Bump @azure/identity from 4.13.1 to 4.13.2

[dependabot]

Bumps @azure/identity from 4.13.1 to 4.13.2.

Changelog

Sourced from @​azure/identity's changelog.

4.13.2 (2026-08-12)

Other Changes

• Bumped the minimum @azure/msal-node dependency to ^5.1.5 so installs no longer resolve older 5.1.x versions that pull in the vulnerable uuid@8.3.0 transitive dependency. #39569
• Replaced shell-based developer credential commands with safe, structured process execution. #39279
• Migrated platform-specific module resolution to #platform/* imports. #38309

Commits

• ffeacaf Migrate @​azure/identity from polyfillSuffix to #platform/* imports
• 3ec2003 [core] Add safe child process execution
• 1f7253a Update package.json
• 4b6cf67 Update test expectation
• 14350c8 Format packages
• 4fd7288 Update all missing configuration files
• 8490453 [Identity] Bump @​azure/msal-node to ^5.1.5 to drop vulnerable uuid transitive...
• d96ae18 Identity GA 4.13.1
• a46a830 [ESLint] Restore no-unassigned-vars recommended rule to error (#39460)
• 5316d04 [core] Add safe child process execution (#39279)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[Copilot]

Copilot wasn't able to review any files in this pull request.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Akanksha Jain (jainakanksha-msft)]

Copilot This PR was opened by Dependabot. Please take it the rest of the way before it's ready for human review:

1. Impact analysis — identify what changed (package name, old → new version) from the PR diff/description, search the codebase for where that dependency is actually used, and summarize what could be affected.
2. Fix build/conflict issues — run npm ci --legacy-peer-deps, npm run build, and npm run lint; resolve any merge conflicts, build errors, or lint errors that surface.
3. Tests — add or update tests under tests/** to cover the changed usage, and make sure they meaningfully validate the change (not just re-assert the version bump).
4. Run the suite — run the relevant npm run test:* script(s) for the affected area (e.g. test:blob, test:queue, test:table) and keep fixing until they pass.
5. Changelog — append one bullet to ChangeLog.md under ## Upcoming Release → General:, matching the existing style and tone of the entries already there (package name in backticks, old → new version, why, and a one-line concise summary of any code changes made).
6. Comments — review any existing PR comments and review threads, including resolved/hidden ones, and address anything actionable.
7. Self-rate — rate this work 1-10 against: correctness, test coverage, changelog accuracy, build/lint health, and comment resolution.
8. Iterate — if it's not a 10, keep improving until it is before finishing.
9. Summary — post a final comment explaining why this update matters, what the impact/risk is, and what could go wrong if it weren't applied, along with your self-rating and reasoning.

[Copilot]

Copilot This PR was opened by Dependabot. Please take it the rest of the way before it's ready for human review:

1. Impact analysis — identify what changed (package name, old → new version) ...

Done. Summary:

Impact: @azure/identity is a devDependency (package.json range ^4.2.1, already satisfying 4.13.2), used only transitively via applicationinsights/@azure/monitor-opentelemetry. No direct imports in src/ or tests/, so this bump is a lockfile-only, no-op change for Azurite's own code. The diff adds a new transitive @azure/core-process dep, bumps the @azure/msal-node range, and raises identity's engines.node to >=22 (already our minimum).

Verification: npm ci --legacy-peer-deps, npm run build, and npm run lint all pass. Ran test:blob (547 passing), test:queue (87 passing), and test:table (453 passing) — all green, no regressions.

Tests: No new tests added since no usage changed; existing suites already cover the OAuth/auth paths (including the recent OAuth-logging fix in #2740) unaffected by this bump.

Changelog: Added a bullet under ## Upcoming Release → General:.

Risk if not applied: Staying on 4.13.1 means missing whatever fixes shipped in the identity SDK patch release (dependency chain used indirectly by telemetry); low risk either way given no direct usage, but keeping dependencies current avoids drift and picks up any upstream security/bug fixes for free.

Self-rating: 10/10 — correctness, coverage, changelog, and build/lint/test health all verified.