fix: dependabot package upgrade

.github/workflows/azd-template-validation.yml

@@ -15,12 +15,12 @@ jobs:
     name: azd template validation
     environment: production
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Set timestamp
         run: echo "HHMM=$(date -u +'%H%M')" >> $GITHUB_ENV
 
-      - uses: microsoft/template-validation-action@v0.4.3
+      - uses: microsoft/template-validation-action@v0.4.4
         with:
           validateAzd: ${{ vars.TEMPLATE_VALIDATE_AZD }}
           validateTests: ${{ vars.TEMPLATE_VALIDATE_TESTS }}

.github/workflows/azure-dev.yml

@@ -23,7 +23,7 @@ jobs:
       AZURE_DEV_COLLECT_TELEMETRY: ${{ vars.AZURE_DEV_COLLECT_TELEMETRY }}
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set timestamp and env name
         run: |
@@ -34,7 +34,7 @@ jobs:
         uses: Azure/setup-azd@v2
 
       - name: Login to Azure
-        uses: azure/login@v2
+        uses: azure/login@v3
         with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}

.github/workflows/broken-links-checker.yml

@@ -24,7 +24,7 @@ jobs:
       - name: Get changed markdown files (PR only)
         id: changed-markdown-files
         if: github.event_name == 'pull_request'
-        uses: tj-actions/changed-files@22103cc46bda19c2b464ffe86db46df6922fd323 # v47.0.5
+        uses: tj-actions/changed-files@9426d40962ed5378910ee2e21d5f8c6fcbf2dd96 # v47.0.6
         with:
           files: |
             **/*.md

.github/workflows/deploy-waf.yml

@@ -30,7 +30,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Login to Azure
-        uses: azure/login@v2
+        uses: azure/login@v3
         with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}

.github/workflows/deploy.yml

@@ -37,7 +37,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Login to Azure
-        uses: azure/login@v2
+        uses: azure/login@v3
         with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}
@@ -219,7 +219,7 @@ jobs:
       RESOURCE_GROUP_NAME: ${{ needs.deploy.outputs.RESOURCE_GROUP_NAME }}
     steps:
       - name: Login to Azure
-        uses: azure/login@v2
+        uses: azure/login@v3
         with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}

.github/workflows/docker-build-and-push.yml

@@ -63,7 +63,7 @@ jobs:
 
       - name: Login to Azure
         if: ${{ github.ref_name == 'main' || github.ref_name == 'dev-v4'|| github.ref_name == 'demo-v4' || github.ref_name == 'hotfix' }}
-        uses: azure/login@v2
+        uses: azure/login@v3
         with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}

.github/workflows/job-cleanup-deployment.yml

@@ -56,7 +56,7 @@ jobs:
     steps:
 
       - name: Login to Azure
-        uses: azure/login@v2
+        uses: azure/login@v3
         with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}

.github/workflows/job-deploy-linux.yml

@@ -204,7 +204,7 @@ jobs:
         uses: Azure/setup-azd@v2
 
       - name: Login to Azure
-        uses: azure/login@v2
+        uses: azure/login@v3
         with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}

.github/workflows/job-deploy-windows.yml

@@ -203,7 +203,7 @@ jobs:
         uses: Azure/setup-azd@v2
 
       - name: Login to Azure
-        uses: azure/login@v2
+        uses: azure/login@v3
         with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}

.github/workflows/job-deploy.yml

@@ -287,7 +287,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Login to Azure
-        uses: azure/login@v2
+        uses: azure/login@v3
         with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}

.github/workflows/job-docker-build.yml

@@ -48,7 +48,7 @@ jobs:
         uses: docker/setup-buildx-action@v4
 
       - name: Login to Azure
-        uses: azure/login@v2
+        uses: azure/login@v3
         with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}

.github/workflows/test-automation-v2.yml

@@ -51,7 +51,7 @@ jobs:
           python-version: '3.13'
 
       - name: Login to Azure
-        uses: azure/login@v2
+        uses: azure/login@v3
         with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}

.github/workflows/validate-bicep-params.yml

@@ -24,10 +24,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: '3.11'
 
@@ -63,7 +63,7 @@ jobs:
 
       - name: Upload validation results
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: bicep-validation-results
           path: |

src/App/pyproject.toml

@@ -9,6 +9,6 @@ dependencies = [
     "uvicorn[standard]>=0.38.0",
     "jinja2",
     "azure-identity",
-    "python-dotenv",
-    "python-multipart",
+    "python-dotenv==1.2.2",
+    "python-multipart==0.0.27",
 ]

src/backend/pyproject.toml

@@ -5,37 +5,37 @@ description = "Add your description here"
 readme = "README.md"
 requires-python = ">=3.11"
 dependencies = [
-    "azure-ai-evaluation==1.11.0",
+    "azure-ai-evaluation==1.16.6",
     "azure-ai-inference==1.0.0b9",
-    "azure-ai-projects==2.0.0",
-    "azure-cosmos==4.9.0",
-    "azure-identity==1.24.0",
+    "azure-ai-projects==2.1.0",
+    "azure-cosmos==4.15.0",
+    "azure-identity==1.25.3",
     "azure-monitor-events-extension==0.1.0",
-    "azure-monitor-opentelemetry==1.8.5",
-    "azure-search-documents==11.5.3",
-    "fastapi==0.135.2",
-    "openai==2.16.0",
-    "opentelemetry-api==1.39.0",
-    "opentelemetry-exporter-otlp-proto-grpc==1.39.0",
-    "opentelemetry-exporter-otlp-proto-http==1.39.0",
-    "opentelemetry-instrumentation-fastapi==0.60b0",
-    "opentelemetry-instrumentation-openai==0.46.2",
-    "opentelemetry-sdk==1.39.0",
-    "python-dotenv==1.1.1",
-    "python-multipart==0.0.26",
-    "uvicorn==0.35.0",
-    "pylint-pydantic==0.3.5",
+    "azure-monitor-opentelemetry==1.8.7",
+    "azure-search-documents==11.6.0",
+    "fastapi==0.136.1",
+    "openai==2.33.0",
+    "opentelemetry-api==1.40.0",
+    "opentelemetry-exporter-otlp-proto-grpc==1.40.0",
+    "opentelemetry-exporter-otlp-proto-http==1.40.0",
+    "opentelemetry-instrumentation-fastapi==0.61b0",
+    "opentelemetry-instrumentation-openai==0.60.0",
+    "opentelemetry-sdk==1.40.0",
+    "python-dotenv==1.2.2",
+    "python-multipart==0.0.27",
+    "uvicorn==0.46.0",
+    "pylint-pydantic==0.4.1",
     "pexpect==4.9.0",
     "mcp==1.27.0",
-    "werkzeug==3.1.6",
-    "azure-core==1.38.0",
+    "werkzeug==3.1.8",
+    "azure-core==1.40.0",
     "agent-framework-azure-ai==1.0.0rc4",
     "agent-framework-core==1.0.0rc4",
     "agent-framework-orchestrations==1.0.0b260311",
     "urllib3==2.6.3",
-    "protobuf==5.29.6",
-    "cryptography==46.0.7",
-    "aiohttp==3.13.4",
+    "protobuf==6.33.6",
+    "cryptography==47.0.0",
+    "aiohttp==3.13.5",
     "pyasn1==0.6.3",
     "nltk==3.9.4",
 ]
@@ -44,5 +44,5 @@ dependencies = [
 dev = [
     "pytest==9.0.3",
     "pytest-asyncio==1.3.0",
-    "pytest-cov==5.0.0",
+    "pytest-cov==7.1.0",
 ]

src/backend/requirements.txt

@@ -1,42 +1,42 @@
-fastapi==0.116.1
-uvicorn==0.35.0
-azure-cosmos==4.9.0
-azure-monitor-opentelemetry==1.8.5
+fastapi==0.136.1
+uvicorn==0.46.0
+azure-cosmos==4.15.0
+azure-monitor-opentelemetry==1.8.7
 azure-monitor-events-extension==0.1.0
-azure-identity==1.24.0
-python-dotenv==1.1.1
-python-multipart==0.0.26
-opentelemetry-api==1.39.0
-opentelemetry-sdk==1.39.0
-opentelemetry-exporter-otlp-proto-grpc==1.39.0
-opentelemetry-exporter-otlp-proto-http==1.39.0
-opentelemetry-instrumentation-fastapi==0.60b0
-opentelemetry-instrumentation-openai==0.46.2
+azure-identity==1.25.3
+python-dotenv==1.2.2
+python-multipart==0.0.27
+opentelemetry-api==1.40.0
+opentelemetry-sdk==1.40.0
+opentelemetry-exporter-otlp-proto-grpc==1.40.0
+opentelemetry-exporter-otlp-proto-http==1.40.0
+opentelemetry-instrumentation-fastapi==0.61b0
+opentelemetry-instrumentation-openai==0.60.0
 
-azure-ai-projects==2.0.0
-openai==2.16.0
+azure-ai-projects==2.1.0
+openai==2.33.0
 azure-ai-inference==1.0.0b9
-azure-search-documents==11.5.3
-azure-ai-evaluation==1.11.0
-azure-core==1.38.0
+azure-search-documents==11.6.0
+azure-ai-evaluation==1.16.6
+azure-core==1.40.0
 
 agent-framework-azure-ai==1.0.0rc4
 agent-framework-core==1.0.0rc4
 agent-framework-orchestrations==1.0.0b260311
 
 mcp==1.27.0
-werkzeug==3.1.6
-pylint-pydantic==0.3.5
+werkzeug==3.1.8
+pylint-pydantic==0.4.1
 pexpect==4.9.0
 urllib3==2.6.3
-protobuf==5.29.6
-cryptography==46.0.7
-aiohttp==3.13.4
+protobuf==6.33.6
+cryptography==47.0.0
+aiohttp==3.13.5
 pyasn1==0.6.3
 nltk==3.9.4
 
 # Testing tools
 pytest==9.0.3
 pytest-asyncio==1.3.0
-pytest-cov==5.0.0
+pytest-cov==7.1.0