Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 1, 2025

Bumps com.microsoft.azure:msal4j from 1.19.1 to 1.23.0.

Release notes

Sourced from com.microsoft.azure:msal4j's releases.

1.23.0

  • Reduced dependency footprint by removing third-party libraries (#909):
    • Replaced org.projectlombok with direct implementations of previously generated code (#946)
    • Replaced com.nimbusds OAuth/OIDC functionality with our own implementation (#926, #927, #928, #941, #945)
    • Replaced com.fasterxml.jackson with com.azure.json for JSON parsing/serialization (#947, #948)
    • Internal behavior and public APIs remain unchanged, except for those noted below
  • Minor breaking changes:
    • Removed protected APIs that returned or used com.nimbusds.ClientAuthentication
      • These APIs were not used by any other public MSAL API, and are unlikely to have been used by other libraries
    • Improved JSON error handling to return more informative MsalClientException/MsalServiceException rather than generic JSON exceptions

v1.22.0

What's Changed

New Contributors

Full Changelog: AzureAD/microsoft-authentication-library-for-java@v1.21.0...v1.22.0

1.21.0

  • Add support for claims, client capabilities, and token revocation in Service Fabric scenarios (#929, #943)
  • Improve retry logic for HTTP requests, and add API to disable retries (#960, #963, #964)
  • Support multiple date formats in Managed identity scenarios (#956)
  • Fix query parameter issue in IMDS scenarios (#954)
  • Update dependencies used in tests to avoid CVE warnings (#962)

1.20.1

  • Fix Base64URL decoding bug (#938)

1.20.0

  • Replace some usage of jackson-databind with azure-json (#918)
  • Remove Lombok code generation from most classes (#919, #925)
  • Remove some usage of nimbusds-oauth2-oidc-sdk (#927, #928)
  • Fix refresh metadata not being set in MI flows (#931)
  • Add distinct exception type for JSON parsing errors (#933)
Changelog

Sourced from com.microsoft.azure:msal4j's changelog.

Version 1.23.0

  • Reduced dependency footprint by removing third-party libraries (#909):
    • Replaced org.projectlombok with direct implementations of previously generated code (#946)
    • Replaced com.nimbusds OAuth/OIDC functionality with our own implementation (#926, #927, #928, #941, #945)
    • Replaced com.fasterxml.jackson with com.azure.json for JSON parsing/serialization (#947, #948)
    • Internal behavior and public APIs remain unchanged, except for those noted below
  • Minor breaking changes:
    • Removed protected APIs that returned or used com.nimbusds.ClientAuthentication
      • These APIs were not used by any other public MSAL API, and are unlikely to have been used by other libraries
    • Improved JSON error handling to return more informative MsalClientException/MsalServiceException rather than generic JSON exceptions

Version 1.22.0

  • Validate issuer from OIDC endpoint when using the oidcAuthority() API (#970)
  • Bump oauth2-oidc-sdk dependency to avoid CVE-2025-53864 (#975)

Version 1.21.0

  • Add support for claims, client capabilities, and token revocation in Service Fabric scenarios (#929, #943)
  • Improve retry logic for HTTP requests, and add API to disable retries (#960, #963, #964)
  • Support multiple date formats in Managed identity scenarios (#956)
  • Fix query parameter issue in IMDS scenarios (#954)
  • Update dependencies used in tests to avoid CVE warnings (#962)

1.20.1

  • Fix Base64URL decoding bug (#938)

Version 1.20.0

  • Replace some usage of jackson-databind with azure-json (#918)
  • Remove Lombok code generation from most classes (#919, #925)
  • Remove some usage of nimbusds-oauth2-oidc-sdk (#927, #928)
  • Fix refresh metadata not being set in MI flows (#931)
  • Add distinct exception type for JSON parsing errors (#933)
Commits
  • 5a4f9fc Merge pull request #972 from AzureAD/dependabot/maven/msal4j-sdk/src/samples/...
  • 7399b25 Merge pull request #983 from AzureAD/avdunn/release-1.23.0
  • 1f68791 Merge pull request #982 from AzureAD/avdunn/release-1.30.0-beta
  • 4107f8d Version updates for 1.23.0
  • 77a438b Merge pull request #978 from AzureAD/avdunn/merge-conflicts
  • 669770e Merge branch 'dev' into avdunn/merge-conflicts
  • 3762d5c Merge pull request #981 from AzureAD/avdunn/add-test-disabler
  • a6467e5 Add option to disable ADFS tests
  • 5fc9dae Remove duplicated dependency
  • 62a6622 Resolve merge conflicts
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.microsoft.azure:msal4j](https://github.com/AzureAD/microsoft-authentication-library-for-java) from 1.19.1 to 1.23.0.
- [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-java/releases)
- [Changelog](https://github.com/AzureAD/microsoft-authentication-library-for-java/blob/dev/changelog.txt)
- [Commits](AzureAD/microsoft-authentication-library-for-java@v1.19.1...v1.23.0)

---
updated-dependencies:
- dependency-name: com.microsoft.azure:msal4j
  dependency-version: 1.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 1, 2025
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 15, 2025

Superseded by #42.

@dependabot dependabot bot closed this Sep 15, 2025
@dependabot dependabot bot deleted the dependabot/maven/com.microsoft.azure-msal4j-1.23.0 branch September 15, 2025 09:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants