@pnp/cli-microsoft365 12.0.0-beta.792164a → 12.0.0-beta.93e11fb

package/dist/m365/tenant/commands/serviceannouncement/serviceannouncement-health-get.js

@@ -1,12 +1,13 @@
-var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
-    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
-    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
-    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
-};
-var _TenantServiceAnnouncementHealthGetCommand_instances, _TenantServiceAnnouncementHealthGetCommand_initTelemetry, _TenantServiceAnnouncementHealthGetCommand_initOptions;
+import { z } from 'zod';
+import { globalOptionsZod } from '../../../../Command.js';
 import request from '../../../../request.js';
 import GraphCommand from '../../../base/GraphCommand.js';
 import commands from '../../commands.js';
+export const options = z.strictObject({
+    ...globalOptionsZod.shape,
+    serviceName: z.string().alias('s'),
+    issues: z.boolean().optional().alias('i')
+});
 class TenantServiceAnnouncementHealthGetCommand extends GraphCommand {
     get name() {
         return commands.SERVICEANNOUNCEMENT_HEALTH_GET;
@@ -14,11 +15,8 @@ class TenantServiceAnnouncementHealthGetCommand extends GraphCommand {
     get description() {
         return 'Gets the health report of a specified service for a tenant';
     }
-    constructor() {
-        super();
-        _TenantServiceAnnouncementHealthGetCommand_instances.add(this);
-        __classPrivateFieldGet(this, _TenantServiceAnnouncementHealthGetCommand_instances, "m", _TenantServiceAnnouncementHealthGetCommand_initTelemetry).call(this);
-        __classPrivateFieldGet(this, _TenantServiceAnnouncementHealthGetCommand_instances, "m", _TenantServiceAnnouncementHealthGetCommand_initOptions).call(this);
+    get schema() {
+        return options;
     }
     async commandAction(logger, args) {
         try {
@@ -40,14 +38,5 @@ class TenantServiceAnnouncementHealthGetCommand extends GraphCommand {
         return request.get(requestOptions);
     }
 }
-_TenantServiceAnnouncementHealthGetCommand_instances = new WeakSet(), _TenantServiceAnnouncementHealthGetCommand_initTelemetry = function _TenantServiceAnnouncementHealthGetCommand_initTelemetry() {
-    this.telemetry.push((args) => {
-        Object.assign(this.telemetryProperties, {
-            issues: typeof args.options.issues !== 'undefined'
-        });
-    });
-}, _TenantServiceAnnouncementHealthGetCommand_initOptions = function _TenantServiceAnnouncementHealthGetCommand_initOptions() {
-    this.options.unshift({ option: '-s, --serviceName <serviceName>' }, { option: '-i, --issues' });
-};
 export default new TenantServiceAnnouncementHealthGetCommand();
 //# sourceMappingURL=serviceannouncement-health-get.js.map

package/dist/m365/tenant/commands/serviceannouncement/serviceannouncement-health-list.js

@@ -1,12 +1,12 @@
-var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
-    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
-    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
-    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
-};
-var _TenantServiceAnnouncementHealthListCommand_instances, _TenantServiceAnnouncementHealthListCommand_initTelemetry, _TenantServiceAnnouncementHealthListCommand_initOptions;
+import { z } from 'zod';
+import { globalOptionsZod } from '../../../../Command.js';
 import request from '../../../../request.js';
 import GraphCommand from '../../../base/GraphCommand.js';
 import commands from '../../commands.js';
+export const options = z.strictObject({
+    ...globalOptionsZod.shape,
+    issues: z.boolean().optional().alias('i')
+});
 class TenantServiceAnnouncementHealthListCommand extends GraphCommand {
     get name() {
         return commands.SERVICEANNOUNCEMENT_HEALTH_LIST;
@@ -17,11 +17,8 @@ class TenantServiceAnnouncementHealthListCommand extends GraphCommand {
     defaultProperties() {
         return ['id', 'status', 'service'];
     }
-    constructor() {
-        super();
-        _TenantServiceAnnouncementHealthListCommand_instances.add(this);
-        __classPrivateFieldGet(this, _TenantServiceAnnouncementHealthListCommand_instances, "m", _TenantServiceAnnouncementHealthListCommand_initTelemetry).call(this);
-        __classPrivateFieldGet(this, _TenantServiceAnnouncementHealthListCommand_instances, "m", _TenantServiceAnnouncementHealthListCommand_initOptions).call(this);
+    get schema() {
+        return options;
     }
     async commandAction(logger, args) {
         try {
@@ -48,14 +45,5 @@ class TenantServiceAnnouncementHealthListCommand extends GraphCommand {
         return serviceHealthList;
     }
 }
-_TenantServiceAnnouncementHealthListCommand_instances = new WeakSet(), _TenantServiceAnnouncementHealthListCommand_initTelemetry = function _TenantServiceAnnouncementHealthListCommand_initTelemetry() {
-    this.telemetry.push((args) => {
-        Object.assign(this.telemetryProperties, {
-            issues: typeof args.options.issues !== 'undefined'
-        });
-    });
-}, _TenantServiceAnnouncementHealthListCommand_initOptions = function _TenantServiceAnnouncementHealthListCommand_initOptions() {
-    this.options.unshift({ option: '-i, --issues' });
-};
 export default new TenantServiceAnnouncementHealthListCommand();
 //# sourceMappingURL=serviceannouncement-health-list.js.map

package/dist/m365/tenant/commands/serviceannouncement/serviceannouncement-healthissue-get.js

@@ -1,13 +1,13 @@
-var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
-    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
-    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
-    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
-};
-var _TenantServiceAnnouncementHealthIssueGetCommand_instances, _TenantServiceAnnouncementHealthIssueGetCommand_initOptions;
+import { z } from 'zod';
+import { globalOptionsZod } from '../../../../Command.js';
 import request from '../../../../request.js';
 import { formatting } from '../../../../utils/formatting.js';
 import GraphCommand from '../../../base/GraphCommand.js';
 import commands from '../../commands.js';
+export const options = z.strictObject({
+    ...globalOptionsZod.shape,
+    id: z.string().alias('i')
+});
 class TenantServiceAnnouncementHealthIssueGetCommand extends GraphCommand {
     get name() {
         return commands.SERVICEANNOUNCEMENT_HEALTHISSUE_GET;
@@ -15,10 +15,8 @@ class TenantServiceAnnouncementHealthIssueGetCommand extends GraphCommand {
     get description() {
         return 'Gets a specified service health issue for tenant';
     }
-    constructor() {
-        super();
-        _TenantServiceAnnouncementHealthIssueGetCommand_instances.add(this);
-        __classPrivateFieldGet(this, _TenantServiceAnnouncementHealthIssueGetCommand_instances, "m", _TenantServiceAnnouncementHealthIssueGetCommand_initOptions).call(this);
+    get schema() {
+        return options;
     }
     async commandAction(logger, args) {
         const requestOptions = {
@@ -37,10 +35,5 @@ class TenantServiceAnnouncementHealthIssueGetCommand extends GraphCommand {
         }
     }
 }
-_TenantServiceAnnouncementHealthIssueGetCommand_instances = new WeakSet(), _TenantServiceAnnouncementHealthIssueGetCommand_initOptions = function _TenantServiceAnnouncementHealthIssueGetCommand_initOptions() {
-    this.options.unshift({
-        option: '-i, --id <id>'
-    });
-};
 export default new TenantServiceAnnouncementHealthIssueGetCommand();
 //# sourceMappingURL=serviceannouncement-healthissue-get.js.map

package/dist/m365/tenant/commands/serviceannouncement/serviceannouncement-healthissue-list.js

@@ -1,13 +1,13 @@
-var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
-    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
-    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
-    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
-};
-var _TenantServiceAnnouncementHealthIssueListCommand_instances, _TenantServiceAnnouncementHealthIssueListCommand_initOptions;
+import { z } from 'zod';
+import { globalOptionsZod } from '../../../../Command.js';
 import { formatting } from '../../../../utils/formatting.js';
 import { odata } from '../../../../utils/odata.js';
 import GraphCommand from '../../../base/GraphCommand.js';
 import commands from '../../commands.js';
+export const options = z.strictObject({
+    ...globalOptionsZod.shape,
+    service: z.string().optional().alias('s')
+});
 class TenantServiceAnnouncementHealthIssueListCommand extends GraphCommand {
     get name() {
         return commands.SERVICEANNOUNCEMENT_HEALTHISSUE_LIST;
@@ -18,10 +18,8 @@ class TenantServiceAnnouncementHealthIssueListCommand extends GraphCommand {
     defaultProperties() {
         return ['id', 'title'];
     }
-    constructor() {
-        super();
-        _TenantServiceAnnouncementHealthIssueListCommand_instances.add(this);
-        __classPrivateFieldGet(this, _TenantServiceAnnouncementHealthIssueListCommand_instances, "m", _TenantServiceAnnouncementHealthIssueListCommand_initOptions).call(this);
+    get schema() {
+        return options;
     }
     async commandAction(logger, args) {
         let endpoint = `${this.resource}/v1.0/admin/serviceAnnouncement/issues`;
@@ -37,10 +35,5 @@ class TenantServiceAnnouncementHealthIssueListCommand extends GraphCommand {
         }
     }
 }
-_TenantServiceAnnouncementHealthIssueListCommand_instances = new WeakSet(), _TenantServiceAnnouncementHealthIssueListCommand_initOptions = function _TenantServiceAnnouncementHealthIssueListCommand_initOptions() {
-    this.options.unshift({
-        option: '-s, --service [service]'
-    });
-};
 export default new TenantServiceAnnouncementHealthIssueListCommand();
 //# sourceMappingURL=serviceannouncement-healthissue-list.js.map

package/dist/m365/tenant/commands/serviceannouncement/serviceannouncement-message-get.js

@@ -1,12 +1,16 @@
-var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
-    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
-    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
-    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
-};
-var _TenantServiceAnnouncementMessageGetCommand_instances, _TenantServiceAnnouncementMessageGetCommand_initOptions, _TenantServiceAnnouncementMessageGetCommand_initValidators;
+import { z } from 'zod';
+import { globalOptionsZod } from '../../../../Command.js';
 import request from '../../../../request.js';
 import GraphCommand from '../../../base/GraphCommand.js';
 import commands from '../../commands.js';
+export const options = z.strictObject({
+    ...globalOptionsZod.shape,
+    id: z.string()
+        .refine(val => (/MC\d{6}/).test(val), {
+        message: 'The value is not a valid message ID'
+    })
+        .alias('i')
+});
 class TenantServiceAnnouncementMessageGetCommand extends GraphCommand {
     get name() {
         return commands.SERVICEANNOUNCEMENT_MESSAGE_GET;
@@ -14,11 +18,8 @@ class TenantServiceAnnouncementMessageGetCommand extends GraphCommand {
     get description() {
         return 'Retrieves a specified service update message for the tenant';
     }
-    constructor() {
-        super();
-        _TenantServiceAnnouncementMessageGetCommand_instances.add(this);
-        __classPrivateFieldGet(this, _TenantServiceAnnouncementMessageGetCommand_instances, "m", _TenantServiceAnnouncementMessageGetCommand_initOptions).call(this);
-        __classPrivateFieldGet(this, _TenantServiceAnnouncementMessageGetCommand_instances, "m", _TenantServiceAnnouncementMessageGetCommand_initValidators).call(this);
+    get schema() {
+        return options;
     }
     async commandAction(logger, args) {
         if (this.verbose) {
@@ -39,21 +40,6 @@ class TenantServiceAnnouncementMessageGetCommand extends GraphCommand {
             this.handleRejectedODataJsonPromise(err);
         }
     }
-    isValidId(id) {
-        return (/MC\d{6}/).test(id);
-    }
 }
-_TenantServiceAnnouncementMessageGetCommand_instances = new WeakSet(), _TenantServiceAnnouncementMessageGetCommand_initOptions = function _TenantServiceAnnouncementMessageGetCommand_initOptions() {
-    this.options.unshift({
-        option: '-i, --id <id>'
-    });
-}, _TenantServiceAnnouncementMessageGetCommand_initValidators = function _TenantServiceAnnouncementMessageGetCommand_initValidators() {
-    this.validators.push(async (args) => {
-        if (!this.isValidId(args.options.id)) {
-            return `${args.options.id} is not a valid message ID`;
-        }
-        return true;
-    });
-};
 export default new TenantServiceAnnouncementMessageGetCommand();
 //# sourceMappingURL=serviceannouncement-message-get.js.map

package/dist/m365/tenant/commands/serviceannouncement/serviceannouncement-message-list.js

@@ -1,13 +1,13 @@
-var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
-    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
-    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
-    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
-};
-var _TenantServiceAnnouncementMessageListCommand_instances, _TenantServiceAnnouncementMessageListCommand_initTelemetry, _TenantServiceAnnouncementMessageListCommand_initOptions;
+import { z } from 'zod';
+import { globalOptionsZod } from '../../../../Command.js';
 import { formatting } from '../../../../utils/formatting.js';
 import { odata } from '../../../../utils/odata.js';
 import GraphCommand from '../../../base/GraphCommand.js';
 import commands from '../../commands.js';
+export const options = z.strictObject({
+    ...globalOptionsZod.shape,
+    service: z.string().optional().alias('s')
+});
 class TenantServiceAnnouncementMessageListCommand extends GraphCommand {
     get name() {
         return commands.SERVICEANNOUNCEMENT_MESSAGE_LIST;
@@ -18,11 +18,8 @@ class TenantServiceAnnouncementMessageListCommand extends GraphCommand {
     defaultProperties() {
         return ['id', 'title'];
     }
-    constructor() {
-        super();
-        _TenantServiceAnnouncementMessageListCommand_instances.add(this);
-        __classPrivateFieldGet(this, _TenantServiceAnnouncementMessageListCommand_instances, "m", _TenantServiceAnnouncementMessageListCommand_initTelemetry).call(this);
-        __classPrivateFieldGet(this, _TenantServiceAnnouncementMessageListCommand_instances, "m", _TenantServiceAnnouncementMessageListCommand_initOptions).call(this);
+    get schema() {
+        return options;
     }
     async commandAction(logger, args) {
         let endpoint = `${this.resource}/v1.0/admin/serviceAnnouncement/messages`;
@@ -38,16 +35,5 @@ class TenantServiceAnnouncementMessageListCommand extends GraphCommand {
         }
     }
 }
-_TenantServiceAnnouncementMessageListCommand_instances = new WeakSet(), _TenantServiceAnnouncementMessageListCommand_initTelemetry = function _TenantServiceAnnouncementMessageListCommand_initTelemetry() {
-    this.telemetry.push((args) => {
-        Object.assign(this.telemetryProperties, {
-            service: typeof args.options.service !== 'undefined'
-        });
-    });
-}, _TenantServiceAnnouncementMessageListCommand_initOptions = function _TenantServiceAnnouncementMessageListCommand_initOptions() {
-    this.options.unshift({
-        option: '-s, --service [service]'
-    });
-};
 export default new TenantServiceAnnouncementMessageListCommand();
 //# sourceMappingURL=serviceannouncement-message-list.js.map

package/dist/utils/formatting.js

@@ -189,6 +189,22 @@ export const formatting = {
         const guidPattern = /\/Guid\(([0-9a-f-]+)\)\//i;
         const match = str.match(guidPattern);
         return match ? match[1] : str;
+    },
+    /**
+     * Converts a CSOM date string to an ISO 8601 date string.
+     * @param str The string to extract the date from
+     * @description The string should be in the format /Date(year,month,day,hours,minutes,seconds,milliseconds)/ where month is 0-based. Escaped slashes (\/Date(...)\/) are supported as well. The date parts are interpreted as UTC.
+     * @returns The date as an ISO 8601 string or the original string if no match is found
+     * @example /Date(2026,8,21,12,24,45,997)/ => 2026-09-21T12:24:45.997Z
+     */
+    extractCsomDate(str) {
+        const datePattern = /^\\?\/Date\((\d+(?:,\d+){2,6})\)\\?\/$/i;
+        const match = str.trim().match(datePattern);
+        if (!match) {
+            return str;
+        }
+        const [year, month, day, hours = 0, minutes = 0, seconds = 0, milliseconds = 0] = match[1].split(',').map(Number);
+        return new Date(Date.UTC(year, month, day, hours, minutes, seconds, milliseconds)).toISOString();
     }
 };
 //# sourceMappingURL=formatting.js.map

package/dist/utils/pid.js

@@ -1,6 +1,7 @@
 import child_process from 'child_process';
 import fs from 'fs';
 import os from 'os';
+import path from 'path';
 import { cache } from './cache.js';
 function getProcessNameOnMacOs(pid) {
     const res = child_process.spawnSync('ps', ['-o', 'comm=', pid.toString()], { encoding: 'utf8' });
@@ -21,24 +22,14 @@ function getProcessNameOnLinux(pid) {
     return procName;
 }
 function getProcessNameOnWindows(pid) {
-    const findProcess = child_process.spawnSync('wmic', ['PROCESS', 'where', `ProcessId=${pid}`, 'get', 'Caption'], { encoding: 'utf8' });
-    if (findProcess.error || findProcess.stderr) {
+    const tasklist = path.join(process.env.SystemRoot || 'C:\\Windows', 'System32', 'tasklist.exe');
+    const res = child_process.spawnSync(tasklist, ['/FI', `PID eq ${pid}`, '/FO', 'CSV', '/NH'], { encoding: 'utf8' });
+    if (res.error || res.status !== 0) {
         return undefined;
     }
-    else {
-        const getPid = child_process.spawnSync('find', ['/V', '"Caption"'], {
-            encoding: 'utf8',
-            input: findProcess.stdout,
-            // must include or passing quoted "Caption" will fail
-            windowsVerbatimArguments: true
-        });
-        if (getPid.error || getPid.stderr) {
-            return undefined;
-        }
-        else {
-            return getPid.stdout.trim();
-        }
-    }
+    // "pwsh.exe","12345","Console","1","98,765 K"
+    const match = res.stdout.match(/^"([^"]+)","(\d+)"/m);
+    return match && match[2] === pid.toString() ? match[1] : undefined;
 }
 export const pid = {
     getProcessName(pid) {

package/dist/utils/spo.js

@@ -576,6 +576,45 @@ export const spo = {
         return request.post(requestOptions);
     },
     /**
+    * Retrieves the navigation node with the specified key.
+    * Returns the node along with the menu state that contains it.
+    * @param webUrl Web url
+    * @param key Key (ID) of the navigation node
+    * @param location Navigation to search. When not specified, searches the quick launch first and then the top navigation
+    */
+    async getMenuStateNodeByKey(webUrl, key, location) {
+        const locations = location ? [location] : ['QuickLaunch', 'TopNavigationBar'];
+        for (const navigationLocation of locations) {
+            const menuState = navigationLocation === 'TopNavigationBar'
+                ? await this.getTopNavigationMenuState(webUrl)
+                : await this.getQuickLaunchMenuState(webUrl);
+            const node = this.findMenuStateNode(menuState.Nodes, key);
+            if (node) {
+                return { menuState, node };
+            }
+        }
+        throw location
+            ? `Navigation node with id '${key}' not found in ${location}.`
+            : `Navigation node with id '${key}' not found.`;
+    },
+    /**
+    * Recursively searches the specified menu state nodes for the node with the specified key.
+    * @param nodes Menu state nodes to search
+    * @param key Key (ID) of the navigation node
+    */
+    findMenuStateNode(nodes, key) {
+        for (const node of nodes) {
+            if (node.Key === key) {
+                return node;
+            }
+            const childNode = this.findMenuStateNode(node.Nodes, key);
+            if (childNode) {
+                return childNode;
+            }
+        }
+        return undefined;
+    },
+    /**
     * Retrieves the spo group by name.
     * Returns a group object
     * @param webUrl Web url

package/dist/utils/zod.js

@@ -110,14 +110,14 @@ export const zod = {
         });
         return options;
     },
-    coercedEnum: (e) => z.preprocess(val => {
-        const target = String(val)?.toLowerCase();
+    coercedEnum: (e) => z.string().pipe(z.preprocess(val => {
+        const target = String(val).toLowerCase();
         for (const k of Object.values(e)) {
-            if (String(k)?.toLowerCase() === target) {
+            if (String(k).toLowerCase() === target) {
                 return k;
             }
         }
         return null;
-    }, z.enum(e))
+    }, z.enum(e)))
 };
 //# sourceMappingURL=zod.js.map

package/docs/docs/cmd/login.mdx

@@ -78,7 +78,20 @@ When logging in to Microsoft 365 using the user name and password, next to the a
 
 When logging in to Microsoft 365 using a certificate, the CLI for Microsoft 365 will store the contents of the certificate so that it can automatically re-authenticate if necessary. The contents of the certificate are removed by re-authenticating using the device code or by calling the [logout](logout.mdx) command.  
 
-Federated Identity is currently supported in GitHub Actions. To use this you need to set `authType` to `federatedIdentity` and specify `appId` and `tenant` to the values of the app registration you've configured a federated credential on. 
+Federated Identity is currently supported in GitHub Actions, Azure DevOps and GitLab CI/CD. To use this you need to set `authType` to `federatedIdentity` and specify `appId` and `tenant` to the values of the app registration you've configured a federated credential on.
+
+To use Federated Identity in GitLab CI/CD, the job must request an ID token named `GITLAB_OIDC_TOKEN` with audience `api://AzureADTokenExchange`, for example:
+
+```yaml
+job:
+  id_tokens:
+    GITLAB_OIDC_TOKEN:
+      aud: "api://AzureADTokenExchange"
+  script:
+    - m365 login --authType federatedIdentity --appId eb96cfd0-abfa-4477-8d1d-c6dfde3efb19 --tenant 9a1a1bbd-e158-4cf5-967d-a53b8e85c628
+```
+
+The corresponding federated credential on the Microsoft Entra app registration must have issuer `https://gitlab.com` (or your self-managed GitLab instance URL) and a subject matching the GitLab OIDC claim for the job, for example `project_path:<group>/<project>:ref_type:branch:ref:<branch>`.
 
 To log in to Microsoft 365 using a certificate or secret, you will typically [create a custom Microsoft Entra application](../user-guide/using-own-identity.mdx). To use this application with the CLI for Microsoft 365, you will set the `CLIMICROSOFT365_ENTRAAPPID` environment variable to the application's ID and the `CLIMICROSOFT365_TENANT` environment variable to the ID of the Microsoft Entra tenant, where you created the Microsoft Entra application. Also, please make sure to read about [the caveats when using the certificate login option](../user-guide/cli-certificate-caveats.mdx).
 
@@ -202,7 +215,7 @@ Log in to Microsoft 365 using a user-assigned managed identity with `clientId` s
 m365 login --authType identity --userName ac9fbed5-804c-4362-a369-21a4ec51109e
 ```
 
-Log in to Microsoft 365 using a federated identity. Can currently only be used in GitHub Actions.
+Log in to Microsoft 365 using a federated identity. Can currently only be used in GitHub Actions, Azure DevOps and GitLab CI/CD.
 
 ```sh
 m365 login --authType federatedIdentity --appId eb96cfd0-abfa-4477-8d1d-c6dfde3efb19 --tenant 9a1a1bbd-e158-4cf5-967d-a53b8e85c628

package/docs/docs/cmd/spe/container/container-permission-remove.mdx

@@ -0,0 +1,78 @@
+import Global from '../../_global.mdx';
+import Tabs from '@theme/Tabs';
+import TabItem from '@theme/TabItem';
+
+# spe container permission remove
+
+Removes permissions from a SharePoint Embedded Container
+
+## Usage
+
+```sh
+m365 spe container permission remove [options]
+```
+
+## Options
+
+```md definition-list
+`-i, --id <id>`
+: ID of the permission to remove.
+
+`--containerId [containerId]`
+: ID of a SharePoint Embedded container. Specify either `containerId` or `containerName` but not both.
+
+`-n, --containerName [containerName]`
+: Display name of the Container. Specify either `containerId` or `containerName` but not both.
+
+`--containerTypeId [containerTypeId]`
+: The ID of the container type. Specify either `containerTypeId` or `containerTypeName` when using `containerName` but not both.
+
+`--containerTypeName [containerTypeName]`
+: The name of the container type. Specify either `containerTypeId` or `containerTypeName` when using `containerName` but not both.
+
+`-f, --force [force]`
+: Don't prompt for confirmation.
+```
+
+<Global />
+
+## Permissions
+
+<Tabs>
+  <TabItem value="Delegated">
+
+  | Resource        | Permissions                                                        |
+  |-----------------|--------------------------------------------------------------------|
+  | Microsoft Graph | FileStorageContainer.Selected, FileStorageContainerType.Manage.All |
+
+  `FileStorageContainerType.Manage.All` is required only when using `containerTypeName`.
+
+  </TabItem>
+  <TabItem value="Application">
+
+  This command only supports application permissions when **not** using the `containerTypeName` option.
+
+  | Resource        | Permissions                   |
+  |-----------------|-------------------------------|
+  | Microsoft Graph | FileStorageContainer.Selected |
+
+  </TabItem>
+</Tabs>
+
+## Examples
+
+Removes the specified permission from a container
+
+```sh
+m365 spe container permission remove --containerId "b!ISJs1WRro0y0EWgkUYcktDa0mE8zSlFEqFzqRn70Zwp1CEtDEBZgQICPkRbil_5Z"  --id "cmVhZGVyX2k6MCMuZnxtZW1iZXJzaGlwfHJvcnlicjExMUBvdXRsb29rLmNvbQ"
+```
+
+Removes the specified permission from a container and doesn't prompt for confirmation
+
+```sh
+m365 spe container permission remove --containerId "b!ISJs1WRro0y0EWgkUYcktDa0mE8zSlFEqFzqRn70Zwp1CEtDEBZgQICPkRbil_5Z"  --id "cmVhZGVyX2k6MCMuZnxtZW1iZXJzaGlwfHJvcnlicjExMUBvdXRsb29rLmNvbQ" --force
+```
+
+## Response
+
+The command won't return a response on success.

package/docs/docs/cmd/spfx/project/project-upgrade.mdx

@@ -45,7 +45,7 @@ m365 spfx project upgrade [options]
 
 ## Remarks
 
-The `spfx project upgrade` command helps you upgrade your SharePoint Framework project to the specified version. If no version is specified, the command will upgrade to the latest version of the SharePoint Framework it supports (v1.23.2).
+The `spfx project upgrade` command helps you upgrade your SharePoint Framework project to the specified version. If no version is specified, the command will upgrade to the latest version of the SharePoint Framework it supports (v1.24.0).
 
 This command doesn't change your project files. Instead, it gives you a report with all steps necessary to upgrade your project to the specified version of the SharePoint Framework. Changing project files is error-prone, especially when it comes to updating your solution's code. This is why at this moment, this command produces a report that you can use yourself to perform the necessary updates and verify that everything is working as expected.
 

package/docs/docs/cmd/spo/externaluser/externaluser-list.mdx

@@ -76,18 +76,12 @@ m365 spo externaluser list --pageSize 50 --position 0 --sortOrder desc
   ```json
   [
     {
-      "Id": 14,
-      "IsHiddenInUI": false,
-      "LoginName": "i:0#.f|membership|user_domain.nl#ext#@tenant.onmicrosoft.com",
-      "Title": "Jon Doe",
-      "PrincipalType": 1,
-      "Email": "user@domain.nl",
-      "Expiration": "",
-      "IsEmailAuthenticationGuestUser": false,
-      "IsShareByEmailGuestUser": true,
-      "IsSiteAdmin": false,
-      "UserId": null,
-      "UserPrincipalName": "user_domain.nl#ext#@tenant.onmicrosoft.com"
+      "DisplayName": "John Doe (External)",
+      "InvitedAs": "john.doe@contoso.com",
+      "UniqueId": "1003200012345678",
+      "AcceptedAs": "john.doe@contoso.com",
+      "WhenCreated": "2025-11-18T07:57:58.913Z",
+      "InvitedBy": null
     }
   ]
   ```
@@ -96,17 +90,17 @@ m365 spo externaluser list --pageSize 50 --position 0 --sortOrder desc
   <TabItem value="Text">
 
   ```text
-  Id  IsHiddenInUI  LoginName                                                     Title     PrincipalType   Email           Expiration  IsEmailAuthenticationGuestUser  IsShareByEmailGuestUser   IsSiteAdmin   UserId  UserPrincipalName
-  --- ------------  ------------------------------------------------------------- --------  --------------  --------------  ----------- ------------------------------- ------------------------  ------------  ------- -------------------------------------------
-  14  false         i:0#.f|membership|user_domain.nl#ext#@tenant.onmicrosoft.com  Jon Doe   1               user@domain.nl              false                           true                      false         null    user_domain.nl#ext#@tenant.onmicrosoft.com
+  AcceptedAs            DisplayName          InvitedAs             InvitedBy  UniqueId          WhenCreated
+  --------------------  -------------------  --------------------  ---------  ----------------  ------------------------
+  john.doe@contoso.com  John Doe (External)  john.doe@contoso.com  null       1003200012345678  2025-11-18T07:57:58.913Z
   ```
 
   </TabItem>
   <TabItem value="CSV">
 
   ```csv
-  Id,IsHiddenInUI,LoginName,Title,PrincipalType,Email,Expiration,IsEmailAuthenticationGuestUser,IsShareByEmailGuestUser,IsSiteAdmin,UserId,UserPrincipalName
-  14,false,i:0#.f|membership|user_domain.nl#ext#@tenant.onmicrosoft.com,Jon Doe,1,user@domain.nl,false,true,false,null,user_domain.nl#ext#@tenant.onmicrosoft.com
+  DisplayName,InvitedAs,UniqueId,AcceptedAs,WhenCreated,InvitedBy
+  John Doe (External),john.doe@contoso.com,1003200012345678,john.doe@contoso.com,2025-11-18T07:57:58.913Z,
   ```
 
   </TabItem>
@@ -117,22 +111,15 @@ m365 spo externaluser list --pageSize 50 --position 0 --sortOrder desc
 
   Date: 10/3/2023
 
-  ## Jon Doe (14)
+  ## John Doe (External) (1003200012345678)
 
   Property | Value
   ---------|-------
-  Id | 14
-  IsHiddenInUI | false
-  LoginName | i:0#.f|membership|user_domain.nl#ext#@tenant.onmicrosoft.com
-  Title | Jon Doe
-  PrincipalType | 1
-  Email | user@domain.nl
-  Expiration | 
-  IsEmailAuthenticationGuestUser | false
-  IsShareByEmailGuestUser | true
-  IsSiteAdmin | false
-  UserId | null
-  UserPrincipalName | user_domain.nl#ext#@tenant.onmicrosoft.com
+  DisplayName | John Doe (External)
+  InvitedAs | john.doe@contoso.com
+  UniqueId | 1003200012345678
+  AcceptedAs | john.doe@contoso.com
+  WhenCreated | 2025-11-18T07:57:58.913Z
   ```
 
   </TabItem>

package/docs/docs/cmd/spo/file/file-archive.mdx

@@ -22,7 +22,7 @@ m365 spo file archive [options]
 : The server- or site-relative decoded URL of the file to archive. Specify either `url` or `id`, but not both.
 
 `-i, --id [id]`
-: The UniqueId (GUID) of the file to archive. Specify either `url` or `id`, but not both.
+: The unique ID (GUID) of the file to archive. Specify either `url` or `id`, but not both.
 
 `-f, --force`
 : Don't prompt for confirmation.