Skip to content

build: bump the index-scripts-deps group across 1 directory with 6 updates - #1027

Open
dependabot[bot] wants to merge 1 commit into
dependabotchangesfrom
dependabot/pip/infra/scripts/index_scripts/dependabotchanges/index-scripts-deps-23078ac93d
Open

build: bump the index-scripts-deps group across 1 directory with 6 updates#1027
dependabot[bot] wants to merge 1 commit into
dependabotchangesfrom
dependabot/pip/infra/scripts/index_scripts/dependabotchanges/index-scripts-deps-23078ac93d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the index-scripts-deps group with 6 updates in the /infra/scripts/index_scripts directory:

Package From To
azure-storage-file-datalake 12.24.0 12.25.0
openai 2.40.0 2.50.0
azure-ai-projects 2.2.0 2.4.0
agent-framework-core 1.7.0 1.12.1
pypdf 6.12.2 6.14.2
pandas 3.0.3 3.0.5

Updates azure-storage-file-datalake from 12.24.0 to 12.25.0

Commits
  • 245d202 Branch prep for release
  • 28ec40e Modified changelogs
  • 3339854 Merge branch 'main' into release/storage/stg102
  • 28773cc Fix/transcription python tsp location (#46959)
  • 53a9c50 Add Release Plan ID in get release plan fields (#46958)
  • 4c96276 Update tsp-location.yaml commit hash to latest spec (#46954)
  • 9c82ebb Implement WebSocket support for InvocationAgentServerHost (#46841)
  • 17a2bf7 [azure-planetarycomputer] SDK Update for GA Release (#46359)
  • c24547a [AutoPR azure-mgmt-containerservice]-generated-from-SDK Generation - Python-6...
  • 063446b azure-ai-evaluation: forward evaluator properties to App Insights (#46942)
  • Additional commits viewable in compare view

Updates openai from 2.40.0 to 2.50.0

Release notes

Sourced from openai's releases.

v2.50.0

2.50.0 (2026-07-28)

Full Changelog: v2.49.0...v2.50.0

Features

  • api: transcription model updates (fd57393)

Bug Fixes

  • audio: restore transcription keyword overload (713a262)

v2.49.0

2.49.0 (2026-07-27)

Full Changelog: v2.48.0...v2.49.0

Features

  • require Python 3.10 and automate version reviews (#3537) (d4c151d)

v2.48.0

2.48.0 (2026-07-23)

Full Changelog: v2.47.0...v2.48.0

Features

  • api: accept None for prompt_cache_key/safety_identifier (36820e6)
  • api: add support for spend_limit admin apis (1ff13af)

v2.47.0

2.47.0 (2026-07-21)

Full Changelog: v2.46.0...v2.47.0

Features

  • client: Add experimental runtime support for HTTPX2 clients (#3524) (317260c)
  • stlc: configurable CI runner and private-production-repo support in workflow templates (4303e97)

Bug Fixes

  • deps: require patched aiohttp on Python 3.10+ (#3515) (d4dceb2)

v2.46.0

2.46.0 (2026-07-17)

... (truncated)

Changelog

Sourced from openai's changelog.

2.50.0 (2026-07-28)

Full Changelog: v2.49.0...v2.50.0

Features

  • api: transcription model updates (fd57393)

Bug Fixes

  • audio: restore transcription keyword overload (713a262)

2.49.0 (2026-07-27)

Full Changelog: v2.48.0...v2.49.0

Features

  • require Python 3.10 and automate version reviews (#3537) (d4c151d)

2.48.0 (2026-07-23)

Full Changelog: v2.47.0...v2.48.0

Features

  • api: accept None for prompt_cache_key/safety_identifier (36820e6)
  • api: add support for spend_limit admin apis (1ff13af)

2.47.0 (2026-07-21)

Full Changelog: v2.46.0...v2.47.0

Features

  • client: Add experimental runtime support for HTTPX2 clients (#3524) (317260c)
  • stlc: configurable CI runner and private-production-repo support in workflow templates (4303e97)

Bug Fixes

  • deps: require patched aiohttp on Python 3.10+ (#3515) (d4dceb2)

2.46.0 (2026-07-17)

Full Changelog: v2.45.0...v2.46.0

Features

... (truncated)

Commits
  • 4f40426 release: 2.50.0
  • 92594f1 fix(audio): restore transcription keyword overload
  • 59ed1dc feat(api): transcription model updates
  • 6ba31bc release: 2.49.0 (#3539)
  • 90483ad test: support a hermetic local API reference (#3542)
  • d4c151d feat: require Python 3.10 and automate version reviews (#3537)
  • 8a6adcb release: 2.48.0
  • cbd2fba feat(api): add support for spend_limit admin apis
  • 00709f2 feat(api): accept None for prompt_cache_key/safety_identifier
  • e67afa8 release: 2.47.0
  • Additional commits viewable in compare view

Updates azure-ai-projects from 2.2.0 to 2.4.0

Updates agent-framework-core from 1.7.0 to 1.12.1

Release notes

Sourced from agent-framework-core's releases.

python-1.12.1

[1.12.1] - 2026-07-22

Added

  • agent-framework-openai: Add explicit prompt cache breakpoints for GPT-5.6 models and a usage sample (#7163)

Changed

  • agent-framework-ag-ui: Promote the package from release candidate to stable
  • agent-framework-core: Add security guidance for custom MCP Streamable HTTP clients (#7245)

Fixed

  • agent-framework-gemini: Preserve Gemini 3 thought signatures across function-call replays (#7095)
  • agent-framework-core, agent-framework-foundry, agent-framework-foundry-hosting, agent-framework-openai: Fix stateless replay of reasoning-paired tool calls (#7233)

Full Changelog: microsoft/agent-framework@python-1.12.0...python-1.12.1

python-1.12.0

[1.12.0] - 2026-07-21

Added

  • agent-framework-azure-cosmos-memory: Add an alpha Azure Cosmos DB semantic-memory context provider with fact extraction, user profiles, samples, and integration coverage (#6719)
  • agent-framework-azurefunctions, agent-framework-core, agent-framework-durabletask: Add HITL response-URL addressing for requests raised from inside workflows (#7001)
  • agent-framework-core: Add cross-session origin attribution to context-injected messages (#7041)
  • agent-framework-core, agent-framework-tools: Warn when auto-approved tools have name collisions (#7090)
  • agent-framework-core: Add a session_provider option to MCPSkillsSource and MCPSkill (mutually exclusive with client) that resolves the MCP session on every fetch, keeping cached skills reconnect-safe when the underlying session is replaced (#7135)
  • agent-framework-hosting-a2a: Add app-owned A2A hosting helpers (#7050)
  • agent-framework-hosting-mcp: Add app-owned MCP hosting helpers for exposing agents and workflows as native MCP tools (#7209)
  • agent-framework-hosting-responses: [BREAKING] Add Responses conversation ID creation and parsing helpers, and distinguish conversation IDs from previous response IDs (#7234)
  • agent-framework-hosting-telegram: Add Telegram hosting helpers and samples (#7047)
  • samples: Add a Microsoft OpenTelemetry Distro observability sample (#5632)

Changed

  • agent-framework-ag-ui: [BREAKING] Emit TOOL_CALL events for workflow participant tool calls (#7039)
  • agent-framework-a2a: Reduce A2AExecutor log noise for content types without protocol mappings (#7034)
  • agent-framework-ag-ui, agent-framework-core: Optimize shared serialization paths (#7165)
  • agent-framework-ag-ui, agent-framework-bedrock, agent-framework-claude, agent-framework-core, agent-framework-github-copilot, agent-framework-ollama, agent-framework-openai: Normalize chat finish reasons across providers (#7105)
  • agent-framework-anthropic, agent-framework-azure-contentunderstanding, agent-framework-azure-cosmos, agent-framework-core, agent-framework-declarative, agent-framework-devui, agent-framework-foundry, agent-framework: Update Microsoft Foundry branding in shipped APIs and package documentation (#6999)
  • agent-framework-azure-contentunderstanding, agent-framework-azure-cosmos-memory, agent-framework-chatkit, agent-framework-core, agent-framework-durabletask, agent-framework-foundry, agent-framework-foundry-hosting, agent-framework-gemini, agent-framework-hyperlight, agent-framework-lab, agent-framework-monty, agent-framework-openai, agent-framework-tools, agent-framework: Consolidate dependency updates and compatibility adjustments (#7204)
  • agent-framework-azurefunctions, agent-framework-devui, agent-framework-foundry, agent-framework-hosting-responses, agent-framework-lab, agent-framework-mistral, agent-framework: Clean up dependency groups and compatibility handling (#7046)
  • agent-framework-azurefunctions, agent-framework-durabletask: Normalize initial durable workflow inputs across hosting paths (#7205)
  • agent-framework-core: [BREAKING — experimental] Correct harness before-strategy compaction when state persists per service call (#7055)
  • agent-framework-core: [BREAKING] Graduate create_harness_agent from experimental to stable (#7120)
  • agent-framework-core: Graduate the mode and todo providers from experimental to stable (#7053)
  • agent-framework-core: Graduate ToolApprovalMiddleware from experimental to stable (#7106)
  • agent-framework-core: Graduate FileMemoryProvider from experimental to stable (#7113)
  • agent-framework-core: Make FileAccessProvider opt-in for harness agents (#7094)
  • agent-framework-core: Serialize tool definitions best-effort for observability (#7029)
  • agent-framework-declarative: Promote declarative workflows from release candidate to stable (#7065)
  • agent-framework-devui: Refine request logging (#7083)
  • agent-framework-foundry-hosting: Promote the package to beta and add it to the main installation surface; make the Foundry Toolbox MCP skills sample self-contained (#7099)

... (truncated)

Commits
  • 711d6f2 Bump Python package versions for 1.12.1 release (#7273)
  • bd17a64 Restore dedicated DevFlow Copilot authentication (#7276)
  • 5147579 Python: Enforce package coverage by lifecycle (#7261)
  • 2d34dee Reduce workflow credential exposure (#7270)
  • a2927c1 Python: Fix stateless replay of reasoning-paired tool calls (#7233)
  • c68c099 .NET: Fix expensive logging (#7268)
  • 6180272 Python: Support prompt cache breakpoints for GPT-5.6 models in OpenAI clients...
  • ddb0622 .NET: Added GettingStarted example demonstrating Dapr as an agent provider (#...
  • 12b2325 Updating dotnet version for release. (#7265)
  • bfc73a5 .NET: Fix declarative autosend output (#7217)
  • Additional commits viewable in compare view

Updates pypdf from 6.12.2 to 6.14.2

Release notes

Sourced from pypdf's releases.

Version 6.14.2, 2026-06-23

What's new

Security (SEC)

Full Changelog

Version 6.14.1, 2026-06-23

What's new

Security (SEC)

Full Changelog

Version 6.14.0, 2026-06-22

What's new

Security (SEC)

New Features (ENH)

Robustness (ROB)

Full Changelog

Version 6.13.3, 2026-06-17

What's new

Security (SEC)

Performance Improvements (PI)

Robustness (ROB)

Maintenance (MAINT)

Full Changelog

Version 6.13.2, 2026-06-10

What's new

... (truncated)

Changelog

Sourced from pypdf's changelog.

Version 6.14.2, 2026-06-23

Security (SEC)

  • Avoid infinite loops for incomplete ASCII85 and ASCIIHex inline images (#3892)

Full Changelog

Version 6.14.1, 2026-06-23

Security (SEC)

  • Detect end of stream during inline image end marker detection (#3891)

Full Changelog

Version 6.14.0, 2026-06-22

Security (SEC)

  • Apply general limit for requested image size (#3888)
  • Speed up recovery when reading broken cross-reference table (#3887)

New Features (ENH)

  • Check whether image is displayed on a given page (#3738)

Robustness (ROB)

  • Several fixes

Full Changelog

Version 6.13.3, 2026-06-17

Security (SEC)

  • Apply MAX_DECLARED_STREAM_LENGTH to streams without length as well (#3871)

Performance Improvements (PI)

  • Avoid per-pixel getpixel loop for 1-bit indexed images (#3854)

Robustness (ROB)

  • Several fixes

Maintenance (MAINT)

  • Make mypy assert messages consistent (#3849)

Full Changelog

Version 6.13.2, 2026-06-10

Security (SEC)

  • Detect multi-hop cyclic /Pages trees in _flatten to prevent SIGSEGV (#3847)

Robustness (ROB)

... (truncated)

Commits
  • 2266ee8 REL: 6.14.2
  • 5a33a46 SEC: Avoid infinite loops for incomplete ASCII85 and ASCIIHex inline images (...
  • 1ee4e58 REL: 6.14.1
  • ec3b145 SEC: Detect end of stream during inline image end marker detection (#3891)
  • c6cd82e ROB: Tolerate malformed inline image settings in _read_inline_image (#3889)
  • 0ae42ba ROB: Tolerate malformed page label entries in get_label_from_nums (#3884)
  • 50617b5 ROB: Tolerate malformed Tm operand count in extract_text (#3877)
  • 86e5a82 MAINT: Improve readability (#3874)
  • 83cb25f DEV: Fix sample files commit
  • 06588ec REL: 6.14.0
  • Additional commits viewable in compare view

Updates pandas from 3.0.3 to 3.0.5

Release notes

Sourced from pandas's releases.

pandas 3.0.5

We are pleased to announce the release of pandas 3.0.5. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

pandas 3.0.4

We are pleased to announce the release of pandas 3.0.4. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Commits
  • e68db09 RLS: 3.0.5
  • 0697623 Backport PR #66428: DOC: update whatsnew for 3.0.5 (#66430)
  • 5d846d0 Backport PR #66090 on branch 3.0.x (BLD: exclude numpy 2.5.0 when building wh...
  • bef7a2b Backport PR #66169 on branch 3.0.x (CI: Fix pyarrow-nightly job (stale nightl...
  • 8188eb1 RLS: 3.0.4 (#66079)
  • bd35f15 [3.0.x] BUG: fix CoW issue in eval() (#66072)
  • 6195872 [backport 3.0.x] BUG: anchor whole alternation in Series.str.match for PyArro...
  • 70313be Backport PR #66051 on branch 3.0.x (BUG: fix regression in DataFrame setitem ...
  • 57ed3e2 [backport 3.0.x] Bump pypa/cibuildwheel from 3.4.1 to 4.1.0 (#65934) (#66026)
  • f9693fc [backport 3.0.x] BUG(pandas 3.0 regression): drop(index=...) doesn't accept N...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…dates

Bumps the index-scripts-deps group with 6 updates in the /infra/scripts/index_scripts directory:

| Package | From | To |
| --- | --- | --- |
| [azure-storage-file-datalake](https://github.com/Azure/azure-sdk-for-python) | `12.24.0` | `12.25.0` |
| [openai](https://github.com/openai/openai-python) | `2.40.0` | `2.50.0` |
| azure-ai-projects | `2.2.0` | `2.4.0` |
| [agent-framework-core](https://github.com/microsoft/agent-framework) | `1.7.0` | `1.12.1` |
| [pypdf](https://github.com/py-pdf/pypdf) | `6.12.2` | `6.14.2` |
| [pandas](https://github.com/pandas-dev/pandas) | `3.0.3` | `3.0.5` |



Updates `azure-storage-file-datalake` from 12.24.0 to 12.25.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-storage-file-datalake_12.24.0...azure-storage-file-datalake_12.25.0)

Updates `openai` from 2.40.0 to 2.50.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v2.40.0...v2.50.0)

Updates `azure-ai-projects` from 2.2.0 to 2.4.0

Updates `agent-framework-core` from 1.7.0 to 1.12.1
- [Release notes](https://github.com/microsoft/agent-framework/releases)
- [Commits](microsoft/agent-framework@dotnet-1.7.0...python-1.12.1)

Updates `pypdf` from 6.12.2 to 6.14.2
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@6.12.2...6.14.2)

Updates `pandas` from 3.0.3 to 3.0.5
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v3.0.3...v3.0.5)

---
updated-dependencies:
- dependency-name: azure-storage-file-datalake
  dependency-version: 12.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: index-scripts-deps
- dependency-name: openai
  dependency-version: 2.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: index-scripts-deps
- dependency-name: azure-ai-projects
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: index-scripts-deps
- dependency-name: agent-framework-core
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: index-scripts-deps
- dependency-name: pypdf
  dependency-version: 6.14.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: index-scripts-deps
- dependency-name: pandas
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: index-scripts-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 1, 2026
@dependabot
dependabot Bot requested a review from Avijit-Microsoft as a code owner August 1, 2026 14:36
@dependabot dependabot Bot added the python Pull requests that update Python code label Aug 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants