Bot Framework for JS SDK 4.20.0

This is the June 2023 release of the JavaScript SDK. This release contains Teams features and bug/security fixes.

What's Changed

Teams

• feat: Add MeetingTabIconSurface to MeetingSurface capabilities by @corinagum in #4459
• feat: Add support for Teams Adaptive cards in QnA Dialog by @anishprasad01 in #4467
• fix: Teams Meeting Notification interface structure changes by @singhk97 in #4416
• fix: Teams activity handler documentation fix by @singhk97 in #4407
• fix: [#4408] Cloud adapter is not working with teams SSO by @erquirogasw in #4427
• port: [#4463][#6596] TeamsChannelData need OnBehalfOf by @ceciliaavila in #4474

Other

• fix: streaming client should connect under Node.js by @compulim in #4413
• fix: [#4414] JS Linux Functional Test pipeline failing by @ceciliaavila in #4419
• fix: [#4400] Security vulnerabilityCVE-2022-23540, CVE-2022-23539, CVE-2022-23541, CVE-2022-23529 by @erquirogasw in #4409
• fix: Add check to handle bad values in Orchestrator botState.ts by @anishprasad01 in #4425
• fix: Update channelServiceRoutes to add next() parameter to support restify 10.0.0+ by @anishprasad01 in #4429
• fix: [#4452][#4456][#4460][botframework-streaming] Should reject pending requests on disconnection by @compulim in #4461
• fix: [#4455] [botframework-streaming] Tests are not conclusive by @sw-joelmut in #4468
• fix: [#4466] Fix telemetry activityId and conversationId properties by @sw-joelmut in #4471
• chore: bump vm2 from 3.9.11 to 3.9.17 by @dependabot in #4451
• port: [#4464] USER scope variable values do not transfer to skill when SSO is configured by @ceciliaavila in #4472
• port: [#4432] Expired JWT token exception not being handled (#6572) by @ceciliaavila in #4436
• chore: bump json5 from 1.0.1 to 1.0.2 in /testing/browser-functional/browser-echo-bot by @dependabot in #4402
• chore: bump json5 from 1.0.1 to 1.0.2 by @dependabot in #4403
• chore: bump ua-parser-js from 0.7.31 to 0.7.33 in /testing/browser-functional/browser-echo-bot by @dependabot in #4422
• fix: [#4449] CloudAdapter always builds Connector with MicrosoftAppCredentials (never CertificateAppCredentials) -- certificate auth flow broken by @sw-joelmut in #4457
• chore: bump cookiejar from 2.1.2 to 2.1.4 by @dependabot in #4417
• bump: Update tools/nyc dependency by @sw-joelmut in #4475
• port: [#4465][#6560] Allow TokenCredential authentication in CosmosDbPartitionedStorage by @ceciliaavila in #4473
• chore: bump vm2 from 3.9.17 to 3.9.18 by @dependabot in #4478
• fix: Updates fast-xml-parser to address "Prototype Pollution" vulnerability by @giacomorebonato in #4477

New Contributors

• @corinagum made their first contribution in #4459
• @giacomorebonato made their first contribution in #4477

Full Changelog: 4.19.0...4.20.0