Consolidate Python and .NET dependency updates - #14222
Merged
westey-m merged 4 commits intoJul 29, 2026
Merged
Conversation
Contributor
There was a problem hiding this comment.
Pull request overview
Consolidates multiple Dependabot updates by jointly updating Python (pyproject + uv lockfiles) and .NET central package versions, ensuring coordinated dependency constraints across supported platforms/Python versions.
Changes:
- Python: widen/adjust dependency ranges (e.g., azure-ai-projects, prance, transformers), constrain MCP to
<2.0, and refine platform/Python-version markers for ONNX + Pinecone. - Python: regenerate
uv.lockto reflect updated resolved versions (notably ONNX Runtime/GenAI split by Python version and pytest bump). - .NET: update central package versions for .NET Aspire and AWS SDK dependencies.
Reviewed changes
Copilot reviewed 2 out of 4 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| python/uv.lock | Regenerates lock resolution for updated Python dependency constraints (ONNX Runtime/GenAI split, pytest bump, etc.). |
| python/pyproject.toml | Updates Python dependency constraints and platform/Python-version markers (MCP <2.0, ONNX pairing, Pinecone Windows split, etc.). |
| dotnet/Directory.Packages.props | Bumps central package versions for Aspire.Hosting.Azure.Search and AWS SDK packages. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
westey-m
approved these changes
Jul 29, 2026
eavanvalkenburg
approved these changes
Jul 29, 2026
github-merge-queue
Bot
removed this pull request from the merge queue due to failed status checks
Jul 29, 2026
github-merge-queue
Bot
removed this pull request from the merge queue due to failed status checks
Jul 29, 2026
SergeyMenshykh
added a commit
to SergeyMenshykh/semantic-kernel
that referenced
this pull request
Jul 29, 2026
Resolve conflicts in python/pyproject.toml and python/uv.lock in favor of upstream. PR microsoft#14222 already constrained mcp to the 1.x series, so the local constraint added on this branch was redundant and is dropped in favor of the upstream `<2.0` specifier. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 4cab25f4-d987-42b3-bb34-e8d8a7185c80
This was referenced Jul 30, 2026
This was referenced Jul 30, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Motivation and Context
Consolidates the currently open Python and .NET Dependabot updates into one coordinated dependency change. This reduces duplicate review and CI work while preserving each source PR's update intent.
The npm and Yarn updates are intentionally excluded from this draft and remain in their original Dependabot PRs.
Related Issue
Supersedes:
Description
readlinemodule, while retaining the existing~=7.0range on macOS and Linux.Validation
Contribution Checklist