Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 21, 2025

Bumps com.microsoft.azure:msal4j from 1.19.1 to 1.22.0.

Release notes

Sourced from com.microsoft.azure:msal4j's releases.

1.21.0

  • Add support for claims, client capabilities, and token revocation in Service Fabric scenarios (#929, #943)
  • Improve retry logic for HTTP requests, and add API to disable retries (#960, #963, #964)
  • Support multiple date formats in Managed identity scenarios (#956)
  • Fix query parameter issue in IMDS scenarios (#954)
  • Update dependencies used in tests to avoid CVE warnings (#962)

1.20.1

  • Fix Base64URL decoding bug (#938)

1.20.0

  • Replace some usage of jackson-databind with azure-json (#918)
  • Remove Lombok code generation from most classes (#919, #925)
  • Remove some usage of nimbusds-oauth2-oidc-sdk (#927, #928)
  • Fix refresh metadata not being set in MI flows (#931)
  • Add distinct exception type for JSON parsing errors (#933)
Changelog

Sourced from com.microsoft.azure:msal4j's changelog.

Version 1.22.0

  • Validate issuer from OIDC endpoint when using the oidcAuthority() API (#970)
  • Bump oauth2-oidc-sdk dependency to avoid CVE-2025-53864 (#975)

Version 1.21.0

  • Add support for claims, client capabilities, and token revocation in Service Fabric scenarios (#929, #943)
  • Improve retry logic for HTTP requests, and add API to disable retries (#960, #963, #964)
  • Support multiple date formats in Managed identity scenarios (#956)
  • Fix query parameter issue in IMDS scenarios (#954)
  • Update dependencies used in tests to avoid CVE warnings (#962)

Version 1.20.1

  • Fix Base64URL decoding bug (#938)

Version 1.20.0

  • Replace some usage of jackson-databind with azure-json (#918)
  • Remove Lombok code generation from most classes (#919, #925)
  • Remove some usage of nimbusds-oauth2-oidc-sdk (#927, #928)
  • Fix refresh metadata not being set in MI flows (#931)
  • Add distinct exception type for JSON parsing errors (#933)
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.microsoft.azure:msal4j](https://github.com/AzureAD/microsoft-authentication-library-for-java) from 1.19.1 to 1.22.0.
- [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-java/releases)
- [Changelog](https://github.com/AzureAD/microsoft-authentication-library-for-java/blob/dev/changelog.txt)
- [Commits](https://github.com/AzureAD/microsoft-authentication-library-for-java/commits)

---
updated-dependencies:
- dependency-name: com.microsoft.azure:msal4j
  dependency-version: 1.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jul 21, 2025
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 1, 2025

Superseded by #39.

@dependabot dependabot bot closed this Sep 1, 2025
@dependabot dependabot bot deleted the dependabot/maven/com.microsoft.azure-msal4j-1.22.0 branch September 1, 2025 15:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants