Skip to content

fix: dependabot package upgrades (June 2026) #451

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
Ayaz-Microsoft wants to merge 7 commits into from
Closed

fix: dependabot package upgrades (June 2026) #451

Show file tree
Hide file tree
Changes from 5 commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
9f74e7f
build: bump the all-frontend-deps group in /src/frontend with 25 updates
dependabot[bot] Jun 1, 2026
aa9832d
build: bump the all-backend-deps group in /src/backend with 8 updates
dependabot[bot] Jun 1, 2026
4a7d4e8
build: bump MishaKav/pytest-coverage-comment in the all-actions group
dependabot[bot] Jun 1, 2026
5959026
chore: merge dev into dependabotchanges - resolve dependency conflicts
Ayaz-Microsoft Jun 17, 2026
969182f
fix: upgrade vite to 8.0.16 to resolve security vulnerabilities
Ayaz-Microsoft Jun 17, 2026
7b067bf
fix: revert azure-ai-projects and OpenTelemetry to stable versions
Ayaz-Microsoft Jun 17, 2026
d8ec81d
fix: remove unnecessary @types/react-router-dom package
Ayaz-Microsoft Jun 17, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/test.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -123,7 +123,7 @@ jobs:
github.event_name == 'pull_request' &&
github.event.pull_request.head.repo.fork == false &&
env.skip_backend_tests == 'false'
uses: MishaKav/pytest-coverage-comment@26f986d2599c288bb62f623d29c2da98609e9cd4 # v1.6.0
uses: MishaKav/pytest-coverage-comment@dd5b80bde6d16941f336518e92929e89069d8451 # v1.7.2
with:
pytest-xml-coverage-path: src/coverage.xml
junitxml-path: src/pytest.xml
Expand Down
16 changes: 8 additions & 8 deletions src/backend/requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@ structlog
typing-extensions
python-jose[cryptography]
passlib[bcrypt]
semantic-kernel[azure]==1.41.3
semantic-kernel[azure]==1.42.0
sqlparse
sqlglot
unittest2
Comment on lines +38 to 41
Expand All @@ -45,10 +45,10 @@ aiortc
opentelemetry-exporter-otlp-proto-grpc
opentelemetry-exporter-otlp-proto-http
azure-monitor-events-extension
opentelemetry-sdk==1.40.0
opentelemetry-api==1.40.0
opentelemetry-semantic-conventions==0.61b0
opentelemetry-instrumentation==0.61b0
opentelemetry-instrumentation-fastapi==0.61b0
azure-monitor-opentelemetry==1.8.7
azure-ai-projects==1.0.0b12
opentelemetry-sdk==1.42.1
opentelemetry-api==1.42.1
opentelemetry-semantic-conventions==0.63b1
opentelemetry-instrumentation==0.63b1
opentelemetry-instrumentation-fastapi==0.63b1
azure-monitor-opentelemetry==1.8.8
azure-ai-projects==2.2.0
Loading
Loading