chore: update Python and JavaScript dependencies for compatibility and maintenance by Harmanpreet-Microsoft · Pull Request #1880 · Azure-Samples/chat-with-your-data-solution-accelerator

Harmanpreet-Microsoft · 2025-08-12T06:15:42Z

Purpose

This pull request primarily updates dependencies across several parts of the project to ensure compatibility with the latest features, security patches, and bug fixes. The changes affect Python, JavaScript/TypeScript, and CI/CD workflow files, focusing on keeping the codebase up-to-date and reducing potential technical debt.

Dependency Updates

Updated multiple Python package versions in pyproject.toml, including major upgrades for azure-functions, streamlit, openai, flask, pandas, and other related libraries for both main and development dependencies.
Updated frontend dependencies in code/frontend/package.json, such as @babel/traverse, @fluentui/react, @fortawesome/fontawesome-svg-core, and dev tools like jest, vitest, and vite.
Updated test automation and UI integration dependencies, including cypress and typescript in tests/integration/ui/package.json.
Updated Python requirements for data scripts in scripts/data_scripts/requirements.txt, specifically azure-identity and azure-keyvault-secrets.

CI/CD Workflow Improvements

Updated GitHub Actions workflows: switched to newer versions of setup-python in test-automation.yml and pytest-coverage-comment in comment_coverage.yml to leverage the latest improvements and bug fixes. [1] [2]

Infrastructure

Minor formatting change in infra/main.bicep for improved readability (no functional impact).
...

Does this introduce a breaking change?

Yes
No

How to Test

Get the code

git clone [repo-address]
cd [repo-name]
git checkout [branch-name]
npm install

Test the code

What to Check

Verify that the following are valid

...

Other Information

…#1560) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

#1531) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…1524) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…ontend (#1521) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…1519) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…1583) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…/code/frontend (#1584) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…1502) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…#1585) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…#1800) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

… the frontend-deps group (#1799) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…1775) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

… the frontend-deps group (#1814) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…#1813) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

… the frontend-deps group (#1850) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…#1848) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

… the frontend-deps group (#1864) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…1863) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…#1862) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…#1875) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…pdates (#1874) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…atibility (#1878) Co-authored-by: Harmanpreet Kaur <v-harmanpkau@microsoft.com>

…patibility (#1882) Co-authored-by: Harmanpreet Kaur <v-harmanpkau@microsoft.com>

github-actions · 2025-10-06T07:42:07Z

🎉 This PR is included in version 1.16.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

dependabot Bot and others added 30 commits December 23, 2024 12:30

build: bump opentelemetry-instrumentation-httpx from 0.48b0 to 0.50b0 (…

4a13a57

…#1560) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump azure-ai-ml from 1.21.1 to 1.23.0 (#1559)

fcaa562

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Merge branch 'main' into dependabotchanges

0986fe1

build: bump nanoid from 3.3.7 to 3.3.8 in /code/frontend (#1556)

e1a9ff3

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump openai from 1.48.0 to 1.58.1 (#1578)

4c06a4d

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump pytest from 8.3.3 to 8.3.4 (#1548)

4f1bf6e

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump streamlit from 1.39.0 to 1.41.1 (#1579)

1d07939

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump semantic-kernel from 1.3.0 to 1.17.1 (#1580)

1f3c5d9

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump @types/node from 22.5.5 to 22.10.1 in /code/frontend (#1547)

c61a308

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump vite from 5.4.10 to 6.0.1 in /code/frontend (#1546)

2809781

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump vitest from 2.1.4 to 2.1.8 in /code/frontend (#1582)

0980b69

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump prettier from 3.3.3 to 3.4.2 in /code/frontend (#1581)

35d4715

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump @vitejs/plugin-react from 4.3.3 to 4.3.4 in /code/frontend (

0233fe4

#1531) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump typescript from 5.5.4 to 5.7.2 in /tests/integration/ui (#…

a247d27

…1524) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump @fluentui/react-icons from 2.0.265 to 2.0.266 in /code/fr…

b175a5f

…ontend (#1521) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump react-router-dom from 6.27.0 to 7.0.1 in /code/frontend (#…

7b872cd

…1519) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump cypress from 13.15.2 to 13.17.0 in /tests/integration/ui (#…

a3cbc54

…1583) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump @fortawesome/fontawesome-svg-core from 6.6.0 to 6.7.2 in …

e81a965

…/code/frontend (#1584) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump typescript from 5.6.2 to 5.7.2 in /code/frontend (#1517)

610541b

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump tornado from 6.4.1 to 6.4.2 (#1511)

cbba914

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump cross-spawn from 7.0.3 to 7.0.6 in /tests/integration/ui (#…

060ca4e

…1502) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump cross-spawn from 7.0.3 to 7.0.6 in /extensions/teams (#1500)

2cbc462

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump aiohttp from 3.10.2 to 3.10.11 (#1499)

3184090

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump postcss from 8.4.48 to 8.4.49 in /code/frontend (#1496)

f1f2801

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump uuid from 11.0.2 to 11.0.3 in /code/frontend (#1472)

033df75

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump @azure/identity and botbuilder in /extensions/teams (#1282)

9792387

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump @fluentui/react from 8.121.8 to 8.122.2 in /code/frontend (…

2cad336

…#1585) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump actions/checkout from 3 to 4 (#1586)

ae60417

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump azure-mgmt-cognitiveservices from 13.5.0 to 13.6.0 (#1595)

82df7ec

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump azure-monitor-opentelemetry from 1.6.2 to 1.6.4 (#1596)

3b8e540

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot Bot and others added 19 commits May 20, 2025 11:41

build: bump the frontend-deps group in /code/frontend with 16 updates (…

6c601c9

…#1800) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump cypress from 14.3.0 to 14.3.3 in /tests/integration/ui in…

5850ae7

… the frontend-deps group (#1799) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump MishaKav/pytest-coverage-comment from 1.1.53 to 1.1.54 (#…

846cbf3

…1775) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump promptflow from 1.15.0 to 1.16.1 (#1402)

515bf78

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump the all-backend-deps group with 6 updates (#1815)

2f132a1

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump cypress from 14.3.3 to 14.4.0 in /tests/integration/ui in…

6fce574

… the frontend-deps group (#1814) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump the frontend-deps group in /code/frontend with 12 updates (…

ae8fc5c

…#1813) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump cypress from 14.4.0 to 14.5.0 in /tests/integration/ui in…

544a902

… the frontend-deps group (#1850) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump the all-backend-deps group with 16 updates (#1849)

514a504

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump the frontend-deps group in /code/frontend with 17 updates (…

38cc204

…#1848) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Merge remote-tracking branch 'origin/dev' into dependabotchanges

e8755e0

package

0fb07ed

build: bump cypress from 14.5.1 to 14.5.2 in /tests/integration/ui in…

36b96c5

… the frontend-deps group (#1864) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump the frontend-deps group in /code/frontend with 8 updates (#…

c8016a4

…1863) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump actions/setup-python from 4 to 5 in the all-actions group (…

0314bfa

…#1862) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump the frontend-deps group in /code/frontend with 16 updates (…

cf494b1

…#1875) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: bump the frontend-deps group in /tests/integration/ui with 2 u…

87a8d21

…pdates (#1874) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore: align frontend and backend dependencies for stability and comp…

88a680c

…atibility (#1878) Co-authored-by: Harmanpreet Kaur <v-harmanpkau@microsoft.com>

Merge branch 'dev' into dependabotchanges

37b055e

Harmanpreet-Microsoft requested review from Avijit-Microsoft, Fr4nc3, Prajwal-Microsoft, Roopan-Microsoft, Vinay-Microsoft and aniaroramsft as code owners August 12, 2025 06:15

chore: downgrade jest-environment-jsdom from 30.0.5 to 29.7.0 for com…

2d08bc2

…patibility (#1882) Co-authored-by: Harmanpreet Kaur <v-harmanpkau@microsoft.com>

Roopan-Microsoft approved these changes Aug 14, 2025

View reviewed changes

Roopan-Microsoft merged commit 59efafe into dev Aug 14, 2025
5 checks passed

github-actions Bot added the released label Oct 6, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore: update Python and JavaScript dependencies for compatibility and maintenance#1880

chore: update Python and JavaScript dependencies for compatibility and maintenance#1880
Roopan-Microsoft merged 138 commits intodevfrom
dependabotchanges

Harmanpreet-Microsoft commented Aug 12, 2025

Uh oh!

Uh oh!

github-actions Bot commented Oct 6, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Conversation

Harmanpreet-Microsoft commented Aug 12, 2025

Purpose

Does this introduce a breaking change?

How to Test

What to Check

Other Information

Uh oh!

Uh oh!

github-actions Bot commented Oct 6, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants