[dependabot]

Bumps the script-dependencies group with 4 updates in the /scripts directory: @azure/identity, @types/node, tsx and yaml.

Updates @azure/identity from 4.13.2 to 4.13.3

Changelog

Sourced from @​azure/identity's changelog.

4.13.3 (2026-09-10)

Features Added

• Bumped the minimum @azure/msal-node dependency to ^6.0.0 to provide Azure Arc user-assigned managed identity support. #39927

Bugs Fixed

• Fixed AzurePipelinesCredential to include only relevant details in error messages and logs when the OIDC token request fails. #39774
• Fixed InteractiveBrowserCredential failing to authenticate when the user's default browser is already running and only permits a single instance. The browser is no longer launched with newInstance, which on macOS passed open --new. #39814
• Fixed an issue where DefaultAzureCredential does not pass constructor options to ManagedIdentityCredential when selected through AZURE_TOKEN_CREDENTIALS. #39927

Other Changes

• Preserve caught errors as the cause when wrapping them. #39423

Commits

• b9b7a5d [Identity] Azure Arc Support (#39927)
• ce47dbc [ESLint] Restore no-useless-assignment recommended rule to error (#39784)
• b87e82b [ESLint] Restore preserve-caught-error recommended rule to error (#39580)
• 817a3a3 [identity] Don't force a new browser instance when opening the auth page (#39...
• 85d4f76 [identity] Response format Azure Pipelines Credential (#39774)
• 83f3dac Restore Identity 4.13.2 GA
• fcb12a4 [identity] Don't force a new browser instance when opening the auth page (#39...
• 96a244f [ESLint] Restore no-useless-assignment recommended rule to error (#39784)
• 2e6883d [Identity] Unify changelog (#39816)
• ae994a8 [identity] Response format Azure Pipelines Credential (#39774)
• Additional commits viewable in compare view

Updates @types/node from 26.2.0 to 26.6.5

Commits

• See full diff in compare view

Updates tsx from 4.23.12 to 4.23.15

Release notes

Sourced from tsx's releases.

v4.23.15

4.23.15 (2026-09-20)

Bug Fixes

• exclude bare builtins from namespace inheritance (38e1588)
• expose require.cache and require.extensions to tsImport CommonJS modules (2da3407)
• make namespaced register() overloads portable for declaration emit (562c434)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.14

4.23.14 (2026-09-20)

Bug Fixes

• restore the CJS bridge namespace for Node 24 require(esm) under tsImport() (#802) (6e5236b)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.13

4.23.13 (2026-08-30)

Bug Fixes

• cache: bound shared transform cache memory (#835) (28e1f12)

---

This release is also available on:

• npm package (@​latest dist-tag)

Commits

• ca66105 test: fix drive-less file URLs in ESM resolver fixtures
• 2da3407 fix: expose require.cache and require.extensions to tsImport CommonJS modules
• 38e1588 fix: exclude bare builtins from namespace inheritance
• 562c434 fix: make namespaced register() overloads portable for declaration emit
• edfb1f0 build: upgrade pkgroll and externalize CJS loader reference
• 70e7828 test: upgrade tinyspy for disposable API
• 9ed2022 ci: avoid duplicate release notifications
• 872e77f refactor: use disposables for cleanup
• 6e5236b fix: restore the CJS bridge namespace for Node 24 require(esm) under tsImport...
• 28e1f12 fix(cache): bound shared transform cache memory (#835)
• See full diff in compare view

Updates yaml from 2.9.0 to 2.9.1

Release notes

Sourced from yaml's releases.

v2.9.1

• Limit recursive merge aliases (#685, #713)
• Simplify line unfolding during quoted string parsing (#714)

Commits

• 1440ecd 2.9.1
• c699bc5 fix: Simplify line unfolding during quoted string parsing (#714)
• d11ce77 fix: Limit recursive merge aliases (#713)
• c5f49f4 chore: Update docs-slate
• See full diff in compare view

[dependabot]

Labels

The following labels could not be found: dependencies, scripts. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

🔍 Preview

Build and checks passed, but a live preview wasn't auto-deployed because Dependabot (@dependabot)[bot] isn't a member of forgebook-contributors yet. A maintainer can add you to the team and re-run this workflow to deploy the preview.

[Nick Brady (nicholasdbrady)]

The current dependency set cannot be installed from the required package feed: npm ci --registry=https://packagefeedproxy.microsoft.io/npm/ returns 404 for @types/node@26.6.5. That prevents validating the exact head and matches the feed-availability gate used for recent dependency updates.

Please refresh this group to versions available from the approved feed (or rerun after 26.6.5 is mirrored), update onto current main, and obtain fresh checks. The manifest/lockfile scope and the other patch updates look reasonable; the feed availability is the blocking item.

[Nick Brady (nicholasdbrady)]

Approved after refreshing onto current main and revalidating the exact head.

• npm ci --registry=https://packagefeedproxy.microsoft.io/npm/ --no-audit: passed; @types/node@26.6.5 is now available from the approved feed.
• npm run validate: passed for all 19 registry entries, with the existing title-length warning only.
• npm run test:preview-auth: 5 passed.
• npm audit --omit=dev --registry=https://packagefeedproxy.microsoft.io/npm/: 0 vulnerabilities.
• Fresh preview and CodeQL checks: passed.

I also reviewed the @azure/identity 4.13.3 transitive move to MSAL Node 6. The breaking MSAL change affects direct interactive API consumers; Forgebook uses Azure Identity's credential abstraction, and its production fetch path passed the refreshed workflow. An additional tsc --noEmit probe reports the existing LogsQueryPartialResult.error issue identically on main, so it is not caused by this PR.