Skip to content

test: Update Python dependencies and GitHub Actions with multiple upgrades#944

Merged
Ritesh-Microsoft merged 15 commits intomicrosoft:macae-smoke-autofrom
Ritesh-Microsoft:dev-v4
Apr 21, 2026
Merged

test: Update Python dependencies and GitHub Actions with multiple upgrades#944
Ritesh-Microsoft merged 15 commits intomicrosoft:macae-smoke-autofrom
Ritesh-Microsoft:dev-v4

Conversation

@Ritesh-Microsoft
Copy link
Copy Markdown
Contributor

@Ritesh-Microsoft Ritesh-Microsoft commented Apr 21, 2026

Purpose

This pull request primarily updates various GitHub Actions and workflow dependencies to their latest major versions across multiple workflow files, enhancing security, reliability, and compatibility. Additionally, it introduces some minor improvements to the development setup and workflow permissions.

CI/CD Workflow Dependency Upgrades

  • Updated actions/checkout to v6 in all workflows for improved security and performance. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14] [15] [16] [17]
  • Upgraded Docker-related actions to their latest major versions: docker/build-push-action to v7, docker/setup-buildx-action to v4, and docker/metadata-action to v6. [1] [2] [3] [4] [5] [6] [7] [8] [9]
  • Updated other third-party actions to their latest versions, including lycheeverse/lychee-action (v2.8.0), tj-actions/changed-files (v47.0.5), amannn/action-semantic-pull-request (v6), actions/stale (v10), actions/upload-artifact (v7), and codfish/semantic-release-action (v5). [1] [2] [3] [4] [5] [6] [7] [8] [9]

Python Environment and Azure Actions

  • Upgraded actions/setup-python to v6 in all workflows for Python environment setup. [1] [2] [3]
  • Updated azure/login to v3 in test-automation.yml for Azure CLI login.

Workflow Improvements and Permissions

  • Added explicit permissions for contents, actions, and pull-requests in test.yml for improved security and compliance with GitHub's best practices.
  • Enhanced test reporting in test.yml by adding --junitxml=pytest.xml to pytest command for generating JUnit-style test reports.

Development Environment

  • Updated backend setup in .devcontainer/setupEnv.sh to include --extra dev when syncing dependencies, ensuring development dependencies are installed.
  • ...

Does this introduce a breaking change?

  • Yes
  • No

How to Test

  • Get the code
git clone [repo-address]
cd [repo-name]
git checkout [branch-name]
npm install
  • Test the code

What to Check

Verify that the following are valid

  • ...

Other Information

dependabot Bot and others added 15 commits March 2, 2026 00:17
@dependabot @github-actions
build: bump the python-deps group in /src/backend with 27 updates
5ed1158 
Bumps the python-deps group in /src/backend with 27 updates:

| Package | From | To |
| --- | --- | --- |
| [azure-ai-evaluation](https://github.com/Azure/azure-sdk-for-python) | `1.11.0` | `1.15.3` |
| [azure-ai-projects](https://github.com/Azure/azure-sdk-for-python) | `1.0.0b11` | `2.0.0b4` |
| [azure-ai-agents](https://github.com/Azure/azure-sdk-for-python) | `1.2.0b5` | `1.2.0b6` |
| [azure-cosmos](https://github.com/Azure/azure-sdk-for-python) | `4.9.0` | `4.15.0` |
| [azure-identity](https://github.com/Azure/azure-sdk-for-python) | `1.24.0` | `1.25.2` |
| [azure-monitor-opentelemetry](https://github.com/Azure/azure-sdk-for-python) | `1.7.0` | `1.8.6` |
| [azure-search-documents](https://github.com/Azure/azure-sdk-for-python) | `11.5.3` | `11.6.0` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.116.1` | `0.135.0` |
| [openai](https://github.com/openai/openai-python) | `1.84.0` | `2.24.0` |
| [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python) | `1.36.0` | `1.39.1` |
| [opentelemetry-exporter-otlp-proto-grpc](https://github.com/open-telemetry/opentelemetry-python) | `1.36.0` | `1.39.1` |
| [opentelemetry-exporter-otlp-proto-http](https://github.com/open-telemetry/opentelemetry-python) | `1.36.0` | `1.39.1` |
| [opentelemetry-instrumentation-fastapi](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.57b0` | `0.60b1` |
| [opentelemetry-instrumentation-openai](https://github.com/traceloop/openllmetry) | `0.46.2` | `0.52.6` |
| [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python) | `1.36.0` | `1.39.1` |
| [pytest](https://github.com/pytest-dev/pytest) | `8.4.1` | `9.0.2` |
| [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) | `0.24.0` | `1.3.0` |
| [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `5.0.0` | `7.0.0` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.1.1` | `1.2.1` |
| [python-multipart](https://github.com/Kludex/python-multipart) | `0.0.20` | `0.0.22` |
| [semantic-kernel](https://github.com/microsoft/semantic-kernel) | `1.39.3` | `1.39.4` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.35.0` | `0.41.0` |
| [pylint-pydantic](https://github.com/fcfangcc/pylint-pydantic) | `0.3.5` | `0.4.1` |
| [mcp](https://github.com/modelcontextprotocol/python-sdk) | `1.23.0` | `1.26.0` |
| [werkzeug](https://github.com/pallets/werkzeug) | `3.1.5` | `3.1.6` |
| [azure-core](https://github.com/Azure/azure-sdk-for-python) | `1.38.0` | `1.38.2` |
| [semantic-kernel[azure]](https://github.com/microsoft/semantic-kernel) | `1.32.2` | `1.39.4` |


Updates `azure-ai-evaluation` from 1.11.0 to 1.15.3
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-ai-evaluation_1.11.0...azure-ai-evaluation_1.15.3)

Updates `azure-ai-projects` from 1.0.0b11 to 2.0.0b4
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-ai-projects_1.0.0b11...azure-ai-projects_2.0.0b4)

Updates `azure-ai-agents` from 1.2.0b5 to 1.2.0b6
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-ai-agents_1.2.0b5...azure-ai-agents_1.2.0b6)

Updates `azure-cosmos` from 4.9.0 to 4.15.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-cosmos_4.9.0...azure-cosmos_4.15.0)

Updates `azure-identity` from 1.24.0 to 1.25.2
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-identity_1.24.0...azure-identity_1.25.2)

Updates `azure-monitor-opentelemetry` from 1.7.0 to 1.8.6
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-monitor-opentelemetry_1.7.0...azure-monitor-opentelemetry_1.8.6)

Updates `azure-search-documents` from 11.5.3 to 11.6.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-python/blob/main/sdk/search/azure-search-documents/CHANGELOG.md)
- [Commits](Azure/azure-sdk-for-python@azure-search-documents_11.5.3...azure-search-documents_11.6.0)

Updates `fastapi` from 0.116.1 to 0.135.0
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.116.1...0.135.0)

Updates `openai` from 1.84.0 to 2.24.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v1.84.0...v2.24.0)

Updates `opentelemetry-api` from 1.36.0 to 1.39.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/v1.39.1/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.36.0...v1.39.1)

Updates `opentelemetry-exporter-otlp-proto-grpc` from 1.36.0 to 1.39.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/v1.39.1/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.36.0...v1.39.1)

Updates `opentelemetry-exporter-otlp-proto-http` from 1.36.0 to 1.39.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/v1.39.1/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.36.0...v1.39.1)

Updates `opentelemetry-instrumentation-fastapi` from 0.57b0 to 0.60b1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-instrumentation-openai` from 0.46.2 to 0.52.6
- [Release notes](https://github.com/traceloop/openllmetry/releases)
- [Changelog](https://github.com/traceloop/openllmetry/blob/main/CHANGELOG.md)
- [Commits](traceloop/openllmetry@0.46.2...0.52.6)

Updates `opentelemetry-sdk` from 1.36.0 to 1.39.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/v1.39.1/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.36.0...v1.39.1)

Updates `pytest` from 8.4.1 to 9.0.2
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.4.1...9.0.2)

Updates `pytest-asyncio` from 0.24.0 to 1.3.0
- [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases)
- [Commits](pytest-dev/pytest-asyncio@v0.24.0...v1.3.0)

Updates `pytest-cov` from 5.0.0 to 7.0.0
- [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-cov@v5.0.0...v7.0.0)

Updates `python-dotenv` from 1.1.1 to 1.2.1
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.1.1...v1.2.1)

Updates `python-multipart` from 0.0.20 to 0.0.22
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.20...0.0.22)

Updates `semantic-kernel` from 1.39.3 to 1.39.4
- [Release notes](https://github.com/microsoft/semantic-kernel/releases)
- [Commits](microsoft/semantic-kernel@python-1.39.3...python-1.39.4)

Updates `uvicorn` from 0.35.0 to 0.41.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.35.0...0.41.0)

Updates `pylint-pydantic` from 0.3.5 to 0.4.1
- [Release notes](https://github.com/fcfangcc/pylint-pydantic/releases)
- [Commits](fcfangcc/pylint-pydantic@v0.3.5...v0.4.1)

Updates `mcp` from 1.23.0 to 1.26.0
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](modelcontextprotocol/python-sdk@v1.23.0...v1.26.0)

Updates `werkzeug` from 3.1.5 to 3.1.6
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](pallets/werkzeug@3.1.5...3.1.6)

Updates `azure-core` from 1.38.0 to 1.38.2
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-core_1.38.0...azure-core_1.38.2)

Updates `semantic-kernel[azure]` from 1.32.2 to 1.39.4
- [Release notes](https://github.com/microsoft/semantic-kernel/releases)
- [Commits](microsoft/semantic-kernel@python-1.32.2...python-1.39.4)

---
updated-dependencies:
- dependency-name: azure-ai-evaluation
  dependency-version: 1.15.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: azure-ai-projects
  dependency-version: 2.0.0b4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-deps
- dependency-name: azure-ai-agents
  dependency-version: 1.2.0b6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: azure-cosmos
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: azure-identity
  dependency-version: 1.25.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: azure-monitor-opentelemetry
  dependency-version: 1.8.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: azure-search-documents
  dependency-version: 11.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: fastapi
  dependency-version: 0.135.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: openai
  dependency-version: 2.24.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-deps
- dependency-name: opentelemetry-api
  dependency-version: 1.39.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: opentelemetry-exporter-otlp-proto-grpc
  dependency-version: 1.39.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: opentelemetry-exporter-otlp-proto-http
  dependency-version: 1.39.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: opentelemetry-instrumentation-fastapi
  dependency-version: 0.60b1
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: opentelemetry-instrumentation-openai
  dependency-version: 0.52.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: opentelemetry-sdk
  dependency-version: 1.39.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: pytest
  dependency-version: 9.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-deps
- dependency-name: pytest-asyncio
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-deps
- dependency-name: pytest-cov
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-deps
- dependency-name: python-dotenv
  dependency-version: 1.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: python-multipart
  dependency-version: 0.0.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: semantic-kernel
  dependency-version: 1.39.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: uvicorn
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: pylint-pydantic
  dependency-version: 0.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: mcp
  dependency-version: 1.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: werkzeug
  dependency-version: 3.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: azure-core
  dependency-version: 1.38.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: semantic-kernel[azure]
  dependency-version: 1.39.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github-actions
build: bump the all-actions group with 8 updates
95a7d0d 
Bumps the all-actions group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4` | `6` |
| [tj-actions/changed-files](https://github.com/tj-actions/changed-files) | `46.0.5` | `47.0.4` |
| [lycheeverse/lychee-action](https://github.com/lycheeverse/lychee-action) | `2.4.1` | `2.8.0` |
| [codfish/semantic-release-action](https://github.com/codfish/semantic-release-action) | `4` | `5` |
| [amannn/action-semantic-pull-request](https://github.com/amannn/action-semantic-pull-request) | `5` | `6` |
| [actions/setup-python](https://github.com/actions/setup-python) | `4` | `6` |
| [actions/stale](https://github.com/actions/stale) | `9` | `10` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` |


Updates `actions/checkout` from 4 to 6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v6)

Updates `tj-actions/changed-files` from 46.0.5 to 47.0.4
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](tj-actions/changed-files@ed68ef8...7dee1b0)

Updates `lycheeverse/lychee-action` from 2.4.1 to 2.8.0
- [Release notes](https://github.com/lycheeverse/lychee-action/releases)
- [Commits](lycheeverse/lychee-action@v2.4.1...v2.8.0)

Updates `codfish/semantic-release-action` from 4 to 5
- [Release notes](https://github.com/codfish/semantic-release-action/releases)
- [Changelog](https://github.com/codfish/semantic-release-action/blob/main/RELEASE_NOTES_V5.md)
- [Commits](codfish/semantic-release-action@v4...v5)

Updates `amannn/action-semantic-pull-request` from 5 to 6
- [Release notes](https://github.com/amannn/action-semantic-pull-request/releases)
- [Changelog](https://github.com/amannn/action-semantic-pull-request/blob/main/CHANGELOG.md)
- [Commits](amannn/action-semantic-pull-request@v5...v6)

Updates `actions/setup-python` from 4 to 6
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v4...v6)

Updates `actions/stale` from 9 to 10
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](actions/stale@v9...v10)

Updates `actions/upload-artifact` from 4 to 7
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: tj-actions/changed-files
  dependency-version: 47.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: lycheeverse/lychee-action
  dependency-version: 2.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-actions
- dependency-name: codfish/semantic-release-action
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: amannn/action-semantic-pull-request
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: actions/stale
  dependency-version: '10'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github-actions
build: bump the python-deps group in /src/backend with 18 updates
47bda0e 
Bumps the python-deps group in /src/backend with 18 updates:

| Package | From | To |
| --- | --- | --- |
| [azure-ai-evaluation](https://github.com/Azure/azure-sdk-for-python) | `1.15.3` | `1.16.2` |
| azure-ai-projects | `2.0.0b4` | `2.0.1` |
| [azure-identity](https://github.com/Azure/azure-sdk-for-python) | `1.25.2` | `1.25.3` |
| [azure-monitor-opentelemetry](https://github.com/Azure/azure-sdk-for-python) | `1.8.6` | `1.8.7` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.135.0` | `0.135.2` |
| [openai](https://github.com/openai/openai-python) | `2.24.0` | `2.30.0` |
| [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python) | `1.39.1` | `1.40.0` |
| [opentelemetry-exporter-otlp-proto-grpc](https://github.com/open-telemetry/opentelemetry-python) | `1.39.1` | `1.40.0` |
| [opentelemetry-exporter-otlp-proto-http](https://github.com/open-telemetry/opentelemetry-python) | `1.39.1` | `1.40.0` |
| [opentelemetry-instrumentation-fastapi](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.60b1` | `0.61b0` |
| [opentelemetry-instrumentation-openai](https://github.com/traceloop/openllmetry) | `0.52.6` | `0.57.0` |
| [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python) | `1.39.1` | `1.40.0` |
| [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `7.0.0` | `7.1.0` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.1` | `1.2.2` |
| [semantic-kernel](https://github.com/microsoft/semantic-kernel) | `1.39.4` | `1.41.1` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.41.0` | `0.42.0` |
| [werkzeug](https://github.com/pallets/werkzeug) | `3.1.6` | `3.1.7` |
| [azure-core](https://github.com/Azure/azure-sdk-for-python) | `1.38.2` | `1.39.0` |


Updates `azure-ai-evaluation` from 1.15.3 to 1.16.2
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-ai-evaluation_1.15.3...azure-ai-evaluation_1.16.2)

Updates `azure-ai-projects` from 2.0.0b4 to 2.0.1

Updates `azure-identity` from 1.25.2 to 1.25.3
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-identity_1.25.2...azure-identity_1.25.3)

Updates `azure-monitor-opentelemetry` from 1.8.6 to 1.8.7
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-monitor-opentelemetry_1.8.6...azure-monitor-opentelemetry_1.8.7)

Updates `fastapi` from 0.135.0 to 0.135.2
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.135.0...0.135.2)

Updates `openai` from 2.24.0 to 2.30.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v2.24.0...v2.30.0)

Updates `opentelemetry-api` from 1.39.1 to 1.40.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.39.1...v1.40.0)

Updates `opentelemetry-exporter-otlp-proto-grpc` from 1.39.1 to 1.40.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.39.1...v1.40.0)

Updates `opentelemetry-exporter-otlp-proto-http` from 1.39.1 to 1.40.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.39.1...v1.40.0)

Updates `opentelemetry-instrumentation-fastapi` from 0.60b1 to 0.61b0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-instrumentation-openai` from 0.52.6 to 0.57.0
- [Release notes](https://github.com/traceloop/openllmetry/releases)
- [Changelog](https://github.com/traceloop/openllmetry/blob/main/CHANGELOG.md)
- [Commits](traceloop/openllmetry@0.52.6...0.57.0)

Updates `opentelemetry-sdk` from 1.39.1 to 1.40.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.39.1...v1.40.0)

Updates `pytest-cov` from 7.0.0 to 7.1.0
- [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-cov@v7.0.0...v7.1.0)

Updates `python-dotenv` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.1...v1.2.2)

Updates `semantic-kernel` from 1.39.4 to 1.41.1
- [Release notes](https://github.com/microsoft/semantic-kernel/releases)
- [Commits](microsoft/semantic-kernel@python-1.39.4...python-1.41.1)

Updates `uvicorn` from 0.41.0 to 0.42.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.41.0...0.42.0)

Updates `werkzeug` from 3.1.6 to 3.1.7
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](pallets/werkzeug@3.1.6...3.1.7)

Updates `azure-core` from 1.38.2 to 1.39.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-core_1.38.2...azure-core_1.39.0)

---
updated-dependencies:
- dependency-name: azure-ai-evaluation
  dependency-version: 1.16.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: azure-ai-projects
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: azure-identity
  dependency-version: 1.25.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: azure-monitor-opentelemetry
  dependency-version: 1.8.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: fastapi
  dependency-version: 0.135.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: openai
  dependency-version: 2.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: opentelemetry-api
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: opentelemetry-exporter-otlp-proto-grpc
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: opentelemetry-exporter-otlp-proto-http
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: opentelemetry-instrumentation-fastapi
  dependency-version: 0.61b0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: opentelemetry-instrumentation-openai
  dependency-version: 0.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: opentelemetry-sdk
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: pytest-cov
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: python-dotenv
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: semantic-kernel
  dependency-version: 1.41.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: uvicorn
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: werkzeug
  dependency-version: 3.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: azure-core
  dependency-version: 1.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github-actions
build: bump the all-actions group with 5 updates
76e15ae 
Bumps the all-actions group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [docker/metadata-action](https://github.com/docker/metadata-action) | `5` | `6` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `6` | `7` |
| [tj-actions/changed-files](https://github.com/tj-actions/changed-files) | `47.0.4` | `47.0.5` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3` | `4` |
| [azure/login](https://github.com/azure/login) | `2` | `3` |


Updates `docker/metadata-action` from 5 to 6
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](docker/metadata-action@v5...v6)

Updates `docker/build-push-action` from 6 to 7
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@v6...v7)

Updates `tj-actions/changed-files` from 47.0.4 to 47.0.5
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](tj-actions/changed-files@7dee1b0...22103cc)

Updates `docker/setup-buildx-action` from 3 to 4
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@v3...v4)

Updates `azure/login` from 2 to 3
- [Release notes](https://github.com/azure/login/releases)
- [Commits](Azure/login@v2...v3)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: docker/build-push-action
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: tj-actions/changed-files
  dependency-version: 47.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-actions
- dependency-name: docker/setup-buildx-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: azure/login
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github-actions
build: bump the python-deps group in /src/backend with 16 updates
5238268 
Updates the requirements on [azure-ai-evaluation](https://github.com/Azure/azure-sdk-for-python), [fastapi](https://github.com/fastapi/fastapi), [openai](https://github.com/openai/openai-python), [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python), [opentelemetry-exporter-otlp-proto-grpc](https://github.com/open-telemetry/opentelemetry-python), [opentelemetry-exporter-otlp-proto-http](https://github.com/open-telemetry/opentelemetry-python), [opentelemetry-instrumentation-fastapi](https://github.com/open-telemetry/opentelemetry-python-contrib), [opentelemetry-instrumentation-openai](https://github.com/traceloop/openllmetry), [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python), [pytest](https://github.com/pytest-dev/pytest), [python-multipart](https://github.com/Kludex/python-multipart), [semantic-kernel](https://github.com/microsoft/semantic-kernel), [uvicorn](https://github.com/Kludex/uvicorn), [mcp](https://github.com/modelcontextprotocol/python-sdk), [werkzeug](https://github.com/pallets/werkzeug) and [agent-framework](https://github.com/microsoft/agent-framework) to permit the latest version.

Updates `azure-ai-evaluation` from 1.16.2 to 1.16.5
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-ai-evaluation_1.16.2...azure-ai-evaluation_1.16.5)

Updates `fastapi` from 0.135.2 to 0.135.3
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.135.2...0.135.3)

Updates `openai` from 2.30.0 to 2.31.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v2.30.0...v2.31.0)

Updates `opentelemetry-api` from 1.40.0 to 1.41.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.40.0...v1.41.0)

Updates `opentelemetry-exporter-otlp-proto-grpc` from 1.40.0 to 1.41.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.40.0...v1.41.0)

Updates `opentelemetry-exporter-otlp-proto-http` from 1.40.0 to 1.41.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.40.0...v1.41.0)

Updates `opentelemetry-instrumentation-fastapi` from 0.61b0 to 0.62b0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-instrumentation-openai` from 0.57.0 to 0.59.0
- [Release notes](https://github.com/traceloop/openllmetry/releases)
- [Changelog](https://github.com/traceloop/openllmetry/blob/main/CHANGELOG.md)
- [Commits](traceloop/openllmetry@0.57.0...0.59.0)

Updates `opentelemetry-sdk` from 1.40.0 to 1.41.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.40.0...v1.41.0)

Updates `pytest` from 9.0.2 to 9.0.3
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.2...9.0.3)

Updates `python-multipart` from 0.0.22 to 0.0.26
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.22...0.0.26)

Updates `semantic-kernel` from 1.41.1 to 1.41.2
- [Release notes](https://github.com/microsoft/semantic-kernel/releases)
- [Commits](microsoft/semantic-kernel@python-1.41.1...python-1.41.2)

Updates `uvicorn` from 0.42.0 to 0.44.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.42.0...0.44.0)

Updates `mcp` from 1.26.0 to 1.27.0
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](modelcontextprotocol/python-sdk@v1.26.0...v1.27.0)

Updates `werkzeug` from 3.1.7 to 3.1.8
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](pallets/werkzeug@3.1.7...3.1.8)

Updates `agent-framework` to 1.0.1
- [Release notes](https://github.com/microsoft/agent-framework/releases)
- [Commits](microsoft/agent-framework@python-1.0.0b251105...python-1.0.1)

---
updated-dependencies:
- dependency-name: azure-ai-evaluation
  dependency-version: 1.16.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: fastapi
  dependency-version: 0.135.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: openai
  dependency-version: 2.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: opentelemetry-api
  dependency-version: 1.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: opentelemetry-exporter-otlp-proto-grpc
  dependency-version: 1.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: opentelemetry-exporter-otlp-proto-http
  dependency-version: 1.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: opentelemetry-instrumentation-fastapi
  dependency-version: 0.62b0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: opentelemetry-instrumentation-openai
  dependency-version: 0.59.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: opentelemetry-sdk
  dependency-version: 1.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: pytest
  dependency-version: 9.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: python-multipart
  dependency-version: 0.0.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: semantic-kernel
  dependency-version: 1.41.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: uvicorn
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: mcp
  dependency-version: 1.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: werkzeug
  dependency-version: 3.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: agent-framework
  dependency-version: 1.0.1
  dependency-type: direct:production
  dependency-group: python-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@Dhruvkumar-Microsoft
Merge remote-tracking branch 'origin/dev-v4' into dependabotchanges
eac52db
@Ayaz-Microsoft
Enhance setup scripts to include '--extra dev' for dependency install…
62e873d 
…ation
@Dhruvkumar-Microsoft
updated the dependabot packages
d9de6e6
@Roopan-Microsoft
Merge pull request microsoft#935 from microsoft/dependabotFix-az
0d2132a 
fix: Enhance setup scripts to include '--extra dev' for dependency install
@Rafi-Microsoft
feat: Add pytest coverage comment to PRs (dev-v4)
783f93d 
- Add permissions block for pull-requests: write
- Add --junitxml=pytest.xml for test summary reporting
- Add MishaKav/pytest-coverage-comment step (pinned by SHA)
- Remove demo-v4 from target branches

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@Rafi-Microsoft
fix: Restore demo-v4 branch in workflow triggers
77b322b 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@Roopan-Microsoft
Merge pull request microsoft#938 from microsoft/psl-add-coverage-pr-c…
768b2bc 
…omment-v4

feat: Add pytest coverage comment to PRs
@Roopan-Microsoft
Merge pull request microsoft#941 from microsoft/psl-dependabotchanges-dk
56a9beb 
fix: updated the dependabot changes packages
@Ritesh-Microsoft
macae-v4-update
987c091
@Ritesh-Microsoft
Merge branch 'dev-v4' of https://github.com/Ritesh-Microsoft/MACAE-v4…
53b4673 
…-Automation into dev-v4
@Ritesh-Microsoft Ritesh-Microsoft merged commit d08d709 into microsoft:macae-smoke-auto Apr 21, 2026
2 of 3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Avijit-Microsoft Avijit-Microsoft Awaiting requested review from Avijit-Microsoft Avijit-Microsoft is a code owner

@Roopan-Microsoft Roopan-Microsoft Awaiting requested review from Roopan-Microsoft Roopan-Microsoft is a code owner

@Prajwal-Microsoft Prajwal-Microsoft Awaiting requested review from Prajwal-Microsoft Prajwal-Microsoft is a code owner

@marktayl1 marktayl1 Awaiting requested review from marktayl1 marktayl1 is a code owner

@Fr4nc3 Fr4nc3 Awaiting requested review from Fr4nc3 Fr4nc3 is a code owner

@Vinay-Microsoft Vinay-Microsoft Awaiting requested review from Vinay-Microsoft Vinay-Microsoft is a code owner

@aniaroramsft aniaroramsft Awaiting requested review from aniaroramsft aniaroramsft is a code owner

@toherman-msft toherman-msft Awaiting requested review from toherman-msft toherman-msft is a code owner

@nchandhi nchandhi Awaiting requested review from nchandhi nchandhi is a code owner

@dgp10801 dgp10801 Awaiting requested review from dgp10801 dgp10801 is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

5 participants

@Ritesh-Microsoft @Dhruvkumar-Microsoft @Ayaz-Microsoft @Roopan-Microsoft @Rafi-Microsoft