Python: build(deps): consolidate Dependabot updates

.github/aw/actions-lock.json

@@ -1,9 +1,9 @@
 {
   "entries": {
-    "github/gh-aw-actions/setup@v0.89.21": {
+    "github/gh-aw-actions/setup@v0.91.0": {
       "repo": "github/gh-aw-actions/setup",
-      "version": "v0.89.21",
-      "sha": "924af5fdc64061cfbf66fb584c8b07e2ac230c60"
+      "version": "v0.91.0",
+      "sha": "aeaf7fe417d183340479027223c9a1c16464bdbc"
     }
   }
 }

.github/dependabot.yml

@@ -141,6 +141,9 @@ updates:
       interval: "weekly"
       day: "thursday"
     groups:
+      agent-framework:
+        patterns:
+          - "agent-framework-*"
       basics:
         patterns:
           - "uv"
@@ -173,6 +176,13 @@ updates:
     schedule:
       interval: "weekly"
       day: "thursday"
+    groups:
+      radix-ui:
+        patterns:
+          - "@radix-ui/*"
+      # Update shared packages once across all frontend workspaces.
+      shared-frontend-dependencies:
+        group-by: dependency-name
     labels:
       - "dependencies"
     cooldown:
@@ -197,6 +207,15 @@ updates:
         patterns:
           - "actions/upload-artifact"
           - "actions/download-artifact"
+      routine-actions:
+        patterns:
+          - "*"
+        update-types:
+          - "minor"
+          - "patch"
+      # Keep repeated major action updates aligned across action directories.
+      shared-actions:
+        group-by: dependency-name
     schedule:
       interval: "weekly"
       day: "sunday"

.github/tests/test_issue_plan_workflow.js

@@ -88,7 +88,10 @@ describe('Issue planning workflow', () => {
     const config = JSON.parse(JSON.parse(configLine));
     assert.deepEqual(config.add_comment, { hide_older_comments: false, max: 1, target: 'triggering' });
     const safeTools = manifest.mcp_servers.find(server => server.name === 'safeoutputs').tools;
-    assert.deepEqual(safeTools.filter(tool => !['missing_data', 'missing_tool', 'noop'].includes(tool)), ['add_comment']);
+    assert.deepEqual(
+      safeTools.filter(tool => !['missing_data', 'missing_tool', 'noop'].includes(tool)),
+      ['add_comment', 'report_incomplete'],
+    );
     assert.match(source, /status-comment: false/);
   });
 

.github/workflows/dotnet-build-and-test.yml

@@ -510,7 +510,7 @@ jobs:
           name: CoverageReport-ubuntu-latest-${{ env.COVERAGE_FRAMEWORK }}-Release
           path: ./TestResults/Reports
       - name: Upload coverage report to GitHub
-        uses: actions/upload-code-coverage@bfa741d815a28cb064a8e3a0837e577457a017d5 # v1.4.3
+        uses: actions/upload-code-coverage@2b21a77928be8d5168c2b9581a67f2adbebacc52 # v1.4.4
         with:
           file: ./TestResults/Reports/Cobertura.xml
           language: CSharp

.github/workflows/python-code-quality.yml

@@ -46,7 +46,7 @@ jobs:
         with:
           path: ~/.cache/prek
           key: prek|${{ matrix.python-version }}|${{ hashFiles('python/.pre-commit-config.yaml') }}
-      - uses: j178/prek-action@4e14d07f9231acabce116ccfca13b13dd9755ece # v3.0.0
+      - uses: j178/prek-action@1382ad72dea72f9d53832f2bcb65b3e87a947204 # v3.0.1
         name: Run Pre-commit Hooks (excluding poe-check)
         env:
           SKIP: poe-check

.github/workflows/python-test-coverage.yml

@@ -76,7 +76,7 @@ jobs:
           name: python-coverage-report
           path: python
       - name: Upload coverage report to GitHub
-        uses: actions/upload-code-coverage@bfa741d815a28cb064a8e3a0837e577457a017d5 # v1.4.3
+        uses: actions/upload-code-coverage@2b21a77928be8d5168c2b9581a67f2adbebacc52 # v1.4.4
         with:
           file: python/python-coverage.xml
           language: Python

dotnet/Directory.Packages.props

@@ -7,7 +7,7 @@
   </PropertyGroup>
   <PropertyGroup>
     <!-- Aspire -->
-    <AspireAppHostSdkVersion>13.5.3</AspireAppHostSdkVersion>
+    <AspireAppHostSdkVersion>13.6.0</AspireAppHostSdkVersion>
   </PropertyGroup>
   <ItemGroup>
     <!-- Aspire.* -->
@@ -21,7 +21,7 @@
     <PackageVersion Include="Aspire.Hosting.AppHost" Version="$(AspireAppHostSdkVersion)" />
     <PackageVersion Include="Aspire.Hosting.Azure.CognitiveServices" Version="$(AspireAppHostSdkVersion)" />
     <PackageVersion Include="Aspire.Microsoft.Azure.Cosmos" Version="$(AspireAppHostSdkVersion)" />
-    <PackageVersion Include="CommunityToolkit.Aspire.OllamaSharp" Version="13.5.0" />
+    <PackageVersion Include="CommunityToolkit.Aspire.OllamaSharp" Version="13.6.0" />
     <PackageVersion Include="MessagePack" Version="3.1.7" /> <!-- Transitive dependency of Aspire pinned to newer version due to vulnerability in 2.5.192 -->
     <!-- Azure.* -->
     <PackageVersion Include="Azure.AI.AgentServer.Core" Version="1.0.0-beta.29" />

dotnet/samples/02-agents/AgentWithMemory/AgentWithMemory_Step06_MemoryUsingAgentMemory/AgentWithMemory_Step06_MemoryUsingAgentMemory.csproj

@@ -3,7 +3,7 @@
   <!--
     This project is part of the repo's solution and targets .NET 10 like the rest of the repo, but it
     intentionally opts out of Central Package Management and source-referencing Microsoft.Agents.AI:
-    it consumes the *published* AgentMemory NuGet packages (which target Microsoft.Agents.AI 1.9.0)
+    it consumes the *published* AgentMemory NuGet packages (which target Microsoft.Agents.AI 1.23.0)
     instead. Run it with `dotnet run` from this folder.
 
     ManagePackageVersionsCentrally is off, but dotnet/Directory.Packages.props still unconditionally
@@ -38,10 +38,10 @@
   <ItemGroup>
     <!-- AgentMemory (published) — an unofficial .NET port of the Neo4j Labs agent-memory library + its
          Microsoft Agent Framework adapter. -->
-    <PackageReference Include="AgentMemory" Version="1.5.0" />
-    <PackageReference Include="AgentMemory.AgentFramework" Version="1.5.0" />
+    <PackageReference Include="AgentMemory" Version="1.8.0" />
+    <PackageReference Include="AgentMemory.AgentFramework" Version="1.8.0" />
     <!-- Microsoft Agent Framework (matches AgentMemory's target) + the OpenAI/Foundry chat & embedding clients. -->
-    <PackageReference Include="Microsoft.Agents.AI" Version="1.9.0" />
+    <PackageReference Include="Microsoft.Agents.AI" Version="1.23.0" />
     <PackageReference Include="Microsoft.Extensions.AI.OpenAI" Version="10.10.1" />
     <PackageReference Include="Azure.Identity" Version="1.21.0" />
     <PackageReference Include="Microsoft.Extensions.Hosting" Version="10.0.12" />

dotnet/samples/02-agents/AgentWithMemory/AgentWithMemory_Step06_MemoryUsingAgentMemory/README.md

@@ -71,5 +71,5 @@ dotnet run
 This sample is part of the repo's solution and targets .NET 10 like every other sample, but it
 deliberately opts out of **Central Package Management** and does **not** reference `Microsoft.Agents.AI`
 via the repo's in-source project — it consumes the **published** `AgentMemory` NuGet packages instead
-(which target `Microsoft.Agents.AI` 1.9.0). A version that references the repo's current
+(which target `Microsoft.Agents.AI` 1.23.0). A version that references the repo's current
 `Microsoft.Agents.AI` source would require AgentMemory to be rebuilt against that version first.

python/packages/a2a/pyproject.toml

@@ -94,5 +94,5 @@ help = "Run the default unit test suite for this package."
 cmd = 'pytest -m "not integration" --cov=agent_framework_a2a --cov-report=term-missing:skip-covered tests'
 
 [build-system]
-requires = ["flit-core >= 3.11,<4.0"]
+requires = ["flit-core>=3.11,<5.0"]
 build-backend = "flit_core.buildapi"

python/packages/anthropic/pyproject.toml

@@ -94,5 +94,5 @@ help = "Run the default unit test suite for this package."
 cmd = 'pytest -m "not integration" --cov=agent_framework_anthropic --cov-report=term-missing:skip-covered -n auto --dist worksteal tests'
 
 [build-system]
-requires = ["flit-core >= 3.11,<4.0"]
+requires = ["flit-core>=3.11,<5.0"]
 build-backend = "flit_core.buildapi"

python/packages/azure-ai-search/pyproject.toml

@@ -99,5 +99,5 @@ help = "Run the default unit test suite for this package."
 cmd = 'pytest -m "not integration" --cov=agent_framework_azure_ai_search --cov-report=term-missing:skip-covered tests'
 
 [build-system]
-requires = ["flit-core >= 3.11,<4.0"]
+requires = ["flit-core>=3.11,<5.0"]
 build-backend = "flit_core.buildapi"

python/packages/azure-contentunderstanding/pyproject.toml

@@ -97,5 +97,5 @@ help = "Run the default unit test suite for this package."
 cmd = 'pytest -m "not integration" --cov=agent_framework_azure_contentunderstanding --cov-report=term-missing:skip-covered tests'
 
 [build-system]
-requires = ["flit-core >= 3.11,<4.0"]
+requires = ["flit-core>=3.11,<5.0"]
 build-backend = "flit_core.buildapi"

python/packages/azure-cosmos-memory/pyproject.toml

@@ -130,5 +130,5 @@ help = "Run the live-Azure integration test suite (requires Cosmos DB + AI Found
 cmd = 'pytest -m "integration and azure" tests'
 
 [build-system]
-requires = ["flit-core >= 3.11,<4.0"]
+requires = ["flit-core>=3.11,<5.0"]
 build-backend = "flit_core.buildapi"

python/packages/azure-cosmos/pyproject.toml

@@ -100,5 +100,5 @@ help = "Run the package integration test suite."
 cmd = "pytest tests/test_cosmos_history_provider.py -m integration"
 
 [build-system]
-requires = ["flit-core >= 3.11,<4.0"]
+requires = ["flit-core>=3.11,<5.0"]
 build-backend = "flit_core.buildapi"

python/packages/azure-documentdb/pyproject.toml

@@ -62,5 +62,5 @@ cmd = 'pytest -m "not integration" --cov=agent_framework_azure_documentdb --cov-
 cmd = "pytest -m integration tests"
 
 [build-system]
-requires = ["flit-core>=3.11,<4.0"]
+requires = ["flit-core>=3.11,<5.0"]
 build-backend = "flit_core.buildapi"

python/packages/chatkit/pyproject.toml

@@ -95,5 +95,5 @@ help = "Run the default unit test suite for this package."
 cmd = 'pytest -m "not integration" --cov=agent_framework_chatkit --cov-report=term-missing:skip-covered tests'
 
 [build-system]
-requires = ["flit-core >= 3.11,<4.0"]
+requires = ["flit-core>=3.11,<5.0"]
 build-backend = "flit_core.buildapi"

python/packages/claude/pyproject.toml

@@ -95,5 +95,5 @@ help = "Run the default unit test suite for this package."
 cmd = 'pytest -m "not integration" --cov=agent_framework_claude --cov-report=term-missing:skip-covered tests'
 
 [build-system]
-requires = ["flit-core >= 3.11,<4.0"]
+requires = ["flit-core>=3.11,<5.0"]
 build-backend = "flit_core.buildapi"

python/packages/copilotstudio/pyproject.toml

@@ -96,5 +96,5 @@ help = "Run the default unit test suite for this package."
 cmd = 'pytest -m "not integration" --cov=agent_framework_copilotstudio --cov-report=term-missing:skip-covered tests'
 
 [build-system]
-requires = ["flit-core >= 3.11,<4.0"]
+requires = ["flit-core>=3.11,<5.0"]
 build-backend = "flit_core.buildapi"

python/packages/core/pyproject.toml

@@ -149,5 +149,5 @@ cmd = 'pytest -m "not integration" --cov=agent_framework --cov-report=term-missi
 name = "agent_framework"
 
 [build-system]
-requires = ["flit-core >= 3.11,<4.0"]
+requires = ["flit-core>=3.11,<5.0"]
 build-backend = "flit_core.buildapi"

python/packages/core/tests/core/test_types.py

@@ -483,9 +483,7 @@ def test_code_interpreter_tool_call_stream_done_replaces_accumulated_deltas() ->
 def test_code_interpreter_tool_result_empty_outputs_then_text() -> None:
     """Initial empty outputs=[] must not IndexError when a text chunk arrives."""
     updates = [
-        ChatResponseUpdate(
-            contents=[Content.from_code_interpreter_tool_result(call_id="ci_1", outputs=[])]
-        ),
+        ChatResponseUpdate(contents=[Content.from_code_interpreter_tool_result(call_id="ci_1", outputs=[])]),
         ChatResponseUpdate(
             contents=[
                 Content.from_code_interpreter_tool_result(

python/packages/declarative/pyproject.toml

@@ -103,5 +103,5 @@ help = "Run the default unit test suite for this package."
 cmd = 'pytest -m "not integration" --cov=agent_framework_declarative --cov-report=term-missing:skip-covered tests'
 
 [build-system]
-requires = ["flit-core >= 3.11,<4.0"]
+requires = ["flit-core>=3.11,<5.0"]
 build-backend = "flit_core.buildapi"