Skip to content

build: bump the python-deps group in /src/backend with 23 updates - #1117

Open
dependabot[bot] wants to merge 1 commit into
dependabotchangesfrom
dependabot/pip/src/backend/dependabotchanges/python-deps-61dcfd12aa
Open

build: bump the python-deps group in /src/backend with 23 updates#1117
dependabot[bot] wants to merge 1 commit into
dependabotchangesfrom
dependabot/pip/src/backend/dependabotchanges/python-deps-61dcfd12aa

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-deps group in /src/backend with 23 updates:

Package From To
azure-ai-evaluation 1.16.9 1.18.2
azure-ai-projects 2.2.0 2.4.0
azure-cosmos 4.16.1 4.16.2
azure-monitor-opentelemetry 1.8.8 1.8.9
fastapi 0.136.3 0.140.13
openai 2.40.0 2.50.0
opentelemetry-api 1.42.1 1.44.0
opentelemetry-exporter-otlp-proto-grpc 1.42.1 1.44.0
opentelemetry-exporter-otlp-proto-http 1.42.1 1.44.0
opentelemetry-instrumentation-fastapi 0.63b1 0.65b0
opentelemetry-instrumentation-openai 0.61.0 0.62.1
opentelemetry-sdk 1.42.1 1.44.0
python-multipart 0.0.30 0.0.32
uvicorn 0.48.0 0.52.0
mcp 1.27.2 2.0.0
agent-framework-core 1.7.0 1.12.1
agent-framework-orchestrations 1.0.0rc2 1.0.1
protobuf 7.35.0 7.35.1
cryptography 48.0.0 49.0.0
aiohttp 3.14.0 3.14.3
pyasn1 0.6.3 0.6.4
nltk 3.9.4 3.10.0
pytest 9.0.3 9.1.1

Updates azure-ai-evaluation from 1.16.9 to 1.18.2

Release notes

Sourced from azure-ai-evaluation's releases.

azure-ai-evaluation_1.18.2

1.18.2 (2026-07-21)

Features Added

  • Added support for admin-connected (BYO) judge models in prompty-based evaluators. Models configured with byo_model and project_endpoint are routed through the Foundry project Responses API, which resolves the connection and its authentication.

Bugs Fixed

  • Updated TaskNavigationEfficiencyEvaluator validation errors to name both accepted input aliases: response / actions and ground_truth / expected_actions.

azure-ai-evaluation_1.18.1

1.18.1 (2026-07-09)

Bugs Fixed

  • Enabled azure_ai_search, azure_fabric, and sharepoint_grounding tool calls for ToolCallSuccessEvaluator and ToolOutputUtilizationEvaluator. These tools were previously rejected because their tool_result payloads are structured (dict / list of dicts) and the internal [TOOL_RESULT] {result} formatter rendered them with str(), producing Python repr output (single quotes, 'role': 'user') that the LLM judges could not reliably ground on. The shared formatter now JSON-encodes non-string payloads via a new _stringify_tool_result helper (ensure_ascii=False to preserve customer locale data), and the shared ConversationValidator.UNSUPPORTED_TOOLS list (inherited by ToolDefinitionsValidator) is narrowed to allow these three tools. GroundednessEvaluator now uses a new GroundednessConversationValidator subclass that keeps the wider rejection list, matching the corresponding behavior in azureml-assets where Groundedness was intentionally not part of the enablement (a follow-up will land a context-extractor helper so Groundedness can also accept these tools). The remaining restricted tools (bing_grounding, bing_custom_search, web_search, browser_automation, code_interpreter_call, computer_call, openapi_call) continue to be rejected. ToolCallAccuracyEvaluator and ToolInputAccuracyEvaluator are unaffected — they do not render tool results into the judge prompt and already opt out of the unsupported-tool check.
  • Fixed OpenAPI tool-call validation in tool evaluators (e.g. ToolCallAccuracyEvaluator). OpenAPI tool definitions are expanded into their nested functions when present, so tool calls referencing a nested function name validate correctly, while OpenAPI tool definitions without nested functions are kept as is so tool calls referencing the top-level tool name continue to validate.

Other Changes

  • Conversation/tool message preprocessing now normalizes openapi_call / openapi_call_output content items to tool_call / tool_result (previously only function_call / function_call_output were

... (truncated)

Commits
  • 098fd1a [Evaluation] Prepare azure-ai-evaluation 1.18.2 release (#48181)
  • eb66669 [AutoPR azure-mgmt-netapp]-generated-from-SDK Generation - Python-6599277 (#4...
  • 1b2d288 Update smoketest code owners (#48204)
  • 11b85a4 [agentserver] Require core>=2.0.0b8 in dependent packages (activity, invocati...
  • bd774c0 Increment package version after release of azure-ai-agentserver-core (#48199)
  • 8fc7301 [agentserver-core] Add FoundryStateStore durable KV storage layer (#47763)
  • 46623e0 [agentserver] Bump core to 2.0.0b8 (span attribute enrichment fix) (#48194)
  • d744e92 [AutoPR azure-mgmt-containerservice]-generated-from-SDK Generation - Python-6...
  • db5dd77 [cognitiveservices] Unblock managed compute creation - fix misleading 202 / A...
  • 0c32675 Fix failing TypeSpec PR job SDK Validation - Python (#48186)
  • Additional commits viewable in compare view

Updates azure-ai-projects from 2.2.0 to 2.4.0

Updates azure-cosmos from 4.16.1 to 4.16.2

Release notes

Sourced from azure-cosmos's releases.

azure-cosmos_4.16.2

4.16.2 (2026-07-15)

Features Added

  • Added GlobalSecondaryIndexDefinition class and global_secondary_index keyword to create_container, create_container_if_not_exists, and replace_container methods for creating Global Secondary Index (GSI) containers. See PR 47468.

Bugs Fixed

  • Fixed KeyError: 'version' in SessionContainer.get_session_token (sync and async) when the container's partitionKey definition returned by the service does not include the optional version field. The error was silently swallowed by a broad except, causing the client to send no x-ms-session-token header on subsequent reads. Against the Dedicated Gateway, this turned every Session-consistency read into an Integrated Cache miss. partitionKey.version is now treated as optional and defaults to 1, matching how PartitionKey handles a missing version. See PR 47143
Commits
  • eb67b14 Revert "Add CFSClean enforcement (#48061)" (#48080)
  • c839b8b Cosmos: update changelog for release (#48005)
  • f0ac2f5 [ServiceBus] Document aiohttp>=3.14.0 recommendation for AmqpOverWebsocket (#...
  • c91747d Fix OneSettings validation logic to match schema (#48059)
  • 3eeccbb Add CFSClean enforcement (#48061)
  • 8f8855b [Service Bus] Drain receive link and release messages on receiver close (#42917)
  • 777741b Sync eng/common directory with azure-sdk-tools for PR 16342 (#48074)
  • ebe3b5e update autorelease resolve step as authenticated step (#48073)
  • e5f122a [monitor opentelemetry exporter] Handle ServiceResponseError as retryable to ...
  • 2cad71a Bump TypeSpec Python emitter to 0.63.3 (#48068)
  • Additional commits viewable in compare view

Updates azure-monitor-opentelemetry from 1.8.8 to 1.8.9

Commits

Updates fastapi from 0.136.3 to 0.140.13

Release notes

Sourced from fastapi's releases.

0.140.13

Fixes

Docs

0.140.12

Fixes

0.140.11

Fixes

  • 🐛 Fix response_model_* params ignored for non-generator endpoints with Iterable[..] return type. PR #15093 by @​YuriiMotov.

0.140.10

Fixes

Internal

0.140.9

Fixes

  • 🐛 Fix exclude_defaults not propagated to dict keys and values in jsonable_encoder. PR #16043 by @​MBGrao.

Internal

0.140.8

Fixes

0.140.6

Refactors

... (truncated)

Commits
  • 628663f 🔖 Release version 0.140.13 (#16096)
  • 0b54fd0 📝 Update release notes
  • e92a0dc 🐛 Fix status_code being ignored for SSE and JSONL streaming endpoints (#15937)
  • 6215d8a 📝 Update release notes
  • 12242c4 📝 Fix format_sse_event docstring rendering of \n\n terminator (#15613)
  • 70a8f3d 📝 Update release notes
  • 4f0152c 📝 Add API reference page for fastapi.sse (#15930)
  • 5f25505 🔖 Release version 0.140.12 (#16095)
  • 76e2c83 📝 Update release notes
  • 0f3e7bd 🐛 Fix line splitting in format_sse_event to comply with SSE spec (#15515)
  • Additional commits viewable in compare view

Updates openai from 2.40.0 to 2.50.0

Release notes

Sourced from openai's releases.

v2.50.0

2.50.0 (2026-07-28)

Full Changelog: v2.49.0...v2.50.0

Features

  • api: transcription model updates (fd57393)

Bug Fixes

  • audio: restore transcription keyword overload (713a262)

v2.49.0

2.49.0 (2026-07-27)

Full Changelog: v2.48.0...v2.49.0

Features

  • require Python 3.10 and automate version reviews (#3537) (d4c151d)

v2.48.0

2.48.0 (2026-07-23)

Full Changelog: v2.47.0...v2.48.0

Features

  • api: accept None for prompt_cache_key/safety_identifier (36820e6)
  • api: add support for spend_limit admin apis (1ff13af)

v2.47.0

2.47.0 (2026-07-21)

Full Changelog: v2.46.0...v2.47.0

Features

  • client: Add experimental runtime support for HTTPX2 clients (#3524) (317260c)
  • stlc: configurable CI runner and private-production-repo support in workflow templates (4303e97)

Bug Fixes

  • deps: require patched aiohttp on Python 3.10+ (#3515) (d4dceb2)

v2.46.0

2.46.0 (2026-07-17)

... (truncated)

Changelog

Sourced from openai's changelog.

2.50.0 (2026-07-28)

Full Changelog: v2.49.0...v2.50.0

Features

  • api: transcription model updates (fd57393)

Bug Fixes

  • audio: restore transcription keyword overload (713a262)

2.49.0 (2026-07-27)

Full Changelog: v2.48.0...v2.49.0

Features

  • require Python 3.10 and automate version reviews (#3537) (d4c151d)

2.48.0 (2026-07-23)

Full Changelog: v2.47.0...v2.48.0

Features

  • api: accept None for prompt_cache_key/safety_identifier (36820e6)
  • api: add support for spend_limit admin apis (1ff13af)

2.47.0 (2026-07-21)

Full Changelog: v2.46.0...v2.47.0

Features

  • client: Add experimental runtime support for HTTPX2 clients (#3524) (317260c)
  • stlc: configurable CI runner and private-production-repo support in workflow templates (4303e97)

Bug Fixes

  • deps: require patched aiohttp on Python 3.10+ (#3515) (d4dceb2)

2.46.0 (2026-07-17)

Full Changelog: v2.45.0...v2.46.0

Features

... (truncated)

Commits
  • 4f40426 release: 2.50.0
  • 92594f1 fix(audio): restore transcription keyword overload
  • 59ed1dc feat(api): transcription model updates
  • 6ba31bc release: 2.49.0 (#3539)
  • 90483ad test: support a hermetic local API reference (#3542)
  • d4c151d feat: require Python 3.10 and automate version reviews (#3537)
  • 8a6adcb release: 2.48.0
  • cbd2fba feat(api): add support for spend_limit admin apis
  • 00709f2 feat(api): accept None for prompt_cache_key/safety_identifier
  • e67afa8 release: 2.47.0
  • Additional commits viewable in compare view

Updates opentelemetry-api from 1.42.1 to 1.44.0

Changelog

Sourced from opentelemetry-api's changelog.

Version 1.44.0/0.65b0 (2026-07-16)

Added

  • opentelemetry-docker-tests: Refactor Docker tests to properly validate contents of exported telemetry (#5220)
  • opentelemetry-exporter-otlp-common: add shared package for common OTLP utilities (#5252)
  • opentelemetry-sdk: add MissingDependencyError exception for declarative configuration and use it for missing optional dependency errors (#5265)
  • opentelemetry-sdk: Add ability to refresh process dependent Resource attributes (#5280)
  • opentelemetry-sdk: add force_flush method to LogRecordExporter ABC (#5294)
  • opentelemetry-sdk: Make it possible to limit the size of stored spans in InMemorySpanExporter (#5296)
  • opentelemetry-sdk: add log record limits environment variables OTEL_LOGRECORD_ATTRIBUTE_COUNT_LIMIT and OTEL_LOGRECORD_ATTRIBUTE_VALUE_LENGTH_LIMIT (#5300)
  • opentelemetry-sdk: add support for file exporter with declarative config (#5311)
  • opentelemetry-sdk: expose SynchronousMultiLogRecordProcessor and ConcurrentMultiLogRecordProcessor publicly (#5327)
  • opentelemetry-sdk: point the declarative configuration package README at the shared language support status matrix in the opentelemetry-configuration repo, so Python conformance status lives alongside the other languages instead of being duplicated per language SDK. (#5347)
  • opentelemetry-sdk: document that Python-implementation extensions (OTEL_PYTHON_* variables) are bypassed when OTEL_CONFIG_FILE is set. The env-var initialisation path is skipped entirely in favour of the declarative file; honouring these alongside a config file is tracked as a follow-up. (#5353)
  • opentelemetry-sdk: wire id_generator from declarative configuration to TracerProvider (#5363)
  • opentelemetry-sdk: Add support for activating instrumentors from a declarative configuration file via the instrumentation/development.python section. Instrumentors can declare a configuration attribute to have their options validated through the same type-coercion pipeline used for SDK component configuration. (#5372)

... (truncated)

Commits
  • 53a5a40 Prepare release 1.44.0/0.65b0 (#5422)
  • d9f34e7 Fixup eachdist.py handling of package names (#5417)
  • d10f472 opentelemetry-semantic-conventions: Bump to 1.43.0 (#5413)
  • ae8feeb Update otelbot token workflows to use client IDs (#5404)
  • 67a2abd Fix Context in-place mutability bypass via inherited dict methods (#5399)
  • 87baad9 Bump semconv to 1.42.0 (#5410)
  • 23dc0b2 opentelemetry-sdk: add 'force_flush' method to LogRecordExporter ABC (#5294)
  • bec55fd opentelemetry-sdk: expose SynchronousMultiLogRecordProcessor and ConcurrentMu...
  • 55d0b7a opentelemetry-sdk: Add ability to refresh process sensitive Resource attribut...
  • 6115db2 opentelemetry-sdk: add log record limits environment variables (#5300)
  • Additional commits viewable in compare view

Updates opentelemetry-exporter-otlp-proto-grpc from 1.42.1 to 1.44.0

Changelog

Sourced from opentelemetry-exporter-otlp-proto-grpc's changelog.

Version 1.44.0/0.65b0 (2026-07-16)

Added

  • opentelemetry-docker-tests: Refactor Docker tests to properly validate contents of exported telemetry (#5220)
  • opentelemetry-exporter-otlp-common: add shared package for common OTLP utilities (#5252)
  • opentelemetry-sdk: add MissingDependencyError exception for declarative configuration and use it for missing optional dependency errors (#5265)
  • opentelemetry-sdk: Add ability to refresh process dependent Resource attributes (#5280)
  • opentelemetry-sdk: add force_flush method to LogRecordExporter ABC (#5294)
  • opentelemetry-sdk: Make it possible to limit the size of stored spans in InMemorySpanExporter (#5296)
  • opentelemetry-sdk: add log record limits environment variables OTEL_LOGRECORD_ATTRIBUTE_COUNT_LIMIT and OTEL_LOGRECORD_ATTRIBUTE_VALUE_LENGTH_LIMIT (#5300)
  • opentelemetry-sdk: add support for file exporter with declarative config (#5311)
  • opentelemetry-sdk: expose SynchronousMultiLogRecordProcessor and ConcurrentMultiLogRecordProcessor publicly (#5327)
  • opentelemetry-sdk: point the declarative configuration package README at the shared language support status matrix in the opentelemetry-configuration repo, so Python conformance status lives alongside the other languages instead of being duplicated per language SDK. (#5347)
  • opentelemetry-sdk: document that Python-implementation extensions (OTEL_PYTHON_* variables) are bypassed when OTEL_CONFIG_FILE is set. The env-var initialisation path is skipped entirely in favour of the declarative file; honouring these alongside a config file is tracked as a follow-up. (#5353)
  • opentelemetry-sdk: wire id_generator from declarative configuration to TracerProvider (#5363)
  • opentelemetry-sdk: Add support for activating instrumentors from a declarative configuration file via the instrumentation/development.python section. Instrumentors can declare a configuration attribute to have their options validated through the same type-coercion pipeline used for SDK component configuration. (#5372)

... (truncated)

Commits
  • 53a5a40 Prepare release 1.44.0/0.65b0 (#5422)
  • d9f34e7 Fixup eachdist.py handling of package names (#5417)
  • d10f472 opentelemetry-semantic-conventions: Bump to 1.43.0 (#5413)
  • ae8feeb Update otelbot token workflows to use client IDs (#5404)
  • 67a2abd Fix Context in-place mutability bypass via inherited dict methods (#5399)
  • 87baad9 Bump semconv to 1.42.0 (#5410)
  • 23dc0b2 opentelemetry-sdk: add 'force_flush' method to LogRecordExporter ABC (#5294)
  • bec55fd opentelemetry-sdk: expose SynchronousMultiLogRecordProcessor and ConcurrentMu...
  • 55d0b7a opentelemetry-sdk: Add ability to refresh process sensitive Resource attribut...
  • 6115db2 opentelemetry-sdk: add log record limits environment variables (#5300)
  • Additional commits viewable in compare view

Updates opentelemetry-exporter-otlp-proto-http from 1.42.1 to 1.44.0

Changelog

Sourced from opentelemetry-exporter-otlp-proto-http's changelog.

Version 1.44.0/0.65b0 (2026-07-16)

Added

  • opentelemetry-docker-tests: Refactor Docker tests to properly validate contents of exported telemetry (#5220)
  • opentelemetry-exporter-otlp-common: add shared package for common OTLP utilities (#5252)
  • opentelemetry-sdk: add MissingDependencyError exception for declarative configuration and use it for missing optional dependency errors (#5265)
  • opentelemetry-sdk: Add ability to refresh process dependent Resource attributes (#5280)
  • opentelemetry-sdk: add force_flush method to LogRecordExporter ABC (#5294)
  • opentelemetry-sdk: Make it possible to limit the size of stored spans in InMemorySpanExporter (#5296)
  • opentelemetry-sdk: add log record limits environment variables OTEL_LOGRECORD_ATTRIBUTE_COUNT_LIMIT and OTEL_LOGRECORD_ATTRIBUTE_VALUE_LENGTH_LIMIT (#5300)
  • opentelemetry-sdk: add support for file exporter with declarative config (#5311)
  • opentelemetry-sdk: expose SynchronousMultiLogRecordProcessor and ConcurrentMultiLogRecordProcessor publicly (#5327)
  • opentelemetry-sdk: point the declarative configuration package README at the shared language support status matrix in the opentelemetry-configuration repo, so Python conformance status lives alongside the other languages instead of being duplicated per language SDK. (#5347)
  • opentelemetry-sdk: document that Python-implementation extensions (OTEL_PYTHON_* variables) are bypassed when OTEL_CONFIG_FILE is set. The env-var initialisation path is skipped entirely in favour of the declarative file; honouring these alongside a config file is tracked as a follow-up. (#5353)
  • opentelemetry-sdk: wire id_generator from declarative configuration to TracerProvider (#5363)
  • opentelemetry-sdk: Add support for activating instrumentors from a declarative configuration file via the instrumentation/development.python section. Instrumentors can declare a configuration attribute to have their options validated through the same type-coercion pipeline used for SDK component configuration. (#5372)

... (truncated)

Commits
  • 53a5a40 Prepare release 1.44.0/0.65b0 (#5422)
  • d9f34e7 Fixup eachdist.py handling of package names (#5417)
  • d10f472 opentelemetry-semantic-conventions: Bump to 1.43.0 (#5413)
  • ae8feeb Update otelbot token workflows to use client IDs (#5404)
  • 67a2abd Fix Context in-place mutability bypass via inherited dict methods (#5399)
  • 87baad9 Bump semconv to 1.42.0 (#5410)
  • 23dc0b2 opentelemetry-sdk: add 'force_flush' method to LogRecordExporter ABC (#5294)
  • bec55fd opentelemetry-sdk: expose SynchronousMultiLogRecordProcessor and ConcurrentMu...
  • 55d0b7a opentelemetry-sdk: Add ability to refresh process sensitive Resource attribut...
  • 6115db2 opentelemetry-sdk: add log record limits environment variables (#5300)
  • Additional commits viewable in compare view

Updates opentelemetry-instrumentation-fastapi from 0.63b1 to 0.65b0

Changelog

Sourced from opentelemetry-instrumentation-fastapi's changelog.

Version 1.44.0/0.65b0 (2026-07-16)

Added

  • Add opentelemetry-instrumentation-structlog instrumentation package and shared log_utils helpers for emitting structlog events as OpenTelemetry logs. (#4286)
  • opentelemetry-instrumentation-celery: add use_span_links option to link task execution spans to producer spans instead of creating parent-child relationships (#4537)
  • opentelemetry-instrumentation-aws-lambda: add SQS context propagation support (#4668)
  • opentelemetry-instrumentation-httpx: add support for httpx2 (#4730)
  • opentelemetry-instrumentation-tortoiseorm: Implement database semantic convention stability migration support through OTEL_SEMCONV_STABILITY_OPT_IN (#4731)
  • opentelemetry-instrumentation-asyncpg: add database semantic convention stability support through OTEL_SEMCONV_STABILITY_OPT_IN (#4733)
  • opentelemetry-instrumentation-pymemcache: add database semconv stability migration support (#4739)
  • opentelemetry-instrumentation-cassandra: add semconv stability migration support (#4747)
  • opentelemetry-instrumentation-pymongo: add database semantic convention stability support through OTEL_SEMCONV_STABILITY_OPT_IN (#4772)
  • opentelemetry-instrumentation-aiopg: add database semantic convention stability support through OTEL_SEMCONV_STABILITY_OPT_IN (#4820)

Changed

  • opentelemetry-instrumentation-urllib3: remove multiple calls to sanitize_method (#4718)

Removed

  • opentelemetry-instrumentation-elasticsearch: drop the package since all supported elasticsearch versions have a native OTel instrumentation (#4759)

Fixed

... (truncated)

Commits

Updates opentelemetry-instrumentation-openai from 0.61.0 to 0.62.1

Release notes

Sourced from opentelemetry-instrumentation-openai's releases.

0.62.1

v0.62.1 (2026-06-28)

Fix

  • bump version problem (#4332)

[main 93429cfb9] bump: version 0.62.0 → 0.62.1 64 files changed, 69 insertions(+), 63 deletions(-)

0.62.0

v0.62.0 (2026-06-28)

Feat

  • instrumentation: Add litellm package instrumentation (#4322)

Fix

  • sdk: @​agent decorator no longer overwrites enclosing @​workflow name (#4288)
  • langchain: emit cache creation tokens (#4261)
  • vertexai: emit cache tokens (#4263)
  • writer: emit cache tokens (#4262)
  • llamaindex: emit cache tokens (#4260)
  • bedrock: emit cache tokens (#4241)
  • mistralai: emit input cache tokens (#4238)

[main a00d2a333] bump: version 0.61.0 → 0.62.0 64 files changed, 79 insertions(+), 63 deletions(-)

Changelog

Sourced from opentelemetry-instrumentation-openai's changelog.

v0.62.1 (2026-06-28)

Fix

  • bump version problem (#4332)

v0.62.0 (2026-06-28)

Feat

  • instrumentation: Add litellm package instrumentation (#4322)

Fix

  • sdk: @​agent decorator no longer overwrites enclosing @​workflow name (#4288)
  • langchain: emit cache creation tokens (#4261)
  • vertexai: emit cache tokens (#4263)
  • writer: emit cache tokens (#4262)
  • llamaindex: emit cache tokens (#4260)
  • bedrock: emit cache tokens (#4241)
  • mistralai: emit input cache tokens (#4238)
Commits

Updates opentelemetry-sdk from 1.42.1 to 1.44.0

Changelog

Sourced from opentelemetry-sdk's changelog.

Version 1.44.0/0.65b0 (2026-07-16)

Added

  • opentelemetry-docker-tests: Refactor Docker tests to properly validate contents of exported telemetry (#5220)
  • opentelemetry-exporter-otlp-common: add shared package for common OTLP utilities (#5252)
  • opentelemetry-sdk: add MissingDependencyError exception for declarative configuration and use it for missing optional dependency errors (#5265)
  • opentelemetry-sdk: Add ability to refresh process dependent Resource attributes (#5280)
  • opentelemetry-sdk: add force_flush method to LogRecordExporter ABC (#5294)
  • opentelemetry-sdk: Make it possible to limit the size of stored spans in InMemorySpanExporter (#5296)
  • opentelemetry-sdk: add log record limits environment variables OTEL_LOGRECORD_ATTRIBUTE_COUNT_LIMIT and OTEL_LOGRECORD_ATTRIBUTE_VALUE_LENGTH_LIMIT (#5300)
  • opentelemetry-sdk: add support for file exporter with declarative config (#5311)
  • opentelemetry-sdk: expose SynchronousMultiLogRecordProcessor and ConcurrentMultiLogRecordProcessor publicly (#5327)
  • opentelemetry-sdk: point the declarative configuration package README at the shared language support status matrix in the opentelemetry-configuration repo, so Python conformance status lives alongside the other languages instead of being duplicated per language SDK. (#5347)
  • opentelemetry-sdk: document that Python-implementation extensions (OTEL_PYTHON_* variables) are bypassed when OTEL_CONFIG_FILE is set. The env-var initialisation path is skipped entirely in favour of the declarative file; honouring these alongside a config file is tracked as a follow-up. (#5353)
  • opentelemetry-sdk: wire id_generator from declarative configuration to TracerProvider (#5363)
  • opentelemetry-sdk: Add support for activating instrumentors from a declarative configuration file via the instrumentation/development.pythonDescription has been truncated

@dependabot
build: bump the python-deps group in /src/backend with 23 updates
11330da 
Bumps the python-deps group in /src/backend with 23 updates:

| Package | From | To |
| --- | --- | --- |
| [azure-ai-evaluation](https://github.com/Azure/azure-sdk-for-python) | `1.16.9` | `1.18.2` |
| azure-ai-projects | `2.2.0` | `2.4.0` |
| [azure-cosmos](https://github.com/Azure/azure-sdk-for-python) | `4.16.1` | `4.16.2` |
| [azure-monitor-opentelemetry](https://github.com/Azure/azure-sdk-for-python) | `1.8.8` | `1.8.9` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.136.3` | `0.140.13` |
| [openai](https://github.com/openai/openai-python) | `2.40.0` | `2.50.0` |
| [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python) | `1.42.1` | `1.44.0` |
| [opentelemetry-exporter-otlp-proto-grpc](https://github.com/open-telemetry/opentelemetry-python) | `1.42.1` | `1.44.0` |
| [opentelemetry-exporter-otlp-proto-http](https://github.com/open-telemetry/opentelemetry-python) | `1.42.1` | `1.44.0` |
| [opentelemetry-instrumentation-fastapi](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.63b1` | `0.65b0` |
| [opentelemetry-instrumentation-openai](https://github.com/traceloop/openllmetry) | `0.61.0` | `0.62.1` |
| [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python) | `1.42.1` | `1.44.0` |
| [python-multipart](https://github.com/Kludex/python-multipart) | `0.0.30` | `0.0.32` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.48.0` | `0.52.0` |
| [mcp](https://github.com/modelcontextprotocol/python-sdk) | `1.27.2` | `2.0.0` |
| [agent-framework-core](https://github.com/microsoft/agent-framework) | `1.7.0` | `1.12.1` |
| [agent-framework-orchestrations](https://github.com/microsoft/agent-framework) | `1.0.0rc2` | `1.0.1` |
| [protobuf](https://github.com/protocolbuffers/protobuf) | `7.35.0` | `7.35.1` |
| [cryptography](https://github.com/pyca/cryptography) | `48.0.0` | `49.0.0` |
| [aiohttp](https://github.com/aio-libs/aiohttp) | `3.14.0` | `3.14.3` |
| [pyasn1](https://github.com/pyasn1/pyasn1) | `0.6.3` | `0.6.4` |
| [nltk](https://github.com/nltk/nltk) | `3.9.4` | `3.10.0` |
| [pytest](https://github.com/pytest-dev/pytest) | `9.0.3` | `9.1.1` |


Updates `azure-ai-evaluation` from 1.16.9 to 1.18.2
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-ai-evaluation_1.16.9...azure-ai-evaluation_1.18.2)

Updates `azure-ai-projects` from 2.2.0 to 2.4.0

Updates `azure-cosmos` from 4.16.1 to 4.16.2
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-cosmos_4.16.1...azure-cosmos_4.16.2)

Updates `azure-monitor-opentelemetry` from 1.8.8 to 1.8.9
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-monitor-opentelemetry_1.8.8...azure-monitor-opentelemetry_1.8.9)

Updates `fastapi` from 0.136.3 to 0.140.13
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.136.3...0.140.13)

Updates `openai` from 2.40.0 to 2.50.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v2.40.0...v2.50.0)

Updates `opentelemetry-api` from 1.42.1 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.42.1...v1.44.0)

Updates `opentelemetry-exporter-otlp-proto-grpc` from 1.42.1 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.42.1...v1.44.0)

Updates `opentelemetry-exporter-otlp-proto-http` from 1.42.1 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.42.1...v1.44.0)

Updates `opentelemetry-instrumentation-fastapi` from 0.63b1 to 0.65b0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-instrumentation-openai` from 0.61.0 to 0.62.1
- [Release notes](https://github.com/traceloop/openllmetry/releases)
- [Changelog](https://github.com/traceloop/openllmetry/blob/main/CHANGELOG.md)
- [Commits](traceloop/openllmetry@0.61.0...0.62.1)

Updates `opentelemetry-sdk` from 1.42.1 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.42.1...v1.44.0)

Updates `python-multipart` from 0.0.30 to 0.0.32
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.30...0.0.32)

Updates `uvicorn` from 0.48.0 to 0.52.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.48.0...0.52.0)

Updates `mcp` from 1.27.2 to 2.0.0
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](modelcontextprotocol/python-sdk@v1.27.2...v2.0.0)

Updates `agent-framework-core` from 1.7.0 to 1.12.1
- [Release notes](https://github.com/microsoft/agent-framework/releases)
- [Commits](microsoft/agent-framework@dotnet-1.7.0...python-1.12.1)

Updates `agent-framework-orchestrations` from 1.0.0rc2 to 1.0.1
- [Release notes](https://github.com/microsoft/agent-framework/releases)
- [Commits](microsoft/agent-framework@python-1.0.0rc2...python-1.0.1)

Updates `protobuf` from 7.35.0 to 7.35.1
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `cryptography` from 48.0.0 to 49.0.0
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@48.0.0...49.0.0)

Updates `aiohttp` from 3.14.0 to 3.14.3
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](aio-libs/aiohttp@v3.14.0...v3.14.3)

Updates `pyasn1` from 0.6.3 to 0.6.4
- [Release notes](https://github.com/pyasn1/pyasn1/releases)
- [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst)
- [Commits](pyasn1/pyasn1@v0.6.3...v0.6.4)

Updates `nltk` from 3.9.4 to 3.10.0
- [Release notes](https://github.com/nltk/nltk/releases)
- [Changelog](https://github.com/nltk/nltk/blob/develop/ChangeLog)
- [Commits](nltk/nltk@3.9.4...v3.10.0)

Updates `pytest` from 9.0.3 to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.3...9.1.1)

---
updated-dependencies:
- dependency-name: azure-ai-evaluation
  dependency-version: 1.18.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: azure-ai-projects
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: azure-cosmos
  dependency-version: 4.16.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: azure-monitor-opentelemetry
  dependency-version: 1.8.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: fastapi
  dependency-version: 0.140.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: openai
  dependency-version: 2.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: opentelemetry-api
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: opentelemetry-exporter-otlp-proto-grpc
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: opentelemetry-exporter-otlp-proto-http
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: opentelemetry-instrumentation-fastapi
  dependency-version: 0.65b0
  dependency-type: direct:production
  dependency-group: python-deps
- dependency-name: opentelemetry-instrumentation-openai
  dependency-version: 0.62.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: opentelemetry-sdk
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: python-multipart
  dependency-version: 0.0.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: uvicorn
  dependency-version: 0.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: mcp
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-deps
- dependency-name: agent-framework-core
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: agent-framework-orchestrations
  dependency-version: 1.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: protobuf
  dependency-version: 7.35.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: cryptography
  dependency-version: 49.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-deps
- dependency-name: aiohttp
  dependency-version: 3.14.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: pyasn1
  dependency-version: 0.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-deps
- dependency-name: nltk
  dependency-version: 3.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 1, 2026
@dependabot
dependabot Bot requested a review from Avijit-Microsoft as a code owner August 1, 2026 10:37
@dependabot dependabot Bot added the python Pull requests that update Python code label Aug 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Avijit-Microsoft Avijit-Microsoft Awaiting requested review from Avijit-Microsoft Avijit-Microsoft is a code owner
@Roopan-Microsoft Roopan-Microsoft Awaiting requested review from Roopan-Microsoft Roopan-Microsoft is a code owner
@Prajwal-Microsoft Prajwal-Microsoft Awaiting requested review from Prajwal-Microsoft Prajwal-Microsoft is a code owner
@Fr4nc3 Francia Riesco (Fr4nc3) Awaiting requested review from Fr4nc3 Fr4nc3 is a code owner
@Vinay-Microsoft Vinay Sharma (Vinay-Microsoft) Awaiting requested review from Vinay-Microsoft Vinay-Microsoft is a code owner
@aniaroramsft Anish Arora (aniaroramsft) Awaiting requested review from aniaroramsft aniaroramsft is a code owner
@toherman-msft Todd Herman (toherman-msft) Awaiting requested review from toherman-msft toherman-msft is a code owner
@nchandhi nchandhi Awaiting requested review from nchandhi nchandhi is a code owner
@dgp10801 dgp10801 Awaiting requested review from dgp10801 dgp10801 is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants