chore: update Python and JavaScript dependencies for compatibility and maintenance #1880

Harmanpreet-Microsoft · 2025-08-12T06:15:42Z

Purpose

This pull request primarily updates dependencies across several parts of the project to ensure compatibility with the latest features, security patches, and bug fixes. The changes affect Python, JavaScript/TypeScript, and CI/CD workflow files, focusing on keeping the codebase up-to-date and reducing potential technical debt.

Dependency Updates

Updated multiple Python package versions in pyproject.toml, including major upgrades for azure-functions, streamlit, openai, flask, pandas, and other related libraries for both main and development dependencies.
Updated frontend dependencies in code/frontend/package.json, such as @babel/traverse, @fluentui/react, @fortawesome/fontawesome-svg-core, and dev tools like jest, vitest, and vite.
Updated test automation and UI integration dependencies, including cypress and typescript in tests/integration/ui/package.json.
Updated Python requirements for data scripts in scripts/data_scripts/requirements.txt, specifically azure-identity and azure-keyvault-secrets.

CI/CD Workflow Improvements

Updated GitHub Actions workflows: switched to newer versions of setup-python in test-automation.yml and pytest-coverage-comment in comment_coverage.yml to leverage the latest improvements and bug fixes. [1] [2]

Infrastructure

Minor formatting change in infra/main.bicep for improved readability (no functional impact).
...

Does this introduce a breaking change?

Yes
No

How to Test

Get the code

git clone [repo-address]
cd [repo-name]
git checkout [branch-name]
npm install

Test the code

What to Check

Verify that the following are valid

...

Other Information

…#1560) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

#1531) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…1524) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…ontend (#1521) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…1519) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…1583) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…/code/frontend (#1584) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…1502) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…#1585) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…#1800) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

… the frontend-deps group (#1799) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…1775) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

… the frontend-deps group (#1814) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…#1813) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

… the frontend-deps group (#1850) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…#1848) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

… the frontend-deps group (#1864) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…1863) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…#1862) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…#1875) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…pdates (#1874) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…atibility (#1878) Co-authored-by: Harmanpreet Kaur <[email protected]>

…patibility (#1882) Co-authored-by: Harmanpreet Kaur <[email protected]>

github-actions · 2025-10-06T07:42:07Z

🎉 This PR is included in version 1.16.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

dependabot bot and others added 30 commits December 23, 2024 12:30

build: bump opentelemetry-instrumentation-httpx from 0.48b0 to 0.50b0 (…

4a13a57

…#1560) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump azure-ai-ml from 1.21.1 to 1.23.0 (#1559)

fcaa562

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Merge branch 'main' into dependabotchanges

0986fe1

build: bump nanoid from 3.3.7 to 3.3.8 in /code/frontend (#1556)

e1a9ff3

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump openai from 1.48.0 to 1.58.1 (#1578)

4c06a4d

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump pytest from 8.3.3 to 8.3.4 (#1548)

4f1bf6e

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump streamlit from 1.39.0 to 1.41.1 (#1579)

1d07939

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump semantic-kernel from 1.3.0 to 1.17.1 (#1580)

1f3c5d9

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump @types/node from 22.5.5 to 22.10.1 in /code/frontend (#1547)

c61a308

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump vite from 5.4.10 to 6.0.1 in /code/frontend (#1546)

2809781

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump vitest from 2.1.4 to 2.1.8 in /code/frontend (#1582)

0980b69

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump prettier from 3.3.3 to 3.4.2 in /code/frontend (#1581)

35d4715

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump @vitejs/plugin-react from 4.3.3 to 4.3.4 in /code/frontend (

0233fe4

#1531) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump typescript from 5.5.4 to 5.7.2 in /tests/integration/ui (#…

a247d27

…1524) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump @fluentui/react-icons from 2.0.265 to 2.0.266 in /code/fr…

b175a5f

…ontend (#1521) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump react-router-dom from 6.27.0 to 7.0.1 in /code/frontend (#…

7b872cd

…1519) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump cypress from 13.15.2 to 13.17.0 in /tests/integration/ui (#…

a3cbc54

…1583) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump @fortawesome/fontawesome-svg-core from 6.6.0 to 6.7.2 in …

e81a965

…/code/frontend (#1584) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump typescript from 5.6.2 to 5.7.2 in /code/frontend (#1517)

610541b

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump tornado from 6.4.1 to 6.4.2 (#1511)

cbba914

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump cross-spawn from 7.0.3 to 7.0.6 in /tests/integration/ui (#…

060ca4e

…1502) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump cross-spawn from 7.0.3 to 7.0.6 in /extensions/teams (#1500)

2cbc462

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump aiohttp from 3.10.2 to 3.10.11 (#1499)

3184090

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump postcss from 8.4.48 to 8.4.49 in /code/frontend (#1496)

f1f2801

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump uuid from 11.0.2 to 11.0.3 in /code/frontend (#1472)

033df75

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump @azure/identity and botbuilder in /extensions/teams (#1282)

9792387

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump @fluentui/react from 8.121.8 to 8.122.2 in /code/frontend (…

2cad336

…#1585) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump actions/checkout from 3 to 4 (#1586)

ae60417

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump azure-mgmt-cognitiveservices from 13.5.0 to 13.6.0 (#1595)

82df7ec

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump azure-monitor-opentelemetry from 1.6.2 to 1.6.4 (#1596)

3b8e540

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot bot and others added 19 commits May 20, 2025 11:41

build: bump the frontend-deps group in /code/frontend with 16 updates (…

6c601c9

…#1800) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump cypress from 14.3.0 to 14.3.3 in /tests/integration/ui in…

5850ae7

… the frontend-deps group (#1799) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump MishaKav/pytest-coverage-comment from 1.1.53 to 1.1.54 (#…

846cbf3

…1775) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump promptflow from 1.15.0 to 1.16.1 (#1402)

515bf78

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump the all-backend-deps group with 6 updates (#1815)

2f132a1

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump cypress from 14.3.3 to 14.4.0 in /tests/integration/ui in…

6fce574

… the frontend-deps group (#1814) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump the frontend-deps group in /code/frontend with 12 updates (…

ae8fc5c

…#1813) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump cypress from 14.4.0 to 14.5.0 in /tests/integration/ui in…

544a902

… the frontend-deps group (#1850) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump the all-backend-deps group with 16 updates (#1849)

514a504

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump the frontend-deps group in /code/frontend with 17 updates (…

38cc204

…#1848) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Merge remote-tracking branch 'origin/dev' into dependabotchanges

e8755e0

package

0fb07ed

build: bump cypress from 14.5.1 to 14.5.2 in /tests/integration/ui in…

36b96c5

… the frontend-deps group (#1864) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump the frontend-deps group in /code/frontend with 8 updates (#…

c8016a4

…1863) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump actions/setup-python from 4 to 5 in the all-actions group (…

0314bfa

…#1862) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump the frontend-deps group in /code/frontend with 16 updates (…

cf494b1

…#1875) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump the frontend-deps group in /tests/integration/ui with 2 u…

87a8d21

…pdates (#1874) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore: align frontend and backend dependencies for stability and comp…

88a680c

…atibility (#1878) Co-authored-by: Harmanpreet Kaur <[email protected]>

Merge branch 'dev' into dependabotchanges

37b055e

Harmanpreet-Microsoft requested review from Avijit-Microsoft, Roopan-Microsoft, Prajwal-Microsoft, Fr4nc3, Vinay-Microsoft and aniaroramsft as code owners August 12, 2025 06:15

chore: downgrade jest-environment-jsdom from 30.0.5 to 29.7.0 for com…

2d08bc2

…patibility (#1882) Co-authored-by: Harmanpreet Kaur <[email protected]>

Roopan-Microsoft approved these changes Aug 14, 2025

View reviewed changes

Roopan-Microsoft merged commit 59efafe into dev Aug 14, 2025
5 checks passed

github-actions bot added the released label Oct 6, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore: update Python and JavaScript dependencies for compatibility and maintenance #1880

chore: update Python and JavaScript dependencies for compatibility and maintenance #1880

Uh oh!

Harmanpreet-Microsoft commented Aug 12, 2025

Uh oh!

Uh oh!

github-actions bot commented Oct 6, 2025

Uh oh!

Uh oh!

chore: update Python and JavaScript dependencies for compatibility and maintenance #1880

chore: update Python and JavaScript dependencies for compatibility and maintenance #1880

Uh oh!

Conversation

Harmanpreet-Microsoft commented Aug 12, 2025

Purpose

Does this introduce a breaking change?

How to Test

What to Check

Other Information

Uh oh!

Uh oh!

github-actions bot commented Oct 6, 2025

Uh oh!

Uh oh!