From 70da0452ffb785c9949e60ab1fbdf7d8b2abfd43 Mon Sep 17 00:00:00 2001 From: ramsessanchez <63934382+ramsessanchez@users.noreply.github.com> Date: Wed, 8 Apr 2026 16:25:45 -0700 Subject: [PATCH] chore: consolidate all open dependabot dependency updates MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Consolidates 18 open Dependabot PRs into a single update: Python dependency updates (requirements-dev.txt): - aiohttp: 3.12.15 → 3.13.4 (#1014) - anyio: 4.10.0 → 4.12.0 (#979) - attrs: 25.3.0 → 25.4.0 (#982) - azure-core: 1.36.0 → 1.38.0 (#1000) - cryptography: 46.0.5 → 46.0.7 (#1016, supersedes #968) - Deprecated: 1.2.18 → 1.3.1 (#976) - frozenlist: 1.7.0 → 1.8.0 (#981) - isort: 6.0.1 → 6.1.0 (#977) - msal: 1.33.0 → 1.34.0 (#978) - PyJWT: 2.9.0 → 2.12.0 (#1007) - pylint: 3.3.8 → 3.3.9 (#998) - tomli: 2.2.1 → 2.3.0 (#980) - urllib3: 2.6.0 → 2.6.3 (#999) - wrapt: 1.17.3 → 2.0.1 (#983) GitHub Actions updates: - actions/checkout: v4/v5 → v6 (#986) - actions/create-github-app-token: v2 → v3 (#1008) - dependabot/fetch-metadata: v2.4.0 → v3.0.0 (#1012) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- .github/workflows/auto-merge-dependabot.yml | 2 +- .github/workflows/build.yml | 2 +- .github/workflows/codeql.yml | 2 +- .github/workflows/project-auto-add.yml | 2 +- .github/workflows/publish.yml | 2 +- .github/workflows/release-please-gha.yml | 4 +-- requirements-dev.txt | 28 ++++++++++----------- 7 files changed, 21 insertions(+), 21 deletions(-) diff --git a/.github/workflows/auto-merge-dependabot.yml b/.github/workflows/auto-merge-dependabot.yml index 82876722783..dc346e53b3d 100644 --- a/.github/workflows/auto-merge-dependabot.yml +++ b/.github/workflows/auto-merge-dependabot.yml @@ -17,7 +17,7 @@ jobs: steps: - name: Dependabot metadata id: metadata - uses: dependabot/fetch-metadata@v2.4.0 + uses: dependabot/fetch-metadata@v3.0.0 with: github-token: "${{ secrets.GITHUB_TOKEN }}" diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index e3b7f807ef5..c1ae1ceedf5 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -17,7 +17,7 @@ jobs: matrix: python-version: ["3.9", "3.10", "3.11", "3.12", "3.13"] steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - name: Set up Python ${{ matrix.python-version }} uses: actions/setup-python@v6 with: diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index d8ffde88a9b..65064323e97 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -45,7 +45,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v5 + uses: actions/checkout@v6 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL diff --git a/.github/workflows/project-auto-add.yml b/.github/workflows/project-auto-add.yml index 0ce738cb91d..fbd6f475986 100644 --- a/.github/workflows/project-auto-add.yml +++ b/.github/workflows/project-auto-add.yml @@ -18,7 +18,7 @@ jobs: steps: - name: Generate token id: generate_token - uses: actions/create-github-app-token@v2 + uses: actions/create-github-app-token@v3 with: app-id: ${{ secrets.GRAPHBOT_APP_ID }} private-key: ${{ secrets.GRAPHBOT_APP_PEM }} diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index ca473587402..086867049fc 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -17,7 +17,7 @@ jobs: needs: [build] steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 - name: Set up Python uses: actions/setup-python@v6 with: diff --git a/.github/workflows/release-please-gha.yml b/.github/workflows/release-please-gha.yml index c58ac27d15e..195010cc82e 100644 --- a/.github/workflows/release-please-gha.yml +++ b/.github/workflows/release-please-gha.yml @@ -19,11 +19,11 @@ jobs: release: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - name: Generate GitHub App token id: app-token - uses: actions/create-github-app-token@v2 + uses: actions/create-github-app-token@v3 with: app-id: ${{ vars.RELEASE_PLEASE_TOKEN_PROVIDER_APP_ID }} private-key: ${{ secrets.RELEASE_PLEASE_TOKEN_PROVIDER_PEM }} diff --git a/requirements-dev.txt b/requirements-dev.txt index de10282b4f9..96fdfdb3e75 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -1,10 +1,10 @@ -aiohttp==3.12.15 +aiohttp==3.13.4 aiosignal==1.4.0 -anyio==4.10.0 +anyio==4.12.0 astroid==3.3.11 async-timeout==5.0.1 -attrs==25.3.0 -azure-core==1.36.0 +attrs==25.4.0 +azure-core==1.38.0 azure-identity==1.25.1 build==1.3.0 bumpver==2025.1131 @@ -12,13 +12,13 @@ certifi==2025.8.3 cffi==2.0.0 click==8.1.8 colorama==0.4.6 -cryptography==46.0.5 -Deprecated==1.2.18 +cryptography==46.0.7 +Deprecated==1.3.1 dill==0.4.0 docutils==0.22 flit==3.12.0 flit_core==3.12.0 -frozenlist==1.7.0 +frozenlist==1.8.0 h11==0.16.0 h2==4.3.0 hpack==4.1.0 @@ -27,7 +27,7 @@ httpx==0.28.1 hyperframe==6.1.0 idna==3.10 importlib-metadata==6.8.0 -isort==6.0.1 +isort==6.1.0 lazy-object-proxy==1.12.0 lexid==2021.1006 looseversion==1.3.0 @@ -39,7 +39,7 @@ microsoft-kiota-serialization-form==1.9.7 microsoft-kiota-serialization-json==1.9.7 microsoft-kiota-serialization-multipart==1.9.7 microsoft-kiota-serialization-text==1.9.7 -msal==1.33.0 +msal==1.34.0 msal-extensions==1.3.1 msgraph-core==1.3.8 multidict==6.7.0 @@ -53,8 +53,8 @@ pathlib2==2.3.7.post1 platformdirs==4.4.0 portalocker==2.10.1 pycparser==2.23 -PyJWT==2.9.0 -pylint==3.3.8 +PyJWT==2.12.0 +pylint==3.3.9 pyproject_hooks==1.2.0 python-dateutil==2.9.0.post0 requests==2.32.5 @@ -63,14 +63,14 @@ sniffio==1.3.1 std-uritemplate==2.0.0 time-machine==2.19.0 toml==0.10.2 -tomli==2.2.1 +tomli==2.3.0 tomli_w==1.2.0 tomlkit==0.13.3 typing_extensions==4.15.0 tzdata==2025.2 uritemplate==4.2.0 -urllib3==2.6.0 -wrapt==1.17.3 +urllib3==2.6.3 +wrapt==2.0.1 yapf==0.43.0 yarl==1.20.1 zipp==3.23.0