Post release PR for msal-common

change/@azure-msal-common-e9d64d70-59e7-4c8c-9887-7f4c5a418b41.json

@@ -0,0 +1,7 @@
+{
+  "type": "patch",
+  "comment": "bump msal-common to version 16.6.3 [#8620](https://github.com/AzureAD/microsoft-authentication-library-for-js/pull/8620)",
+  "packageName": "@azure/msal-common",
+  "email": "lalimasharda@microsoft.com",
+  "dependentChangeType": "patch"
+}

extensions/msal-node-extensions/package.json

@@ -68,7 +68,7 @@
     ]
   },
   "dependencies": {
-    "@azure/msal-common": "16.6.2",
+    "@azure/msal-common": "16.6.3",
     "@azure/msal-node-runtime": "^0.20.0",
     "keytar": "^7.8.0"
   },

lib/msal-browser/package.json

@@ -130,6 +130,6 @@
     "typescript": "^4.9.5"
   },
   "dependencies": {
-    "@azure/msal-common": "16.6.2"
+    "@azure/msal-common": "16.6.3"
   }
 }

lib/msal-common/CHANGELOG.json

@@ -1,6 +1,21 @@
 {
   "name": "@azure/msal-common",
   "entries": [
+    {
+      "date": "Thu, 28 May 2026 20:48:56 GMT",
+      "version": "16.6.3",
+      "tag": "@azure/msal-common_v16.6.3",
+      "comments": {
+        "patch": [
+          {
+            "author": "nicknamer@users.noreply.github.com",
+            "package": "@azure/msal-common",
+            "commit": "cf5eb296289e2445aee4031c768905b89ab5da16",
+            "comment": "Add issuer validation Rule 5: accept issuer hosts explicitly listed in knownAuthorities. Fixes Entra External ID (CIAM) regression where a GUID-based issuer is returned for a name-based authority [#8592](https://github.com/AzureAD/microsoft-authentication-library-for-js/issues/8592)"
+          }
+        ]
+      }
+    },
     {
       "date": "Tue, 19 May 2026 19:29:14 GMT",
       "version": "16.6.2",

lib/msal-common/CHANGELOG.md

@@ -1,9 +1,17 @@
 # Change Log - @azure/msal-common
 
-<!-- This log was last generated on Tue, 19 May 2026 19:29:14 GMT and should not be manually modified. -->
+<!-- This log was last generated on Thu, 28 May 2026 20:48:56 GMT and should not be manually modified. -->
 
 <!-- Start content -->
 
+## 16.6.3
+
+Thu, 28 May 2026 20:48:56 GMT
+
+### Patches
+
+- Add issuer validation Rule 5: accept issuer hosts explicitly listed in knownAuthorities. Fixes Entra External ID (CIAM) regression where a GUID-based issuer is returned for a name-based authority [#8592](https://github.com/AzureAD/microsoft-authentication-library-for-js/issues/8592) (nicknamer@users.noreply.github.com)
+
 ## 16.6.2
 
 Tue, 19 May 2026 19:29:14 GMT

lib/msal-common/apiReview/msal-common.api.md

@@ -4757,7 +4757,7 @@ export type ValidCredentialType = IdTokenEntity | AccessTokenEntity | RefreshTok
 // Warning: (ae-missing-release-tag) "version" is part of the package's API, but it is missing a release tag (@alpha, @beta, @public, or @internal)
 //
 // @public (undocumented)
-export const version = "16.6.2";
+export const version = "16.6.3";
 
 // Warning: (tsdoc-param-tag-missing-hyphen) The @param block should be followed by a parameter name and then a hyphen
 // Warning: (tsdoc-param-tag-missing-hyphen) The @param block should be followed by a parameter name and then a hyphen

lib/msal-common/package.json

@@ -10,7 +10,7 @@
     "type": "git",
     "url": "https://github.com/AzureAD/microsoft-authentication-library-for-js.git"
   },
-  "version": "16.6.2",
+  "version": "16.6.3",
   "description": "Microsoft Authentication Library for js",
   "keywords": [
     "implicit",

lib/msal-common/src/packageMetadata.ts

@@ -1,3 +1,3 @@
 /* eslint-disable header/header */
 export const name = "@azure/msal-common";
-export const version = "16.6.2";
+export const version = "16.6.3";

lib/msal-node/package.json

@@ -84,7 +84,7 @@
     "yargs": "^17.3.1"
   },
   "dependencies": {
-    "@azure/msal-common": "16.6.2",
+    "@azure/msal-common": "16.6.3",
     "jsonwebtoken": "^9.0.0"
   },
   "engines": {