Python: Build(deps): Bump azure-cosmos from 4.15.0 to 4.16.1 in /python

[dependabot]

Bumps azure-cosmos from 4.15.0 to 4.16.1.

Release notes

Sourced from azure-cosmos's releases.

azure-cosmos_4.16.1

4.16.1 (2026-06-01)

Bugs Fixed

• Fixed a bug in the sync and async /pkranges change-feed refresh where some containers could fail to build a complete routing map. See PR 47245.

azure-cosmos_4.16.0

4.16.0 (2026-05-29)

Features Added

• Added preview support for the optional embeddingSource field on entries in vector_embedding_policy.vectorEmbeddings, which allows the service to generate vector embeddings from the specified item paths. Requires the embedding-generation service to be enabled on the account. See 46870
• Added aio extras to the package, allowing users to install async dependencies with pip install azure-cosmos[aio]. See PR 47143

Breaking Changes

• CosmosItemPaged.get_response_headers() and CosmosAsyncItemPaged.get_response_headers() now return a single CaseInsensitiveDict (the latest page) instead of List[CaseInsensitiveDict] (introduced in 4.16.0b1); get_last_response_headers() has been removed. This avoids unbounded memory growth on large queries. Migration: code that previously accessed headers[i]['x-ms-request-charge'] should switch to headers['x-ms-request-charge'] for the latest page, or pass response_hook= to the query method to receive per-page headers as they arrive. See PR 47172.

Bugs Fixed

• Fixed bug where the Content-Length HTTP request header was computed from the character count of the request body instead of its UTF-8 byte count. See PR 47008
• Added an opt-in fallback for invalid UTF-8 in response bodies. Default behavior is unchanged (strict decode). Setting AZURE_COSMOS_CHARSET_DECODER_ERROR_ACTION_ON_MALFORMED_INPUT to REPLACE or IGNORE enables a permissive decode so reads, queries, and change-feed iteration can make progress past corrupt payloads. See PR 47008
• Fixed bug where CosmosClient construction with AAD credentials would crash at startup if the semantic reranking inference endpoint environment variable was not set, even when semantic reranking was not being used. The inference service is now lazily initialized on first use. See PR 46243
• Fixed bug where region names in preferred_locations and excluded_locations (client-level and per-request) were not matched tolerantly for differences in case, whitespace, hyphens, and underscores. See PR 46937
• Fixed a bug in query_items(feed_range=...) where pagination could return incorrect results after a partition split caused the supplied feed range to overlap multiple physical partitions. See PR 47105
• Fixed bug where SELECT VALUE AVG(...) queries spanning multiple physical partitions returned mathematically incorrect merged values from client-side aggregation. These queries now raise ValueError. See PR 47105
• Fixed bug where a ValueError("Ranges overlap") or an AssertionError("code bug: returned overlapping ranges ... is empty") from the partition key range cache could escape to the caller when the /pkranges response contained a transiently inconsistent snapshot (overlap or gap). See PR 47091

Other Changes

• Reduced per-client memory overhead when partition-level circuit breaker (PPCB) is enabled by sharing the partition key range routing map cache across CosmosClient instances connected to the same endpoint, and stripping unused fields from cached partition key ranges using compact PKRange namedtuples. See PR 46297

Commits

• a048d8e [Cosmos] Bump azure-cosmos 4.16.1 changelog date to 2026-06-01 (#47261)
• aff5f7a [Cosmos] Fix /pkranges change-feed drain loop (#47245)
• c8abdc1 [AutoPR azure-mgmt-containerservicefleet]-generated-from-SDK Generation - Pyt...
• ff6370f Update http_constants.py (#47243)
• 467d197 add quotes to script as precaution (#47225)
• abd51bd [feat] new azure-ai-agentserver-optimization package for load_config (#47096)
• ea4c378 Enforce size limits on browser SDK snippet injection to guard against decompr...
• 4823427 Remove stale version updater pipeline (#47150)
• 34a7da4 upgrading version for release (#47229)
• 5f03fa8 Update AAD reference to Microsoft Entra in packaging README template (#47234)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

[Evan Mattson (moonbox3)]

Thank you for your contribution, Dependabot (@dependabot)[bot].

To keep the review queue manageable, we currently limit community contributors to 10 open pull requests at a time. This PR would put you at 21 open pull requests, so we are closing it automatically.

Please focus on getting your existing PRs reviewed, merged, or closed before opening another one. If a maintainer asked you to open this PR, they can apply the pr-limit-exempt label and reopen it.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.