Merge to release by Rick-Kirkham · Pull Request #193 · OfficeDev/Office-Addin-TaskPane-SSO-JS

Rick-Kirkham · 2026-06-23T21:05:50Z

Change Description:

Releasing the last year's updates to release

Do these changes impact any npm scripts commands (in package.json)? (e.g., running 'npm run start')
no
Do these changes impact VS Code debugging options (launch.json)?
no
Do these changes impact template output? (e.g., add/remove file, update file location, update file contents)
yes
Do these changes impact documentation? (e.g., a tutorial on https://docs.microsoft.com/en-us/office/dev/add-ins/overview/office-add-ins)
yes

If you answered yes to any of these please do the following:
> Include 'Rick-Kirkham' in the review
> Make sure the README file is correct

Validation/testing performed:

N/A

Bumps [tar-fs](https://github.com/mafintosh/tar-fs) from 2.1.2 to 2.1.3. - [Commits](https://github.com/mafintosh/tar-fs/commits) --- updated-dependencies: - dependency-name: tar-fs dependency-version: 2.1.3 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Alex Jerabek <38896772+AlexJerabek@users.noreply.github.com>

Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server) from 5.1.0 to 5.2.1. - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v5.1.0...v5.2.1) --- updated-dependencies: - dependency-name: webpack-dev-server dependency-version: 5.2.1 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Alex Jerabek <38896772+AlexJerabek@users.noreply.github.com>

Bumps [form-data](https://github.com/form-data/form-data) from 4.0.2 to 4.0.4. - [Release notes](https://github.com/form-data/form-data/releases) - [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md) - [Commits](form-data/form-data@v4.0.2...v4.0.4) --- updated-dependencies: - dependency-name: form-data dependency-version: 4.0.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Alex Jerabek <38896772+AlexJerabek@users.noreply.github.com>

Co-authored-by: github-actions <github-actions@github.com>

Automatically run npm audit fix

Bumps [tar-fs](https://github.com/mafintosh/tar-fs) from 2.1.3 to 2.1.4. - [Commits](mafintosh/tar-fs@v2.1.3...v2.1.4) --- updated-dependencies: - dependency-name: tar-fs dependency-version: 2.1.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [validator](https://github.com/validatorjs/validator.js) from 13.15.15 to 13.15.20. - [Release notes](https://github.com/validatorjs/validator.js/releases) - [Changelog](https://github.com/validatorjs/validator.js/blob/master/CHANGELOG.md) - [Commits](validatorjs/validator.js@13.15.15...13.15.20) --- updated-dependencies: - dependency-name: validator dependency-version: 13.15.20 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…tor-13.15.20 Bump validator from 13.15.15 to 13.15.20

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.0 to 4.1.1. - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.1.0...4.1.1) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…l-4.1.1 Bump js-yaml from 4.1.0 to 4.1.1

Bumps [glob](https://github.com/isaacs/node-glob) from 10.4.5 to 10.5.0. - [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md) - [Commits](isaacs/node-glob@v10.4.5...v10.5.0) --- updated-dependencies: - dependency-name: glob dependency-version: 10.5.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [on-headers](https://github.com/jshttp/on-headers) to 1.1.0 and updates ancestor dependencies [on-headers](https://github.com/jshttp/on-headers), [morgan](https://github.com/expressjs/morgan) and [office-addin-sso](https://github.com/OfficeDev/Office-Addin-Scripts). These dependencies need to be updated together. Updates `on-headers` from 1.0.2 to 1.1.0 - [Release notes](https://github.com/jshttp/on-headers/releases) - [Changelog](https://github.com/jshttp/on-headers/blob/master/HISTORY.md) - [Commits](jshttp/on-headers@v1.0.2...v1.1.0) Updates `morgan` from 1.9.1 to 1.10.1 - [Release notes](https://github.com/expressjs/morgan/releases) - [Changelog](https://github.com/expressjs/morgan/blob/master/HISTORY.md) - [Commits](expressjs/morgan@1.9.1...1.10.1) Updates `office-addin-sso` from 3.0.4 to 3.0.6 - [Release notes](https://github.com/OfficeDev/Office-Addin-Scripts/releases) - [Commits](https://github.com/OfficeDev/Office-Addin-Scripts/compare/office-addin-sso@3.0.4...office-addin-sso@3.0.6) --- updated-dependencies: - dependency-name: on-headers dependency-version: 1.1.0 dependency-type: indirect - dependency-name: morgan dependency-version: 1.10.1 dependency-type: direct:production - dependency-name: office-addin-sso dependency-version: 3.0.6 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Automatically run npm audit fix

…-2.1.4 Bump tar-fs from 2.1.3 to 2.1.4

Bumps [jws](https://github.com/brianloveswords/node-jws) from 3.2.2 to 3.2.3. - [Release notes](https://github.com/brianloveswords/node-jws/releases) - [Changelog](https://github.com/auth0/node-jws/blob/master/CHANGELOG.md) - [Commits](auth0/node-jws@v3.2.2...v3.2.3) --- updated-dependencies: - dependency-name: jws dependency-version: 3.2.3 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [qs](https://github.com/ljharb/qs) to 6.14.1 and updates ancestor dependency [express](https://github.com/expressjs/express). These dependencies need to be updated together. Updates `qs` from 6.13.0 to 6.14.1 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.13.0...v6.14.1) Updates `express` from 4.21.2 to 4.22.1 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/v4.22.1/History.md) - [Commits](expressjs/express@4.21.2...v4.22.1) --- updated-dependencies: - dependency-name: qs dependency-version: 6.14.1 dependency-type: indirect - dependency-name: express dependency-version: 4.22.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.2 to 7.5.3. - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v7.5.2...v7.5.3) --- updated-dependencies: - dependency-name: tar dependency-version: 7.5.3 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.3 to 7.5.6. - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v7.5.3...v7.5.6) --- updated-dependencies: - dependency-name: tar dependency-version: 7.5.6 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bump tar from 7.5.3 to 7.5.6

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.17.23) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.17.23 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…-4.17.23 Bump lodash from 4.17.21 to 4.17.23

Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.6 to 7.5.7. - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v7.5.6...v7.5.7) --- updated-dependencies: - dependency-name: tar dependency-version: 7.5.7 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bump tar from 7.5.6 to 7.5.7

Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server) from 5.2.1 to 5.2.4. - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v5.2.1...v5.2.4) --- updated-dependencies: - dependency-name: webpack-dev-server dependency-version: 5.2.4 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

…e82fe9b04e Bump @opentelemetry/exporter-prometheus and @azure/monitor-opentelemetry

…-5.2.4

…k-dev-server-5.2.4 Bump webpack-dev-server from 5.2.1 to 5.2.4

…7bdfbe8666 Bump ip-address and express-rate-limit

Bumps [qs](https://github.com/ljharb/qs) to 6.15.2 and updates ancestor dependency [express](https://github.com/expressjs/express). These dependencies need to be updated together. Updates `qs` from 6.14.2 to 6.15.2 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.14.2...v6.15.2) Updates `express` from 4.22.1 to 4.22.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/v4.22.2/History.md) - [Commits](expressjs/express@v4.22.1...v4.22.2) --- updated-dependencies: - dependency-name: qs dependency-version: 6.15.2 dependency-type: indirect - dependency-name: express dependency-version: 4.22.2 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [axios](https://github.com/axios/axios) from 1.15.2 to 1.16.1. - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.15.2...v1.16.1) --- updated-dependencies: - dependency-name: axios dependency-version: 1.16.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Automatically run npm audit fix

Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.8.2 to 1.8.4. - [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md) - [Commits](ljharb/shell-quote@v1.8.2...v1.8.4) --- updated-dependencies: - dependency-name: shell-quote dependency-version: 1.8.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…quote-1.8.4 Bump shell-quote from 1.8.2 to 1.8.4

Bumps [launch-editor](https://github.com/vitejs/launch-editor) from 2.10.0 to 2.14.1. - [Commits](vitejs/launch-editor@v2.10.0...v2.14.1) --- updated-dependencies: - dependency-name: launch-editor dependency-version: 2.14.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server) from 5.2.4 to 5.2.5. - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v5.2.4...v5.2.5) --- updated-dependencies: - dependency-name: webpack-dev-server dependency-version: 5.2.5 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

…k-dev-server-5.2.5 Bump webpack-dev-server from 5.2.4 to 5.2.5

Bumps [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core), [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) and [babel-loader](https://github.com/babel/babel-loader). These dependencies needed to be updated together. Updates `@babel/core` from 7.26.9 to 8.0.1 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.1/packages/babel-core) Updates `@babel/preset-env` from 7.26.9 to 8.0.2 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.2/packages/babel-preset-env) Updates `babel-loader` from 9.2.1 to 10.1.1 - [Release notes](https://github.com/babel/babel-loader/releases) - [Changelog](https://github.com/babel/babel-loader/blob/main/CHANGELOG.md) - [Commits](babel/babel-loader@v9.2.1...v10.1.1) --- updated-dependencies: - dependency-name: "@babel/core" dependency-version: 8.0.1 dependency-type: direct:development - dependency-name: "@babel/preset-env" dependency-version: 8.0.2 dependency-type: direct:development - dependency-name: babel-loader dependency-version: 10.1.1 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

…d6563cc7ef Bump @babel/core, @babel/preset-env and babel-loader

Bumps [hono](https://github.com/honojs/hono) from 4.12.23 to 4.12.26. - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.12.23...v4.12.26) --- updated-dependencies: - dependency-name: hono dependency-version: 4.12.26 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [form-data](https://github.com/form-data/form-data) from 4.0.5 to 4.0.6. - [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md) - [Commits](form-data/form-data@v4.0.5...v4.0.6) --- updated-dependencies: - dependency-name: form-data dependency-version: 4.0.6 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.1 to 4.2.0. - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/commits) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 4.2.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…ata-4.0.6 Bump form-data from 4.0.5 to 4.0.6

…l-4.2.0 Bump js-yaml from 4.1.1 to 4.2.0

Automatically run npm audit fix

dependabot Bot and others added 30 commits July 24, 2025 10:50

Add workflow to autorun npm audit fix (#128)

47462bf

Automatically run npm audit fix (#129)

4d8cf36

Co-authored-by: github-actions <github-actions@github.com>

Automatically run npm audit fix

baa260d

Merge pull request #131 from OfficeDev/autorun-npm-audit-fix

72e69c9

Automatically run npm audit fix

Merge pull request #132 from OfficeDev/dependabot/npm_and_yarn/valida…

9a7532b

…tor-13.15.20 Bump validator from 13.15.15 to 13.15.20

Merge pull request #133 from OfficeDev/dependabot/npm_and_yarn/js-yam…

b04d07c

…l-4.1.1 Bump js-yaml from 4.1.0 to 4.1.1

Merge branch 'master' into dependabot/npm_and_yarn/tar-fs-2.1.4

9fb62bf

Automatically run npm audit fix

b87918d

Merge pull request #137 from OfficeDev/autorun-npm-audit-fix

4da86dc

Automatically run npm audit fix

Merge branch 'master' into dependabot/npm_and_yarn/tar-fs-2.1.4

513351f

Merge pull request #130 from OfficeDev/dependabot/npm_and_yarn/tar-fs…

7a9dd38

…-2.1.4 Bump tar-fs from 2.1.3 to 2.1.4

Add ability to manually run npm-audit-fix workflow (#140)

f96507b

Merge pull request #143 from OfficeDev/dependabot/npm_and_yarn/tar-7.5.6

39006d4

Bump tar from 7.5.3 to 7.5.6

Merge pull request #144 from OfficeDev/dependabot/npm_and_yarn/lodash…

0c0f3dd

…-4.17.23 Bump lodash from 4.17.21 to 4.17.23

Merge pull request #145 from OfficeDev/dependabot/npm_and_yarn/tar-7.5.7

2d27f4f

Bump tar from 7.5.6 to 7.5.7

Automatically run npm audit fix

708ca28

dependabot Bot and others added 27 commits May 18, 2026 22:15

Merge pull request #178 from OfficeDev/dependabot/npm_and_yarn/multi-…

7543426

…e82fe9b04e Bump @opentelemetry/exporter-prometheus and @azure/monitor-opentelemetry

Merge branch 'master' into dependabot/npm_and_yarn/webpack-dev-server…

8ddaef7

…-5.2.4

Merge pull request #179 from OfficeDev/dependabot/npm_and_yarn/webpac…

b0bee59

…k-dev-server-5.2.4 Bump webpack-dev-server from 5.2.1 to 5.2.4

Merge branch 'master' into dependabot/npm_and_yarn/multi-7bdfbe8666

43df11b

Merge pull request #172 from OfficeDev/dependabot/npm_and_yarn/multi-…

5b0dfd0

…7bdfbe8666 Bump ip-address and express-rate-limit

Automatically run npm audit fix

0db3143

Merge pull request #182 from OfficeDev/autorun-npm-audit-fix

bede260

Automatically run npm audit fix

Merge pull request #184 from OfficeDev/dependabot/npm_and_yarn/shell-…

d78707e

…quote-1.8.4 Bump shell-quote from 1.8.2 to 1.8.4

Merge pull request #186 from OfficeDev/dependabot/npm_and_yarn/webpac…

b73909e

…k-dev-server-5.2.5 Bump webpack-dev-server from 5.2.4 to 5.2.5

Merge pull request #191 from OfficeDev/dependabot/npm_and_yarn/multi-…

ef792b3

…d6563cc7ef Bump @babel/core, @babel/preset-env and babel-loader

Automatically run npm audit fix

f64cd30

Merge pull request #187 from OfficeDev/dependabot/npm_and_yarn/form-d…

7f30b22

…ata-4.0.6 Bump form-data from 4.0.5 to 4.0.6

Merge branch 'master' into dependabot/npm_and_yarn/js-yaml-4.2.0

5c178b3

Merge branch 'master' into autorun-npm-audit-fix

448ddb5

Merge pull request #188 from OfficeDev/dependabot/npm_and_yarn/js-yam…

e25d444

…l-4.2.0 Bump js-yaml from 4.1.1 to 4.2.0

Merge branch 'master' into autorun-npm-audit-fix

cb8fc63

Merge pull request #192 from OfficeDev/autorun-npm-audit-fix

b7e80da

Automatically run npm audit fix

Rick-Kirkham requested a review from a team as a code owner June 23, 2026 21:05

millerds approved these changes Jun 23, 2026

View reviewed changes

Rick-Kirkham merged commit f755749 into release Jun 23, 2026
8 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Merge to release#193

Merge to release#193
Rick-Kirkham merged 115 commits into
releasefrom
master

Rick-Kirkham commented Jun 23, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Uh oh!

Conversation

Rick-Kirkham commented Jun 23, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants