unstale

npm / @azure/identity

@azure/identity

What changed in @azure/identity 4, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-27.

1 breaking1 security2 behavior and defaults4 fixes and other

See which of these apply to your code, ranked, in your agent:

npx @unstale/cli init

@unstale/cli 0.2.8 on npm

@azure/identity 48 changes

Breaking changes 1

  • Node.js v20 is supported, while Node.js v16 is no longer supported.

    4.0.0release notes

Security 1

  • Replaced shell-based execution with safe, structured process execution for developer credential commands.

    4.13.2release notes

Behavior and default changes 2

  • Brokered authentication on Windows OS, such as WAM, is now generally available.

    4.0.0release notes

  • Browser customization for success and error messages is now generally available.

    4.0.0release notes

Fixes and other changes 4

  • EnvironmentCredential and DefaultAzureCredential now honor this environment variable; the additionallyAllowedTenants option takes precedence when set.

    4.14.0release notes

  • Error messages and logs include only relevant details when the OIDC token request fails.

    4.14.0release notes

  • Caught errors are preserved as the cause when errors are wrapped.

    4.14.0release notes

  • Authentication works when the user's default browser is already running and permits only a single instance.

    4.14.0release notes