From b71806537def08c018b88c4508f24abab2960b9a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 12 Aug 2025 14:08:13 +0000 Subject: [PATCH 01/11] chore(deps): bump actions/checkout from 4 to 5 Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4...v5) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/build.yml | 2 +- .github/workflows/codeql.yml | 2 +- .github/workflows/publish.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 0f441e009c0..8094c4b4f62 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -17,7 +17,7 @@ jobs: matrix: python-version: ["3.9", "3.10", "3.11", "3.12", "3.13"] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - name: Set up Python ${{ matrix.python-version }} uses: actions/setup-python@v5 with: diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 6462215acbf..110112649e1 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -45,7 +45,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 93de9b16306..6bbf8076d55 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -17,7 +17,7 @@ jobs: needs: [build] steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: Set up Python uses: actions/setup-python@v5 with: From a949d973a44656d21e5ca2364d67389c52a4890a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 12 Aug 2025 23:35:10 +0000 Subject: [PATCH 02/11] chore(deps-dev): bump charset-normalizer from 3.4.2 to 3.4.3 Bumps [charset-normalizer](https://github.com/jawah/charset_normalizer) from 3.4.2 to 3.4.3. - [Release notes](https://github.com/jawah/charset_normalizer/releases) - [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md) - [Commits](https://github.com/jawah/charset_normalizer/compare/3.4.2...3.4.3) --- updated-dependencies: - dependency-name: charset-normalizer dependency-version: 3.4.3 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- requirements-dev.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements-dev.txt b/requirements-dev.txt index ebb2cffc75e..c2d7da102d9 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -10,7 +10,7 @@ build==1.3.0 bumpver==2025.1131 certifi==2025.8.3 cffi==1.17.1 -charset-normalizer==3.4.2 +charset-normalizer==3.4.3 click==8.1.8 colorama==0.4.6 cryptography==45.0.5 From 8cfa20b60c8b5823cfc8ede69348b35fa5f601cf Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 21 Aug 2025 16:47:03 +0000 Subject: [PATCH 03/11] chore(deps-dev): bump multidict from 6.6.3 to 6.6.4 Bumps [multidict](https://github.com/aio-libs/multidict) from 6.6.3 to 6.6.4. - [Release notes](https://github.com/aio-libs/multidict/releases) - [Changelog](https://github.com/aio-libs/multidict/blob/master/CHANGES.rst) - [Commits](https://github.com/aio-libs/multidict/compare/v6.6.3...v6.6.4) --- updated-dependencies: - dependency-name: multidict dependency-version: 6.6.4 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- requirements-dev.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements-dev.txt b/requirements-dev.txt index ebb2cffc75e..b56fdfeadc1 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -43,7 +43,7 @@ microsoft-kiota-serialization-text==1.9.5 msal==1.33.0 msal-extensions==1.3.1 msgraph-core==1.3.5 -multidict==6.6.3 +multidict==6.6.4 mypy==1.17.1 mypy-extensions==1.1.0 opentelemetry-api==1.36.0 From 6f3bc44a7f66211953cad0615653d0453ea4146f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 21 Aug 2025 16:47:36 +0000 Subject: [PATCH 04/11] chore(deps-dev): bump wrapt from 1.17.2 to 1.17.3 Bumps [wrapt](https://github.com/GrahamDumpleton/wrapt) from 1.17.2 to 1.17.3. - [Release notes](https://github.com/GrahamDumpleton/wrapt/releases) - [Changelog](https://github.com/GrahamDumpleton/wrapt/blob/1.17.3/docs/changes.rst) - [Commits](https://github.com/GrahamDumpleton/wrapt/compare/1.17.2...1.17.3) --- updated-dependencies: - dependency-name: wrapt dependency-version: 1.17.3 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- requirements-dev.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements-dev.txt b/requirements-dev.txt index ebb2cffc75e..9643fd0edd9 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -71,7 +71,7 @@ typing_extensions==4.14.1 tzdata==2025.2 uritemplate==4.2.0 urllib3==2.5.0 -wrapt==1.17.2 +wrapt==1.17.3 yapf==0.43.0 yarl==1.20.1 zipp==3.23.0 From e0be78d4626b78ddf7bda1fa82708f90a4e3df35 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 17 Sep 2025 01:00:38 +0000 Subject: [PATCH 05/11] chore(deps-dev): bump lazy-object-proxy from 1.11.0 to 1.12.0 Bumps [lazy-object-proxy](https://github.com/ionelmc/python-lazy-object-proxy) from 1.11.0 to 1.12.0. - [Changelog](https://github.com/ionelmc/python-lazy-object-proxy/blob/master/CHANGELOG.rst) - [Commits](https://github.com/ionelmc/python-lazy-object-proxy/compare/v1.11.0...v1.12.0) --- updated-dependencies: - dependency-name: lazy-object-proxy dependency-version: 1.12.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- requirements-dev.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements-dev.txt b/requirements-dev.txt index 35e9ca16c2f..3c0fb34e673 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -29,7 +29,7 @@ hyperframe==6.1.0 idna==3.10 importlib-metadata==6.8.0 isort==6.0.1 -lazy-object-proxy==1.11.0 +lazy-object-proxy==1.12.0 lexid==2021.1006 looseversion==1.3.0 mccabe==0.7.0 From 154944133524b8a1fd1340ff32a7920d569862cb Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 17 Sep 2025 01:00:41 +0000 Subject: [PATCH 06/11] chore(deps-dev): bump platformdirs from 4.3.8 to 4.4.0 Bumps [platformdirs](https://github.com/tox-dev/platformdirs) from 4.3.8 to 4.4.0. - [Release notes](https://github.com/tox-dev/platformdirs/releases) - [Changelog](https://github.com/tox-dev/platformdirs/blob/main/CHANGES.rst) - [Commits](https://github.com/tox-dev/platformdirs/compare/4.3.8...4.4.0) --- updated-dependencies: - dependency-name: platformdirs dependency-version: 4.4.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- requirements-dev.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements-dev.txt b/requirements-dev.txt index 35e9ca16c2f..260d0c082fd 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -51,7 +51,7 @@ opentelemetry-sdk==1.36.0 opentelemetry-semantic-conventions==0.57b0 packaging==25.0 pathlib2==2.3.7.post1 -platformdirs==4.3.8 +platformdirs==4.4.0 portalocker==2.10.1 pycparser==2.22 PyJWT==2.9.0 From 8a230053c8c201c5acf21d7b7ed26cc30ede7c38 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 17 Sep 2025 01:00:42 +0000 Subject: [PATCH 07/11] chore(deps-dev): bump cffi from 1.17.1 to 2.0.0 Bumps [cffi](https://github.com/python-cffi/cffi) from 1.17.1 to 2.0.0. - [Release notes](https://github.com/python-cffi/cffi/releases) - [Commits](https://github.com/python-cffi/cffi/compare/v1.17.1...v2.0.0) --- updated-dependencies: - dependency-name: cffi dependency-version: 2.0.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- requirements-dev.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements-dev.txt b/requirements-dev.txt index 35e9ca16c2f..e99c4907fae 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -9,7 +9,7 @@ azure-identity==1.24.0 build==1.3.0 bumpver==2025.1131 certifi==2025.8.3 -cffi==1.17.1 +cffi==2.0.0 charset-normalizer==3.4.3 click==8.1.8 colorama==0.4.6 From 28561026c7a045b04a8d77e9d4fc19a0abb2cc5e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 17 Sep 2025 01:01:03 +0000 Subject: [PATCH 08/11] chore(deps-dev): bump the azure-identity group across 1 directory with 2 updates Bumps the azure-identity group with 2 updates in the / directory: [azure-identity](https://github.com/Azure/azure-sdk-for-python) and [azure-core](https://github.com/Azure/azure-sdk-for-python). Updates `azure-identity` from 1.23.1 to 1.25.0 - [Release notes](https://github.com/Azure/azure-sdk-for-python/releases) - [Changelog](https://github.com/Azure/azure-sdk-for-python/blob/main/doc/esrp_release.md) - [Commits](https://github.com/Azure/azure-sdk-for-python/compare/azure-identity_1.23.1...azure-identity_1.25.0) Updates `azure-core` from 1.35.0 to 1.35.1 - [Release notes](https://github.com/Azure/azure-sdk-for-python/releases) - [Changelog](https://github.com/Azure/azure-sdk-for-python/blob/main/doc/esrp_release.md) - [Commits](https://github.com/Azure/azure-sdk-for-python/compare/azure-core_1.35.0...azure-core_1.35.1) --- updated-dependencies: - dependency-name: azure-identity dependency-version: 1.25.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: azure-identity - dependency-name: azure-core dependency-version: 1.35.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: azure-identity ... Signed-off-by: dependabot[bot] --- requirements-dev.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements-dev.txt b/requirements-dev.txt index 35e9ca16c2f..fb9726c54c5 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -4,8 +4,8 @@ anyio==4.10.0 astroid==3.3.11 async-timeout==5.0.1 attrs==25.3.0 -azure-core==1.35.0 -azure-identity==1.24.0 +azure-core==1.35.1 +azure-identity==1.25.0 build==1.3.0 bumpver==2025.1131 certifi==2025.8.3 From 9ba8201602d5906ba3e4b677a78163f42e5cd906 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 17 Sep 2025 01:01:12 +0000 Subject: [PATCH 09/11] chore(deps-dev): bump the open-telemetry group with 3 updates Bumps the open-telemetry group with 3 updates: [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python), [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python) and [opentelemetry-semantic-conventions](https://github.com/open-telemetry/opentelemetry-python). Updates `opentelemetry-api` from 1.36.0 to 1.37.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python/compare/v1.36.0...v1.37.0) Updates `opentelemetry-sdk` from 1.36.0 to 1.37.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python/compare/v1.36.0...v1.37.0) Updates `opentelemetry-semantic-conventions` from 0.57b0 to 0.58b0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python/commits) --- updated-dependencies: - dependency-name: opentelemetry-api dependency-version: 1.37.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: open-telemetry - dependency-name: opentelemetry-sdk dependency-version: 1.37.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: open-telemetry - dependency-name: opentelemetry-semantic-conventions dependency-version: 0.58b0 dependency-type: direct:development dependency-group: open-telemetry ... Signed-off-by: dependabot[bot] --- requirements-dev.txt | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/requirements-dev.txt b/requirements-dev.txt index 35e9ca16c2f..f2c52630e72 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -46,9 +46,9 @@ msgraph-core==1.3.5 multidict==6.6.4 mypy==1.17.1 mypy-extensions==1.1.0 -opentelemetry-api==1.36.0 -opentelemetry-sdk==1.36.0 -opentelemetry-semantic-conventions==0.57b0 +opentelemetry-api==1.37.0 +opentelemetry-sdk==1.37.0 +opentelemetry-semantic-conventions==0.58b0 packaging==25.0 pathlib2==2.3.7.post1 platformdirs==4.3.8 From 07e503f32971031747ab925e3f218095d151fc36 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 17 Sep 2025 01:01:35 +0000 Subject: [PATCH 10/11] chore(deps-dev): bump the kiota group with 7 updates Bumps the kiota group with 7 updates: | Package | From | To | | --- | --- | --- | | [microsoft-kiota-serialization-json](https://github.com/microsoft/kiota-python) | `1.9.5` | `1.9.6` | | [microsoft-kiota-serialization-text](https://github.com/microsoft/kiota-python) | `1.9.5` | `1.9.6` | | [microsoft-kiota-serialization-form](https://github.com/microsoft/kiota-python) | `1.9.5` | `1.9.6` | | [microsoft-kiota-serialization-multipart](https://github.com/microsoft/kiota-python) | `1.9.5` | `1.9.6` | | [microsoft-kiota-abstractions](https://github.com/microsoft/kiota-python) | `1.9.5` | `1.9.6` | | [microsoft-kiota-authentication-azure](https://github.com/microsoft/kiota-python) | `1.9.5` | `1.9.6` | | [microsoft-kiota-http](https://github.com/microsoft/kiota-python) | `1.9.5` | `1.9.6` | Updates `microsoft-kiota-serialization-json` from 1.9.5 to 1.9.6 - [Release notes](https://github.com/microsoft/kiota-python/releases) - [Changelog](https://github.com/microsoft/kiota-python/blob/main/release-please-config.json) - [Commits](https://github.com/microsoft/kiota-python/compare/microsoft-kiota-serialization-json-v1.9.5...microsoft-kiota-serialization-json-v1.9.6) Updates `microsoft-kiota-serialization-text` from 1.9.5 to 1.9.6 - [Release notes](https://github.com/microsoft/kiota-python/releases) - [Changelog](https://github.com/microsoft/kiota-python/blob/main/release-please-config.json) - [Commits](https://github.com/microsoft/kiota-python/compare/microsoft-kiota-serialization-text-v1.9.5...microsoft-kiota-serialization-text-v1.9.6) Updates `microsoft-kiota-serialization-form` from 1.9.5 to 1.9.6 - [Release notes](https://github.com/microsoft/kiota-python/releases) - [Changelog](https://github.com/microsoft/kiota-python/blob/main/release-please-config.json) - [Commits](https://github.com/microsoft/kiota-python/compare/microsoft-kiota-serialization-form-v1.9.5...microsoft-kiota-serialization-form-v1.9.6) Updates `microsoft-kiota-serialization-multipart` from 1.9.5 to 1.9.6 - [Release notes](https://github.com/microsoft/kiota-python/releases) - [Changelog](https://github.com/microsoft/kiota-python/blob/main/release-please-config.json) - [Commits](https://github.com/microsoft/kiota-python/compare/microsoft-kiota-serialization-multipart-v1.9.5...microsoft-kiota-serialization-multipart-v1.9.6) Updates `microsoft-kiota-abstractions` from 1.9.5 to 1.9.6 - [Release notes](https://github.com/microsoft/kiota-python/releases) - [Changelog](https://github.com/microsoft/kiota-python/blob/main/release-please-config.json) - [Commits](https://github.com/microsoft/kiota-python/compare/microsoft-kiota-abstractions-v1.9.5...microsoft-kiota-abstractions-v1.9.6) Updates `microsoft-kiota-authentication-azure` from 1.9.5 to 1.9.6 - [Release notes](https://github.com/microsoft/kiota-python/releases) - [Changelog](https://github.com/microsoft/kiota-python/blob/main/release-please-config.json) - [Commits](https://github.com/microsoft/kiota-python/compare/microsoft-kiota-authentication-azure-v1.9.5...microsoft-kiota-authentication-azure-v1.9.6) Updates `microsoft-kiota-http` from 1.9.5 to 1.9.6 - [Release notes](https://github.com/microsoft/kiota-python/releases) - [Changelog](https://github.com/microsoft/kiota-python/blob/main/release-please-config.json) - [Commits](https://github.com/microsoft/kiota-python/compare/microsoft-kiota-http-v1.9.5...microsoft-kiota-http-v1.9.6) --- updated-dependencies: - dependency-name: microsoft-kiota-serialization-json dependency-version: 1.9.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: kiota - dependency-name: microsoft-kiota-serialization-text dependency-version: 1.9.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: kiota - dependency-name: microsoft-kiota-serialization-form dependency-version: 1.9.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: kiota - dependency-name: microsoft-kiota-serialization-multipart dependency-version: 1.9.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: kiota - dependency-name: microsoft-kiota-abstractions dependency-version: 1.9.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: kiota - dependency-name: microsoft-kiota-authentication-azure dependency-version: 1.9.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: kiota - dependency-name: microsoft-kiota-http dependency-version: 1.9.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: kiota ... Signed-off-by: dependabot[bot] --- requirements-dev.txt | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/requirements-dev.txt b/requirements-dev.txt index 35e9ca16c2f..95d51f95df6 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -33,13 +33,13 @@ lazy-object-proxy==1.11.0 lexid==2021.1006 looseversion==1.3.0 mccabe==0.7.0 -microsoft-kiota-abstractions==1.9.6 -microsoft-kiota-authentication-azure==1.9.6 -microsoft-kiota-http==1.9.6 -microsoft-kiota-serialization-form==1.9.6 -microsoft-kiota-serialization-json==1.9.6 -microsoft-kiota-serialization-multipart==1.9.6 -microsoft-kiota-serialization-text==1.9.6 +microsoft-kiota-abstractions==1.9.7 +microsoft-kiota-authentication-azure==1.9.7 +microsoft-kiota-http==1.9.7 +microsoft-kiota-serialization-form==1.9.7 +microsoft-kiota-serialization-json==1.9.7 +microsoft-kiota-serialization-multipart==1.9.7 +microsoft-kiota-serialization-text==1.9.7 msal==1.33.0 msal-extensions==1.3.1 msgraph-core==1.3.5 From b73473cd1a3913ab468e82f2e5cdb9480625e9b0 Mon Sep 17 00:00:00 2001 From: "Michael Mainer (from Dev Box)" <8527305+MIchaelMainer@users.noreply.github.com> Date: Wed, 24 Sep 2025 08:51:32 -0700 Subject: [PATCH 11/11] ci: use merge groups to save time --- .github/workflows/build.yml | 1 + .github/workflows/codeql.yml | 1 + 2 files changed, 2 insertions(+) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index e3b7f807ef5..1c7581c5731 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -7,6 +7,7 @@ on: pull_request: branches: [ main, dev ] workflow_call: + merge_group: jobs: validate: diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 110112649e1..33cb2211c2a 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -18,6 +18,7 @@ on: branches: [ "main" ] schedule: - cron: '1 * * * 1' + merge_group: jobs: analyze: