Version 1.23.1 published but not listed in documentation

[lafe]

What type of issue is this?

Question

What SharePoint development model, framework, SDK or API is this about?

💥 SharePoint Framework

Target SharePoint environment

SharePoint Online

What browser(s) / client(s) have you tested

• 💥 Internet Explorer
• 💥 Microsoft Edge
• 💥 Google Chrome
• 💥 FireFox
• 💥 Safari
• mobile (iOS/iPadOS)
• mobile (Android)
• not applicable
• other (enter in the "Additional environment details" area below)

Additional environment details

• browser version
• SPFx version
• Node.js version
• etc

Issue description

I just saw that there are packages with version number 1.23.1 available on NPM (e.g. https://www.npmjs.com/package/@microsoft/sp-core-library) and wanted to check if this is a legitimate update.

I ask, because the official release notes only list version 1.23.0 and do not mention 1.23.1 even though minor bugfix releases got their own release notes in the past (e.g. 1.22.2). Furthermore, searching this repo for 1.23.1 does not yield any results aside from a roadmap entry, whereas 1.23.0 has multiple hits.

Given the recent supply chain attacks that also affected Microsoft, I want to make sure that the published update is legitimate.

[Ashlesha-MSFT]

@lafe,

Thanks for raising this question.
Your concern is understandable, especially given recent supply chain security incidents across the industry.
We can confirm that version 1.23.1 packages are currently available on npm. However, as you noted, we have not found corresponding public release notes or documentation updates for 1.23.1 at this time.

We've reached out to the SharePoint Framework engineering/documentation team to confirm whether 1.23.1 is an official servicing release and to clarify the release notes and support guidance. We'll update this issue once we receive official confirmation.
Thank you for bringing this discrepancy to our attention.

[jhholm]

There is a mention of SPFx 1.23.1 in the community call from yesterday.

Copilot, Microsoft 365 & Power Platform community call - 11th of June 2026

But it seems that SPFx 1.23.1 is currently broken. I've so far tested a with standard React Template WebPart and Application Customizer produced by the yeoman generator, and neither are loading in debug mode. #10897 mentions this.

[jimmywim]

Yep, I've just thrown together a "minimal" templated Web Part, scaffolded with latest yeoman generator, and the webpart is erroring, with no info in console:

[VesaJuvonen]

Hi @jimmywim, @lafe and @jhholm,
we do apologize the confusion with this version. Unfortunately v1.23.1 had a regression and the version has been now removed from npm catalog with default version to production being v1.23.0.

See more input from #10905. Closing this as resolved.

We will update the docs again normally as we get the next version out.