search

pnp / sp-dev-fx-controls-react

Reusable React controls for SPFx solutions
https://pnp.github.io/sp-dev-fx-controls-react/
MIT License
383 stars 380 forks source link

Bump adaptive-expressions from 4.21.1 to 4.22.1 #1754

Closed dependabot[bot] closed 7 months ago

dependabot[bot] commented 7 months ago

Bumps adaptive-expressions from 4.21.1 to 4.22.1.

Release notes

Sourced from adaptive-expressions's releases.

Bot Framework JS SDK 4.22.0

This is the January 2024 4.22.0 release for the JS SDK. This contains a security fixes, Sharepoint support, and ASE improvements.

What's Changed

Proxy notes

The introduction of MSAL in 4.21.0 encountered an issue when used behind a proxy. This version adds an additional way to specify proxy settings. This does require a change to the bot startup code if required.

image

See this issue for details, and if additional discussion is required: microsoft/botbuilder-js#4544

Bot Framework JS SDK 4.21.4

This is the January 2024 patch release for the JS SDK. This contains a security fix for axios.

What's Changed

NOTICE Node versions 16 and older no longer have long-term support. Bot Framework SDK still supports Node 16, but users of the SDK should transition to at least Node 18 as soon as possible. We will not be able to continue supporting Node 16 and older bots with this SDK.

Bot Framework JS SDK 4.21.3

This is the December 2023 JS release. This release contains improvements to SN+I functionality.

Commits
  • 581156b use npm to run postinstall scripts (#4611)
  • f09c538 fix: #4582 UserAssignedIdentity(WorkloadIdentity) auth fails with 'scope ht...
  • e9c44b9 fix: Remove old @​microsoft/recognizers-text-number version with postinstall s...
  • a0bd4bd feat: Add isVisible property to AceData (#4606)
  • 1f74561 fix: #4544 JwtTokenExtractor.getIdentity:err! FetchError: request to https:...
  • f597523 fix: add content type header (#4587)
  • 18edf17 update mocha package to avoid vulnerability with nanoid (#4603)
  • 21e7caa feat: Add ASE channel validation. (#4589)
  • aa83fbe fix: USGovSingleTenant OAuthEndpoint (#4588)
  • 9e74976 include http method in fetch request (#4593)
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 7 months ago

The following labels could not be found: npm dependencies.