build: Merge Dependabot Changes into Dev Branch #1679

Prasanjeet-Microsoft · 2025-02-21T11:22:32Z

Purpose

The purpose of this PR is to merge the updates made by Dependabot into the dev branch. This includes updates to dependencies to ensure the project is using the latest stable versions of its dependencies, addressing any security vulnerabilities or outdated packages
This pull request includes several updates to dependencies and configuration files to support new features and improve compatibility. The most important changes include updates to Docker workflows, the package.json and package-lock.json files for frontend dependencies, and the pyproject.toml for Python dependencies.

Docker Workflow Updates:

Added dependabotchanges branch to the list of branches that trigger Docker image builds and pushes in .github/workflows/build-docker-images.yml and .github/workflows/build-docker.yml. [1] [2]

Frontend Dependency Updates:

Updated several dependencies in code/frontend/package.json, including @babel/traverse, @fluentui/react, @fluentui/react-icons, postcss, react, react-markdown, react-router-dom, and uuid.
Updated devDependencies in code/frontend/package.json such as @types/node, @types/react, typescript, vite, and vitest. [1] [2]
Updated cypress and typescript versions in tests/integration/ui/package.json and package-lock.json. [1] [2] [3] [4]

Python Dependency Updates:

Updated several dependencies in pyproject.toml, including azure-storage-blob, openai, pydantic, azure-ai-ml, black, pre-commit, pytest_httpserver, and trustme. [1] [2] [3]

Does this introduce a breaking change?

Yes
No

How to Test

Get the code

git clone [repo-address]
cd [repo-name]
git checkout [branch-name]
npm install

What to Check

Verify that the following are valid

Dependency Updates:
- Verify that the dependencies listed in the PR are up-to-date and correctly reflect the latest stable versions.
- Ensure that any outdated or vulnerable dependencies have been properly updated.
Compatibility:
- Check if the updated dependencies do not break the build or introduce any breaking changes.
- Review whether any dependency updates require adjustments in the codebase to maintain compatibility.
Testing:
- Run all relevant tests to confirm that the updates do not cause any regressions or issues.
- Ensure that the project still builds successfully and behaves as expected after the merge.

…#1560) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

#1531) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…1524) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…ontend (#1521) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…1519) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…1583) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…/code/frontend (#1584) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…1502) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…#1585) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…ontend (#1653) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Roopan-Microsoft <[email protected]>

…1644) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…1656) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Roopan-Microsoft <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…1645) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…1650) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…#1651) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Roopan-Microsoft <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Roopan-Microsoft <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: Ajit Padhi <[email protected]> Co-authored-by: Pavan-Microsoft <[email protected]> Co-authored-by: Ross Smith <[email protected]> Co-authored-by: gpickett <[email protected]> Co-authored-by: Francia Riesco <[email protected]> Co-authored-by: Francia Riesco <[email protected]> Co-authored-by: Prajwal D C <[email protected]> Co-authored-by: Harmanpreet-Microsoft <[email protected]> Co-authored-by: UtkarshMishra-Microsoft <[email protected]> Co-authored-by: Priyanka-Microsoft <[email protected]> Co-authored-by: Prasanjeet-Microsoft <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Kiran-Siluveru-Microsoft <[email protected]> Co-authored-by: Prashant-Microsoft <[email protected]> Co-authored-by: Rohini-Microsoft <[email protected]> Co-authored-by: Avijit-Microsoft <[email protected]> Co-authored-by: RaviKiran-Microsoft <[email protected]> Co-authored-by: Somesh Joshi <[email protected]> Co-authored-by: Himanshi Agrawal <[email protected]> Co-authored-by: pradeepjha-microsoft <[email protected]> Co-authored-by: Harmanpreet Kaur <[email protected]> Co-authored-by: Bangarraju-Microsoft <[email protected]> Co-authored-by: Harsh-Microsoft <[email protected]>

…d the package-lock.json file

dependabot bot and others added 30 commits December 23, 2024 12:30

build: bump opentelemetry-instrumentation-httpx from 0.48b0 to 0.50b0 (…

4a13a57

…#1560) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump azure-ai-ml from 1.21.1 to 1.23.0 (#1559)

fcaa562

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Merge branch 'main' into dependabotchanges

0986fe1

build: bump nanoid from 3.3.7 to 3.3.8 in /code/frontend (#1556)

e1a9ff3

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump openai from 1.48.0 to 1.58.1 (#1578)

4c06a4d

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump pytest from 8.3.3 to 8.3.4 (#1548)

4f1bf6e

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump streamlit from 1.39.0 to 1.41.1 (#1579)

1d07939

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump semantic-kernel from 1.3.0 to 1.17.1 (#1580)

1f3c5d9

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump @types/node from 22.5.5 to 22.10.1 in /code/frontend (#1547)

c61a308

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump vite from 5.4.10 to 6.0.1 in /code/frontend (#1546)

2809781

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump vitest from 2.1.4 to 2.1.8 in /code/frontend (#1582)

0980b69

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump prettier from 3.3.3 to 3.4.2 in /code/frontend (#1581)

35d4715

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump @vitejs/plugin-react from 4.3.3 to 4.3.4 in /code/frontend (

0233fe4

#1531) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump typescript from 5.5.4 to 5.7.2 in /tests/integration/ui (#…

a247d27

…1524) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump @fluentui/react-icons from 2.0.265 to 2.0.266 in /code/fr…

b175a5f

…ontend (#1521) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump react-router-dom from 6.27.0 to 7.0.1 in /code/frontend (#…

7b872cd

…1519) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump cypress from 13.15.2 to 13.17.0 in /tests/integration/ui (#…

a3cbc54

…1583) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump @fortawesome/fontawesome-svg-core from 6.6.0 to 6.7.2 in …

e81a965

…/code/frontend (#1584) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump typescript from 5.6.2 to 5.7.2 in /code/frontend (#1517)

610541b

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump tornado from 6.4.1 to 6.4.2 (#1511)

cbba914

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump cross-spawn from 7.0.3 to 7.0.6 in /tests/integration/ui (#…

060ca4e

…1502) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump cross-spawn from 7.0.3 to 7.0.6 in /extensions/teams (#1500)

2cbc462

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump aiohttp from 3.10.2 to 3.10.11 (#1499)

3184090

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump postcss from 8.4.48 to 8.4.49 in /code/frontend (#1496)

f1f2801

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump uuid from 11.0.2 to 11.0.3 in /code/frontend (#1472)

033df75

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump @azure/identity and botbuilder in /extensions/teams (#1282)

9792387

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump @fluentui/react from 8.121.8 to 8.122.2 in /code/frontend (…

2cad336

…#1585) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump actions/checkout from 3 to 4 (#1586)

ae60417

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump azure-mgmt-cognitiveservices from 13.5.0 to 13.6.0 (#1595)

82df7ec

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump azure-monitor-opentelemetry from 1.6.2 to 1.6.4 (#1596)

3b8e540

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot bot and others added 19 commits February 4, 2025 17:04

build: bump vitest from 2.1.8 to 3.0.4 in /code/frontend (#1649)

266b90e

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump @fluentui/react-icons from 2.0.270 to 2.0.274 in /code/fr…

107104a

…ontend (#1653) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump typescript from 5.7.2 to 5.7.3 in /code/frontend (#1646)

fd5f0b3

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump react-markdown from 9.0.1 to 9.0.3 in /code/frontend (#1654)

176d9f8

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Roopan-Microsoft <[email protected]>

build: bump cypress from 13.17.0 to 14.0.1 in /tests/integration/ui (#…

73a0d45

…1644) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump pytest-asyncio from 0.25.0 to 0.25.3 (#1641)

7daeefb

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump @babel/traverse from 7.26.4 to 7.26.7 in /code/frontend (#…

b98a80e

…1656) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Roopan-Microsoft <[email protected]>

build: bump vite from 6.0.5 to 6.0.11 in /code/frontend (#1652)

3b28433

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump typescript from 5.7.2 to 5.7.3 in /tests/integration/ui (#…

78c5561

…1645) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump react and @types/react in /code/frontend (#1647)

ccf9228

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump react-router-dom from 7.1.0 to 7.1.5 in /code/frontend (#…

afc9a99

…1650) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump azure-ai-ml from 1.23.0 to 1.24.0 (#1640)

8697a92

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump @fluentui/react from 8.122.2 to 8.122.9 in /code/frontend (…

fad46a3

…#1651) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Roopan-Microsoft <[email protected]>

build: bump black from 24.10.0 to 25.1.0 (#1639)

ed151ac

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump pre-commit from 4.0.1 to 4.1.0 (#1642)

4f35d46

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Roopan-Microsoft <[email protected]>

build: bump azure-storage-blob from 12.20.0 to 12.24.1 (#1638)

27f1161

Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Roopan-Microsoft <[email protected]>

Merge branch 'dev' into dependabotchanges

fe8311d

fix: Downgrade Packages and Fix Dependency Issues (#1666)

7c0f039

Prasanjeet-Microsoft requested review from Avijit-Microsoft, Roopan-Microsoft, Prajwal-Microsoft and Fr4nc3 as code owners February 21, 2025 11:22

Roopan-Microsoft and others added 4 commits February 21, 2025 17:42

Merge branch 'main' into dependabotchanges

79e0aba

updated package.json lock

2c04ba7

added dependabotchanges

7f922d1

Merge branch 'dev' into dependabotchanges

e1bea1d

Roopan-Microsoft approved these changes Feb 24, 2025

View reviewed changes

Roopan-Microsoft and others added 2 commits February 24, 2025 11:29

conflicts resolved

f85061e

Removed the duplicate lines from the package.json file and regenerate…

5dc62e2

…d the package-lock.json file

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build: Merge Dependabot Changes into Dev Branch #1679

build: Merge Dependabot Changes into Dev Branch #1679

Prasanjeet-Microsoft commented Feb 21, 2025 •

edited by Roopan-Microsoft

Loading

build: Merge Dependabot Changes into Dev Branch #1679

Are you sure you want to change the base?

build: Merge Dependabot Changes into Dev Branch #1679

Conversation

Prasanjeet-Microsoft commented Feb 21, 2025 • edited by Roopan-Microsoft Loading

Purpose

Docker Workflow Updates:

Frontend Dependency Updates:

Python Dependency Updates:

Does this introduce a breaking change?

How to Test

What to Check

Prasanjeet-Microsoft commented Feb 21, 2025 •

edited by Roopan-Microsoft

Loading