Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: microsoft/botbuilder-js
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 4.22.3
Choose a base ref
...
head repository: microsoft/botbuilder-js
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 4.23.0
Choose a head ref
  • 20 commits
  • 79 files changed
  • 5 contributors

Commits on Jun 28, 2024

  1. fix: Remove CVE-2022-3517 vulnerability (#4699) 

    * fix minimatch vulnerability

* fix conflicts
    @JhontSouth
    JhontSouth authored Jun 28, 2024
    Configuration menu
    Copy the full SHA
    2474044 View commit details
    Browse the repository at this point in the history

Commits on Jul 1, 2024

  1. port: [#6793][#6792] Composer Bot with QnA Intent recognized triggers… 

    … duplicate QnA queries (#4700)

* fix qna double trace error

* fix qna double trace error
    @JhontSouth
    JhontSouth authored Jul 1, 2024
    Configuration menu
    Copy the full SHA
    de27db4 View commit details
    Browse the repository at this point in the history

Commits on Jul 2, 2024

  1. fix: Remove CVE-2022-25881 vulnerability by updating the http-cache-s… 

    …emantics package (#4703)

* Update http-cache-semantics and remove bf-chatdown library

* Remove unnecessary comments
    @sw-joelmut
    sw-joelmut authored Jul 2, 2024
    Configuration menu
    Copy the full SHA
    59e4da3 View commit details
    Browse the repository at this point in the history

  2. remove types/nock (#4704)

    @andres-robinet-sw
    andres-robinet-sw authored Jul 2, 2024
    Configuration menu
    Copy the full SHA
    95a1a40 View commit details
    Browse the repository at this point in the history

  3. remove use of vulnerable versions of ansi-regex (#4705)

    @JhontSouth
    JhontSouth authored Jul 2, 2024
    Configuration menu
    Copy the full SHA
    e4e90df View commit details
    Browse the repository at this point in the history

Commits on Jul 8, 2024

  1. Fix browser-functional project and pipeline, lodash.pick, sanitize-ht… 

    …ml, and jsonwebtoken (#4706)
    @sw-joelmut
    sw-joelmut authored Jul 8, 2024
    Configuration menu
    Copy the full SHA
    24da6c5 View commit details
    Browse the repository at this point in the history

  2. update restify to newest version (#4707)

    @JhontSouth
    JhontSouth authored Jul 8, 2024
    Configuration menu
    Copy the full SHA
    88febbe View commit details
    Browse the repository at this point in the history

  3. chore(deps): bump semver from 5.7.1 to 7.6.2 (#4710) 

    Bumps [semver](https://github.com/npm/node-semver) from 5.7.1 to 7.6.2.
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v5.7.1...v7.6.2)

---
updated-dependencies:
- dependency-name: semver
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Jul 8, 2024
    Configuration menu
    Copy the full SHA
    9977e5f View commit details
    Browse the repository at this point in the history

Commits on Jul 9, 2024

  1. chore(deps): bump hosted-git-info from 2.8.8 to 2.8.9 (#4711) 

    Bumps [hosted-git-info](https://github.com/npm/hosted-git-info) from 2.8.8 to 2.8.9.
- [Release notes](https://github.com/npm/hosted-git-info/releases)
- [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md)
- [Commits](npm/hosted-git-info@v2.8.8...v2.8.9)

---
updated-dependencies:
- dependency-name: hosted-git-info
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Jul 9, 2024
    Configuration menu
    Copy the full SHA
    84fdf4b View commit details
    Browse the repository at this point in the history

  2. chore(deps): bump elliptic from 6.5.3 to 6.5.5 (#4712) 

    Bumps [elliptic](https://github.com/indutny/elliptic) from 6.5.3 to 6.5.5.
- [Commits](indutny/elliptic@v6.5.3...v6.5.5)

---
updated-dependencies:
- dependency-name: elliptic
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Jul 9, 2024
    Configuration menu
    Copy the full SHA
    6d4cb86 View commit details
    Browse the repository at this point in the history

  3. fix: Remove CVE-2020-28469 vulnerability by updating the glob-parent … 

    …package (#4713)

* Update glob-parent and remove it from resolutions

* Fix yarn.lock merge
    @sw-joelmut
    sw-joelmut authored Jul 9, 2024
    Configuration menu
    Copy the full SHA
    1e6087d View commit details
    Browse the repository at this point in the history

  4. Updated medium and low vulnerable packages to latest possible version (… 

    …#4714)
    @sw-joelmut
    sw-joelmut authored Jul 9, 2024
    Configuration menu
    Copy the full SHA
    8d7b8d9 View commit details
    Browse the repository at this point in the history

Commits on Jul 26, 2024

  1. Remove unnecessary resolutions (#4719)

    @sw-joelmut
    sw-joelmut authored Jul 26, 2024
    Configuration menu
    Copy the full SHA
    38286e6 View commit details
    Browse the repository at this point in the history

  2. fix: Remove undefined value in @azure/msal-node (#4718) 

    * avoid undefined errors with msal-node

* fix lint issue
    @JhontSouth
    JhontSouth authored Jul 26, 2024
    Configuration menu
    Copy the full SHA
    82231ca View commit details
    Browse the repository at this point in the history

Commits on Jul 31, 2024

  1. chore(deps): bump fast-xml-parser from 4.2.5 to 4.4.1 (#4721) 

    Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 4.2.5 to 4.4.1.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](NaturalIntelligence/fast-xml-parser@v4.2.5...v4.4.1)

---
updated-dependencies:
- dependency-name: fast-xml-parser
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Jul 31, 2024
    Configuration menu
    Copy the full SHA
    364fae8 View commit details
    Browse the repository at this point in the history

  2. port: [#6813][#6798] Not able to create instance of BlobsTranscriptSt… 

    …ore using TokenCredential instead of connectionString and containerName (#4720)

* add token credential authentication

* added constructor validations

* update botbuilder-azure-blobs.api
    @JhontSouth
    JhontSouth authored Jul 31, 2024
    Configuration menu
    Copy the full SHA
    543f70c View commit details
    Browse the repository at this point in the history

  3. update css-loader and recognizers-text-number (#4717)

    @JhontSouth
    JhontSouth authored Jul 31, 2024
    Configuration menu
    Copy the full SHA
    0f1dd7e View commit details
    Browse the repository at this point in the history

Commits on Aug 26, 2024

  1. bump: [#4550] Add Node 18 and 20 support (#4726) 

    * Add Node 18 and 20 support

* Fix CI and functional pipelines

---------

Co-authored-by: JhontSouth <[email protected]>
    @sw-joelmut @JhontSouth
    sw-joelmut and JhontSouth authored Aug 26, 2024
    Configuration menu
    Copy the full SHA
    604e190 View commit details
    Browse the repository at this point in the history

  2. fix: CVE-2024-42460 vulnerability with elliptic (#4729) 

    * update elliptic version

* updated elliptic in browser-echo-bot
    @JhontSouth
    JhontSouth authored Aug 26, 2024
    Configuration menu
    Copy the full SHA
    5f5a2ff View commit details
    Browse the repository at this point in the history

  3. chore(deps): bump axios from 1.7.2 to 1.7.4 (#4730) 

    Bumps [axios](https://github.com/axios/axios) from 1.7.2 to 1.7.4.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.7.2...v1.7.4)

---
updated-dependencies:
- dependency-name: axios
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Aug 26, 2024
    Configuration menu
    Copy the full SHA
    817532c View commit details
    Browse the repository at this point in the history
Loading