From fcccc96bd822f99e8849a576cf3ee430e51d5587 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 15 Jan 2026 03:43:22 +0000
Subject: [PATCH] Bump @azure/msal-node from 2.3.0 to 3.8.5

Bumps [@azure/msal-node](https://github.com/AzureAD/microsoft-authentication-library-for-js) from 2.3.0 to 3.8.5.
- [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases)
- [Commits](https://github.com/AzureAD/microsoft-authentication-library-for-js/compare/msal-node-v2.3.0...msal-node-v3.8.5)

---
updated-dependencies:
- dependency-name: "@azure/msal-node"
  dependency-version: 3.8.5
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 actions/ms-idp-workflow-run-auth/package.json |  2 +-
 lib/gh-actions-msal-client/package.json       |  2 +-
 package-lock.json                             | 22 ++++++++++---------
 3 files changed, 14 insertions(+), 12 deletions(-)

diff --git a/actions/ms-idp-workflow-run-auth/package.json b/actions/ms-idp-workflow-run-auth/package.json
index 38cd62a..734920b 100644
--- a/actions/ms-idp-workflow-run-auth/package.json
+++ b/actions/ms-idp-workflow-run-auth/package.json
@@ -32,7 +32,7 @@
     "@actions/core": "^1.10.1",
     "@actions/exec": "^1.1.1",
     "@actions/http-client": "^2.2.0",
-    "@azure/msal-node": "^2.3.0",
+    "@azure/msal-node": "^3.8.5",
     "@thnetii/gh-actions-core-helpers": "*",
     "@thnetii/gh-actions-http-client": "*",
     "@thnetii/gh-actions-msal-client": "*"
diff --git a/lib/gh-actions-msal-client/package.json b/lib/gh-actions-msal-client/package.json
index 2ffa96c..e86e7e8 100644
--- a/lib/gh-actions-msal-client/package.json
+++ b/lib/gh-actions-msal-client/package.json
@@ -27,7 +27,7 @@
   "dependencies": {
     "@actions/core": "^1.10.1",
     "@actions/http-client": "^2.2.0",
-    "@azure/msal-node": "^2.3.0",
+    "@azure/msal-node": "^3.8.5",
     "@thnetii/gh-actions-http-client": "*"
   }
 }
diff --git a/package-lock.json b/package-lock.json
index 947e643..2aa85df 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -212,7 +212,7 @@
         "@actions/core": "^1.10.1",
         "@actions/exec": "^1.1.1",
         "@actions/http-client": "^2.2.0",
-        "@azure/msal-node": "^2.3.0",
+        "@azure/msal-node": "^3.8.5",
         "@thnetii/gh-actions-core-helpers": "*",
         "@thnetii/gh-actions-http-client": "*",
         "@thnetii/gh-actions-msal-client": "*"
@@ -243,7 +243,7 @@
       "dependencies": {
         "@actions/core": "^1.10.1",
         "@actions/http-client": "^2.2.0",
-        "@azure/msal-node": "^2.3.0",
+        "@azure/msal-node": "^3.8.5",
         "@thnetii/gh-actions-http-client": "*"
       },
       "engines": {
@@ -530,24 +530,26 @@
       "integrity": "sha512-Xni35NKzjgMrwevysHTCArtLDpPvye8zV/0E4EyYn43P7/7qvQwPh9BGkHewbMulVntbigmcT7rdX3BNo9wRJg=="
     },
     "node_modules/@azure/msal-common": {
-      "version": "14.2.0",
-      "resolved": "https://registry.npmjs.org/@azure/msal-common/-/msal-common-14.2.0.tgz",
-      "integrity": "sha512-oUYJcdpmDlgs4DPthu8J1aWmOMhQanS/On6b22bpbZl+KOfVhgoF7dKlGuqaRXyH8GgnPy+vCyOyMva3Ge9UXA==",
+      "version": "15.14.0",
+      "resolved": "https://registry.npmjs.org/@azure/msal-common/-/msal-common-15.14.0.tgz",
+      "integrity": "sha512-aNuorSQxzsJQ6IUjJtN+rCInLfLOo3VpNYiXaHBK9XL8Ieg1y4F5ZFjI19GErbVvwqvwGNyJ9AZ/sAxOWhoSUw==",
+      "license": "MIT",
       "engines": {
         "node": ">=0.8.0"
       }
     },
     "node_modules/@azure/msal-node": {
-      "version": "2.3.0",
-      "resolved": "https://registry.npmjs.org/@azure/msal-node/-/msal-node-2.3.0.tgz",
-      "integrity": "sha512-sgUXmbBTBUncAeeS1m399s77Cih0xQbLRvob8pfdBW45/LTfFko9V3mX41gjnPDB037Fl4hVtwJ92GVCrI7jgw==",
+      "version": "3.8.5",
+      "resolved": "https://registry.npmjs.org/@azure/msal-node/-/msal-node-3.8.5.tgz",
+      "integrity": "sha512-xRSAfH27bIp3vtjtTFyyhdm18lq2pzdoNG7DA2IH1fXzJ30mymryv0wK/Gph+x4y0Rx+5mMLU5JTPiCeQ75Aug==",
+      "license": "MIT",
       "dependencies": {
-        "@azure/msal-common": "14.2.0",
+        "@azure/msal-common": "15.14.0",
         "jsonwebtoken": "^9.0.0",
         "uuid": "^8.3.0"
       },
       "engines": {
-        "node": "18 || 20"
+        "node": ">=16"
       }
     },
     "node_modules/@azure/storage-blob": {