Skip to content

build(deps): combine remaining dependabot updates and fix astroid/pylint IT conflict#7844

Closed
peombwa wants to merge 21 commits into
mainfrom
combine-dependabot-updates
Closed

build(deps): combine remaining dependabot updates and fix astroid/pylint IT conflict#7844
peombwa wants to merge 21 commits into
mainfrom
combine-dependabot-updates

Conversation

@peombwa

@peombwa peombwa commented Jun 24, 2026

Copy link
Copy Markdown
Collaborator

Combines all remaining open Dependabot PRs into a single branch and fixes the IT pytest/pip resolution failure.

Dependency bumps included

IT test fix

The Execute the IT test job failed at the pip install step:

The user requested astroid==4.1.2
pylint 4.0.6 depends on astroid<=4.1.dev0 and >=4.0.2
ERROR: ResolutionImpossible

astroid==4.1.2 (introduced on main) is incompatible with pylint==4.0.6. This pins astroid to 4.0.4 (latest 4.0.x), restoring a resolvable dependency set. Verified locally with pip install --dry-run -r requirements-dev.txt.

The vscode package-lock.json was regenerated to reconcile both vscode-jsonrpc and typescript bumps.

Co-authored-by: Copilot 223556219+Copilot@users.noreply.github.com

dependabot Bot and others added 21 commits April 17, 2026 09:45
Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.9.3 to 6.0.2.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.9.3...v6.0.2)

---
updated-dependencies:
- dependency-name: typescript
  dependency-version: 6.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
…ith 1 update

Bumps the kiota-dependencies group with 1 update in the /it/go directory: [github.com/microsoft/kiota-http-go](https://github.com/microsoft/kiota-http-go).
Bumps the kiota-dependencies group with 1 update in the /it/go/basic directory: [github.com/microsoft/kiota-http-go](https://github.com/microsoft/kiota-http-go).


Updates `github.com/microsoft/kiota-http-go` from 1.5.5 to 1.5.6
- [Release notes](https://github.com/microsoft/kiota-http-go/releases)
- [Changelog](https://github.com/microsoft/kiota-http-go/blob/main/CHANGELOG.md)
- [Commits](microsoft/kiota-http-go@v1.5.5...v1.5.6)

Updates `github.com/microsoft/kiota-http-go` from 1.5.5 to 1.5.6
- [Release notes](https://github.com/microsoft/kiota-http-go/releases)
- [Changelog](https://github.com/microsoft/kiota-http-go/blob/main/CHANGELOG.md)
- [Commits](microsoft/kiota-http-go@v1.5.5...v1.5.6)

Updates `github.com/microsoft/kiota-http-go` from 1.5.5 to 1.5.6
- [Release notes](https://github.com/microsoft/kiota-http-go/releases)
- [Changelog](https://github.com/microsoft/kiota-http-go/blob/main/CHANGELOG.md)
- [Commits](microsoft/kiota-http-go@v1.5.5...v1.5.6)

Updates `github.com/microsoft/kiota-http-go` from 1.5.5 to 1.5.6
- [Release notes](https://github.com/microsoft/kiota-http-go/releases)
- [Changelog](https://github.com/microsoft/kiota-http-go/blob/main/CHANGELOG.md)
- [Commits](microsoft/kiota-http-go@v1.5.5...v1.5.6)

---
updated-dependencies:
- dependency-name: github.com/microsoft/kiota-http-go
  dependency-version: 1.5.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kiota-dependencies
- dependency-name: github.com/microsoft/kiota-http-go
  dependency-version: 1.5.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kiota-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [vscode-jsonrpc](https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/jsonrpc) from 8.2.1 to 9.0.0.
- [Release notes](https://github.com/Microsoft/vscode-languageserver-node/releases)
- [Commits](https://github.com/Microsoft/vscode-languageserver-node/commits/release/client/9.0.0/jsonrpc)

---
updated-dependencies:
- dependency-name: vscode-jsonrpc
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/cache](https://github.com/actions/cache) from 5 to 6.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@v5...v6)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [mypy](https://github.com/python/mypy) from 1.19.1 to 2.1.0.
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.19.1...v2.1.0)

---
updated-dependencies:
- dependency-name: mypy
  dependency-version: 2.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [requests](https://github.com/psf/requests) from 2.32.5 to 2.34.2.
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.5...v2.34.2)

---
updated-dependencies:
- dependency-name: requests
  dependency-version: 2.34.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [anyio](https://github.com/agronholm/anyio) from 4.12.1 to 4.14.0.
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Commits](agronholm/anyio@4.12.1...4.14.0)

---
updated-dependencies:
- dependency-name: anyio
  dependency-version: 4.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [pycparser](https://github.com/eliben/pycparser) from 2.23 to 3.0.
- [Release notes](https://github.com/eliben/pycparser/releases)
- [Commits](eliben/pycparser@release_v2.23...release_v3.00)

---
updated-dependencies:
- dependency-name: pycparser
  dependency-version: '3.0'
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [zipp](https://github.com/jaraco/zipp) from 3.23.1 to 4.1.0.
- [Release notes](https://github.com/jaraco/zipp/releases)
- [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst)
- [Commits](jaraco/zipp@v3.23.1...v4.1.0)

---
updated-dependencies:
- dependency-name: zipp
  dependency-version: 4.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
…scode-jsonrpc-9.0.0' into combine-dependabot-updates
…a-dependencies-918ef271aa' into combine-dependabot-updates
…ypescript-6.0.2' into combine-dependabot-updates

# Conflicts:
#	vscode/package-lock.json
astroid 4.1.2 conflicts with pylint 4.0.6 (requires astroid>=4.0.2,<=4.1.dev0),
breaking the IT pip install step. Pin to the latest compatible 4.0.x release.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@peombwa
peombwa requested a review from a team as a code owner June 24, 2026 18:22
@msgraph-bot msgraph-bot Bot added this to Kiota Jun 24, 2026
@peombwa peombwa closed this Jun 24, 2026
@github-project-automation github-project-automation Bot moved this to Done ✔️ in Kiota Jun 24, 2026
@github-code-quality

Copy link
Copy Markdown

Code Coverage Overview

Languages: C#

C# / code-coverage/dotnet

The overall coverage in the combine-dependabot-u... branch is 71%. Coverage data for the main branch is not yet available.

Show a code coverage summary of the most covered files.
File main combine-dependabot-u... 276b573 +/-
/home/runner/wo...guageRefiner.cs 98%
/home/runner/wo...criptRefiner.cs 98%
/home/runner/wo...MethodWriter.cs 97%
/home/runner/wo...MethodWriter.cs 96%
/home/runner/wo...MethodWriter.cs 96%
/home/runner/wo...MethodWriter.cs 95%
/home/runner/wo...rs/GoRefiner.cs 93%
/home/runner/wo...KiotaBuilder.cs 90%
/home/runner/wo...ationService.cs 89%
/home/runner/wo...xGenerator.g.cs 72%

Code Coverage is in Public Preview. Learn more and provide us with your feedback.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Archived in project

Development

Successfully merging this pull request may close these issues.

3 participants