Merge to release by Rick-Kirkham · Pull Request #206 · OfficeDev/Excel-Custom-Functions-JS

Rick-Kirkham · 2026-06-23T22:19:03Z

Thank you for your pull request! Please provide the following information.

Change Description:

Describe what the PR is about.

Do these changes impact any npm scripts commands (in package.json)? (e.g., running 'npm run start')
If Yes, briefly describe what is impacted.
Do these changes impact VS Code debugging options (launch.json)?
If Yes, briefly describe what is impacted.
Do these changes impact template output? (e.g., add/remove file, update file location, update file contents)
If Yes, briefly describe what is impacted.
Do these changes impact documentation? (e.g., a tutorial on https://docs.microsoft.com/en-us/office/dev/add-ins/overview/office-add-ins)
If Yes, briefly describe what is impacted.

If you answered yes to any of these please do the following:
> Include 'Rick-Kirkham' in the review
> Make sure the README file is correct

Validation/testing performed:

Describe manual testing done.

Bumps [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) from 2.0.7 to 2.0.9. - [Release notes](https://github.com/chimurai/http-proxy-middleware/releases) - [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/v2.0.9/CHANGELOG.md) - [Commits](chimurai/http-proxy-middleware@v2.0.7...v2.0.9) --- updated-dependencies: - dependency-name: http-proxy-middleware dependency-version: 2.0.9 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Alex Jerabek <38896772+AlexJerabek@users.noreply.github.com>

Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server) from 5.1.0 to 5.2.1. - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v5.1.0...v5.2.1) --- updated-dependencies: - dependency-name: webpack-dev-server dependency-version: 5.2.1 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [on-headers](https://github.com/jshttp/on-headers) and [compression](https://github.com/expressjs/compression). These dependencies needed to be updated together. Updates `on-headers` from 1.0.2 to 1.1.0 - [Release notes](https://github.com/jshttp/on-headers/releases) - [Changelog](https://github.com/jshttp/on-headers/blob/master/HISTORY.md) - [Commits](jshttp/on-headers@v1.0.2...v1.1.0) Updates `compression` from 1.8.0 to 1.8.1 - [Release notes](https://github.com/expressjs/compression/releases) - [Changelog](https://github.com/expressjs/compression/blob/master/HISTORY.md) - [Commits](expressjs/compression@1.8.0...v1.8.1) --- updated-dependencies: - dependency-name: on-headers dependency-version: 1.1.0 dependency-type: indirect - dependency-name: compression dependency-version: 1.8.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [tar-fs](https://github.com/mafintosh/tar-fs) from 2.1.2 to 2.1.3. - [Commits](mafintosh/tar-fs@v2.1.2...v2.1.3) --- updated-dependencies: - dependency-name: tar-fs dependency-version: 2.1.3 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Alex Jerabek <38896772+AlexJerabek@users.noreply.github.com>

Update pipeline, node versions, and script versions

Bumps [glob](https://github.com/isaacs/node-glob) from 10.4.5 to 10.5.0. - [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md) - [Commits](isaacs/node-glob@v10.4.5...v10.5.0) --- updated-dependencies: - dependency-name: glob dependency-version: 10.5.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.0 to 4.1.1. - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.1.0...4.1.1) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…l-4.1.1 Bump js-yaml from 4.1.0 to 4.1.1

Bumps [node-forge](https://github.com/digitalbazaar/forge) from 1.3.1 to 1.3.2. - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](digitalbazaar/forge@v1.3.1...v1.3.2) --- updated-dependencies: - dependency-name: node-forge dependency-version: 1.3.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…orge-1.3.2 Bump node-forge from 1.3.1 to 1.3.2

Bumps [express](https://github.com/expressjs/express) from 4.21.2 to 4.22.0. - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.22.0/History.md) - [Commits](expressjs/express@4.21.2...4.22.0) --- updated-dependencies: - dependency-name: express dependency-version: 4.22.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…0.5.0 Bump glob from 10.4.5 to 10.5.0

Bumps [validator](https://github.com/validatorjs/validator.js) from 13.12.0 to 13.15.20. - [Release notes](https://github.com/validatorjs/validator.js/releases) - [Changelog](https://github.com/validatorjs/validator.js/blob/master/CHANGELOG.md) - [Commits](validatorjs/validator.js@13.12.0...13.15.20) --- updated-dependencies: - dependency-name: validator dependency-version: 13.15.20 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Rick Kirkham <Rick-Kirkham@users.noreply.github.com>

Bumps [jws](https://github.com/brianloveswords/node-jws) from 3.2.2 to 3.2.3. - [Release notes](https://github.com/brianloveswords/node-jws/releases) - [Changelog](https://github.com/auth0/node-jws/blob/master/CHANGELOG.md) - [Commits](auth0/node-jws@v3.2.2...v3.2.3) --- updated-dependencies: - dependency-name: jws dependency-version: 3.2.3 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bump jws from 3.2.2 to 3.2.3

Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.2 to 7.5.3. - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v7.5.2...v7.5.3) --- updated-dependencies: - dependency-name: tar dependency-version: 7.5.3 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.3 to 7.5.6. - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v7.5.3...v7.5.6) --- updated-dependencies: - dependency-name: tar dependency-version: 7.5.6 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.17.23) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.17.23 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.6 to 7.5.7. - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v7.5.6...v7.5.7) --- updated-dependencies: - dependency-name: tar dependency-version: 7.5.7 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bump tar from 7.5.6 to 7.5.7

Automatically run npm audit fix

Bumps [webpack](https://github.com/webpack/webpack) from 5.98.0 to 5.105.0. - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.98.0...v5.105.0) --- updated-dependencies: - dependency-name: webpack dependency-version: 5.105.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

…k-5.105.0 Bump webpack from 5.98.0 to 5.105.0

Automatically run npm audit fix

Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.0.6 to 3.1.2. - [Release notes](https://github.com/fastify/fast-uri/releases) - [Commits](fastify/fast-uri@v3.0.6...v3.1.2) --- updated-dependencies: - dependency-name: fast-uri dependency-version: 3.1.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [hono](https://github.com/honojs/hono) from 4.12.16 to 4.12.18. - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.12.16...v4.12.18) --- updated-dependencies: - dependency-name: hono dependency-version: 4.12.18 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…ri-3.1.2 Bump fast-uri from 3.0.6 to 3.1.2

Bumps [fast-xml-builder](https://github.com/NaturalIntelligence/fast-xml-builder) from 1.1.5 to 1.2.0. - [Changelog](https://github.com/NaturalIntelligence/fast-xml-builder/blob/main/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-builder@v1.1.5...v1.2.0) --- updated-dependencies: - dependency-name: fast-xml-builder dependency-version: 1.2.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…ml-builder-1.2.0 Bump fast-xml-builder from 1.1.5 to 1.2.0

Bumps [ip-address](https://github.com/beaugunderson/ip-address) and [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit). These dependencies needed to be updated together. Updates `ip-address` from 10.1.0 to 10.2.0 - [Commits](https://github.com/beaugunderson/ip-address/commits) Updates `express-rate-limit` from 8.4.1 to 8.5.1 - [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases) - [Commits](express-rate-limit/express-rate-limit@v8.4.1...v8.5.1) --- updated-dependencies: - dependency-name: express-rate-limit dependency-version: 8.5.1 dependency-type: indirect - dependency-name: ip-address dependency-version: 10.2.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…7bdfbe8666 Bump ip-address and express-rate-limit

Bumps [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs) from 7.25.9 to 7.29.4. - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.4/packages/babel-plugin-transform-modules-systemjs) --- updated-dependencies: - dependency-name: "@babel/plugin-transform-modules-systemjs" dependency-version: 7.29.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…plugin-transform-modules-systemjs-7.29.4 Bump @babel/plugin-transform-modules-systemjs from 7.25.9 to 7.29.4

Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server) from 5.2.1 to 5.2.4. - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v5.2.1...v5.2.4) --- updated-dependencies: - dependency-name: webpack-dev-server dependency-version: 5.2.4 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…s-4.22.0 Bump express from 4.21.2 to 4.22.0

….12.18 Bump hono from 4.12.16 to 4.12.18

Bumps [axios](https://github.com/axios/axios) from 1.15.2 to 1.16.1. - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.15.2...v1.16.1) --- updated-dependencies: - dependency-name: axios dependency-version: 1.16.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Automatically run npm audit fix

Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.8.2 to 1.8.4. - [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md) - [Commits](ljharb/shell-quote@v1.8.2...v1.8.4) --- updated-dependencies: - dependency-name: shell-quote dependency-version: 1.8.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…quote-1.8.4 Bump shell-quote from 1.8.2 to 1.8.4

Bumps [launch-editor](https://github.com/vitejs/launch-editor) from 2.10.0 to 2.14.1. - [Commits](vitejs/launch-editor@v2.10.0...v2.14.1) --- updated-dependencies: - dependency-name: launch-editor dependency-version: 2.14.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.15 to 7.5.16. - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v7.5.15...v7.5.16) --- updated-dependencies: - dependency-name: tar dependency-version: 7.5.16 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…5.16 Bump tar from 7.5.15 to 7.5.16

…el-loader (#204) Bumps [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core), [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env), [@babel/preset-typescript](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-typescript) and [babel-loader](https://github.com/babel/babel-loader). These dependencies needed to be updated together. Updates `@babel/core` from 7.26.9 to 8.0.1 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.1/packages/babel-core) Updates `@babel/preset-env` from 7.26.9 to 8.0.2 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.2/packages/babel-preset-env) Updates `@babel/preset-typescript` from 7.26.0 to 8.0.1 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.1/packages/babel-preset-typescript) Updates `babel-loader` from 9.2.1 to 10.1.1 - [Release notes](https://github.com/babel/babel-loader/releases) - [Changelog](https://github.com/babel/babel-loader/blob/main/CHANGELOG.md) - [Commits](babel/babel-loader@v9.2.1...v10.1.1) --- updated-dependencies: - dependency-name: "@babel/core" dependency-version: 8.0.1 dependency-type: direct:development - dependency-name: "@babel/preset-env" dependency-version: 8.0.2 dependency-type: direct:development - dependency-name: "@babel/preset-typescript" dependency-version: 8.0.1 dependency-type: direct:development - dependency-name: babel-loader dependency-version: 10.1.1 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server) from 5.2.4 to 5.2.5. - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v5.2.4...v5.2.5) --- updated-dependencies: - dependency-name: webpack-dev-server dependency-version: 5.2.5 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot Bot and others added 30 commits July 24, 2025 11:24

Add workflow to autorun npm audit fix (#152)

c04994b

Update pipeline, node versions, and script versions

99e1e60

Merge pull request #158 from OfficeDev/update-pipeline-node-scripts

a9069fc

Update pipeline, node versions, and script versions

Merge pull request #156 from OfficeDev/dependabot/npm_and_yarn/js-yam…

439bccf

…l-4.1.1 Bump js-yaml from 4.1.0 to 4.1.1

Merge branch 'master' into dependabot/npm_and_yarn/glob-10.5.0

8cdf144

Merge pull request #159 from OfficeDev/dependabot/npm_and_yarn/node-f…

5f9ba00

…orge-1.3.2 Bump node-forge from 1.3.1 to 1.3.2

Merge branch 'master' into dependabot/npm_and_yarn/glob-10.5.0

73a856d

Merge pull request #157 from OfficeDev/dependabot/npm_and_yarn/glob-1…

8787e95

…0.5.0 Bump glob from 10.4.5 to 10.5.0

Merge branch 'master' into dependabot/npm_and_yarn/express-4.22.0

0e971ef

Merge pull request #161 from OfficeDev/dependabot/npm_and_yarn/jws-3.2.3

42c6cd4

Bump jws from 3.2.2 to 3.2.3

Add ability to manually run npm-audit-fix workflow (#162)

0168579

Merge pull request #166 from OfficeDev/dependabot/npm_and_yarn/tar-7.5.7

fa39fec

Bump tar from 7.5.6 to 7.5.7

Automatically run npm audit fix

9056561

Merge pull request #167 from OfficeDev/autorun-npm-audit-fix

a250487

Automatically run npm audit fix

Merge pull request #168 from OfficeDev/dependabot/npm_and_yarn/webpac…

43a3d4f

…k-5.105.0 Bump webpack from 5.98.0 to 5.105.0

AlexJerabek and others added 27 commits May 4, 2026 10:27

Merge branch 'master' into autorun-npm-audit-fix

6bb6369

Merge pull request #186 from OfficeDev/autorun-npm-audit-fix

2ce2446

Automatically run npm audit fix

Merge pull request #189 from OfficeDev/dependabot/npm_and_yarn/fast-u…

746b8fc

…ri-3.1.2 Bump fast-uri from 3.0.6 to 3.1.2

Merge branch 'master' into dependabot/npm_and_yarn/hono-4.12.18

992f6d8

Merge pull request #188 from OfficeDev/dependabot/npm_and_yarn/fast-x…

530e981

…ml-builder-1.2.0 Bump fast-xml-builder from 1.1.5 to 1.2.0

Merge pull request #187 from OfficeDev/dependabot/npm_and_yarn/multi-…

93d883d

…7bdfbe8666 Bump ip-address and express-rate-limit

Merge pull request #191 from OfficeDev/dependabot/npm_and_yarn/babel/…

082babc

…plugin-transform-modules-systemjs-7.29.4 Bump @babel/plugin-transform-modules-systemjs from 7.25.9 to 7.29.4

Merge branch 'master' into dependabot/npm_and_yarn/express-4.22.0

52e5a15

Merge pull request #160 from OfficeDev/dependabot/npm_and_yarn/expres…

1113f9e

…s-4.22.0 Bump express from 4.21.2 to 4.22.0

Merge branch 'master' into dependabot/npm_and_yarn/hono-4.12.18

fce1fb6

Merge pull request #190 from OfficeDev/dependabot/npm_and_yarn/hono-4…

7648ecb

….12.18 Bump hono from 4.12.16 to 4.12.18

Automatically run npm audit fix

0de67cd

Merge pull request #194 from OfficeDev/autorun-npm-audit-fix

986eb4c

Automatically run npm audit fix

Merge pull request #198 from OfficeDev/dependabot/npm_and_yarn/shell-…

62daf6b

…quote-1.8.4 Bump shell-quote from 1.8.2 to 1.8.4

Merge pull request #202 from OfficeDev/dependabot/npm_and_yarn/tar-7.…

4c2a4a5

…5.16 Bump tar from 7.5.15 to 7.5.16

Rick-Kirkham requested a review from a team as a code owner June 23, 2026 22:19

millerds approved these changes Jun 26, 2026

View reviewed changes

millerds merged commit 3674d48 into release Jun 26, 2026
8 of 14 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Merge to release#206

Merge to release#206
millerds merged 86 commits into
releasefrom
master

Rick-Kirkham commented Jun 23, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Uh oh!

Conversation

Rick-Kirkham commented Jun 23, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants