 (2026-01-07)

Features

• [Python] add RegisterFiles so gcs files can be used with genai. (1bf555c)
• Add PersonGeneration to ImageConfig for Vertex Gempix (b0753d7)

v1.34.0

1.34.0 (2025-12-16)

Features

• Add minimal and medium thinking levels. (19f8969)
• Add support for Struct in ToolResult Content. (750a4f7)
• Add ultra high resolution to the media resolution in Parts. (fa9a99e)
• Add ULTRA_HIGH MediaResolution and new ThinkingLevel enums (b8a7d8c)
• Define and use DocumentMimeType for DocumentContent (c2f118d)

... (truncated)

Changelog

Sourced from @​google/genai's changelog.

1.38.0 (2026-01-20)

Features

• Add ModelArmorConfig support for prompt and response sanitization via the Model Armor service (be65c24)
• Allow custom endpoints for authentication with Vertex AI in Typescript (891e32d), closes #1137
• Update data types from discovery doc. (a16a180)
• Update data types from discovery doc. (a4eaa8c)

1.37.0 (2026-01-15)

Features

• Support 4:5 and 5:4 aspect ratio in Interactions (5294da2)

1.36.0 (2026-01-14)

Features

• Add FileSearchCallContent to Interactions (ccf11a4)
• Add ImageConfig to GenerationConfig for image generation in Interactions (f34b6fb)
• Support JS local tokenizer (bb429ad)
• voice activity support (3ad1011)

1.35.0 (2026-01-07)

Features

• [Python] add RegisterFiles so gcs files can be used with genai. (1bf555c)
• Add PersonGeneration to ImageConfig for Vertex Gempix (b0753d7)

1.34.0 (2025-12-16)

Features

• Add minimal and medium thinking levels. (19f8969)
• Add support for Struct in ToolResult Content. (750a4f7)
• Add ultra high resolution to the media resolution in Parts. (fa9a99e)
• Add ULTRA_HIGH MediaResolution and new ThinkingLevel enums (b8a7d8c)
• Define and use DocumentMimeType for DocumentContent (c2f118d)
• support multi speaker for Vertex AI (94d681b)

1.33.0 (2025-12-11)

... (truncated)

Commits

• 0055069 chore(main): release 1.38.0 (#1258)
• 891e32d feat: Allow custom endpoints for authentication with Vertex AI in Typescript
• a16a180 feat: Update data types from discovery doc.
• a4eaa8c feat: Update data types from discovery doc.
• 2389c32 test: Suppress compilation issues with TypeScript 5.9.
• cc86058 chore: Update documentation for the background parameter.
• be65c24 feat: Add ModelArmorConfig support for prompt and response sanitization via t...
• d136c02 Copybara import of the project:
• e8c5bef chore(main): release 1.37.0 (#1256)
• f702b73 Copybara import of the project:
• Additional commits viewable in compare view

Updates @sinclair/typebox from 0.34.41 to 0.34.48

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​sinclair/typebox since your current version.

Updates @vscode/extension-telemetry from 1.2.0 to 1.3.0

Release notes

Sourced from @​vscode/extension-telemetry's releases.

v1.3.0

Changes:

Feature Requests:

• #234: Add GitHub telemetry support with custom endpoints and per-event tag overrides

This list of changes was auto generated.

Commits

• 0d954f0 Merge pull request #234 from microsoft/vijayu/appInsightsGHUpdate
• 4b7b9cc cleanup
• d6bafee simplification
• fef5894 Add test and few other changes
• 85e54fa update lock
• b97f783 bump version and update readme
• 957230a add strong types
• 318015e Update telemetry lib to support custom tags and overrides
• See full diff in compare view

Updates @vscode/tree-sitter-wasm from 0.0.5-php.2 to 0.0.5

Release notes

Sourced from @​vscode/tree-sitter-wasm's releases.

v0.0.5

Changes:

• #19: 0.0.5
• #18: Add docker integration note
• #17: [Suggestion] Add need enable Docker integration for WSL in the installation guild
• #16: Add more languages
• #15: chore: bump wasmtime
• #14: chore: ignore docs directory for CG

This list of changes was auto generated.

Commits

• See full diff in compare view

Updates @xterm/headless from 5.5.0 to 6.0.0

Release notes

Sourced from @​xterm/headless's releases.

6.0.0

Features

• #5453 Add synchronized output support (DEC mode 2026)
• #5436 add range to IHTMLSerializeOptions
• #5334 Support shadow dom in webgl renderer
• #5285 Support detailed ligatures and variants
• #5251 progress-addon
• #5234 Add reflowCursorLine option
• #5224 putty-style ED2 sequence handling as terminal option
• #5107 Add top/bottom border overview ruler options
  • ⚠️ This is a breaking change, ITerminalOptions.overviewRulerWidth is now a property of ITerminalOptions.overviewRuler
• #5096 Integrate base/ platform from VS Code and adopt scroll bar
  • ⚠️ This is a potential breaking change, the viewport/scroll bar works very differently now
• #5092 Add support for ESM via esbuild
• #5034 Expose onWriteParsed on API
• #4220 Add support to ANSI OSC52

Fixes

• #5445 Prefer performance.now() over Date.now()
• #5437 Prevent entire page from scrolling when scrolling in alt buffer with mouse event off
• #5423 Clear selection on vertical resize
• #5411 Fix teleport when exiting out of alt buffer. v2
• #5391 Bring back partial wheel tracking
• #5390 Fix scrollbar teleport after exiting alt buffer
• #5386 fix: ensure that currentRow can not go out of the range
• #5385 Fix terminal find when wrapped
• #5355 Add note about reverse tabnapping
• #5346 Remove alt -> ctrl+arrow hack in favor of embedder-specific solutions
  • ⚠️ This is a breaking change, you will need to add keybindings in your code if you want alt to map to ctrl still
• #5337 Fix finding terms across wrapped lines
• #5335 webgl: Ignore alpha channel when allowTransparency is false
• #5328 Refresh viewport after clear or ED
• #5305 Fix issue where listeners remain after WebglRenderer throws
• #5291 Make ProgressAddon.onChange non undefined
• #5282 Fixed CapsLock triggering input twice in MacOS.
• #5279 Fixes: #5270 regex case-sensitive should behave like monaco
• #5278 Handle glyph widths up to the maximum device texture size
• #5277 Disable ligatures when cursor is in range
• #5276 Fix selection rendering on ligatures in both renderers
• #5265 Revert to cursor options after DECSCUSR 0
• #5263 Make textarea readonly when disableStdin is set
• #5262 Blend cursorAccent with background too
• #5260 Blend cursor with background to support alpha in webgl
• #5253 bug: properly render the terminal when open() is called again
• #5249 Fix click event bug caused by DomRenderer replaceChildren behavior
• #5209 Ensure last ligature cell is updated
• #5208 Set liga font feature when ligatures is enabled
• #5182 fix #5181

... (truncated)

Commits

• f447274 Merge pull request #5463 from Tyriar/tyriar/v6
• f68d1e5 Skip sync output tests for now
• 30691e8 v6.0.0, bump addon versions, publish unicode graphemes
• 5fa6325 Merge pull request #5462 from Tyriar/tyriar/deprecated
• 3571d1f Remove windowsMode in favor of windowsPty
• ebc0d83 Remove deprecated/unused fastScrollModifier
• d1c50c1 Merge pull request #5461 from Tyriar/tyriar/glob
• 92b43bd Remove only
• a9d3ca1 Merge pull request #5449 from iSuslov/exports/esm-headless-node
• cb4d1ef Merge pull request #5453 from chrislloyd/feat/synchronized-output
• Additional commits viewable in compare view

Updates applicationinsights from 2.9.7 to 2.9.8

Commits

• See full diff in compare view

Updates dompurify from 3.3.0 to 3.3.1

Release notes

Sourced from dompurify's releases.

DOMPurify 3.3.1

• Updated ADD_FORBID_CONTENTS setting to extend default list, thanks @​MariusRumpf
• Updated the ESM import syntax to be more correct, thanks @​binhpv

Commits

• 6fc446a Merge pull request #1175 from cure53/main
• 3b3bf91 Merge branch 'main' of github.com:cure53/DOMPurify
• 9863f41 chore: Preparing 3.3.1 release
• b4e0295 chore: Preparing 3.3.0 release
• 077746b build(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 (#1170)
• 4de68bb build(deps): bump actions/checkout from 5 to 6 (#1171)
• 4c76b6f Use correct ESM import syntax (#1173)
• 27e8496 Merge pull request #1168 from MariusRumpf/add-forbid-contents
• a920096 Add ADD_FORBID_CONTENTS setting to extend default list
• ac64660 Merge pull request #1163 from cure53/dependabot/github_actions/actions/setup-...
• Additional commits viewable in compare view

Updates isbinaryfile from 5.0.4 to 6.0.0

Release notes

Sourced from isbinaryfile's releases.

v6.0.0

6.0.0 (2025-12-05)

⚠ BREAKING CHANGES

• add encoding hints

Features

• add encoding hints (7171398)

Bug Fixes

• fix protobuf processing causing index out of range errors (913ecb0)
• fix protobuf processing causing index out of range errors (d39d2c0)
• handle errors in isBinaryFile function with try-catch 🐛 (ae76dba)
• handle errors in isBinaryFile function with try-catch 🐛 (a78a3b8)
• handle UTF-8 multibyte sequences truncated at buffer boundary (a9d483b)
• handle UTF-8 multibyte sequences truncated at buffer boundary (4832a7c)
• update CI workflow triggers for pull requests 🔧 (298e604)

Changelog

Sourced from isbinaryfile's changelog.

6.0.0 (2025-12-05)

⚠ BREAKING CHANGES

• add encoding hints

Features

• add encoding hints (7171398)

Bug Fixes

• fix protobuf processing causing index out of range errors (913ecb0)
• fix protobuf processing causing index out of range errors (d39d2c0)
• handle errors in isBinaryFile function with try-catch 🐛 (ae76dba)
• handle errors in isBinaryFile function with try-catch 🐛 (a78a3b8)
• handle UTF-8 multibyte sequences truncated at buffer boundary (a9d483b)
• handle UTF-8 multibyte sequences truncated at buffer boundary (4832a7c)
• update CI workflow triggers for pull requests 🔧 (298e604)

Commits

• a34abbe Merge pull request #99 from gjtorikian/release-please--branches--main--compon...
• 0ada2b2 chore(main): release 6.0.0
• 65ce3d8 Merge pull request #98 from gjtorikian/fixes
• 20e95cd add "esModuleInterop": true
• 7171398 feat!: add encoding hints
• f0ac14a add regression test
• c9d4948 update release workflows
• 44c46dd split tests
• dbf607d protect against too large bounds
• bec05bc switch to ESM
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for isbinaryfile since your current version.

Updates lru-cache from 11.1.0 to 11.2.4

Changelog

Sourced from lru-cache's changelog.

cringe lorg

11.2

• Add the perf option to specify performance, Date, or any other object with a now() method that returns a number.

11.1

• Add the onInsert method

11.0

• Drop support for node less than v20

10.4

• Accidental minor update, should've been patch.

10.3

• add forceFetch() method
• set disposeReason to 'expire' when it's the result of a TTL expiration, or 'fetch' when it's the result of an aborted or undefined-returning fetch()
• add memo() method

10.2

• types: implement the Map<K, V> interface

10.1

• add cache.info(key) to get value as well as ttl and size information.

10.0

• cache.fetch() return type is now Promise<V | undefined> instead of Promise<V | void>. This is an irrelevant change practically speaking, but can require changes for TypeScript users.

9.1

• cache.set(key, undefined) is now an alias for cache.delete(key)

9.0

... (truncated)

Commits

• e4ea6c8 11.2.4
• 4c6930e consistent prettier setting
• f29fceb autopurge: also clear timers for eviction, clear()
• 05d673b 11.2.3
• 49b3fbe clean up Timer objects when using ttlAutopurge
• b7b7c4e BlueOak-1.0.0
• e5df0bb ci: get rid of tests for dead node versions
• 375406d 11.2.2
• 8a102c6 Allow ignored-abort fetches to update cache
• fa211ba 11.2.1
• Additional commits viewable in compare view

Updates undici from 7.18.2 to 7.19.0

Release notes

Sourced from undici's releases.

v7.19.0

What's Changed

• fix: Handle FormData body type correctly in RetryAgent retried requests by @​eliotschu in nodejs/undici#4692
• feat(client): expose HTTP/2 flow-control options by @​pabloelisseo in nodejs/undici#4706
• Implement origin normalization in MockAgent for case-insensitivity and URL handling by @​SksOp in nodejs/undici#4731
• fix websocket basic auth by @​KhafraDev in nodejs/undici#4747
• fix(cache): regenerate stream from source when cache.match is called after GC by @​mcollina in nodejs/undici#4713
• chore: use testcontext for test:cache by @​Uzlopak in nodejs/undici#4571
• chore: use testcontext for subresource integrity tests by @​Uzlopak in nodejs/undici#4575
• feat(cache): add origins option for whitelist filtering by @​mcollina in nodejs/undici#4739
• ci: test shared-builtin only on Node.js 24 and 25 by @​mcollina in nodejs/undici#4746
• fix websocketstream open error by @​KhafraDev in nodejs/undici#4748

New Contributors

• @​eliotschu made their first contribution in nodejs/undici#4692
• @​pabloelisseo made their first contribution in nodejs/undici#4706
• @​SksOp made their first contribution in nodejs/undici#4731

Full Changelog: nodejs/undici@v7.18.2...v7.19.0

Commits

• 761fce9 fix websocketstream open error (#4748)
• 9ec9160 Bumped v7.19.0 (#4751)
• 491f760 ci: test shared-builtin only on Node.js 24 and 25 (#4746)
• cc2ec56 feat(cache): add origins option for whitelist filtering (#4739)
• 8fd6c43 chore: use testcontest for subresource integrity tests (#4575)
• 2346cd2 chore: use testcontext for test:cache (#4571)
• 847419f fix(cache): regenerate stream from source when cache.match is called after GC...
• 3388513 fix websocket basic auth (#4747)
• 250efc8 Implement origin normalization in MockAgent for case-insensitivity and URL ha...
• 5ebef90 feat(client): expose HTTP/2 flow-control options (#4706)
• Additional commits viewable in compare view

Updates @azure/msal-node from 3.6.3 to 5.0.2

Release notes

Sourced from @​azure/msal-node's releases.

@​azure/msal-angular v5.0.2

5.0.2

Sat, 17 Jan 2026 03:11:36 GMT

Major changes

• dx: Fix InjectionToken types to allow new Angular 14+ inject(TOKEN) syntax. (bradkovach@gmail.com)
• Drop support for Angular 17 and below, add support for Angular 20 (thomas.norling@microsoft.com)
• Remove deprecated functions and parameters (shylasummers@microsoft.com)
• Upgrade MSAL Angular to Angular 19 (shylasummers@microsoft.com)
• Update handleRedirectPromise signature to consolidate hash into options type (hemoral@microsoft.com)
• Bump @​azure/msal-browser to v5.0.0-alpha.0 (beachball)
• Bump eslint-config-msal to v0.0.0 (beachball)

Minor changes

• Make correlation id mandatory for Logger calls #8071 (kshabelko@microsoft.com)
• Update rxjs dependency #7726 (joarroyo@microsoft.com)

Patches

• Bump @​azure/msal-browser to v5.0.2 (beachball)
• Bump eslint-config-msal to v0.0.0 (beachball)
• Remove beta tag (joarroyo@microsoft.com)
• Bump @​azure/msal-browser to v5.0.1 (beachball)
• Bump eslint-config-msal to v0.0.0 (beachball)
• Remove legacy APIs (shylasummers@microsoft.com)

Changes

• Mark package for prerelease (beta) (msaljsbuilds@microsoft.com)
• Bump to pre-release alpha (hemoral@microsoft.com)
• Remove dependency on msal-browser Util functions #8122 (thomas.norling@microsoft.com)
• Bump @​azure/msal-browser to v5.0.0-beta.0 (beachball)
• Bump eslint-config-msal to v0.0.0 (beachball)

@​azure/msal-browser v5.0.2

5.0.2

Sat, 17 Jan 2026 03:11:36 GMT

Major changes

• Remove onRedirectNavigate from endSessionRequest #8066 (shylasummers@microsoft.com)
• Remove getAccountBy APIs at controller level #7807 (hemoral@microsoft.com)
• Bump @​azure/msal-common to v16.0.0-beta.0 (beachball)
• Refactor event types and InteractionStatus to be more concise #8009 (shylasummers@microsoft.com)
• Changes asyncPopups to navigatePopups in Configuration #7812 (joarroyo@microsoft.com)
• Move navigateToLoginRequestUrl to request config (hemoral@microsoft.com)

... (truncated)

Commits

• 3818d73 Release PR: official (#8249)
• efc1ae6 loadExternalTokens bug fixes (#8242)
• eeeab87 Fix v4 E2E Tests Post v5 Release (#8246)
• 2f933b4 Release PR: official (#8232)
• da207d2 Add telemetry support for loading external tokens and related events (#8231)
• ff590c2 RT Expiry Telemetry (#8224)
• d86bde8 Track ApiId when getting and setting accounts in cache (#8219)
• c5abda8 Update 3p-e2e pipelines and native auth e2e tests (#8200)

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.