From 1a7c1ec9fdf70f8e0f0c1d424ffbca0f25379793 Mon Sep 17 00:00:00 2001 From: jingjingjia-ms Date: Wed, 8 Jul 2026 16:55:32 -0700 Subject: [PATCH 1/2] chore(deps): consolidate dependabot updates Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- .github/workflows/build.yml | 2 +- .github/workflows/codeql.yml | 2 +- .github/workflows/release-please-gha.yml | 2 +- requirements-dev.txt | 50 ++++++++++++------------ 4 files changed, 28 insertions(+), 28 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 29f5faefd8d..1485915ee60 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -17,7 +17,7 @@ jobs: matrix: python-version: ["3.10", "3.11", "3.12", "3.13", "3.14"] steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Set up Python ${{ matrix.python-version }} uses: actions/setup-python@v6 with: diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 034b5ef4dbd..7616f65da28 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -45,7 +45,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@v7 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL diff --git a/.github/workflows/release-please-gha.yml b/.github/workflows/release-please-gha.yml index 0b19b78d527..aa209009eb2 100644 --- a/.github/workflows/release-please-gha.yml +++ b/.github/workflows/release-please-gha.yml @@ -19,7 +19,7 @@ jobs: release: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Generate GitHub App token id: app-token diff --git a/requirements-dev.txt b/requirements-dev.txt index e27524bbb23..b133a59b586 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -1,6 +1,6 @@ -aiohttp==3.13.5 +aiohttp==3.14.1 aiosignal==1.4.0 -anyio==4.13.0 +anyio==4.14.1 astroid==4.0.4 async-timeout==5.0.1 attrs==26.1.0 @@ -8,53 +8,53 @@ azure-core==1.41.0 azure-identity==1.25.3 build==1.5.0 bumpver==2026.1132 -certifi==2026.5.20 -cffi==2.0.0 -click==8.4.1 +certifi==2026.6.17 +cffi==2.1.0 +click==8.4.2 colorama==0.4.6 -cryptography==48.0.0 +cryptography==49.0.0 Deprecated==1.3.1 dill==0.4.1 docutils==0.23 -flit==3.10.0 -flit_core==3.10.0 +flit==3.12.0 +flit_core==3.12.0 frozenlist==1.8.0 h11==0.16.0 h2==4.3.0 -hpack==4.1.0 +hpack==4.2.0 httpcore==1.0.9 httpx==0.28.1 hyperframe==6.1.0 -idna==3.17 +idna==3.18 importlib-metadata==9.0.0 isort==8.0.1 lazy-object-proxy==1.12.0 lexid==2021.1006 looseversion==1.3.0 mccabe==0.7.0 -microsoft-kiota-abstractions==1.10.2 -microsoft-kiota-authentication-azure==1.10.2 -microsoft-kiota-http==1.10.2 -microsoft-kiota-serialization-form==1.10.2 -microsoft-kiota-serialization-json==1.10.2 -microsoft-kiota-serialization-multipart==1.10.2 -microsoft-kiota-serialization-text==1.10.2 -msal==1.36.0 +microsoft-kiota-abstractions==1.11.6 +microsoft-kiota-authentication-azure==1.11.6 +microsoft-kiota-http==1.11.6 +microsoft-kiota-serialization-form==1.11.6 +microsoft-kiota-serialization-json==1.11.6 +microsoft-kiota-serialization-multipart==1.11.6 +microsoft-kiota-serialization-text==1.11.6 +msal==1.37.0 msal-extensions==1.3.1 msgraph-core==1.4.0 multidict==6.7.1 -mypy==2.1.0 +mypy==2.2.0 mypy-extensions==1.1.0 -opentelemetry-api==1.42.1 -opentelemetry-sdk==1.42.1 -opentelemetry-semantic-conventions==0.63b1 +opentelemetry-api==1.43.0 +opentelemetry-sdk==1.43.0 +opentelemetry-semantic-conventions==0.64b0 packaging==26.2 pathlib2==2.3.7.post1 platformdirs==4.10.0 portalocker==2.10.1 pycparser==3.0 PyJWT==2.13.0 -pylint==4.0.5 +pylint==4.0.6 pyproject_hooks==1.2.0 python-dateutil==2.9.0.post0 requests==2.34.2 @@ -66,11 +66,11 @@ toml==0.10.2 tomli==2.4.1 tomli_w==1.2.0 tomlkit==0.15.0 -typing_extensions==4.15.0 +typing_extensions==4.16.0 tzdata==2026.2 uritemplate==4.2.0 urllib3==2.7.0 -wrapt==2.2.1 +wrapt==2.2.2 yapf==0.43.0 yarl==1.24.2 zipp==4.1.0 From 659b3ec209178a59936042383ec134a0e6157ea8 Mon Sep 17 00:00:00 2001 From: jingjingjia-ms Date: Thu, 9 Jul 2026 09:31:55 -0700 Subject: [PATCH 2/2] chore(deps): exclude pylint group entirely (astroid/pylint) Group PRs are all-or-nothing. Dependabot's pylint group pairs astroid 4.1.2 with pylint 4.0.6, but pylint 4.0.6 requires astroid<=4.1.dev0, so the pair is unresolvable. Rather than partially apply the group with an astroid workaround, leave the whole group out (astroid/pylint stay at main values) so it remains a clean standalone Dependabot PR. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- requirements-dev.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements-dev.txt b/requirements-dev.txt index b133a59b586..8e7def10ae0 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -54,7 +54,7 @@ platformdirs==4.10.0 portalocker==2.10.1 pycparser==3.0 PyJWT==2.13.0 -pylint==4.0.6 +pylint==4.0.5 pyproject_hooks==1.2.0 python-dateutil==2.9.0.post0 requests==2.34.2