From 003522f0c9f256b31d8a49cf1bf6386c1675f83a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 19 Jan 2026 04:00:35 +0000
Subject: [PATCH] Bump @azure/msal-node from 2.3.0 to 5.0.2

Bumps [@azure/msal-node](https://github.com/AzureAD/microsoft-authentication-library-for-js) from 2.3.0 to 5.0.2.
- [Release notes](https://github.com/AzureAD/microsoft-authentication-library-for-js/releases)
- [Commits](https://github.com/AzureAD/microsoft-authentication-library-for-js/commits)

---
updated-dependencies:
- dependency-name: "@azure/msal-node"
  dependency-version: 5.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 actions/ms-idp-workflow-run-auth/package.json |  2 +-
 lib/gh-actions-msal-client/package.json       |  2 +-
 package-lock.json                             | 22 ++++++++++---------
 3 files changed, 14 insertions(+), 12 deletions(-)

diff --git a/actions/ms-idp-workflow-run-auth/package.json b/actions/ms-idp-workflow-run-auth/package.json
index 38cd62a..99fd2b7 100644
--- a/actions/ms-idp-workflow-run-auth/package.json
+++ b/actions/ms-idp-workflow-run-auth/package.json
@@ -32,7 +32,7 @@
     "@actions/core": "^1.10.1",
     "@actions/exec": "^1.1.1",
     "@actions/http-client": "^2.2.0",
-    "@azure/msal-node": "^2.3.0",
+    "@azure/msal-node": "^5.0.2",
     "@thnetii/gh-actions-core-helpers": "*",
     "@thnetii/gh-actions-http-client": "*",
     "@thnetii/gh-actions-msal-client": "*"
diff --git a/lib/gh-actions-msal-client/package.json b/lib/gh-actions-msal-client/package.json
index 2ffa96c..26dd04f 100644
--- a/lib/gh-actions-msal-client/package.json
+++ b/lib/gh-actions-msal-client/package.json
@@ -27,7 +27,7 @@
   "dependencies": {
     "@actions/core": "^1.10.1",
     "@actions/http-client": "^2.2.0",
-    "@azure/msal-node": "^2.3.0",
+    "@azure/msal-node": "^5.0.2",
     "@thnetii/gh-actions-http-client": "*"
   }
 }
diff --git a/package-lock.json b/package-lock.json
index 947e643..9e2ce84 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -212,7 +212,7 @@
         "@actions/core": "^1.10.1",
         "@actions/exec": "^1.1.1",
         "@actions/http-client": "^2.2.0",
-        "@azure/msal-node": "^2.3.0",
+        "@azure/msal-node": "^5.0.2",
         "@thnetii/gh-actions-core-helpers": "*",
         "@thnetii/gh-actions-http-client": "*",
         "@thnetii/gh-actions-msal-client": "*"
@@ -243,7 +243,7 @@
       "dependencies": {
         "@actions/core": "^1.10.1",
         "@actions/http-client": "^2.2.0",
-        "@azure/msal-node": "^2.3.0",
+        "@azure/msal-node": "^5.0.2",
         "@thnetii/gh-actions-http-client": "*"
       },
       "engines": {
@@ -530,24 +530,26 @@
       "integrity": "sha512-Xni35NKzjgMrwevysHTCArtLDpPvye8zV/0E4EyYn43P7/7qvQwPh9BGkHewbMulVntbigmcT7rdX3BNo9wRJg=="
     },
     "node_modules/@azure/msal-common": {
-      "version": "14.2.0",
-      "resolved": "https://registry.npmjs.org/@azure/msal-common/-/msal-common-14.2.0.tgz",
-      "integrity": "sha512-oUYJcdpmDlgs4DPthu8J1aWmOMhQanS/On6b22bpbZl+KOfVhgoF7dKlGuqaRXyH8GgnPy+vCyOyMva3Ge9UXA==",
+      "version": "16.0.2",
+      "resolved": "https://registry.npmjs.org/@azure/msal-common/-/msal-common-16.0.2.tgz",
+      "integrity": "sha512-ZJ/UR7lyqIntURrIJCyvScwJFanM9QhJYcJCheB21jZofGKpP9QxWgvADANo7UkresHKzV+6YwoeZYP7P7HvUg==",
+      "license": "MIT",
       "engines": {
         "node": ">=0.8.0"
       }
     },
     "node_modules/@azure/msal-node": {
-      "version": "2.3.0",
-      "resolved": "https://registry.npmjs.org/@azure/msal-node/-/msal-node-2.3.0.tgz",
-      "integrity": "sha512-sgUXmbBTBUncAeeS1m399s77Cih0xQbLRvob8pfdBW45/LTfFko9V3mX41gjnPDB037Fl4hVtwJ92GVCrI7jgw==",
+      "version": "5.0.2",
+      "resolved": "https://registry.npmjs.org/@azure/msal-node/-/msal-node-5.0.2.tgz",
+      "integrity": "sha512-3tHeJghckgpTX98TowJoXOjKGuds0L+FKfeHJtoZFl2xvwE6RF65shZJzMQ5EQZWXzh3sE1i9gE+m3aRMachjA==",
+      "license": "MIT",
       "dependencies": {
-        "@azure/msal-common": "14.2.0",
+        "@azure/msal-common": "16.0.2",
         "jsonwebtoken": "^9.0.0",
         "uuid": "^8.3.0"
       },
       "engines": {
-        "node": "18 || 20"
+        "node": ">=20"
       }
     },
     "node_modules/@azure/storage-blob": {