Skip to content

Conversation

@konstantin-msft
Copy link
Collaborator

  • Address react and next CVEs

@konstantin-msft konstantin-msft requested review from a team as code owners December 4, 2025 03:42
Copilot AI review requested due to automatic review settings December 4, 2025 03:42
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates React and Next.js dependencies across sample applications and the msal-react library to address security vulnerabilities (CVEs). The changes update React from 19.1.0 to 19.1.2 and Next.js from 15.4.7 to 15.4.8.

Key Changes:

  • React and react-dom updated from ^19.1.0 to ^19.1.2 across all React samples and msal-react devDependencies
  • Next.js updated from ^15.4.7 to ^15.4.8 in the Next.js sample
  • msal-react peer dependency updated to specify ^19.1.2 (note: this change has implications)

Reviewed changes

Copilot reviewed 7 out of 8 changed files in this pull request and generated 3 comments.

Show a summary per file
File Description
samples/msal-react-samples/typescript-sample/package.json Updates React dependencies to address CVEs
samples/msal-react-samples/react-router-sample/package.json Updates React dependencies to address CVEs
samples/msal-react-samples/nextjs-sample/package.json Updates React and Next.js dependencies to address CVEs
samples/msal-react-samples/b2c-sample/package.json Updates React dependencies to address CVEs
samples/msal-node-samples/ElectronSystemBrowserTestApp/package.json Updates React dependencies to address CVEs
lib/msal-react/package.json Updates React devDependencies and peer dependency constraint
package-lock.json Lockfile updates reflecting dependency version changes

peterzenz
peterzenz previously approved these changes Dec 4, 2025
hectormmg
hectormmg previously approved these changes Dec 4, 2025
@konstantin-msft konstantin-msft dismissed stale reviews from hectormmg and peterzenz via 16d0660 December 4, 2025 04:08
@konstantin-msft konstantin-msft merged commit 0a9c566 into dev Dec 4, 2025
7 checks passed
@konstantin-msft konstantin-msft deleted the fix_react_cve branch December 4, 2025 04:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants