Open
Conversation
Bumps the npm-deps group with 16 updates in the /content-gen/src/app/frontend directory: | Package | From | To | | --- | --- | --- | | [@fluentui/react-components](https://github.com/microsoft/fluentui) | `9.72.7` | `9.73.1` | | [@fluentui/react-icons](https://github.com/microsoft/fluentui-system-icons) | `2.0.315` | `2.0.320` | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `18.3.1` | `19.2.4` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `18.3.27` | `19.2.14` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `18.3.1` | `19.2.4` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `18.3.7` | `19.2.3` | | [react-markdown](https://github.com/remarkjs/react-markdown) | `9.1.0` | `10.1.0` | | [uuid](https://github.com/uuidjs/uuid) | `10.0.0` | `13.0.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.10.1` | `25.3.3` | | [@types/uuid](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/uuid) | `10.0.0` | `11.0.0` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `7.18.0` | `8.56.1` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `7.18.0` | `8.56.1` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `4.7.0` | `5.1.4` | | [eslint](https://github.com/eslint/eslint) | `8.57.1` | `10.0.2` | | [eslint-plugin-react-hooks](https://github.com/facebook/react/tree/HEAD/packages/eslint-plugin-react-hooks) | `4.6.2` | `7.0.1` | | [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.4.24` | `0.5.2` | Bumps the npm-deps group with 2 updates in the /content-gen/src/app/frontend-server directory: [express](https://github.com/expressjs/express) and [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware). Updates `@fluentui/react-components` from 9.72.7 to 9.73.1 - [Release notes](https://github.com/microsoft/fluentui/releases) - [Commits](https://github.com/microsoft/fluentui/compare/@fluentui/react-components_v9.72.7...@fluentui/react-components_v9.73.1) Updates `@fluentui/react-icons` from 2.0.315 to 2.0.320 - [Changelog](https://github.com/microsoft/fluentui-system-icons/blob/main/docs/releases.md) - [Commits](https://github.com/microsoft/fluentui-system-icons/commits) Updates `react` from 18.3.1 to 19.2.4 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.4/packages/react) Updates `@types/react` from 18.3.27 to 19.2.14 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 18.3.1 to 19.2.4 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.4/packages/react-dom) Updates `@types/react-dom` from 18.3.7 to 19.2.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `react-markdown` from 9.1.0 to 10.1.0 - [Release notes](https://github.com/remarkjs/react-markdown/releases) - [Changelog](https://github.com/remarkjs/react-markdown/blob/main/changelog.md) - [Commits](remarkjs/react-markdown@9.1.0...10.1.0) Updates `uuid` from 10.0.0 to 13.0.0 - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](uuidjs/uuid@v10.0.0...v13.0.0) Updates `@types/node` from 24.10.1 to 25.3.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/react` from 18.3.27 to 19.2.14 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 18.3.7 to 19.2.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `@types/uuid` from 10.0.0 to 11.0.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/uuid) Updates `@typescript-eslint/eslint-plugin` from 7.18.0 to 8.56.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.56.1/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 7.18.0 to 8.56.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.56.1/packages/parser) Updates `@vitejs/plugin-react` from 4.7.0 to 5.1.4 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@5.1.4/packages/plugin-react) Updates `eslint` from 8.57.1 to 10.0.2 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v8.57.1...v10.0.2) Updates `eslint-plugin-react-hooks` from 4.6.2 to 7.0.1 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/packages/eslint-plugin-react-hooks/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/HEAD/packages/eslint-plugin-react-hooks) Updates `eslint-plugin-react-refresh` from 0.4.24 to 0.5.2 - [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases) - [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md) - [Commits](ArnaudBarre/eslint-plugin-react-refresh@v0.4.24...v0.5.2) Updates `express` from 4.22.1 to 5.2.1 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@v4.22.1...v5.2.1) Updates `http-proxy-middleware` from 2.0.9 to 3.0.5 - [Release notes](https://github.com/chimurai/http-proxy-middleware/releases) - [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/master/CHANGELOG.md) - [Commits](chimurai/http-proxy-middleware@v2.0.9...v3.0.5) --- updated-dependencies: - dependency-name: "@fluentui/react-components" dependency-version: 9.73.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: "@fluentui/react-icons" dependency-version: 2.0.320 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-deps - dependency-name: react dependency-version: 19.2.4 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-deps - dependency-name: "@types/react" dependency-version: 19.2.14 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-deps - dependency-name: react-dom dependency-version: 19.2.4 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-deps - dependency-name: "@types/react-dom" dependency-version: 19.2.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-deps - dependency-name: react-markdown dependency-version: 10.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-deps - dependency-name: uuid dependency-version: 13.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-deps - dependency-name: "@types/node" dependency-version: 25.3.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-deps - dependency-name: "@types/react" dependency-version: 19.2.14 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-deps - dependency-name: "@types/react-dom" dependency-version: 19.2.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-deps - dependency-name: "@types/uuid" dependency-version: 11.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-deps - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.56.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-deps - dependency-name: "@typescript-eslint/parser" dependency-version: 8.56.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-deps - dependency-name: "@vitejs/plugin-react" dependency-version: 5.1.4 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-deps - dependency-name: eslint dependency-version: 10.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-deps - dependency-name: eslint-plugin-react-hooks dependency-version: 7.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-deps - dependency-name: eslint-plugin-react-refresh dependency-version: 0.5.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-deps - dependency-name: express dependency-version: 5.2.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-deps - dependency-name: http-proxy-middleware dependency-version: 3.0.5 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-deps ... Signed-off-by: dependabot[bot] <support@github.com>
Updates the requirements on [azure-ai-projects](https://github.com/Azure/azure-sdk-for-python), [azure-identity](https://github.com/Azure/azure-sdk-for-python), [ansible-core](https://github.com/ansible/ansible) and [agent-framework](https://github.com/microsoft/agent-framework) to permit the latest version. Updates `azure-ai-projects` from 1.0.0b12 to 2.0.0b4 - [Release notes](https://github.com/Azure/azure-sdk-for-python/releases) - [Commits](Azure/azure-sdk-for-python@azure-ai-projects_1.0.0b12...azure-ai-projects_2.0.0b4) Updates `azure-identity` from 1.20.0 to 1.25.2 - [Release notes](https://github.com/Azure/azure-sdk-for-python/releases) - [Commits](Azure/azure-sdk-for-python@azure-identity_1.20.0...azure-identity_1.25.2) Updates `ansible-core` to 2.20.3 - [Release notes](https://github.com/ansible/ansible/releases) - [Commits](ansible/ansible@v2.17.0...v2.20.3) Updates `agent-framework` from 1.0.0b260114 to 1.0.0rc2 - [Release notes](https://github.com/microsoft/agent-framework/releases) - [Commits](microsoft/agent-framework@python-1.0.0b260114...python-1.0.0rc2) Updates `agent-framework` from 1.0.0b260114 to 1.0.0rc2 - [Release notes](https://github.com/microsoft/agent-framework/releases) - [Commits](microsoft/agent-framework@python-1.0.0b260114...python-1.0.0rc2) --- updated-dependencies: - dependency-name: azure-ai-projects dependency-version: 2.0.0b4 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-deps - dependency-name: azure-identity dependency-version: 1.25.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-deps - dependency-name: ansible-core dependency-version: 2.20.3 dependency-type: direct:production dependency-group: python-deps - dependency-name: agent-framework dependency-version: 1.0.0rc2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-deps - dependency-name: agent-framework dependency-version: 1.0.0rc2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-deps ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps the github-actions group with 7 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4` | `6` | | [microsoft/template-validation-action](https://github.com/microsoft/template-validation-action) | `0.4.3` | `0.4.4` | | [tj-actions/changed-files](https://github.com/tj-actions/changed-files) | `47.0.1` | `47.0.4` | | [lycheeverse/lychee-action](https://github.com/lycheeverse/lychee-action) | `2.7.0` | `2.8.0` | | [codfish/semantic-release-action](https://github.com/codfish/semantic-release-action) | `3` | `5` | | [amannn/action-semantic-pull-request](https://github.com/amannn/action-semantic-pull-request) | `5` | `6` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `6` | `7` | Updates `actions/checkout` from 4 to 6 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4...v6) Updates `microsoft/template-validation-action` from 0.4.3 to 0.4.4 - [Release notes](https://github.com/microsoft/template-validation-action/releases) - [Commits](microsoft/template-validation-action@v0.4.3...v0.4.4) Updates `tj-actions/changed-files` from 47.0.1 to 47.0.4 - [Release notes](https://github.com/tj-actions/changed-files/releases) - [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md) - [Commits](tj-actions/changed-files@e002140...7dee1b0) Updates `lycheeverse/lychee-action` from 2.7.0 to 2.8.0 - [Release notes](https://github.com/lycheeverse/lychee-action/releases) - [Commits](lycheeverse/lychee-action@v2.7.0...v2.8.0) Updates `codfish/semantic-release-action` from 3 to 5 - [Release notes](https://github.com/codfish/semantic-release-action/releases) - [Changelog](https://github.com/codfish/semantic-release-action/blob/main/RELEASE_NOTES_V5.md) - [Commits](codfish/semantic-release-action@v3...v5) Updates `amannn/action-semantic-pull-request` from 5 to 6 - [Release notes](https://github.com/amannn/action-semantic-pull-request/releases) - [Changelog](https://github.com/amannn/action-semantic-pull-request/blob/main/CHANGELOG.md) - [Commits](amannn/action-semantic-pull-request@v5...v6) Updates `actions/upload-artifact` from 6 to 7 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v6...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: microsoft/template-validation-action dependency-version: 0.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: tj-actions/changed-files dependency-version: 47.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: lycheeverse/lychee-action dependency-version: 2.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: codfish/semantic-release-action dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: amannn/action-semantic-pull-request dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps the github-actions group with 4 updates: [tj-actions/changed-files](https://github.com/tj-actions/changed-files), [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action), [docker/build-push-action](https://github.com/docker/build-push-action) and [docker/login-action](https://github.com/docker/login-action). Updates `tj-actions/changed-files` from 47.0.4 to 47.0.5 - [Release notes](https://github.com/tj-actions/changed-files/releases) - [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md) - [Commits](tj-actions/changed-files@7dee1b0...22103cc) Updates `docker/setup-buildx-action` from 3 to 4 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@v3...v4) Updates `docker/build-push-action` from 6 to 7 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@v6...v7) Updates `docker/login-action` from 3 to 4 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@v3...v4) --- updated-dependencies: - dependency-name: tj-actions/changed-files dependency-version: 47.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: docker/setup-buildx-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/build-push-action dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/login-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
…-solution-accelerator into dependabotchanges
Contributor
There was a problem hiding this comment.
Pull request overview
This PR updates dependencies across the frontend, backend proxy server, Python infra requirements, and GitHub Actions workflows, and adjusts the frontend server’s proxy/static routing to align with the Express 5 upgrade.
Changes:
- Bump Node/JS dependencies (React 19, Fluent UI, tooling) and backend server dependencies (Express 5, http-proxy-middleware 3).
- Update Python infra requirements for the VS Code web endpoint.
- Update multiple GitHub Actions to newer major versions.
Reviewed changes
Copilot reviewed 13 out of 15 changed files in this pull request and generated 1 comment.
Show a summary per file
| File | Description |
|---|---|
src/App/server/server.js |
Updates proxy path rewriting and changes SPA fallback routing for Express 5. |
src/App/server/package.json |
Upgrades Express and http-proxy-middleware versions. |
src/App/server/package-lock.json |
Locks updated dependency graph for the server package upgrades. |
src/App/package.json |
Updates frontend/runtime + dev dependencies and adds an override. |
infra/vscode_web/endpoint-requirements.txt |
Bumps Azure/Ansible Python requirements for the VS Code web endpoint. |
.github/workflows/test-automation-v2.yml |
Updates actions/upload-artifact major version. |
.github/workflows/stale-bot.yml |
Updates actions/upload-artifact major version. |
.github/workflows/scheduled-Dependabot-PRs-Auto-Merge.yml |
Updates actions/checkout major version. |
.github/workflows/pr-title-checker.yml |
Updates semantic PR title checker action major version. |
.github/workflows/job-docker-build.yml |
Updates Docker build actions major versions. |
.github/workflows/docker-build.yml |
Updates actions/checkout and Docker build actions major versions. |
.github/workflows/create-release.yml |
Updates actions/checkout and semantic-release action major versions. |
.github/workflows/broken-links-checker.yml |
Updates pinned SHA for changed-files action and bumps lychee action version. |
.github/workflows/azure-dev.yml |
Updates actions/checkout major version. |
Files not reviewed (1)
- src/App/server/package-lock.json: Language not supported
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Purpose
This pull request primarily updates dependencies across the project, including both JavaScript/TypeScript packages and GitHub Actions, to their latest versions for improved security, stability, and compatibility. It also introduces minor adjustments to proxy path rewriting and static file serving in the backend server. Below are the most important changes grouped by theme:
Dependency and Package Updates
src/App/package.json, includingreactto v19,@fluentui/react-componentsto v9.73.1,react-markdownto v10.1.0, and several dev dependencies, ensuring compatibility with the latest ecosystem and improving performance and security.src/App/server/package.json, bumpingexpressto v5.2.1 andhttp-proxy-middlewareto v3.0.5 for enhanced middleware support and bug fixes.infra/vscode_web/endpoint-requirements.txt, includingazure-ai-projectsto v2.0.0b4 andansible-coreto v2.20.3, aligning with the latest Azure and Ansible releases.GitHub Actions Workflow Updates
actions/checkout@v6,docker/build-push-action@v7,lycheeverse/lychee-action@v2.8.0,amannn/action-semantic-pull-request@v6, and others) to ensure CI/CD reliability, security, and access to new features. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14]Backend Server Logic Adjustments
src/App/server/server.jsto rewrite all paths to/api/, improving API routing and flexibility for future backend endpoints.src/App/server/server.jsto use{*path}(Express 5 route syntax), ensuring correct SPA fallback behavior under the new Express version.Does this introduce a breaking change?
Golden Path Validation
Deployment Validation