build: bump the python-deps group across 1 directory with 5 updates by dependabot[bot] · Pull Request #351 · microsoft/customer-chatbot-solution-accelerator

dependabot · 2026-09-01T13:10:25Z

Bumps the python-deps group with 5 updates in the /infra/scripts/data_scripts directory:

Package	From	To
openai	`2.32.0`	`3.6.0`
azure-search-documents	`11.7.0b2`	`12.1.0b2`
pandas	`3.0.1`	`3.0.5`
python-dotenv	`1.2.2`	`1.2.3`
azure-cosmos	`4.15.0`	`4.16.3`

Updates openai from 2.32.0 to 3.6.0

Release notes

Sourced from openai's releases.

v3.6.0

3.6.0 (2026-08-27)

Features

api: add compute_units to Responses and Chat Completions usage (#3749) (52421d1)

Bug Fixes

auth: harden X.509 workload identity integration (#3740) (fc3ad6c)

Chores

deps-dev: bump @stdy/cli from 0.22.1 to 0.22.2 (#3719) (4f5598c)

deps-dev: bump mypy from 1.17 to 2.3.1 (#3747) (0b52c9e)

deps-dev: bump pandas-stubs from 2.2.2.240807 to 2.3.3.260113 (#3659) (95f0b43)

deps-dev: bump pyright from 1.1.399 to 1.1.413 (#3744) (9917c6e)

deps-dev: bump rich from 14.2.0 to 15.0.0 (#3717) (7a5484d)

deps: bump actions/checkout from 6.0.2 to 7.0.1 (#3665) (d0a2550)

deps: bump actions/download-artifact from 6.0.0 to 8.0.1 (#3669) (f627619)

deps: bump github/codeql-action/init from 4.37.1 to 4.37.7 (#3745) (a36010d)

Build System

deps: bump actions/setup-python from 5.6.0 to 7.0.0 (#3672) (d765db7)

deps: bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.2 (#3666) (dacbb66)

v3.5.0

3.5.0 (2026-08-27)

Features

api: make function call output call IDs optional (#3738) (c74501d)

v3.4.0

3.4.0 (2026-08-25)

Features

api: Add obfuscation field to ChatCompletionChunk (#3690) (c7d8e1d)

api: add project residency configuration and cost quantity units (#3726) (bc4f8ef)

Bug Fixes

... (truncated)

Changelog

Sourced from openai's changelog.

3.6.0 (2026-08-27)

Features

api: add compute_units to Responses and Chat Completions usage (#3749) (52421d1)

Bug Fixes

auth: harden X.509 workload identity integration (#3740) (fc3ad6c)

Chores

deps-dev: bump @stdy/cli from 0.22.1 to 0.22.2 (#3719) (4f5598c)

deps-dev: bump mypy from 1.17 to 2.3.1 (#3747) (0b52c9e)

deps-dev: bump pandas-stubs from 2.2.2.240807 to 2.3.3.260113 (#3659) (95f0b43)

deps-dev: bump pyright from 1.1.399 to 1.1.413 (#3744) (9917c6e)

deps-dev: bump rich from 14.2.0 to 15.0.0 (#3717) (7a5484d)

deps: bump actions/checkout from 6.0.2 to 7.0.1 (#3665) (d0a2550)

deps: bump actions/download-artifact from 6.0.0 to 8.0.1 (#3669) (f627619)

deps: bump github/codeql-action/init from 4.37.1 to 4.37.7 (#3745) (a36010d)

Build System

deps: bump actions/setup-python from 5.6.0 to 7.0.0 (#3672) (d765db7)

deps: bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.2 (#3666) (dacbb66)

3.5.0 (2026-08-27)

Features

api: make function call output call IDs optional (#3738) (c74501d)

3.4.0 (2026-08-25)

Features

api: Add obfuscation field to ChatCompletionChunk (#3690) (c7d8e1d)

api: add project residency configuration and cost quantity units (#3726) (bc4f8ef)

Bug Fixes

api: encode Realtime call offers and session configuration (#3736) (555ac48)

apply consistent origin checks to WebSocket redirects (#3693) (1b324d0)

... (truncated)

Commits

1cfa80a release: 3.6.0 (#3752)
9917c6e chore(deps-dev): bump pyright from 1.1.399 to 1.1.413 (#3744)
0b52c9e chore(deps-dev): bump mypy from 1.17 to 2.3.1 (#3747)
4f5598c chore(deps-dev): bump @stdy/cli from 0.22.1 to 0.22.2 (#3719)
95f0b43 chore(deps-dev): bump pandas-stubs from 2.2.2.240807 to 2.3.3.260113 (#3659)
a36010d chore(deps): bump github/codeql-action/init from 4.37.1 to 4.37.7 (#3745)
7a5484d chore(deps-dev): bump rich from 14.2.0 to 15.0.0 (#3717)
d0a2550 chore(deps): bump actions/checkout from 6.0.2 to 7.0.1 (#3665)
dacbb66 build(deps): bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.2 (#3666)
d765db7 build(deps): bump actions/setup-python from 5.6.0 to 7.0.0 (#3672)
Additional commits viewable in compare view

Updates azure-search-documents from 11.7.0b2 to 12.1.0b2

Release notes

Sourced from azure-search-documents's releases.

azure-search-documents_12.1.0b2

12.1.0b2 (2026-08-27)

Features Added

Added ApiVersion.V2026_08_01_PREVIEW so the 2026-08-01-preview Search API version can be selected via the api_version keyword on the clients.

Added filtered and paged resource listing with search, page_size, and search_type parameters. File listings also support prefix.

Added multipart File knowledge source operations and models:

azure.search.documents.indexes.SearchIndexClient.update_knowledge_source_file

azure.search.documents.indexes.SearchIndexClient.upload_knowledge_source_file_multipart

azure.search.documents.indexes.models.FileUploadMetadata

azure.search.documents.indexes.models.UpdateKnowledgeSourceFileRequest

azure.search.documents.indexes.models.UploadKnowledgeSourceFileMultipartRequest

Added knowledge source query-hint and result-processing models:

azure.search.documents.indexes.models.KnowledgeSourceResultsProcessing

azure.search.documents.indexes.models.SearchIndexKnowledgeSourceBoost

azure.search.documents.indexes.models.SearchIndexKnowledgeSourceBoostKind

azure.search.documents.indexes.models.SearchIndexKnowledgeSourceFieldValueBoost

azure.search.documents.indexes.models.SearchIndexKnowledgeSourceFilterHint

azure.search.documents.indexes.models.SearchIndexKnowledgeSourceMultiWordExpressionBoost

azure.search.documents.indexes.models.SearchIndexKnowledgeSourceQueryHints

azure.search.documents.knowledgebases.models.KnowledgeBaseQueryHintProcessing

Added knowledge base retrieval streaming through azure.search.documents.knowledgebases.KnowledgeBaseRetrievalClient.retrieve_stream and its asynchronous equivalent. The methods return closeable streams of typed KnowledgeBaseRetrievalEvent instances. New stream payload models include:

azure.search.documents.knowledgebases.models.KnowledgeBaseActivityStartedEvent

azure.search.documents.knowledgebases.models.KnowledgeBaseAnswerCompletedEvent

azure.search.documents.knowledgebases.models.KnowledgeBaseResponseCompletedEvent

azure.search.documents.knowledgebases.models.KnowledgeBaseRetrievalStartedEvent

azure.search.documents.knowledgebases.models.KnowledgeBaseStreamErrorEvent

Added knowledge base configuration and retrieval features:

Knowledge base tags and persisted retrieve_defaults.

Per-source never_query_source, results_processing, and query_hint_overrides.

KnowledgeRetrievalAutoReasoningEffort for automatic reasoning-effort selection.

Activity start/completion timestamps, model metadata, query-hint processing details, and served-image metadata.

Citation URLs on index-backed knowledge base references.

Private ingestion networking through KnowledgeSourceNetworkAccessMode.

Added Work IQ configuration through EntraAppAuthentication and WorkIQKnowledgeSourceParameters, plus the query_work_iq_source_authorization retrieval parameter.

Added File knowledge source CORS, metadata, prefix, parsing-mode, and extraction-mode support.

Added GPT-5.5, GPT-5.6 Luna, GPT-5.6 Sol, and GPT-5.6 Terra model names.

Added SearchServiceLimits.max_vector_index_size_per_index_in_bytes.

Breaking Changes

... (truncated)

Commits

71ebbb4 [Search] Include Issue Cleanup starting 2026-08-01-preview release (#48767)
fc72d1a [Storage Blob] Migrating to TypeSpec (#45133)
11200c9 Scope durable task IDs by hosted session GUID (#48776)
aeeef3d Prepare azure-postgresql-auth 1.1.0 for release (#48762)
ce9b039 Populate measurements on telemetry from the microsoft.custom_measurements a...
eacd370 Increment package version after release of azure-ai-agentserver-responses (#4...
fa961e4 [azure-ai-evaluation] Release 1.18.4 (#48782)
2aa7d57 [AI Projects] Add synthetic multi-turn evaluation sample (#48786)
2653fc4 Fix Conda update script for missed packages from previous release (#48768)
62b7843 [AutoPR azure-mgmt-enclave]-generated-from-SDK Generation - Python-6751861 (#...
Additional commits viewable in compare view

Updates pandas from 3.0.1 to 3.0.5

Release notes

Sourced from pandas's releases.

pandas 3.0.5

We are pleased to announce the release of pandas 3.0.5. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:
python -m pip install --upgrade pandas==3.0.*
Or from conda-forge
conda install -c conda-forge pandas=3.0
Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

pandas 3.0.4

We are pleased to announce the release of pandas 3.0.4. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:
python -m pip install --upgrade pandas==3.0.*
Or from conda-forge
conda install -c conda-forge pandas=3.0
Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

pandas 3.0.3

We are pleased to announce the release of pandas 3.0.3. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:
python -m pip install --upgrade pandas==3.0.*
Or from conda-forge

... (truncated)

Commits

e68db09 RLS: 3.0.5
0697623 Backport PR #66428: DOC: update whatsnew for 3.0.5 (#66430)
5d846d0 Backport PR #66090 on branch 3.0.x (BLD: exclude numpy 2.5.0 when building wh...
bef7a2b Backport PR #66169 on branch 3.0.x (CI: Fix pyarrow-nightly job (stale nightl...
8188eb1 RLS: 3.0.4 (#66079)
bd35f15 [3.0.x] BUG: fix CoW issue in eval() (#66072)
6195872 [backport 3.0.x] BUG: anchor whole alternation in Series.str.match for PyArro...
70313be Backport PR #66051 on branch 3.0.x (BUG: fix regression in DataFrame setitem ...
57ed3e2 [backport 3.0.x] Bump pypa/cibuildwheel from 3.4.1 to 4.1.0 (#65934) (#66026)
f9693fc [backport 3.0.x] BUG(pandas 3.0 regression): drop(index=...) doesn't accept N...
Additional commits viewable in compare view

Updates python-dotenv from 1.2.2 to 1.2.3

Release notes

Sourced from python-dotenv's releases.

v1.2.3

Fixed

Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@h1whelan] in #640

set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@dchaudhari7177] in #680

dotenv run now prints a friendly error instead of a traceback when no command is given by [@bbc2] in #606

Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@ReinerBRO] in #638

Changelog

Sourced from python-dotenv's changelog.

[1.2.3] - 2026-08-16

Fixed

Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@h1whelan] in #640

set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@dchaudhari7177] in #680

dotenv run now prints a friendly error instead of a traceback when no command is given by [@bbc2] in #606

Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@ReinerBRO] in #638

Commits

49515af Bump version: 1.2.2 → 1.2.3
8ac846f chore: add release runbook (RELEASING.md) and make release target
bb31c94 docs: add 1.2.3 release notes (#606, #638, #680)
f7b18d9 fix: round-trip backslashes through set_key (#680)
751f8c1 ci(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions gro...
f1937b6 chore(deps): update mkdocs-include-markdown-plugin requirement from >=6.0.0 t...
45b9372 chore(deps): update pytest requirement from >=3.9 to >=9.0.3 (#653)
72896e9 docs: fix broken mkdocs link in CONTRIBUTING.md (#636)
72754a1 ci(deps): bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 in the github-a...
078325e ci(security): harden CI/CD supply chain with SHA pinning and least-privilege ...
Additional commits viewable in compare view

Updates azure-cosmos from 4.15.0 to 4.16.3

Release notes

Sourced from azure-cosmos's releases.

azure-cosmos_4.16.3

4.16.3 (2026-07-29)

Bugs Fixed

Fixed regression introduced in 4.16.0 on 47105 for complete-partition-key queries scanning documents instead of using partition-key routing, which caused excessive RU consumption and latency for aggregates such as COUNT. See PR 48237

Commits

783e9ea Decision log of Identity (#47466)
0e82833 adding changelog date (#48347)
35fc155 [Storage] STG 103/104 Features (#47642)
a2ee453 Disable mindependency testing for cosmos (#48345)
fbc061f fix - full partition key routing bug (#48237)
2ee072f Prepare azure-ai-agentserver-responses release (#48342)
eb70b1d Decouple AgentServer responses from generated model internals (#47995)
995c8e7 [AutoPR azure-mgmt-discovery]-generated-from-SDK Generation - Python-6632123 ...
9f27733 [agentserver-core] Set 2.0.0b9 release date to 2026-07-28 (#48338)
11dfc50 Add aio namespace for agentserver response event streams (#47785)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-deps group with 5 updates in the /infra/scripts/data_scripts directory: | Package | From | To | | --- | --- | --- | | [openai](https://github.com/openai/openai-python) | `2.32.0` | `3.6.0` | | [azure-search-documents](https://github.com/Azure/azure-sdk-for-python) | `11.7.0b2` | `12.1.0b2` | | [pandas](https://github.com/pandas-dev/pandas) | `3.0.1` | `3.0.5` | | [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.2` | `1.2.3` | | [azure-cosmos](https://github.com/Azure/azure-sdk-for-python) | `4.15.0` | `4.16.3` | Updates `openai` from 2.32.0 to 3.6.0 - [Release notes](https://github.com/openai/openai-python/releases) - [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md) - [Commits](openai/openai-python@v2.32.0...v3.6.0) Updates `azure-search-documents` from 11.7.0b2 to 12.1.0b2 - [Release notes](https://github.com/Azure/azure-sdk-for-python/releases) - [Commits](Azure/azure-sdk-for-python@azure-search-documents_11.7.0b2...azure-search-documents_12.1.0b2) Updates `pandas` from 3.0.1 to 3.0.5 - [Release notes](https://github.com/pandas-dev/pandas/releases) - [Commits](pandas-dev/pandas@v3.0.1...v3.0.5) Updates `python-dotenv` from 1.2.2 to 1.2.3 - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](theskumar/python-dotenv@v1.2.2...v1.2.3) Updates `azure-cosmos` from 4.15.0 to 4.16.3 - [Release notes](https://github.com/Azure/azure-sdk-for-python/releases) - [Commits](Azure/azure-sdk-for-python@azure-cosmos_4.15.0...azure-cosmos_4.16.3) --- updated-dependencies: - dependency-name: openai dependency-version: 3.6.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-deps - dependency-name: azure-search-documents dependency-version: 12.1.0b2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-deps - dependency-name: pandas dependency-version: 3.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-deps - dependency-name: python-dotenv dependency-version: 1.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-deps - dependency-name: azure-cosmos dependency-version: 4.16.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 1, 2026

dependabot Bot requested review from Avijit-Microsoft, Roopan-Microsoft, gpickett, malrose07 and Todd Herman (toherman-msft) as code owners September 1, 2026 13:10

dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 1, 2026

dependabot Bot requested review from Prajwal-Microsoft and Vinay Sharma (Vinay-Microsoft) as code owners September 1, 2026 13:10

dependabot Bot added the python Pull requests that update python code label Sep 1, 2026

Navigation Menu

build: bump the python-deps group across 1 directory with 5 updates - #351

build: bump the python-deps group across 1 directory with 5 updates#351
dependabot[bot] wants to merge 1 commit into
dependabotchangesfrom
dependabot/pip/infra/scripts/data_scripts/dependabotchanges/python-deps-af18585037

dependabot Bot commented on behalf of github Sep 1, 2026 •

edited

Loading

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v3.6.0

3.6.0 (2026-08-27)

Features

Bug Fixes

Chores

Build System

v3.5.0

3.5.0 (2026-08-27)

Features

v3.4.0

3.4.0 (2026-08-25)

Features

Bug Fixes

3.6.0 (2026-08-27)

Features

Bug Fixes

Chores

Build System

3.5.0 (2026-08-27)

Features

3.4.0 (2026-08-25)

Features

Bug Fixes

azure-search-documents_12.1.0b2

12.1.0b2 (2026-08-27)

Features Added

Breaking Changes

pandas 3.0.5

pandas 3.0.4

pandas 3.0.3

v1.2.3

Fixed

[1.2.3] - 2026-08-16

Fixed

azure-cosmos_4.16.3

4.16.3 (2026-07-29)

Bugs Fixed

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 1, 2026 •

edited

Loading