build(deps): Bump @azure/msal-browser from 5.3.0 to 5.18.0 in /core/src/main/webapp/ui

[dependabot]

Bumps @azure/msal-browser from 5.3.0 to 5.18.0.

Release notes

Sourced from @​azure/msal-browser's releases.

@​azure/msal-browser v5.18.0

5.18.0

Tue, 04 Aug 2026 20:17:38 GMT

Minor changes

• Add attribute-tokens support #8700 (spingale@microsoft.com)
• Bump @​azure/msal-common to v16.12.0 (beachball)

Patches

• Add internal webBrokerBridge scaffold (shared message interfaces, error taxonomy, pending-request registry) — no callers yet, no public API surface change #8729 (shylasummers@microsoft.com)

@​azure/msal-browser v5.17.3

5.17.3

Wed, 29 Jul 2026 00:26:30 GMT

Patches

• Add single retry with 100ms backoff for token POST transport failures #8732 (thomas.norling@microsoft.com)
• Streamline the platform broker request to only include the MSAL JS acquire-token parameters defined in the platform broker contract and params required on the ESTS /token call #8714 (lalima.sharda@gmail.com)
• Fill telemetry gaps in platform brokering flow with extension #8699 (lalima.sharda@gmail.com)
• Bump @​azure/msal-common to v16.11.3 (beachball)

@​azure/msal-browser v5.17.1

5.17.1

Wed, 15 Jul 2026 22:35:35 GMT

Patches

• Add internal ES256/P-256 DPoP crypto support to BrowserCrypto #8683 (hectormmg@microsoft.com)
• Bump @​azure/msal-common to v16.11.2 (beachball)

@​azure/msal-browser v5.17.0

5.17.0

Tue, 07 Jul 2026 22:16:01 GMT

Minor changes

• Add auth.popupRelayUri: a double-popup option for apps that customize COOP/storage-partitioning, relaying acquireTokenPopup/logoutPopup through a top-level same-origin relay page (runPopupRelay) so tokens can be acquired from an untrusted cross-origin iframe. #8687 (kshabelko@microsoft.com)
• Bump @​azure/msal-common to v16.11.1 (beachball)

Patches

• Fix decode logs script for the standalone mode #8697 (kshabelko@microsoft.com)

... (truncated)

Commits

• 5c53ac6 feat: add AttributeToken request and cache partition support (#8700)
• 7d10e6c  [NAA/PWB One Bridge] PR 1/6: webBrokerBridge scaffold — shared interfaces, e...
• 529fdd3 fix(msal-node): use length-prefix encoding for additional cache key hash to p...
• 006de72 Add clientClaims request parameter for confidential client (#8686)
• 2796e9b Bump uuid from 8.3.2 to 14.0.0 (#8575)
• 45ac206 Bump immutable from 5.1.7 to 5.1.9 (#8718)
• 8c1ec2d Bump webpack-dev-server from 5.2.3 to 5.2.6 (#8716)
• cd19b1a Bump postcss from 8.5.15 to 8.5.18 (#8730)
• 86bd093 test(e2e): shared brokering e2e helpers + real KMSI assertion (Foundation PR ...
• a6a32af Post-release PR (#8734)
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: npm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.