From ef55221327e82a4e8028216b69a929707875ba87 Mon Sep 17 00:00:00 2001 From: "Jingjing Jia (from Dev Box)" Date: Tue, 7 Jul 2026 16:50:18 -0700 Subject: [PATCH 1/3] chore(deps): consolidate open dependabot dependency updates Combines the 13 open dependabot PRs into a single update. requirements-dev.txt: - aiohttp: 3.13.5 -> 3.14.1 (#1530; supersedes #1521 -> 3.14.0) - astroid: 4.0.2 -> 4.1.2 (pylint group #1529) - pylint: 4.0.5 -> 4.0.6 (pylint group #1529) - click: 8.1.8 -> 8.4.1 (#1519) - cryptography: 46.0.7 -> 48.0.1 (#1531) - docutils: 0.22.4 -> 0.23 (#1522) - microsoft-kiota-*: 1.10.1 -> 1.10.2 (kiota group #1516) - msal: 1.36.0 -> 1.37.0 (#1523) - opentelemetry-api/sdk: 1.42.0 -> 1.42.1 (open-telemetry group #1515) - opentelemetry-semantic-conventions: 0.63b0 -> 0.63b1 (#1515) - platformdirs: 4.9.6 -> 4.10.0 (#1518) - PyJWT: 2.12.1 -> 2.13.0 (#1520) - wrapt: 2.2.0 -> 2.2.1 (#1517) GitHub Actions: - actions/checkout: v6 -> v7 (#1532) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- .github/workflows/build.yml | 2 +- .github/workflows/codeql.yml | 2 +- .github/workflows/release-please-gha.yml | 2 +- .../workflows/validate-public-api-surface.yml | 2 +- requirements-dev.txt | 40 +++++++++---------- 5 files changed, 24 insertions(+), 24 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 48715f401d..128d23d87d 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -17,7 +17,7 @@ jobs: matrix: python-version: ["3.10", "3.11", "3.12", "3.13", "3.14"] steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Set up Python ${{ matrix.python-version }} uses: actions/setup-python@v6 with: diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 18b1a2d0fc..a3356be54e 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -46,7 +46,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@v7 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL diff --git a/.github/workflows/release-please-gha.yml b/.github/workflows/release-please-gha.yml index 0b19b78d52..aa209009eb 100644 --- a/.github/workflows/release-please-gha.yml +++ b/.github/workflows/release-please-gha.yml @@ -19,7 +19,7 @@ jobs: release: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Generate GitHub App token id: app-token diff --git a/.github/workflows/validate-public-api-surface.yml b/.github/workflows/validate-public-api-surface.yml index b829fd2804..3ea47c86c0 100644 --- a/.github/workflows/validate-public-api-surface.yml +++ b/.github/workflows/validate-public-api-surface.yml @@ -16,7 +16,7 @@ jobs: validate-public-api-surface: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: microsoftgraph/kiota-dom-export-diff-tool/export@main id: generatePatch - uses: microsoftgraph/kiota-dom-export-diff-tool/tool@main diff --git a/requirements-dev.txt b/requirements-dev.txt index 7af7caa8d2..d8f78333e4 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -1,7 +1,7 @@ -aiohttp==3.13.5 +aiohttp==3.14.1 aiosignal==1.4.0 anyio==4.13.0 -astroid==4.0.2 +astroid==4.1.2 async-timeout==5.0.1 attrs==26.1.0 azure-core==1.41.0 @@ -11,12 +11,12 @@ bumpver==2025.1131 certifi==2026.5.20 cffi==2.0.0 charset-normalizer==3.4.7 -click==8.1.8 +click==8.4.1 colorama==0.4.6 -cryptography==46.0.7 +cryptography==48.0.1 Deprecated==1.3.1 dill==0.4.1 -docutils==0.22.4 +docutils==0.23 flit==3.12.0 flit_core==3.12.0 frozenlist==1.8.0 @@ -33,29 +33,29 @@ lazy-object-proxy==1.12.0 lexid==2021.1006 looseversion==1.3.0 mccabe==0.7.0 -microsoft-kiota-abstractions==1.10.1 -microsoft-kiota-authentication-azure==1.10.1 -microsoft-kiota-http==1.10.1 -microsoft-kiota-serialization-form==1.10.1 -microsoft-kiota-serialization-json==1.10.1 -microsoft-kiota-serialization-multipart==1.10.1 -microsoft-kiota-serialization-text==1.10.1 -msal==1.36.0 +microsoft-kiota-abstractions==1.10.2 +microsoft-kiota-authentication-azure==1.10.2 +microsoft-kiota-http==1.10.2 +microsoft-kiota-serialization-form==1.10.2 +microsoft-kiota-serialization-json==1.10.2 +microsoft-kiota-serialization-multipart==1.10.2 +microsoft-kiota-serialization-text==1.10.2 +msal==1.37.0 msal-extensions==1.3.1 msgraph-core==1.4.0 multidict==6.7.1 mypy==2.1.0 mypy-extensions==1.1.0 -opentelemetry-api==1.42.0 -opentelemetry-sdk==1.42.0 -opentelemetry-semantic-conventions==0.63b0 +opentelemetry-api==1.42.1 +opentelemetry-sdk==1.42.1 +opentelemetry-semantic-conventions==0.63b1 packaging==26.1 pathlib2==2.3.7.post1 -platformdirs==4.9.6 +platformdirs==4.10.0 portalocker==2.10.1 pycparser==3.0 -PyJWT==2.12.1 -pylint==4.0.5 +PyJWT==2.13.0 +pylint==4.0.6 pyproject_hooks==1.2.0 python-dateutil==2.9.0.post0 requests==2.34.2 @@ -71,7 +71,7 @@ typing_extensions==4.15.0 tzdata==2026.1 uritemplate==4.2.0 urllib3==2.7.0 -wrapt==2.2.0 +wrapt==2.2.1 yapf==0.43.0 yarl==1.22.0 zipp==4.1.0 From 995955fa7d65972df65319e81eb8d81d96e1aa76 Mon Sep 17 00:00:00 2001 From: jingjingjia-ms Date: Wed, 8 Jul 2026 16:42:32 -0700 Subject: [PATCH 2/3] fix(deps): pin astroid 4.0.4 to satisfy pylint 4.0.6 constraint pylint 4.0.6 requires astroid<=4.1.dev0,>=4.0.2, so astroid 4.1.2 caused a ResolutionImpossible error. Downgrade to 4.0.4 (latest 4.0.x) to fix CI. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- requirements-dev.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements-dev.txt b/requirements-dev.txt index d8f78333e4..1a98d6db77 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -1,7 +1,7 @@ aiohttp==3.14.1 aiosignal==1.4.0 anyio==4.13.0 -astroid==4.1.2 +astroid==4.0.4 async-timeout==5.0.1 attrs==26.1.0 azure-core==1.41.0 From 824cf94e3f312b44eb0a0f2e9d0a61e11f3c96ae Mon Sep 17 00:00:00 2001 From: jingjingjia-ms Date: Wed, 8 Jul 2026 18:24:36 -0700 Subject: [PATCH 3/3] chore(deps): exclude pylint group entirely (astroid/pylint) Group PRs are all-or-nothing. Dependabot's pylint group pairs astroid 4.1.2 with pylint 4.0.6, but pylint 4.0.6 requires astroid<=4.1.dev0, so the pair is unresolvable. Rather than partially apply the group with an astroid workaround, leave the whole group out (astroid/pylint stay at main values) so it remains a clean standalone Dependabot PR. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- requirements-dev.txt | 154 +++++++++++++++++++++---------------------- 1 file changed, 77 insertions(+), 77 deletions(-) diff --git a/requirements-dev.txt b/requirements-dev.txt index 1a98d6db77..5b438dd690 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -1,77 +1,77 @@ -aiohttp==3.14.1 -aiosignal==1.4.0 -anyio==4.13.0 -astroid==4.0.4 -async-timeout==5.0.1 -attrs==26.1.0 -azure-core==1.41.0 -azure-identity==1.25.3 -build==1.5.0 -bumpver==2025.1131 -certifi==2026.5.20 -cffi==2.0.0 -charset-normalizer==3.4.7 -click==8.4.1 -colorama==0.4.6 -cryptography==48.0.1 -Deprecated==1.3.1 -dill==0.4.1 -docutils==0.23 -flit==3.12.0 -flit_core==3.12.0 -frozenlist==1.8.0 -h11==0.16.0 -h2==4.3.0 -hpack==4.1.0 -httpcore==1.0.9 -httpx==0.28.1 -hyperframe==6.1.0 -idna==3.15 -importlib-metadata==9.0.0 -isort==6.1.0 -lazy-object-proxy==1.12.0 -lexid==2021.1006 -looseversion==1.3.0 -mccabe==0.7.0 -microsoft-kiota-abstractions==1.10.2 -microsoft-kiota-authentication-azure==1.10.2 -microsoft-kiota-http==1.10.2 -microsoft-kiota-serialization-form==1.10.2 -microsoft-kiota-serialization-json==1.10.2 -microsoft-kiota-serialization-multipart==1.10.2 -microsoft-kiota-serialization-text==1.10.2 -msal==1.37.0 -msal-extensions==1.3.1 -msgraph-core==1.4.0 -multidict==6.7.1 -mypy==2.1.0 -mypy-extensions==1.1.0 -opentelemetry-api==1.42.1 -opentelemetry-sdk==1.42.1 -opentelemetry-semantic-conventions==0.63b1 -packaging==26.1 -pathlib2==2.3.7.post1 -platformdirs==4.10.0 -portalocker==2.10.1 -pycparser==3.0 -PyJWT==2.13.0 -pylint==4.0.6 -pyproject_hooks==1.2.0 -python-dateutil==2.9.0.post0 -requests==2.34.2 -six==1.17.0 -sniffio==1.3.1 -std-uritemplate>=2.0.10 -time-machine==3.2.0 -toml==0.10.2 -tomli==2.4.1 -tomli_w==1.2.0 -tomlkit==0.14.0 -typing_extensions==4.15.0 -tzdata==2026.1 -uritemplate==4.2.0 -urllib3==2.7.0 -wrapt==2.2.1 -yapf==0.43.0 -yarl==1.22.0 -zipp==4.1.0 +aiohttp==3.14.1 +aiosignal==1.4.0 +anyio==4.13.0 +astroid==4.0.2 +async-timeout==5.0.1 +attrs==26.1.0 +azure-core==1.41.0 +azure-identity==1.25.3 +build==1.5.0 +bumpver==2025.1131 +certifi==2026.5.20 +cffi==2.0.0 +charset-normalizer==3.4.7 +click==8.4.1 +colorama==0.4.6 +cryptography==48.0.1 +Deprecated==1.3.1 +dill==0.4.1 +docutils==0.23 +flit==3.12.0 +flit_core==3.12.0 +frozenlist==1.8.0 +h11==0.16.0 +h2==4.3.0 +hpack==4.1.0 +httpcore==1.0.9 +httpx==0.28.1 +hyperframe==6.1.0 +idna==3.15 +importlib-metadata==9.0.0 +isort==6.1.0 +lazy-object-proxy==1.12.0 +lexid==2021.1006 +looseversion==1.3.0 +mccabe==0.7.0 +microsoft-kiota-abstractions==1.10.2 +microsoft-kiota-authentication-azure==1.10.2 +microsoft-kiota-http==1.10.2 +microsoft-kiota-serialization-form==1.10.2 +microsoft-kiota-serialization-json==1.10.2 +microsoft-kiota-serialization-multipart==1.10.2 +microsoft-kiota-serialization-text==1.10.2 +msal==1.37.0 +msal-extensions==1.3.1 +msgraph-core==1.4.0 +multidict==6.7.1 +mypy==2.1.0 +mypy-extensions==1.1.0 +opentelemetry-api==1.42.1 +opentelemetry-sdk==1.42.1 +opentelemetry-semantic-conventions==0.63b1 +packaging==26.1 +pathlib2==2.3.7.post1 +platformdirs==4.10.0 +portalocker==2.10.1 +pycparser==3.0 +PyJWT==2.13.0 +pylint==4.0.5 +pyproject_hooks==1.2.0 +python-dateutil==2.9.0.post0 +requests==2.34.2 +six==1.17.0 +sniffio==1.3.1 +std-uritemplate>=2.0.10 +time-machine==3.2.0 +toml==0.10.2 +tomli==2.4.1 +tomli_w==1.2.0 +tomlkit==0.14.0 +typing_extensions==4.15.0 +tzdata==2026.1 +uritemplate==4.2.0 +urllib3==2.7.0 +wrapt==2.2.1 +yapf==0.43.0 +yarl==1.22.0 +zipp==4.1.0