Repository navigation
Python: build(deps): consolidate Dependabot updates - #9292
Merged
Eduard van Valkenburg (eavanvalkenburg) merged 2 commits intoOct 12, 2026
Merged
Conversation
Eduard van Valkenburg (eavanvalkenburg)
requested review from
SergeyMenshykh,
Tao Chen (TaoChenOSU),
Vincent Biret (baywet),
Giles Odigwe (giles17),
Jose Alvarez (jpalvarezl),
Evan Mattson (moonbox3),
Peter Ibekwe (peibekwe),
Roger Barreto (rogerbarreto),
sophia-ramsey and
westey (westey-m)
as code owners
October 12, 2026 09:50
Eduard van Valkenburg (eavanvalkenburg)
temporarily deployed
to
github-app-auth
October 12, 2026 09:50 — with 
GitHub Actions
Inactive
GitHub Actions
Inactive
Eduard van Valkenburg (eavanvalkenburg)
temporarily deployed
to
github-app-auth
October 12, 2026 09:50 — with
GitHub Actions
Inactive
GitHub Actions
Inactive
Eduard van Valkenburg (eavanvalkenburg)
deployed
to
integration
October 12, 2026 09:50 — with
GitHub Actions
Active
GitHub Actions
Active
Eduard van Valkenburg (eavanvalkenburg)
deployed
to
integration
October 12, 2026 09:50 — with
GitHub Actions
Active
GitHub Actions
Active
agent-framework-automation
Bot
added
python
github-actions
Bot
changed the title
github-actions
Bot
changed the title
Copilot started reviewing on behalf of
Eduard van Valkenburg (eavanvalkenburg)
October 12, 2026 09:51
Contributor
Code Coverage OverviewLanguages: Python, C# Python / code-coverage/pythonThe overall line coverage in commit e4e88ef in the C# / code-coverage/dotnetThe overall line coverage in commit e4e88ef in the Updated |
Contributor
There was a problem hiding this comment.
🟡 Changes recommended
The AgentMemory update has a mismatched MAF dependency, and the generated issue-plan workflow was not regenerated from its action lock.
2 open findings
What changed in this PR
Consolidates dependency updates across Python, .NET, frontend samples, and GitHub Actions while reducing future Dependabot PR duplication.
Changes:
- Updates Python build tooling, Lab tools, frontend dependencies, .NET packages, and actions.
- Refreshes npm/Yarn lockfiles.
- Adds targeted Dependabot grouping rules.
| File | Description |
|---|---|
python/samples/05-end-to-end/chatkit-integration/frontend/package.json |
Updates Vite. |
python/samples/05-end-to-end/chatkit-integration/frontend/package-lock.json |
Refreshes npm lock data. |
python/samples/05-end-to-end/ag_ui_workflow_handoff/frontend/package.json |
Updates Vite. |
python/samples/05-end-to-end/ag_ui_workflow_handoff/frontend/package-lock.json |
Refreshes npm lock data. |
python/samples/05-end-to-end/ag_ui_single_agent/frontend/package.json |
Updates Vite. |
python/samples/05-end-to-end/ag_ui_single_agent/frontend/package-lock.json |
Refreshes npm lock data. |
python/packages/tools/pyproject.toml |
Allows Flit 4. |
python/packages/sql-server/pyproject.toml |
Allows Flit 4. |
python/packages/redis/pyproject.toml |
Allows Flit 4. |
python/packages/qdrant/pyproject.toml |
Allows Flit 4. |
python/packages/purview/pyproject.toml |
Allows Flit 4. |
python/packages/postgres/pyproject.toml |
Allows Flit 4. |
python/packages/orchestrations/pyproject.toml |
Allows Flit 4. |
python/packages/oracle/pyproject.toml |
Allows Flit 4. |
python/packages/openai/pyproject.toml |
Allows Flit 4. |
python/packages/monty/pyproject.toml |
Allows Flit 4. |
python/packages/mongodb/pyproject.toml |
Allows Flit 4. |
python/packages/mem0/pyproject.toml |
Allows Flit 4. |
python/packages/lab/pyproject.toml |
Updates uv and prek. |
python/packages/hyperlight/pyproject.toml |
Allows Flit 4. |
python/packages/hosting/pyproject.toml |
Allows Flit 4. |
python/packages/hosting-telegram/pyproject.toml |
Allows Flit 4. |
python/packages/hosting-responses/pyproject.toml |
Allows Flit 4. |
python/packages/hosting-mcp/pyproject.toml |
Allows Flit 4. |
python/packages/hosting-a2a/pyproject.toml |
Allows Flit 4. |
python/packages/github_copilot/pyproject.toml |
Allows Flit 4. |
python/packages/gemini/pyproject.toml |
Allows Flit 4. |
python/packages/foundry/pyproject.toml |
Allows Flit 4. |
python/packages/foundry_local/pyproject.toml |
Allows Flit 4. |
python/packages/foundry_hosting/pyproject.toml |
Allows Flit 4. |
python/packages/duckdb/pyproject.toml |
Allows Flit 4. |
python/packages/devui/pyproject.toml |
Allows Flit 4. |
python/packages/devui/frontend/yarn.lock |
Refreshes frontend dependency resolution. |
python/packages/devui/frontend/package.json |
Updates Radix UI and Vite. |
python/packages/declarative/pyproject.toml |
Allows Flit 4. |
python/packages/core/tests/core/test_types.py |
Applies formatting. |
python/packages/core/pyproject.toml |
Allows Flit 4. |
python/packages/copilotstudio/pyproject.toml |
Allows Flit 4. |
python/packages/claude/pyproject.toml |
Allows Flit 4. |
python/packages/chatkit/pyproject.toml |
Allows Flit 4. |
python/packages/azure-documentdb/pyproject.toml |
Allows Flit 4. |
python/packages/azure-cosmos/pyproject.toml |
Allows Flit 4. |
python/packages/azure-cosmos-memory/pyproject.toml |
Allows Flit 4. |
python/packages/azure-contentunderstanding/pyproject.toml |
Allows Flit 4. |
python/packages/azure-ai-search/pyproject.toml |
Allows Flit 4. |
python/packages/anthropic/pyproject.toml |
Allows Flit 4. |
python/packages/a2a/pyproject.toml |
Allows Flit 4. |
dotnet/samples/02-agents/AgentWithMemory/AgentWithMemory_Step06_MemoryUsingAgentMemory/AgentWithMemory_Step06_MemoryUsingAgentMemory.csproj |
Updates AgentMemory packages. |
dotnet/Directory.Packages.props |
Updates Aspire packages. |
.github/workflows/python-test-coverage.yml |
Updates coverage upload action. |
.github/workflows/python-code-quality.yml |
Updates prek action. |
.github/workflows/issue-plan.lock.yml |
Updates generated setup-action references. |
.github/workflows/dotnet-build-and-test.yml |
Updates coverage upload action. |
.github/dependabot.yml |
Adds dependency grouping rules. |
Files not reviewed (4)
- python/packages/devui/frontend/package-lock.json: Generated file
- python/samples/05-end-to-end/ag_ui_single_agent/frontend/package-lock.json: Generated file
- python/samples/05-end-to-end/ag_ui_workflow_handoff/frontend/package-lock.json: Generated file
- python/samples/05-end-to-end/chatkit-integration/frontend/package-lock.json: Generated file
🧠 Review effort: Balanced
💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.
Eduard van Valkenburg (eavanvalkenburg)
temporarily deployed
to
github-app-auth
October 12, 2026 11:36 — with
GitHub Actions
Inactive
GitHub Actions
Inactive
Eduard van Valkenburg (eavanvalkenburg)
deployed
to
integration
October 12, 2026 11:37 — with
GitHub Actions
Active
GitHub Actions
Active
Eduard van Valkenburg (eavanvalkenburg)
deployed
to
integration
October 12, 2026 11:37 — with
GitHub Actions
Active
GitHub Actions
Active
agent-framework-automation
Bot
added
the
documentation
SergeyMenshykh
approved these changes
Oct 12, 2026
github-merge-queue
Bot
removed this pull request from the merge queue due to failed status checks
Oct 12, 2026
Eduard van Valkenburg (eavanvalkenburg)
deleted the
dependabot-grouping
branch
October 12, 2026 12:37
This was referenced Oct 12, 2026
Closed
Closed
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Motivation & Context
Dependabot opened 19 concurrent update pull requests, including several that modify the same DevUI and Lab lockfiles. This creates avoidable merge conflicts and repeated CI runs. This change consolidates that update set and configures more targeted grouping for future runs.
Description & Review Guide
Related Issue
N/A - repository automation. This consolidates GitHub Dependabot version updates configured by
.github/dependabot.yml.AI Assistance
AI assistance details: Copilot consolidated the dependency updates, resolved overlapping lockfiles, adjusted Dependabot grouping, ran targeted validation, and prepared this PR description.
Contribution Checklist
breaking changelabel (or add "[BREAKING]" to the title prefix, before or after any language prefix) — a workflow keeps the label and title prefix in sync automatically.