From f7fc7692f439061263e756340b4a2e7848cba718 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 22 Dec 2025 09:44:35 +0000
Subject: [PATCH] deps: Bump Microsoft.Identity.Web.MicrosoftGraph from 3.8.2
 to 4.2.0

---
updated-dependencies:
- dependency-name: Microsoft.Identity.Web.MicrosoftGraph
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 src/server/api/Sprk.Bff.Api/Sprk.Bff.Api.csproj | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/server/api/Sprk.Bff.Api/Sprk.Bff.Api.csproj b/src/server/api/Sprk.Bff.Api/Sprk.Bff.Api.csproj
index d0e1b2edc..3024338e0 100644
--- a/src/server/api/Sprk.Bff.Api/Sprk.Bff.Api.csproj
+++ b/src/server/api/Sprk.Bff.Api/Sprk.Bff.Api.csproj
@@ -33,7 +33,7 @@
     <!-- Identity.Web 3.8.2+ fixes CVE-2025-32016; requires Identity.Client >= 4.70.0 -->
     <PackageReference Include="Microsoft.Identity.Client" Version="4.70.0" />
     <PackageReference Include="Microsoft.Identity.Web" Version="3.8.2" />
-    <PackageReference Include="Microsoft.Identity.Web.MicrosoftGraph" Version="3.8.2" />
+    <PackageReference Include="Microsoft.Identity.Web.MicrosoftGraph" Version="4.2.0" />
     <PackageReference Include="MimeKit" Version="4.8.0" />
     <PackageReference Include="MsgReader" Version="5.2.0" />