Skip to content

chore(deps-dev): bump msal from 1.33.0 to 1.36.0#1052

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/msal-1.36.0
Closed

chore(deps-dev): bump msal from 1.33.0 to 1.36.0#1052
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/msal-1.36.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 19, 2026

Bumps msal from 1.33.0 to 1.36.0.

Release notes

Sourced from msal's releases.

1.36.0

What's Changed

New Contributors

Full Changelog: AzureAD/microsoft-authentication-library-for-python@1.35.1...1.36.0

1.35.1

What's Changed

Full Changelog: AzureAD/microsoft-authentication-library-for-python@1.35.0...1.35.1

1.35.0

What's Changed

Full Changelog: AzureAD/microsoft-authentication-library-for-python@1.34.0...1.35.0

MSAL Python 1.35.0b1

Highlights

  • The managed identity code path no longer has a dependency on the socket.getfqdn(). No API change is needed. Existing MSAL-powered apps will automatically pick up this new behavior.
  • This version of MSAL Python will pick up PyMsalRuntime 0.20.*. No API change is needed. Existing MSAL-powered apps will automatically pick up this new behavior.
  • The thumbprint name-value pair in the client_credential parameter becomes optional now. See API docs for usage.

What's Changed

... (truncated)

Commits
  • 4a2cb98 Update sku.py
  • a3ba722 Fix OIDC issuer domain spoofing in B2C host validation (#896)
  • 6a92f24 Use cryptographically secure randomness for PKCE, state, and nonce generation...
  • ecf515a Added withFmi method for cca app (#876)
  • eb78068 Potential fix for code scanning alert no. 74: Workflow does not contain permi...
  • 6de712e Add documentation for Managed Identity v2 Hackathon (#885)
  • 1f71ede Add ADO CI, SDL, and release pipelines with e2e test enablement (#890)
  • e4e692c Fix the PoP flow in the console app (#887)
  • 2de45ae Instance discovery remains cloud local on known clouds (#875)
  • 09c8821 Create RELEASE_GUIDE.md (#880)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies python Pull requests that update Python code labels May 19, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 19, 2026 16:51
@dependabot dependabot Bot added dependencies python Pull requests that update Python code labels May 19, 2026
@github-actions github-actions Bot enabled auto-merge May 19, 2026 16:52
@dependabot dependabot Bot force-pushed the dependabot/pip/msal-1.36.0 branch from f49c9b4 to d553af9 Compare May 19, 2026 19:48
Bumps [msal](https://github.com/AzureAD/microsoft-authentication-library-for-python) from 1.33.0 to 1.36.0.
- [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-python/releases)
- [Changelog](https://github.com/AzureAD/microsoft-authentication-library-for-python/blob/dev/RELEASES.md)
- [Commits](AzureAD/microsoft-authentication-library-for-python@1.33.0...1.36.0)

---
updated-dependencies:
- dependency-name: msal
  dependency-version: 1.36.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/msal-1.36.0 branch from d553af9 to 14f003b Compare May 20, 2026 00:26
@sonarqubecloud
Copy link
Copy Markdown

@ramsessanchez
Copy link
Copy Markdown
Contributor

Superseded by #1067

auto-merge was automatically disabled May 20, 2026 22:46

Pull request was closed

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 20, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/pip/msal-1.36.0 branch May 20, 2026 22:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant