Merge to release by Rick-Kirkham · Pull Request #503 · OfficeDev/Excel-Custom-Functions

Rick-Kirkham · 2026-06-23T22:15:45Z

Change Description:

Getting backlog of changes into release

Do these changes impact any npm scripts commands (in package.json)? (e.g., running 'npm run start')
no
Do these changes impact VS Code debugging options (launch.json)?
no.
Do these changes impact template output? (e.g., add/remove file, update file location, update file contents)
yes
Do these changes impact documentation? (e.g., a tutorial on https://docs.microsoft.com/en-us/office/dev/add-ins/overview/office-add-ins)
yes

If you answered yes to any of these please do the following:
> Include 'Rick-Kirkham' in the review
> Make sure the README file is correct

Validation/testing performed:

N/A

Bumps [tar-fs](https://github.com/mafintosh/tar-fs) from 2.1.2 to 2.1.3. - [Commits](https://github.com/mafintosh/tar-fs/commits) --- updated-dependencies: - dependency-name: tar-fs dependency-version: 2.1.3 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Alex Jerabek <38896772+AlexJerabek@users.noreply.github.com>

Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server) from 5.1.0 to 5.2.1. - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v5.1.0...v5.2.1) --- updated-dependencies: - dependency-name: webpack-dev-server dependency-version: 5.2.1 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Alex Jerabek <38896772+AlexJerabek@users.noreply.github.com>

--- updated-dependencies: - dependency-name: on-headers dependency-version: 1.1.0 dependency-type: indirect - dependency-name: compression dependency-version: 1.8.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Alex Jerabek <38896772+AlexJerabek@users.noreply.github.com>

Bumps [tar-fs](https://github.com/mafintosh/tar-fs) from 2.1.3 to 2.1.4. - [Commits](mafintosh/tar-fs@v2.1.3...v2.1.4) --- updated-dependencies: - dependency-name: tar-fs dependency-version: 2.1.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Update pipeline, node, script versions, and fix build error

Bumps [glob](https://github.com/isaacs/node-glob) from 10.4.5 to 10.5.0. - [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md) - [Commits](isaacs/node-glob@v10.4.5...v10.5.0) --- updated-dependencies: - dependency-name: glob dependency-version: 10.5.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.0 to 4.1.1. - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.1.0...4.1.1) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [node-forge](https://github.com/digitalbazaar/forge) from 1.3.1 to 1.3.2. - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](digitalbazaar/forge@v1.3.1...v1.3.2) --- updated-dependencies: - dependency-name: node-forge dependency-version: 1.3.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [express](https://github.com/expressjs/express) from 4.21.2 to 4.22.1. - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/v4.22.1/History.md) - [Commits](expressjs/express@4.21.2...v4.22.1) --- updated-dependencies: - dependency-name: express dependency-version: 4.22.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…-2.1.4 Bump tar-fs from 2.1.3 to 2.1.4

…l-4.1.1 Bump js-yaml from 4.1.0 to 4.1.1

…0.5.0 Bump glob from 10.4.5 to 10.5.0

…orge-1.3.2 Bump node-forge from 1.3.1 to 1.3.2

…s-4.22.1 Bump express from 4.21.2 to 4.22.1

Bumps [validator](https://github.com/validatorjs/validator.js) from 13.12.0 to 13.15.20. - [Release notes](https://github.com/validatorjs/validator.js/releases) - [Changelog](https://github.com/validatorjs/validator.js/blob/master/CHANGELOG.md) - [Commits](validatorjs/validator.js@13.12.0...13.15.20) --- updated-dependencies: - dependency-name: validator dependency-version: 13.15.20 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Rick Kirkham <Rick-Kirkham@users.noreply.github.com>

Bumps [jws](https://github.com/brianloveswords/node-jws) from 3.2.2 to 3.2.3. - [Release notes](https://github.com/brianloveswords/node-jws/releases) - [Changelog](https://github.com/auth0/node-jws/blob/master/CHANGELOG.md) - [Commits](auth0/node-jws@v3.2.2...v3.2.3) --- updated-dependencies: - dependency-name: jws dependency-version: 3.2.3 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bump jws from 3.2.2 to 3.2.3

Add ability to manually run npm-audit-fix workflow

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.17.23) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.17.23 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.2 to 7.5.6. - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v7.5.2...v7.5.6) --- updated-dependencies: - dependency-name: tar dependency-version: 7.5.6 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bump tar from 7.5.2 to 7.5.6

…orkflow Update autorun-npm-audit-fix workflow

Automatically run npm audit fix

Bumps [ip-address](https://github.com/beaugunderson/ip-address) and [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit). These dependencies needed to be updated together. Updates `ip-address` from 10.1.0 to 10.2.0 - [Commits](https://github.com/beaugunderson/ip-address/commits) Updates `express-rate-limit` from 8.4.1 to 8.5.1 - [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases) - [Commits](express-rate-limit/express-rate-limit@v8.4.1...v8.5.1) --- updated-dependencies: - dependency-name: ip-address dependency-version: 10.2.0 dependency-type: indirect - dependency-name: express-rate-limit dependency-version: 8.5.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.0.6 to 3.1.2. - [Release notes](https://github.com/fastify/fast-uri/releases) - [Commits](fastify/fast-uri@v3.0.6...v3.1.2) --- updated-dependencies: - dependency-name: fast-uri dependency-version: 3.1.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…ri-3.1.2 Bump fast-uri from 3.0.6 to 3.1.2

Bumps [hono](https://github.com/honojs/hono) from 4.12.16 to 4.12.18. - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.12.16...v4.12.18) --- updated-dependencies: - dependency-name: hono dependency-version: 4.12.18 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

….12.18 Bump hono from 4.12.16 to 4.12.18

Bumps [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs) from 7.25.9 to 7.29.4. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.4/packages/babel-plugin-transform-modules-systemjs) --- updated-dependencies: - dependency-name: "@babel/plugin-transform-modules-systemjs" dependency-version: 7.29.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…plugin-transform-modules-systemjs-7.29.4 Bump @babel/plugin-transform-modules-systemjs from 7.25.9 to 7.29.4

Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server) from 5.2.1 to 5.2.4. - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v5.2.1...v5.2.4) --- updated-dependencies: - dependency-name: webpack-dev-server dependency-version: 5.2.4 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…bars-4.7.9 Bump handlebars from 4.7.8 to 4.7.9

Automatically run npm audit fix

Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.8.2 to 1.8.4. - [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md) - [Commits](ljharb/shell-quote@v1.8.2...v1.8.4) --- updated-dependencies: - dependency-name: shell-quote dependency-version: 1.8.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…quote-1.8.4 Bump shell-quote from 1.8.2 to 1.8.4

Bumps [launch-editor](https://github.com/vitejs/launch-editor) from 2.10.0 to 2.14.1. - [Commits](vitejs/launch-editor@v2.10.0...v2.14.1) --- updated-dependencies: - dependency-name: launch-editor dependency-version: 2.14.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.1 to 4.2.0. - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/commits) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 4.2.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…l-4.2.0 Bump js-yaml from 4.1.1 to 4.2.0

…el-loader (#501) Bumps [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core), [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env), [@babel/preset-typescript](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-typescript) and [babel-loader](https://github.com/babel/babel-loader). These dependencies needed to be updated together. Updates `@babel/core` from 7.26.9 to 8.0.1 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.1/packages/babel-core) Updates `@babel/preset-env` from 7.26.9 to 8.0.2 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.2/packages/babel-preset-env) Updates `@babel/preset-typescript` from 7.26.0 to 8.0.1 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.1/packages/babel-preset-typescript) Updates `babel-loader` from 9.2.1 to 10.1.1 - [Release notes](https://github.com/babel/babel-loader/releases) - [Changelog](https://github.com/babel/babel-loader/blob/main/CHANGELOG.md) - [Commits](babel/babel-loader@v9.2.1...v10.1.1) --- updated-dependencies: - dependency-name: "@babel/core" dependency-version: 8.0.1 dependency-type: direct:development - dependency-name: "@babel/preset-env" dependency-version: 8.0.2 dependency-type: direct:development - dependency-name: "@babel/preset-typescript" dependency-version: 8.0.1 dependency-type: direct:development - dependency-name: babel-loader dependency-version: 10.1.1 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server) from 5.2.4 to 5.2.5. - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v5.2.4...v5.2.5) --- updated-dependencies: - dependency-name: webpack-dev-server dependency-version: 5.2.5 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [hono](https://github.com/honojs/hono) from 4.12.23 to 4.12.26. - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.12.23...v4.12.26) --- updated-dependencies: - dependency-name: hono dependency-version: 4.12.26 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

….12.26 Bump hono from 4.12.23 to 4.12.26

Automatically run npm audit fix

dependabot Bot and others added 30 commits July 24, 2025 13:56

Add workflow to autorun npm audit fix (#444)

90d0115

Update pipeline, node, script versions, and fix build error

f3115d0

Merge pull request #452 from OfficeDev/update-pipeline-node-scripts

221192e

Update pipeline, node, script versions, and fix build error

Merge branch 'master' into dependabot/npm_and_yarn/tar-fs-2.1.4

3d7b331

Merge pull request #447 from OfficeDev/dependabot/npm_and_yarn/tar-fs…

7006c84

…-2.1.4 Bump tar-fs from 2.1.3 to 2.1.4

Merge pull request #449 from OfficeDev/dependabot/npm_and_yarn/js-yam…

ee63c19

…l-4.1.1 Bump js-yaml from 4.1.0 to 4.1.1

Merge branch 'master' into dependabot/npm_and_yarn/glob-10.5.0

90aa3a3

Merge branch 'master' into dependabot/npm_and_yarn/node-forge-1.3.2

e6d938a

Merge branch 'master' into dependabot/npm_and_yarn/express-4.22.1

482896c

Merge pull request #450 from OfficeDev/dependabot/npm_and_yarn/glob-1…

92b4c8b

…0.5.0 Bump glob from 10.4.5 to 10.5.0

Merge branch 'master' into dependabot/npm_and_yarn/node-forge-1.3.2

205f63d

Merge pull request #454 from OfficeDev/dependabot/npm_and_yarn/node-f…

e7066e9

…orge-1.3.2 Bump node-forge from 1.3.1 to 1.3.2

Merge branch 'master' into dependabot/npm_and_yarn/express-4.22.1

37ad29b

Merge pull request #455 from OfficeDev/dependabot/npm_and_yarn/expres…

a19858d

…s-4.22.1 Bump express from 4.21.2 to 4.22.1

Merge pull request #456 from OfficeDev/dependabot/npm_and_yarn/jws-3.2.3

f8329cd

Bump jws from 3.2.2 to 3.2.3

Add ability to manually run npm-audit-fix workflow

533b9ef

Merge pull request #457 from OfficeDev/eliz-manual

d7530d5

Add ability to manually run npm-audit-fix workflow

Merge pull request #459 from OfficeDev/dependabot/npm_and_yarn/tar-7.5.6

e295438

Bump tar from 7.5.2 to 7.5.6

Rick-Kirkham and others added 27 commits May 1, 2026 13:25

Merge pull request #485 from OfficeDev/update-autorun-npm-audit-fix-w…

510ac05

…orkflow Update autorun-npm-audit-fix workflow

Automatically run npm audit fix

432eda2

Merge pull request #486 from OfficeDev/autorun-npm-audit-fix

95849eb

Automatically run npm audit fix

Merge pull request #488 from OfficeDev/dependabot/npm_and_yarn/fast-u…

2c61b46

…ri-3.1.2 Bump fast-uri from 3.0.6 to 3.1.2

Merge pull request #489 from OfficeDev/dependabot/npm_and_yarn/hono-4…

5c0c4e3

….12.18 Bump hono from 4.12.16 to 4.12.18

Merge pull request #490 from OfficeDev/dependabot/npm_and_yarn/babel/…

7973862

…plugin-transform-modules-systemjs-7.29.4 Bump @babel/plugin-transform-modules-systemjs from 7.25.9 to 7.29.4

Merge branch 'master' into dependabot/npm_and_yarn/handlebars-4.7.9

89921ea

Merge pull request #475 from OfficeDev/dependabot/npm_and_yarn/handle…

d309c39

…bars-4.7.9 Bump handlebars from 4.7.8 to 4.7.9

Automatically run npm audit fix

a6d8b3a

Merge pull request #492 from OfficeDev/autorun-npm-audit-fix

cb0d96c

Automatically run npm audit fix

Merge pull request #495 from OfficeDev/dependabot/npm_and_yarn/shell-…

53af3a0

…quote-1.8.4 Bump shell-quote from 1.8.2 to 1.8.4

Merge pull request #498 from OfficeDev/dependabot/npm_and_yarn/js-yam…

efcf9d0

…l-4.2.0 Bump js-yaml from 4.1.1 to 4.2.0

Automatically run npm audit fix

61fa300

Merge pull request #500 from OfficeDev/dependabot/npm_and_yarn/hono-4…

7f88163

….12.26 Bump hono from 4.12.23 to 4.12.26

Merge branch 'master' into autorun-npm-audit-fix

dafcf0f

Merge pull request #502 from OfficeDev/autorun-npm-audit-fix

8226073

Automatically run npm audit fix

Rick-Kirkham requested a review from a team as a code owner June 23, 2026 22:15

millerds approved these changes Jun 24, 2026

View reviewed changes

Rick-Kirkham merged commit d24c5d0 into release Jun 25, 2026
5 of 7 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Merge to release#503

Merge to release#503
Rick-Kirkham merged 89 commits into
releasefrom
master

Rick-Kirkham commented Jun 23, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

Rick-Kirkham commented Jun 23, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants