Skip to content

chore(deps): consolidate dependabot dependency updates#1467

Open
jingjingjia-ms wants to merge 2 commits intomainfrom
chore/consolidate-dependabot-updates
Open

chore(deps): consolidate dependabot dependency updates#1467
jingjingjia-ms wants to merge 2 commits intomainfrom
chore/consolidate-dependabot-updates

Conversation

@jingjingjia-ms
Copy link
Copy Markdown
Contributor

@jingjingjia-ms jingjingjia-ms commented May 7, 2026

Summary

Consolidates all 12 open Dependabot PRs into a single update.

requirements-dev.txt updates

Package From To Original PR
anyio 4.10.0 4.12.1 #1458
attrs 25.3.0 26.1.0 #1460
azure-core 1.38.0 1.39.0 #1438
azure-identity 1.25.1 1.25.3 #1438
msal 1.33.0 1.36.0 #1457
multidict 6.7.0 6.7.1 #1452
PyJWT 2.12.0 2.12.1 #1459
tomli 2.3.0 2.4.1 #1453
tomlkit 0.13.3 0.14.0 #1454
tzdata 2025.2 2026.1 #1455
zipp 3.23.0 3.23.1 #1456

GitHub Actions updates

Action From To Original PR
googleapis/release-please-action v4 v5 #1463
dependabot/fetch-metadata v3.0.0 v3.1.0 #1451

Notes

Supersedes: #1438 #1451 #1452 #1453 #1454 #1455 #1456 #1457 #1458 #1459 #1460 #1463

Combines 12 open dependabot PRs into a single update:

requirements-dev.txt:
- anyio: 4.10.0 -> 4.12.1 (#1458)
- attrs: 25.3.0 -> 26.1.0 (#1460)
- azure-core: 1.38.0 -> 1.39.0 (#1438)
- azure-identity: 1.25.1 -> 1.25.3 (#1438)
- msal: 1.33.0 -> 1.36.0 (#1457)
- multidict: 6.7.0 -> 6.7.1 (#1452)
- PyJWT: 2.12.0 -> 2.12.1 (#1459)
- tomli: 2.3.0 -> 2.4.1 (#1453)
- tomlkit: 0.13.3 -> 0.14.0 (#1454)
- tzdata: 2025.2 -> 2026.1 (#1455)
- zipp: 3.23.0 -> 3.23.1 (#1456)

GitHub Actions:
- googleapis/release-please-action: v4 -> v5 (#1463)
- dependabot/fetch-metadata: v3.0.0 -> v3.1.0 (#1451)

Note: msal bump to 1.36.0 resolves the dependency conflict that
caused PR #1438 to fail (azure-identity 1.25.3 requires msal>=1.35.1).

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@jingjingjia-ms jingjingjia-ms requested a review from a team as a code owner May 7, 2026 19:49
@jingjingjia-ms jingjingjia-ms added the dependencies Pull requests that update a dependency file label May 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant