Sourced from @​azure/msal-node's releases.

@​azure/msal-node v3.6.1

3.6.1

Wed, 18 Jun 2025 15:21:55 GMT

Patches

• remove access tokens synchronously (thomas.norling@microsoft.com)
• Added support for DEFAULT_IDENTITY_CLIENT_ID environment variable in Machine Learning Managed Identity #7616 (rginsburg@microsoft.com)
• Bump @​azure/msal-common to v15.7.1 (beachball)
• Bump eslint-config-msal to v0.0.0 (beachball)
• Bump rollup-msal to v0.0.0 (beachball)

• 2188341 Add native auth feature to support the external ID authentication (sign-in, s...
• 45eea6b Release PR: official (#7849)
• 32c6a1b Adding new UX_NOT_ALLOWED suberror under InteractionRequired error type (#7834)
• 14fe619 Added support for DEFAULT_IDENTITY_CLIENT_ID environment variable in Machine ...
• aedd762 Client Credential Sample: Moved client secret from code to .env file (#7820)
• 4b956d0 Bumped the dotenv package in all msal-node samples (#7823)
• 97ea591 Bumped axios to latest version in all msal-node samples (#7831)
• 1eb9ee5 Release PR: official (#7829)
• fa85c44 [v4] Remove access tokens synchronously (#7822)
• 75f6237 Suppress false-positive CodeQL finding in NavigationClient (#7814)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)