Merge pull request #536 from microsoft/feature/dependabot-security-fixes

chore: Fix Dependabot security alerts

Author: Roopan-Microsoft

src/ContentProcessor/pyproject.toml

@@ -5,36 +5,39 @@ description = "Content Process Gold Standard Solution Accelerator - Content Proc
 readme = "README.md"
 requires-python = ">=3.12"
 dependencies = [
-    "agent-framework>=1.0.0b260127",
-    "azure-ai-inference>=1.0.0b9",
-    "azure-appconfiguration>=1.7.2",
-    "azure-identity>=1.25.1",
-    "azure-storage-blob>=12.28.0",
-    "azure-storage-queue>=12.15.0",
-    "certifi>=2026.1.4",
-    "charset-normalizer>=3.4.4",
-    "opentelemetry-api>=1.39.1",
-    "pandas>=2.3.3",
-    "pdf2image>=1.17.0",
-    "poppler-utils>=0.1.0",
-    "pydantic>=2.12.5",
-    "pydantic-settings>=2.12.0",
-    "pymongo>=4.16.0",
-    "python-dotenv>=1.2.1",
-    "tiktoken>=0.12.0",
+    "agent-framework==1.0.0b260127",
+    "azure-ai-inference==1.0.0b9",
+    "azure-appconfiguration==1.8.0",
+    "azure-identity==1.26.0b1",
+    "azure-storage-blob==12.29.0b1",
+    "azure-storage-queue==12.16.0b1",
+    "certifi==2026.1.4",
+    "charset-normalizer==3.4.4",
+    "opentelemetry-api==1.39.1",
+    "pandas==3.0.0",
+    "pdf2image==1.17.0",
+    "poppler-utils==0.1.0",
+    "pydantic==2.12.5",
+    "pydantic-settings==2.12.0",
+    "pymongo==4.16.0",
+    "python-dotenv==1.2.1",
+    "tiktoken==0.12.0",
+    "protobuf==6.33.6",
+    "pyjwt==2.12.1",
+    "pyasn1==0.6.3",
 ]
 
 
 [dependency-groups]
 dev = [
-    "coverage>=7.13.1",
-    "pydantic>=2.12.5",
-    "pytest>=9.0.2",
-    "pytest-asyncio>=1.3.0",
-    "pytest-cov>=7.0.0",
-    "pytest-mock>=3.15.1",
-    "mongomock>=4.3.0",
-    "ruff>=0.14.11",
+    "coverage==7.13.2",
+    "pydantic==2.12.5",
+    "pytest==9.0.2",
+    "pytest-asyncio==1.3.0",
+    "pytest-cov==7.0.0",
+    "pytest-mock==3.15.1",
+    "mongomock==4.3.0",
+    "ruff==0.14.14",
 ]
 
 [tool.pytest.ini_options]

src/ContentProcessor/requirements.txt

@@ -1,17 +1,17 @@
 annotated-types==0.7.0
 azure-ai-inference==1.0.0b9
-azure-appconfiguration==1.7.2
+azure-appconfiguration==1.8.0
 azure-core==1.38.0
-azure-identity==1.25.1
-azure-storage-blob==12.28.0
-azure-storage-queue==12.15.0
+azure-identity==1.26.0b1
+azure-storage-blob==12.29.0b1
+azure-storage-queue==12.16.0b1
 certifi==2026.1.4
 cffi==2.0.0
 charset-normalizer==3.4.4
 click==8.3.1
 colorama==0.4.6
-coverage==7.13.1
-cryptography==46.0.5
+coverage==7.13.2
+cryptography==46.0.7
 dnspython==2.8.0
 idna==3.11
 iniconfig==2.3.0
@@ -21,7 +21,7 @@ msal==1.34.0
 msal-extensions==1.3.1
 numpy==2.4.1
 packaging==25.0
-pandas==2.3.3
+pandas==3.0.0
 pdf2image==1.17.0
 pillow==12.1.1
 pluggy==1.6.0
@@ -31,7 +31,7 @@ pydantic==2.12.5
 pydantic-core==2.41.5
 pydantic-settings==2.12.0
 pygments==2.19.2
-pyjwt==2.10.1
+pyjwt==2.12.1
 pymongo==4.16.0
 pytest==9.0.2
 pytest-asyncio==1.3.0
@@ -41,8 +41,8 @@ python-dateutil==2.9.0.post0
 python-dotenv==1.2.1
 pytz==2025.2
 regex==2025.11.3
-requests==2.32.5
-ruff==0.14.11
+requests==2.33.0
+ruff==0.14.14
 sentinels==1.1.1
 six==1.17.0
 tiktoken==0.12.0

src/ContentProcessor/uv.lock

@@ -5,35 +5,39 @@ description = "Add your description here"
 readme = "README.md"
 requires-python = ">=3.12"
 dependencies = [
-    "azure-appconfiguration>=1.7.2",
-    "azure-identity>=1.25.1",
-    "azure-storage-blob>=12.28.0",
-    "azure-storage-queue>=12.15.0",
-    "certifi>=2026.1.4",
-    "fastapi[standard]>=0.128.0",
-    "poppler-utils>=0.1.0",
-    "pydantic>=2.12.5",
-    "pydantic-settings>=2.12.0",
-    "pygments>=2.19.2",
-    "pymongo>=4.16.0",
-    "python-dotenv>=1.0.1",
-    "starlette>=0.49.1",
-    "uvicorn[standard]>=0.34.0",
-    "h11>=0.16.0",
+    "azure-appconfiguration==1.7.2",
+    "azure-identity==1.25.1",
+    "azure-storage-blob==12.28.0",
+    "azure-storage-queue==12.15.0",
+    "certifi==2026.1.4",
+    "fastapi[standard]==0.128.0",
+    "poppler-utils==0.1.0",
+    "pydantic==2.12.5",
+    "pydantic-settings==2.12.0",
+    "pygments==2.19.2",
+    "pymongo==4.16.0",
+    "python-dotenv==1.2.1",
+    "python-multipart==0.0.22",
+    "starlette==0.50.0",
+    "uvicorn[standard]==0.40.0",
+    "h11==0.16.0",
     "urllib3~=2.6.0",
-    "opentelemetry-api>=1.39.1",
-    "sas-cosmosdb>=0.1.4",
+    "opentelemetry-api==1.39.1",
+    "sas-cosmosdb==0.1.4",
+    "cryptography==46.0.7",
+    "pyjwt==2.12.0",
 ]
 
 [dependency-groups]
 dev = [
-    "pytest>=9.0.2",
-    "pytest-asyncio>=0.25.0",
-    "pytest-cov>=7.0.0",
-    "pytest-mock>=3.15.1",
-    "coverage>=7.13.1",
-    "pre-commit>=4.5.1",
-    "ruff>=0.14.11",
+    "black==26.3.1",
+    "pytest==9.0.2",
+    "pytest-asyncio==1.3.0",
+    "pytest-cov==7.0.0",
+    "pytest-mock==3.15.1",
+    "coverage==7.13.1",
+    "pre-commit==4.5.1",
+    "ruff==0.14.11",
 ]
 
 [tool.ruff.format]

src/ContentProcessorAPI/pyproject.toml

@@ -11,7 +11,7 @@ cffi==2.0.0
 charset-normalizer==3.4.4
 click==8.3.1
 colorama==0.4.6
-cryptography==46.0.3
+cryptography==46.0.7
 dnspython==2.8.0
 email-validator==2.3.0
 fastapi==0.128.0
@@ -37,12 +37,12 @@ pydantic-core==2.41.5
 pydantic-extra-types==2.11.0
 pydantic-settings==2.12.0
 pygments==2.19.2
-pyjwt==2.10.1
+pyjwt==2.12.0
 pymongo==4.16.0
 python-dotenv==1.2.1
 python-multipart==0.0.22
 pyyaml==6.0.3
-requests==2.32.5
+requests==2.33.0
 rich==14.2.0
 rich-toolkit==0.17.1
 rignore==0.7.6