Bump the npm-all group across 11 directories with 30 updates

[dependabot]

Bumps the npm-all group with 4 updates in the / directory: @eslint/js, @microsoft/m365agentsplayground, eslint and neostandard.
Bumps the npm-all group with 2 updates in the /samples/nodejs/auto-signin directory: @microsoft/agents-hosting-express and @microsoft/microsoft-graph-types.
Bumps the npm-all group with 5 updates in the /samples/nodejs/azure-ai-streaming directory:

Package	From	To
@microsoft/m365agentsplayground	0.2.18	0.2.24
@microsoft/agents-hosting-express	1.1.1	1.4.2
@ai-sdk/azure	2.0.30	3.0.54
ai	5.0.52	6.0.168
typescript	5.9.2	6.0.3

Bumps the npm-all group with 3 updates in the /samples/nodejs/cards directory: @microsoft/m365agentsplayground, @microsoft/agents-hosting-express and @types/node.
Bumps the npm-all group with 6 updates in the /samples/nodejs/copilotstudio-client directory:

Package	From	To
typescript	5.9.2	6.0.3
@types/node	22.18.1	25.6.0
@azure/msal-node	3.7.3	5.1.4
@microsoft/agents-copilotstudio-client	1.1.1	1.4.2
open	10.2.0	11.0.0
@types/debug	4.1.12	4.1.13

Bumps the npm-all group with 2 updates in the /samples/nodejs/copilotstudio-skill directory: @microsoft/agents-hosting-express and globals.
Bumps the npm-all group with 9 updates in the /samples/nodejs/copilotstudio-webchat-react directory:

Package	From	To
@microsoft/agents-copilotstudio-client	1.1.1	1.4.2
@azure/msal-browser	4.22.0	5.8.0
botframework-webchat	4.18.1-main.20251219.4ef3594	4.18.1-main.20260416.88357ae
botframework-webchat-fluent-theme	4.18.1-main.20251219.4ef3594	4.18.1-main.20260416.88357ae
react	16.8.6	19.2.5
@types/react	16.14.65	19.2.14
react-dom	16.8.6	19.2.5
@types/react-dom	16.9.0	19.2.3
esbuild	0.25.9	0.28.0

Bumps the npm-all group with 7 updates in the /samples/nodejs/langchain-multiturn directory:

Package	From	To
@microsoft/m365agentsplayground	0.2.18	0.2.24
@microsoft/agents-hosting-express	1.1.1	1.4.2
typescript	5.9.2	6.0.3
@types/node	24.3.1	25.6.0
@langchain/langgraph	0.3.12	1.2.9
@langchain/openai	0.5.18	1.4.4
nodemon	3.1.10	3.1.14

Bumps the npm-all group with 6 updates in the /samples/nodejs/multi-turn-prompt directory:

Package	From	To
@microsoft/m365agentsplayground	0.2.18	0.2.24
express	5.1.0	5.2.1
typescript	5.9.2	6.0.3
@types/node	22.18.1	25.6.0
esbuild	0.25.9	0.28.0
@microsoft/agents-hosting-dialogs	1.1.1	1.4.2

Bumps the npm-all group with 2 updates in the /samples/nodejs/obo-authorization directory: @microsoft/agents-hosting-express and @microsoft/microsoft-graph-types.
Bumps the npm-all group with 4 updates in the /samples/nodejs/quickstart directory: @microsoft/m365agentsplayground, @microsoft/agents-hosting-express, typescript and @types/node.

Updates @eslint/js from 9.32.0 to 10.0.1

Release notes

Sourced from @​eslint/js's releases.

v10.0.1

Bug Fixes

• c87d5bd fix: update eslint (#20531) (renovate[bot])
• d841001 fix: update minimatch to 10.2.1 to address security vulnerabilities (#20519) (루밀LuMir)
• 04c2147 fix: update error message for unused suppressions (#20496) (fnx)
• 38b089c fix: update dependency @​eslint/config-array to ^0.23.1 (#20484) (renovate[bot])

Documentation

• 5b3dbce docs: add AI acknowledgement section to templates (#20431) (루밀LuMir)
• 6f23076 docs: toggle nav in no-JS mode (#20476) (Tanuj Kanti)
• b69cfb3 docs: Update README (GitHub Actions Bot)

Chores

• e5c281f chore: updates for v9.39.3 release (Jenkins)
• 8c3832a chore: update @​typescript-eslint/parser to ^8.56.0 (#20514) (Milos Djermanovic)
• 8330d23 test: add tests for config-api (#20493) (Milos Djermanovic)
• 37d6e91 chore: remove eslint v10 prereleases from eslint-config-eslint deps (#20494) (Milos Djermanovic)
• da7cd0e refactor: cleanup error message templates (#20479) (Francesco Trotta)
• 84fb885 chore: package.json update for @​eslint/js release (Jenkins)
• 1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467) (Milos Djermanovic)

v10.0.0

Breaking Changes

• f9e54f4 feat!: estimate rule-tester failure location (#20420) (ST-DDT)
• a176319 feat!: replace chalk with styleText and add color to ResultsMeta (#20227) (루밀LuMir)
• c7046e6 feat!: enable JSX reference tracking (#20152) (Pixel998)
• fa31a60 feat!: add name to configs (#20015) (Kirk Waiblinger)
• 3383e7e fix!: remove deprecated SourceCode methods (#20137) (Pixel998)
• 501abd0 feat!: update dependency minimatch to v10 (#20246) (renovate[bot])
• ca4d3b4 fix!: stricter rule tester assertions for valid test cases (#20125) (唯然)
• 96512a6 fix!: Remove deprecated rule context methods (#20086) (Nicholas C. Zakas)
• c69fdac feat!: remove eslintrc support (#20037) (Francesco Trotta)
• 208b5cc feat!: Use ScopeManager#addGlobals() (#20132) (Milos Djermanovic)
• a2ee188 fix!: add uniqueItems: true in no-invalid-regexp option (#20155) (Tanuj Kanti)
• a89059d feat!: Program range span entire source text (#20133) (Pixel998)
• 39a6424 fix!: assert 'text' is a string across all RuleFixer methods (#20082) (Pixel998)
• f28fbf8 fix!: Deprecate "always" and "as-needed" options of the radix rule (#20223) (Milos Djermanovic)
• aa3fb2b fix!: tighten func-names schema (#20119) (Pixel998)
• f6c0ed0 feat!: report eslint-env comments as errors (#20128) (Francesco Trotta)
• 4bf739f fix!: remove deprecated LintMessage#nodeType and TestCaseError#type (#20096) (Pixel998)
• 523c076 feat!: drop support for jiti < 2.2.0 (#20016) (michael faith)
• 454a292 feat!: update eslint:recommended configuration (#20210) (Pixel998)
• 4f880ee feat!: remove v10_* and inactive unstable_* flags (#20225) (sethamus)
• f18115c feat!: no-shadow-restricted-names report globalThis by default (#20027) (sethamus)
• c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160) (Milos Djermanovic)

Features

• bff9091 feat: handle Array.fromAsync in array-callback-return (#20457) (Francesco Trotta)
• 290c594 feat: add self to no-implied-eval rule (#20468) (sethamus)
• 43677de feat: fix handling of function and class expression names in no-shadow (#20432) (Milos Djermanovic)

... (truncated)

Commits

• 84fb885 chore: package.json update for @​eslint/js release
• 1f66734 chore: add eslint to peerDependencies of @eslint/js (#20467)
• f3fbc2f chore: set @eslint/js version to 10.0.0 to skip releasing it (#20466)
• b4b3127 chore: package.json update for @​eslint/js release
• 0b14059 chore: package.json update for @​eslint/js release
• fa31a60 feat!: add name to configs (#20015)
• 1e2cad5 chore: package.json update for @​eslint/js release
• 454a292 feat!: update eslint:recommended configuration (#20210)
• c6358c3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#20160)
• c7ebefc chore: package.json update for @​eslint/js release
• Additional commits viewable in compare view

Updates @microsoft/m365agentsplayground from 0.2.16 to 0.2.24

Updates eslint from 9.32.0 to 10.2.1

Release notes

Sourced from eslint's releases.

v10.2.1

Bug Fixes

• 14be92b fix: model generator yield resumption paths in code path analysis (#20665) (sethamus)
• 84a19d2 fix: no-async-promise-executor false positives for shadowed Promise (#20740) (xbinaryx)
• af764af fix: clarify language and processor validation errors (#20729) (Pixel998)
• e251b89 fix: update eslint (#20715) (renovate[bot])

Documentation

• ca92ca0 docs: reuse markdown-it instance for markdown filter (#20768) (Amaresh S M)
• 57d2ee2 docs: Enable Eleventy incremental mode for watch (#20767) (Amaresh S M)
• c1621b9 docs: fix typos in code-path-analyzer.js (#20700) (Ayush Shukla)
• 1418d52 docs: Update README (GitHub Actions Bot)
• 39771e6 docs: Update README (GitHub Actions Bot)
• 71e0469 docs: fix incomplete JSDoc param description in no-shadow rule (#20728) (kuldeep kumar)
• 22119ce docs: clarify scope of for-direction rule with dead code examples (#20723) (Amaresh S M)
• 8f3fb77 docs: document meta.docs.dialects (#20718) (Pixel998)

Chores

• 7ddfea9 chore: update dependency prettier to v3.8.2 (#20770) (renovate[bot])
• fac40e1 ci: bump pnpm/action-setup from 5.0.0 to 6.0.0 (#20763) (dependabot[bot])
• 7246f92 test: add tests for SuppressionsService.load() error handling (#20734) (kuldeep kumar)
• 4f34b1e chore: update pnpm/action-setup action to v5 (#20762) (renovate[bot])
• 51080eb test: processor service (#20731) (kuldeep kumar)
• e7e1889 chore: remove stale babel-eslint10 fixture and test (#20727) (kuldeep kumar)
• 4e1a87c test: remove redundant async/await in flat config array tests (#20722) (Pixel998)
• 066eabb test: add rule metadata coverage for languages and docs.dialects (#20717) (Pixel998)

v10.2.0

Features

• 586ec2f feat: Add meta.languages support to rules (#20571) (Copilot)
• 14207de feat: add Temporal to no-obj-calls (#20675) (Pixel998)
• bbb2c93 feat: add Temporal to ES2026 globals (#20672) (Pixel998)

Bug Fixes

• 542cb3e fix: update first-party dependencies (#20714) (Francesco Trotta)

Documentation

• a2af743 docs: add language to configuration objects (#20712) (Francesco Trotta)
• 845f23f docs: Update README (GitHub Actions Bot)
• 5fbcf59 docs: remove sourceType from ts playground link (#20477) (Tanuj Kanti)
• 8702a47 docs: Update README (GitHub Actions Bot)
• ddeaded docs: Update README (GitHub Actions Bot)
• 2b44966 docs: add Major Releases section to Manage Releases (#20269) (Milos Djermanovic)
• eab65c7 docs: update eslint versions in examples (#20664) (루밀LuMir)
• 3e4a299 docs: update ESM Dependencies policies with note for own-usage packages (#20660) (Milos Djermanovic)

Chores

• 8120e30 refactor: extract no unmodified loop condition (#20679) (kuldeep kumar)
• 46e8469 chore: update dependency markdownlint-cli2 to ^0.22.0 (#20697) (renovate[bot])
• 01ed3aa test: add unit tests for unicode utilities (#20622) (Manish chaudhary)

... (truncated)

Commits

• 4d1d8f9 10.2.1
• 3e33105 Build: changelog update for 10.2.1
• ca92ca0 docs: reuse markdown-it instance for markdown filter (#20768)
• 7ddfea9 chore: update dependency prettier to v3.8.2 (#20770)
• 57d2ee2 docs: Enable Eleventy incremental mode for watch (#20767)
• c1621b9 docs: fix typos in code-path-analyzer.js (#20700)
• fac40e1 ci: bump pnpm/action-setup from 5.0.0 to 6.0.0 (#20763)
• 7246f92 test: add tests for SuppressionsService.load() error handling (#20734)
• 4f34b1e chore: update pnpm/action-setup action to v5 (#20762)
• 1418d52 docs: Update README
• Additional commits viewable in compare view

Updates neostandard from 0.12.2 to 0.13.0

Release notes

Sourced from neostandard's releases.

v0.13.0

0.13.0 (2026-02-26)

⚠ BREAKING CHANGES

• Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#339)
• eslint-plugin-import-x is no longer included by default. Projects relying on import-x rules will need to manually install and configure eslint-plugin-import-x. See the "Adding back import checking" section in the README for migration instructions. As an alternative, we recommend using TypeScript's compiler (tsc --noEmit) for import validation, which provides more comprehensive checking.
• update dependency globals to v17 (#335)

🌟 Features

• deps: update dependency globals to ^17.2.0 (#347) (66d504e)
• deps: update dependency typescript-eslint to ^8.54.0 (#348) (2cdd443)
• deps: update dependency typescript-eslint to ^8.56.0 (#357) (fe4ba92)
• remove eslint-plugin-import-x and related dependencies (#330) (248de35)
• Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#339) (ba575f3)
• update dependency globals to v17 (#335) (a856b81)

🩹 Fixes

• deps: update dependency eslint-plugin-n to ^17.23.2 (#303) (76d50ed)
• deps: update dependency find-up to v8 (#324) (d95b6e3)
• deps: update dependency globals to ^17.3.0 (#351) (94ab3ce)
• deps: update dependency peowly to ^1.3.3 (#356) (b873608)
• deps: update dependency typescript-eslint to ^8.53.1 (#322) (6beb36b)

🧹 Chores

• properly apply filter (#336) (bd1ad55)

Changelog

Sourced from neostandard's changelog.

0.13.0 (2026-02-26)

⚠ BREAKING CHANGES

• Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#339)
• eslint-plugin-import-x is no longer included by default. Projects relying on import-x rules will need to manually install and configure eslint-plugin-import-x. See the "Adding back import checking" section in the README for migration instructions. As an alternative, we recommend using TypeScript's compiler (tsc --noEmit) for import validation, which provides more comprehensive checking.
• update dependency globals to v17 (#335)

🌟 Features

• deps: update dependency globals to ^17.2.0 (#347) (66d504e)
• deps: update dependency typescript-eslint to ^8.54.0 (#348) (2cdd443)
• deps: update dependency typescript-eslint to ^8.56.0 (#357) (fe4ba92)
• remove eslint-plugin-import-x and related dependencies (#330) (248de35)
• Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#339) (ba575f3)
• update dependency globals to v17 (#335) (a856b81)

🩹 Fixes

• deps: update dependency eslint-plugin-n to ^17.23.2 (#303) (76d50ed)
• deps: update dependency find-up to v8 (#324) (d95b6e3)
• deps: update dependency globals to ^17.3.0 (#351) (94ab3ce)
• deps: update dependency peowly to ^1.3.3 (#356) (b873608)
• deps: update dependency typescript-eslint to ^8.53.1 (#322) (6beb36b)

🧹 Chores

• properly apply filter (#336) (bd1ad55)

Commits

• cc16b7e chore(main): release 0.13.0 (#337)
• d3af897 chore(dependents): update canary npm data (#346)
• d95b6e3 fix(deps): update dependency find-up to v8 (#324)
• fe4ba92 feat(deps): update dependency typescript-eslint to ^8.56.0 (#357)
• bb772ac chore(deps): update all non-major dev dependencies (#352)
• caed7a7 chore(deps): update dependency npm-run-all2 to v8 (#294)
• 33c7dd8 chore(deps): update dependency installed-check to v10 (#359)
• 94ab3ce fix(deps): update dependency globals to ^17.3.0 (#351)
• b873608 fix(deps): update dependency peowly to ^1.3.3 (#356)
• ba575f3 feat!: Require Node.js ^20.19.0 || ^22.13.0 || >=24 (#339)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for neostandard since your current version.

Updates typescript-eslint from 8.38.0 to 8.59.0

Release notes

Sourced from typescript-eslint's releases.

v8.59.0

8.59.0 (2026-04-20)

🚀 Features

• eslint-plugin: [no-unnecessary-type-assertion] report more cases based on assignability (#11789)

❤️ Thank You

• Ulrich Stark

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.58.2

8.58.2 (2026-04-13)

🩹 Fixes

• remove tsbuildinfo cache file from published packages (#12187)
• eslint-plugin: [no-unnecessary-condition] use assignability checks in checkTypePredicates (#12147)

❤️ Thank You

• Abhijeet Singh @​cseas
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.58.1

8.58.1 (2026-04-08)

🩹 Fixes

• eslint-plugin: [no-unused-vars] fix false negative for type predicate parameter (#12004)

❤️ Thank You

• MinJae @​Ju-MINJAE

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.58.0

8.58.0 (2026-03-30)

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.59.0 (2026-04-20)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.58.2 (2026-04-13)

🩹 Fixes

• remove tsbuildinfo cache file from published packages (#12187)

❤️ Thank You

• Abhijeet Singh @​cseas

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.58.1 (2026-04-08)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.58.0 (2026-03-30)

🚀 Features

• support TypeScript 6 (#12124)

❤️ Thank You

• Evyatar Daud @​StyleShit

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.57.2 (2026-03-23)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

... (truncated)

Commits

• ea9ae4f chore(release): publish 8.59.0
• 90c2803 chore(release): publish 8.58.2
• b3315fd chore: convert import eslint to import js - followup (#12100)
• be6b49a fix: remove tsbuildinfo cache file from published packages (#12187)
• 5311ed3 chore(release): publish 8.58.1
• 4933417 chore(release): publish 8.58.0
• 8cde2d0 feat: support TypeScript 6 (#12124)
• be4d54d chore(release): publish 8.57.2
• c7c38aa chore(release): publish 8.57.1
• 2c6aeee chore(release): publish 8.57.0
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for typescript-eslint since your current version.

Updates @microsoft/m365agentsplayground from 0.2.16 to 0.2.24

Updates @microsoft/m365agentsplayground from 0.2.16 to 0.2.24

Updates @microsoft/m365agentsplayground from 0.2.16 to 0.2.24

Updates @microsoft/m365agentsplayground from 0.2.16 to 0.2.24

Updates @microsoft/m365agentsplayground from 0.2.16 to 0.2.24

Updates @microsoft/agents-hosting-express from 1.1.1 to 1.4.2

Release notes

Sourced from @​microsoft/agents-hosting-express's releases.

v1.4.2

What's Changed

• Resolves an issue where background token exchanges could sometimes cause a timeout PR #1013

Full Changelog: microsoft/Agents-for-js@v1.4...v1.4.2

v1.4

What's Changed

• Address potential variations in the value of the authority url by @​benbrown in microsoft/Agents-for-js#971
• Add conversation resume and start control to WebChat adapter by @​benbrown in microsoft/Agents-for-js#983
• Add OTelAgent sample by @​ceciliaavila in microsoft/Agents-for-js#929
• Add JWT decoding to agentic message handling by @​MattB-msft in microsoft/Agents-for-js#905
• Bug fix: Allow whitespace only chunks in streaming response by @​benbrown in microsoft/Agents-for-js#997
• Resync MCS Client to add Subscribe features and CreateConversation Options by @​MattB-msft in microsoft/Agents-for-js#944
• Fix: properly identify streaming channels by @​benbrown in microsoft/Agents-for-js#1001
• #989 Improve how empty req.user is handled by @​ceciliaavila in microsoft/Agents-for-js#999

Additional Updates

• Prepare main branch for 1.4 by @​benbrown in microsoft/Agents-for-js#947
• Bump @​microsoft/api-extractor from 7.56.3 to 7.57.2 by @​dependabot[bot] in microsoft/Agents-for-js#952
• Bump @​types/node from 25.2.3 to 25.3.0 by @​dependabot[bot] in microsoft/Agents-for-js#948
• Fix broken cross-package JSDoc {@link} in TeamsAttachmentDownloader by @​Copilot in microsoft/Agents-for-js#959
• Bump @​types/lodash from 4.17.23 to 4.17.24 by @​dependabot[bot] in microsoft/Agents-for-js#957
• Bump @​microsoft/api-extractor from 7.57.2 to 7.57.3 by @​dependabot[bot] in microsoft/Agents-for-js#956
• Fix tenant ID priority in authority resolution for tenant-scoped token acquisition by @​Copilot in microsoft/Agents-for-js#955
• Bump @​microsoft/api-extractor from 7.57.3 to 7.57.5 by @​dependabot[bot] in microsoft/Agents-for-js#966
• Bump @​azure/msal-node from 5.0.4 to 5.0.5 by @​dependabot[bot] in microsoft/Agents-for-js#965
• Suppress Zod schema variables from generated API documentation by @​Copilot in microsoft/Agents-for-js#964
• Update knip, fix errors, and add rules explicitly by @​sw-joelmut in microsoft/Agents-for-js#967
• Bump @​microsoft/api-extractor from 7.57.5 to 7.57.6 by @​dependabot[bot] in microsoft/Agents-for-js#970
• Bump @​types/node from 25.3.0 to 25.3.2 by @​dependabot[bot] in microsoft/Agents-for-js#968
• Bump axios from 1.13.5 to 1.13.6 by @​dependabot[bot] in microsoft/Agents-for-js#975
• Bump jwks-rsa from 3.2.2 to 4.0.0 by @​dependabot[bot] in microsoft/Agents-for-js#976
• bump versions of fast-xml-parser, minimatch, markdown and qs dependencies by @​ceciliaavila in microsoft/Agents-for-js#977
• Bump jwks-rsa from 4.0.0 to 4.0.1 by @​dependabot[bot] in microsoft/Agents-for-js#978
• Bump @​azure/msal-node from 5.0.5 to 5.0.6 by @​dependabot[bot] in microsoft/Agents-for-js#979
• Bump @​types/node from 25.3.2 to 25.3.3 by @​dependabot[bot] in microsoft/Agents-for-js#980
• Bump neostandard from 0.12.2 to 0.13.0 by @​dependabot[bot] in microsoft/Agents-for-js#981
• Bump sinon from 21.0.1 to 21.0.2 by @​dependabot[bot] in microsoft/Agents-for-js#984
• Bump @​opentelemetry/sdk-trace-base from 2.5.0 to 2.6.0 by @​dependabot[bot] in microsoft/Agents-for-js#985
• Bump @​opentelemetry/sdk-node from 0.211.0 to 0.213.0 by @​dependabot[bot] in microsoft/Agents-for-js#987
• Bump @​opentelemetry/semantic-conventions from 1.39.0 to 1.40.0 by @​dependabot[bot] in microsoft/Agents-for-js#988
• Bump @​microsoft/api-extractor from 7.57.6 to 7.57.7 by @​dependabot[bot] in microsoft/Agents-for-js#990
• Change npm dependency update interval to monthly by @​benbrown in microsoft/Agents-for-js#995
• Bump @​opentelemetry/auto-instrumentations-node from 0.69.0 to 0.71.0 by @​dependabot[bot] in microsoft/Agents-for-js#991
• Bump knip from 5.85.0 to 5.86.0 by @​dependabot[bot] in microsoft/Agents-for-js#992

Full Changelog: microsoft/Agents-for-js@v1.3.1...v1.4

... (truncated)

Commits

• b4fc423 Cherrypick token flow fix into v1.4 (#1034)
• e076392 Set version to '1.4'
• 6af9db5 remove util script
• 8e4b7f2 Fix: properly identify streaming channels (#1001)
• 05036db Bump knip from 5.85.0 to 5.86.0 (#992)
• 8fae7ee #989 Improve how empty req.user is handled (#999)
• 702b872 Resync MCS Client to add Subscribe features and CreateConversation Options (#...
• 0d6bc7a Bump @​opentelemetry/auto-instrumentations-node from 0.69.0 to 0.71.0 (#991)
• 87e47cb Bug fix: Allow whitespace only chunks in streaming response (#997)
• 609a1a1 Add JWT decoding to agentic message handling (#905)
• Additional commits viewable in compare view

Updates express from 5.1.0 to 5.2.1

Release notes

Sourced from express's releases.

v5.2.1

What's Changed

[!IMPORTANT]
The prior release (5.2.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

• Release: 5.2.1 by @​UlisesGascon in expressjs/express#6933

Full Changelog: expressjs/express@v5.2.0...v5.2.1

v5.2.0

Important: Securit...

Description has been truncated