[dependabot]

Bumps github.com/libregraph/lico from 0.67.0 to 0.69.0.

Changelog

Sourced from github.com/libregraph/lico's changelog.

v0.69.0 (2026-10-14)

• Name the hello resource and unverified client host in Consent
• Add --client-id-metadata-document-host for Client ID Metadata Documents
• Add RFC 9207 iss to authorization responses, errors included
• Look up UserInfoHandler's client by azp, not Audience[0]
• Answer TokenHandler failures with invalid_grant and invalid_client
• Document OAuth 2.1 behavior in libregraph-connect-api-v1.yaml 1.2.0
• Add Check identifier step running make -C identifier check
• Hold jsdom at ~30.0.1 until Vitest supports 30.1
• Bump the identifier group across 1 directory with 15 updates
• Raise i18next to ^26.4.3 to satisfy react-i18next 17
• Bump react-i18next from 11.18.6 to 17.0.16 in /identifier
• Bump github.com/gorilla/mux from 1.8.0 to 1.8.1
• Bump golang.org/x/time from 0.13.0 to 0.16.0
• Add bun to dependabot.yml and a bun audit job to build.yml
• Bump brace-expansion, source-map-js and undici in bun.lock
• Make the test target generate app-icon.svg through src
• Say what a scope grants in the visitor's language
• Answer the account chooser from the keyboard
• Keep the page light when the OS asks for dark
• State the consent grants rather than tick them
• Draw the page's background from the theme
• Give the theme two surfaces and a rem type scale
• Raise the test wait budget for whole-app mounts
• Hold the card's top edge across the whole flow
• Report the wait as a strip across the top edge
• Hold back the render on a screen being left
• Share the busy button and the request error
• Parse each reply as the shape its endpoint sends
• Share the nonce check and the flow mount guard
• Keep the credentials and the request out of Redux
• Move the identifier frontend to react-router 8
• Move the identifier frontend to React 19
• Move the identifier's Redux layer to Toolkit 2
• Drop the service worker routes and asset manifest
• Clear identifier audit advisories
• Preload the fonts the first screens paint with
• Dedupe clsx and pin react-is to React's major
• Lowercase every file name the identifier emits
• Drop the vendor chunk group from the identifier
• Enable Biome formatter and import sorting
• Update the identifier to Vite 8 and Vitest 4
• Update the identifier to TypeScript 7
• Replace Material-UI v4 with MUI 9 and emotion
• Update user-event to 14 in the identifier tests
• Move ResponsiveScreen defaults off defaultProps
• Convert identifier web app to TypeScript
• Return login validation errors synchronously
• Extract withSearchAndHash from six navigations

... (truncated)

Commits

• d39d7c6 Add v0.69.0 to changelog
• dbb342c Name the hello resource and unverified client host in Consent
• 451b713 Add --client-id-metadata-document-host for Client ID Metadata Documents
• 410f69d Add RFC 9207 iss to authorization responses, errors included
• de2f585 Look up UserInfoHandler's client by azp, not Audience[0]
• faec2cc Answer TokenHandler failures with invalid_grant and invalid_client
• 2c05b4c Document OAuth 2.1 behavior in libregraph-connect-api-v1.yaml 1.2.0
• 2835563 Add Check identifier step running make -C identifier check
• 4474149 Hold jsdom at ~30.0.1 until Vitest supports 30.1
• 3c9180a Bump the identifier group across 1 directory with 15 updates
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity

Metric	Results
Complexity	0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}