Skip to content

Consolidate Dependabot dependency updates - #14385

Merged
westey (westey-m) merged 44 commits into
microsoft:mainfrom
moonbox3:consolidate-dependabot-20260907-a85a5503
Sep 7, 2026
Merged

westey (westey-m) merged 44 commits into
microsoft:mainfrom
moonbox3:consolidate-dependabot-20260907-a85a5503

Conversation

@moonbox3

@moonbox3 Evan Mattson (moonbox3) commented Sep 7, 2026 •

Copy link
Copy Markdown
Collaborator

Motivation and Context

Consolidates the currently open Dependabot updates into one reviewable dependency PR while preserving each source update's intent across GitHub Actions, .NET, Python, and JavaScript sample dependencies.

Description

Updates pinned GitHub Actions, central NuGet package versions, Python dependency constraints and uv lockfiles, and npm/Yarn lockfiles for the affected samples. Overlapping lockfile updates were regenerated or reconciled so that all compatible requested versions are retained together on the latest main. The incompatible MCP 2.x and Python 3.10 onnxruntime-genai updates are excluded, the private-feed-only @humanfs/node update is omitted, and the logging abstractions floor is aligned with the updated Azure AI Projects dependency.

Related Issue

Supersedes:

Contribution Checklist

dependabot Bot and others added 30 commits September 7, 2026 15:34
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.2.0 to 4.3.0.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.2.0...4.3.0)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.3.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [skitionek/notify-microsoft-teams](https://github.com/skitionek/notify-microsoft-teams) from 1.0.9 to 1.3.0.
- [Release notes](https://github.com/skitionek/notify-microsoft-teams/releases)
- [Commits](Skitionek/notify-microsoft-teams@11e40c3...216b8b2)

---
updated-dependencies:
- dependency-name: skitionek/notify-microsoft-teams
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [pmeier/pytest-results-action](https://github.com/pmeier/pytest-results-action) from 0.7.2 to 0.9.0.
- [Release notes](https://github.com/pmeier/pytest-results-action/releases)
- [Commits](pmeier/pytest-results-action@20b5957...fdc7f18)

---
updated-dependencies:
- dependency-name: pmeier/pytest-results-action
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Updates the requirements on [pyarrow](https://github.com/apache/arrow) to permit the latest version.
- [Release notes](https://github.com/apache/arrow/releases)
- [Commits](apache/arrow@go/v12.0.0...apache-arrow-25.0.0)

---
updated-dependencies:
- dependency-name: pyarrow
  dependency-version: 25.0.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>
---
updated-dependencies:
- dependency-name: AWSSDK.Extensions.Bedrock.MEAI
  dependency-version: 4.0.101.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
---
updated-dependencies:
- dependency-name: Azure.AI.Projects
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
---
updated-dependencies:
- dependency-name: Azure.Monitor.OpenTelemetry.Exporter
  dependency-version: 1.8.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [cryptography](https://github.com/pyca/cryptography) from 48.0.1 to 50.0.0.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@48.0.1...50.0.0)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 50.0.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.3.0 to 4.3.1.
- [Changelog](https://github.com/nodeca/js-yaml/blob/4.3.1/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.3.0...4.3.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.3.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [azure/cli](https://github.com/azure/cli) from 2.2.0 to 3.0.0.
- [Release notes](https://github.com/azure/cli/releases)
- [Changelog](https://github.com/Azure/cli/blob/master/ReleaseProcess.md)
- [Commits](Azure/cli@9f7ce6f...9eb25b8)

---
updated-dependencies:
- dependency-name: azure/cli
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [onnxruntime-genai](https://github.com/microsoft/onnxruntime-genai) from 0.9.0 to 0.15.2.
- [Release notes](https://github.com/microsoft/onnxruntime-genai/releases)
- [Commits](microsoft/onnxruntime-genai@v0.9.0...v0.15.2)

---
updated-dependencies:
- dependency-name: onnxruntime-genai
  dependency-version: 0.15.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [actions/checkout](https://github.com/actions/checkout) from 5.1.0 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@fbc6f39...3d3c42e)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [actions/cache](https://github.com/actions/cache) from 4.3.0 to 6.1.0.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@0057852...55cc834)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [transformers](https://github.com/huggingface/transformers) from 5.5.0 to 5.10.1.
- [Release notes](https://github.com/huggingface/transformers/releases)
- [Commits](huggingface/transformers@v5.5.0...v5.10.1)

---
updated-dependencies:
- dependency-name: transformers
  dependency-version: 5.10.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
This was referenced Sep 7, 2026

This branch was previously deployed

1 inactive deployment
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants