[mgamis-msft]

What

Replace react-linkify with linkify-it@6.1.0 for plain-text chat message linkification. Remove obsolete dependencies, update Rush lockfiles, and add regression coverage for URL and email rendering.

Why

react-linkify transitively depends on vulnerable linkify-it@2.2.0, affected by CVE-2026-48801. This change removes that dependency chain and uses a patched version directly.

How Tested

Tested sample apps

Process & policy checklist

• I have updated the project documentation to reflect my changes if necessary.
• I have read the CONTRIBUTING documentation.

Is this a breaking change?

• This change causes current functionality to break.

[github-actions]

@azure/communication-react jest test coverage for beta.

	Lines	Statements	Functions	Branches
Base	58580 / 95109 61.59%	58580 / 95109 61.59%	1180 / 2709 43.55%	3417 / 5799 58.92%
Current	58633 / 95328 61.5%	58633 / 95328 61.5%	1186 / 2719 43.61%	3431 / 5833 58.82%
Diff	53 / 219 -0.09%	53 / 219 -0.09%	6 / 10 0.06%	14 / 34 -0.1%

[github-actions]

@azure/communication-react jest test coverage for stable.

	Lines	Statements	Functions	Branches
Base	29739 / 47381 62.76%	29739 / 47381 62.76%	810 / 1491 54.32%	2394 / 3842 62.31%
Current	29799 / 47563 62.65%	29799 / 47563 62.65%	816 / 1501 54.36%	2466 / 3901 63.21%
Diff	60 / 182 -0.11%	60 / 182 -0.11%	6 / 10 0.04%	72 / 59 0.9%

[github-actions]

Storybook 8 URL https://60c7ae6891f0e90039d7cd54-pjbncwplzo.chromatic.com/

[github-actions]

Storybook 8 URL https://60c7ae6891f0e90039d7cd54-nbvwvtoaoo.chromatic.com/

[github-actions]

📦 Chat bundle size

Bundle	Base Size (bytes)	Current Size (bytes)	Change	Delta (bytes)
build.bundle.js	1793916	1782329	⬇️ decreased	-11587
398.bundle.js	375829	375829	➖ unchanged	0
450.bundle.js	4454	4454	➖ unchanged	0
82.bundle.js	28161	28139	⬇️ decreased	-22
91.bundle.js	4102	4102	➖ unchanged	0

Total change: -11.3 KB ⬇️

[github-actions]

📦 CallWithChat bundle size

Bundle	Base Size (bytes)	Current Size (bytes)	Change	Delta (bytes)
build.bundle.js	7758336	7749263	⬇️ decreased	-9073
450.bundle.js	4470	4470	➖ unchanged	0
580.bundle.js	12407938	12407938	➖ unchanged	0
727.bundle.js	372564	372564	➖ unchanged	0
82.bundle.js	28177	28155	⬇️ decreased	-22
91.bundle.js	4118	4118	➖ unchanged	0

Total change: -8.9 KB ⬇️

[github-actions]

📦 Calling bundle size

Bundle	Base Size (bytes)	Current Size (bytes)	Change	Delta (bytes)
build.bundle.js	6767681	6770548	⚠️ increased	2867
580.bundle.js	12407925	12407925	➖ unchanged	0

Total change: +2.8 KB ⚠️