chore: Dev merge to main

scripts/validate_bicep_params.py

@@ -110,7 +110,7 @@ def parse_parameters_env_vars(json_path: Path) -> dict[str, list[str]]:
         data = json.loads(sanitized)
         params = data.get("parameters", {})
     except json.JSONDecodeError:
-        pass
+        pass  # File is not valid JSON after azd variable substitution; fall through to regex scan
 
     # Walk each top-level parameter and scan its entire serialized value
     # for ${VAR} references from the original text.

src/backend-api/pyproject.toml

@@ -16,8 +16,8 @@ dependencies = [
     "fastapi[standard]==0.116.1",
     "httpx==0.28.1",
     "pydantic-settings==2.10.1",
-    "python-dotenv",
-    "python-multipart==0.0.22",
+    "python-dotenv==1.2.2",
+    "python-multipart==0.0.26",
     "protobuf==7.34.0",
     "sas-cosmosdb==0.1.4",
     "semantic-kernel[azure]==1.40.0",
@@ -34,6 +34,9 @@ override-dependencies = [
     "aiohttp==3.13.4",
     "azure-core==1.38.0",
     "urllib3==2.6.3",
+    "requests==2.33.0",
+    "werkzeug==3.1.4",
+    "pygments==2.20.0",
     "black==26.3.1",
     "cryptography==46.0.7",
     "pyjwt==2.12.0",

src/backend-api/src/app/application.py

@@ -133,7 +133,7 @@ def _register_dependencies(self):
             )
             .add_singleton(ILoggerService, ConsoleLoggerService)
             .add_transient(IHttpService, HttpClientService)
-            .add_singleton(IDataService, lambda: InMemoryDataService())
+            .add_singleton(IDataService, InMemoryDataService)
         )
 
     def run(self, host: str = "0.0.0.0", port: int = 8000, reload: bool = True):

src/backend-api/src/app/libs/base/SKLogicBase.py

@@ -81,7 +81,7 @@ def _init_agent(self):
         """
         raise NotImplementedError("This method should be overridden in subclasses")
 
-    async def execute(func_params: dict[str, any]):
+    async def execute(self, func_params: dict[str, any]):
         raise NotImplementedError("Execute method not implemented")
 
     @overload
@@ -92,7 +92,7 @@ async def execute_thread(
         thread: AgentThread | AssistantAgentThread | AzureAIAgentThread = None,
     ) -> tuple[str, AgentThread | AssistantAgentThread | AzureAIAgentThread]:
         """When response_format is None, returns string response."""
-        ...
+        pass
 
     @overload
     async def execute_thread(
@@ -102,7 +102,7 @@ async def execute_thread(
         thread: AgentThread | AssistantAgentThread | AzureAIAgentThread = None,
     ) -> tuple[T, AgentThread | AssistantAgentThread | AzureAIAgentThread]:
         """When response_format is provided, returns typed Pydantic BaseModel response."""
-        ...
+        pass
 
     @abstractmethod
     async def execute_thread(

src/backend-api/src/app/libs/base/fastapi_protocol.py

@@ -16,7 +16,8 @@ class FastAPIWithContext(Protocol):
     app_context: AppContext
 
     # Include essential FastAPI methods for type checking
-    def include_router(self, *args, **kwargs) -> None: ...
+    def include_router(self, *args, **kwargs) -> None:
+        pass
 
 
 def add_app_context_to_fastapi(

src/backend-api/src/tests/application/test_dependency_injection.py

@@ -126,7 +126,7 @@ def test_factory_registration():
     app_context = AppContext()
 
     # Register with factory function
-    app_context.add_singleton(IDataService, lambda: InMemoryDataService())
+    app_context.add_singleton(IDataService, InMemoryDataService)
 
     data_service = app_context.get_service(IDataService)
     assert isinstance(data_service, InMemoryDataService)

src/frontend/frontend_server.py

@@ -4,7 +4,7 @@
 from dotenv import load_dotenv
 from fastapi import FastAPI, Request
 from fastapi.middleware.cors import CORSMiddleware
-from fastapi.responses import FileResponse, HTMLResponse, JSONResponse
+from fastapi.responses import FileResponse, JSONResponse
 from fastapi.staticfiles import StaticFiles
 
 # Load environment variables from .env file
@@ -42,7 +42,6 @@ async def serve_index():
 async def get_config(request: Request):
     # Only serve config to same-origin requests by checking the Referer/Origin
     origin = request.headers.get("origin") or ""
-    referer = request.headers.get("referer") or ""
     host = request.headers.get("host") or ""
     if origin and not origin.endswith(host):
         return JSONResponse(status_code=403, content={"detail": "Forbidden"})