GeezerVison

Sourced from @​azure/identity's changelog.

4.14.1 (2026-10-29)

Bugs Fixed

• Restored the fix from 4.13.3 that forwards constructor options from DefaultAzureCredential to ManagedIdentityCredential when selected through AZURE_TOKEN_CREDENTIALS, including managedIdentityClientId and managedIdentityResourceId. #40547

Other Changes

• Updated @azure/msal-node to ^7.1.0. Interactive browser authentication now requires form_post callbacks, as described in the MSAL Node v7 migration guide. #40532

4.15.0-beta.1 (2026-10-14)

Features Added

• Added GitHubActionsCredential for authenticating to Microsoft Entra ID using GitHub Actions OIDC federated identity credentials. This credential reads AZURE_TENANT_ID, AZURE_CLIENT_ID, ACTIONS_ID_TOKEN_REQUEST_URL, and ACTIONS_ID_TOKEN_REQUEST_TOKEN from the environment and exchanges the GitHub OIDC token for an Azure access token. Sovereign cloud audience is derived automatically from authorityHost. #38581

4.14.0 (2026-10-14)

This release includes all changes introduced in versions 4.14.0-beta.1 through 4.14.0-beta.5.

Bugs Fixed

• Fixed AzurePipelinesCredential to include only relevant details in error messages and logs when the OIDC token request fails. #39774
• Fixed InteractiveBrowserCredential failing to authenticate when the user's default browser is already running and only permits a single instance. The browser is no longer launched with newInstance, which on macOS passed open --new. #39814
• Fixed EnvironmentCredential and DefaultAzureCredential ignoring the AZURE_ADDITIONALLY_ALLOWED_TENANTS environment variable. If the additionallyAllowedTenants option is also set, the option takes precedence. #40221

Other Changes

• Preserve caught errors as the cause when wrapping them. #39423
• Updated @azure/msal-node to ^6.0.0. #39965

4.13.3 (2026-09-10)

Features Added

• Bumped the minimum @azure/msal-node dependency to ^6.0.0 to provide Azure Arc user-assigned managed identity support. #39927

Bugs Fixed

• Fixed AzurePipelinesCredential to include only relevant details in error messages and logs when the OIDC token request fails. #39774
• Fixed InteractiveBrowserCredential failing to authenticate when the user's default browser is already running and only permits a single instance. The browser is no longer launched with newInstance, which on macOS passed open --new. #39814
• Fixed an issue where DefaultAzureCredential does not pass constructor options to ManagedIdentityCredential when selected through AZURE_TOKEN_CREDENTIALS. #39927

Other Changes

• Preserve caught errors as the cause when wrapping them. #39423

4.14.0-beta.5 (2026-08-12)

Other Changes

... (truncated)

• 56472b9 [Identity] Set 4.14.1 release date to October 29, 2026
• 8881515 [Identity] Backport 4.13.3 fixes and finalize 4.14.1 changelog
• 89ef212 [Identity] Backport MSAL Node v7 for 4.14.1
• 4fb292a [Identity] GA Identity Binding Feature (#40297)
• a369673 [Identity] Add AKS Identity Binding Test For Weekly Pipeline (#40256)
• 8a46161 Upgrade dotenv to 18.0.5 (#40240)
• f814748 [identity] Fix EnvironmentCredential ignoring AZURE_ADDITIONALLY_ALLOWED_TENA...
• 5fadd99 Add GitHubActionsCredential for GitHub Actions OIDC federation (#38581)
• 2b86f77 [Identity] Migrate to MSAL v6 (#39965)
• fcb12a4 [identity] Don't force a new browser instance when opening the auth page (#39...
• Additional commits viewable in compare view