Skip to content

deps: bump the pip-minor-patch group across 12 directories with 8 updates - #968

Merged
Liangying.Wei (vicancy) merged 4 commits into
mainfrom
dependabot/pip/samples/ai/pip-minor-patch-928c0b0bb5
Aug 14, 2026
Merged

deps: bump the pip-minor-patch group across 12 directories with 8 updates#968
Liangying.Wei (vicancy) merged 4 commits into
mainfrom
dependabot/pip/samples/ai/pip-minor-patch-928c0b0bb5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the pip-minor-patch group with 8 updates in the /samples/ai directory:

Package From To
flask 3.0.0 3.1.3
flask-cors 6.0.1 6.0.5
azure-storage-blob 12.26.0 12.30.0
azure-messaging-webpubsubservice 1.2.2 1.3.0
azure-identity 1.23.0 1.25.3
asgiref 3.9.1 3.12.1
python-dotenv 1.0.1 1.2.2
pytest-timeout 2.3.1 2.4.0

Bumps the pip-minor-patch group with 8 updates in the /samples/ai/chat-demo directory:

Package From To
flask 3.0.0 3.1.3
flask-cors 6.0.1 6.0.5
azure-storage-blob 12.26.0 12.30.0
azure-messaging-webpubsubservice 1.2.2 1.3.0
azure-identity 1.23.0 1.25.3
asgiref 3.9.1 3.12.1
python-dotenv 1.0.1 1.2.2
pytest-timeout 2.3.1 2.4.0

Bumps the pip-minor-patch group with 1 update in the /samples/ai/chat-demo/python_server directory: flask.
Bumps the pip-minor-patch group with 1 update in the /samples/python directory: azure-messaging-webpubsubservice.
Bumps the pip-minor-patch group with 1 update in the /samples/python/chatapp directory: azure-messaging-webpubsubservice.
Bumps the pip-minor-patch group with 1 update in the /samples/python/chatapp-microsoft-entra-id directory: azure-messaging-webpubsubservice.
Bumps the pip-minor-patch group with 1 update in the /samples/python/logstream directory: azure-messaging-webpubsubservice.
Bumps the pip-minor-patch group with 1 update in the /samples/python/logstream-protobuf directory: azure-messaging-webpubsubservice.
Bumps the pip-minor-patch group with 1 update in the /samples/python/pubsub directory: azure-messaging-webpubsubservice.
Bumps the pip-minor-patch group with 1 update in the /samples/python/pubsub-groups directory: azure-messaging-webpubsubservice.
Bumps the pip-minor-patch group with 1 update in the /tests/integration-tests directory: azure-messaging-webpubsubservice.
Bumps the pip-minor-patch group with 1 update in the /tests/integration-tests/python directory: azure-messaging-webpubsubservice.

Updates flask from 3.0.0 to 3.1.3

Release notes

Sourced from flask's releases.

3.1.3

This is the Flask 3.1.3 security fix release, which fixes a security issue but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Flask/3.1.3/ Changes: https://flask.palletsprojects.com/page/changes/#version-3-1-3

  • The session is marked as accessed for operations that only access the keys but not the values, such as in and len. GHSA-68rp-wp8r-4726

3.1.2

This is the Flask 3.1.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Flask/3.1.2/ Changes: https://flask.palletsprojects.com/page/changes/#version-3-1-2 Milestone: https://github.com/pallets/flask/milestone/38?closed=1

  • stream_with_context does not fail inside async views. #5774
  • When using follow_redirects in the test client, the final state of session is correct. #5786
  • Relax type hint for passing bytes IO to send_file. #5776

3.1.1

This is the Flask 3.1.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Flask/3.1.1/ Changes: https://flask.palletsprojects.com/en/stable/changes/#version-3-1-1 Milestone https://github.com/pallets/flask/milestone/36?closed=1

  • Fix signing key selection order when key rotation is enabled via SECRET_KEY_FALLBACKS. GHSA-4grg-w6v8-c28g
  • Fix type hint for cli_runner.invoke. #5645
  • flask --help loads the app and plugins first to make sure all commands are shown. #5673
  • Mark sans-io base class as being able to handle views that return AsyncIterable. This is not accurate for Flask, but makes typing easier for Quart. #5659

3.1.0

This is the Flask 3.1.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecations, or introduce potentially breaking changes. We encourage everyone to upgrade, and to use a tool such as pip-tools to pin all dependencies and control upgrades. Test with warnings treated as errors to be able to adapt to deprecation warnings early.

PyPI: https://pypi.org/project/Flask/3.1.0/ Changes: https://flask.palletsprojects.com/en/stable/changes/#version-3-1-0 Milestone: https://github.com/pallets/flask/milestone/33?closed=1

  • Drop support for Python 3.8. #5623
  • Update minimum dependency versions to latest feature releases. Werkzeug >= 3.1, ItsDangerous >= 2.2, Blinker >= 1.9. #5624, #5633
  • Provide a configuration option to control automatic option responses. #5496
  • Flask.open_resource/open_instance_resource and Blueprint.open_resource take an encoding parameter to use when opening in text mode. It defaults to utf-8. #5504
  • Request.max_content_length can be customized per-request instead of only through the MAX_CONTENT_LENGTH config. Added MAX_FORM_MEMORY_SIZE and MAX_FORM_PARTS config. Added documentation about resource limits to the security page. #5625
  • Add support for the Partitioned cookie attribute (CHIPS), with the SESSION_COOKIE_PARTITIONED config. #5472
  • -e path takes precedence over default .env and .flaskenv files. load_dotenv loads default files in addition to a path unless load_defaults=False is passed. #5628
  • Support key rotation with the SECRET_KEY_FALLBACKS config, a list of old secret keys that can still be used for unsigning. Extensions will need to add support. #5621
  • Fix how setting host_matching=True or subdomain_matching=False interacts with SERVER_NAME. Setting SERVER_NAME no longer restricts requests to only that domain. #5553
  • Request.trusted_hosts is checked during routing, and can be set through the TRUSTED_HOSTS config. #5636

3.0.3

... (truncated)

Changelog

Sourced from flask's changelog.

Version 3.1.3

Released 2026-02-18

  • The session is marked as accessed for operations that only access the keys but not the values, such as in and len. :ghsa:68rp-wp8r-4726

Version 3.1.2

Released 2025-08-19

  • stream_with_context does not fail inside async views. :issue:5774
  • When using follow_redirects in the test client, the final state of session is correct. :issue:5786
  • Relax type hint for passing bytes IO to send_file. :issue:5776

Version 3.1.1

Released 2025-05-13

  • Fix signing key selection order when key rotation is enabled via SECRET_KEY_FALLBACKS. :ghsa:4grg-w6v8-c28g
  • Fix type hint for cli_runner.invoke. :issue:5645
  • flask --help loads the app and plugins first to make sure all commands are shown. :issue:5673
  • Mark sans-io base class as being able to handle views that return AsyncIterable. This is not accurate for Flask, but makes typing easier for Quart. :pr:5659

Version 3.1.0

Released 2024-11-13

  • Drop support for Python 3.8. :pr:5623
  • Update minimum dependency versions to latest feature releases. Werkzeug >= 3.1, ItsDangerous >= 2.2, Blinker >= 1.9. :pr:5624,5633
  • Provide a configuration option to control automatic option responses. :pr:5496
  • Flask.open_resource/open_instance_resource and Blueprint.open_resource take an encoding parameter to use when opening in text mode. It defaults to utf-8. :issue:5504
  • Request.max_content_length can be customized per-request instead of only through the MAX_CONTENT_LENGTH config. Added

... (truncated)

Commits
  • 22d9247 release version 3.1.3
  • 089cb86 Merge commit from fork
  • c17f379 request context tracks session access
  • 27be933 start version 3.1.3
  • 4e652d3 Abort if the instance folder cannot be created (#5903)
  • 3d03098 Abort if the instance folder cannot be created
  • 407eb76 document using gevent for async (#5900)
  • ac5664d document using gevent for async
  • 4f79d5b Increase required flit_core version to 3.11 (#5865)
  • fe3b215 Increase required flit_core version to 3.11
  • Additional commits viewable in compare view

Updates flask-cors from 6.0.1 to 6.0.5

Release notes

Sourced from flask-cors's releases.

6.0.5

Supersedes 6.0.4

What's Changed

Full Changelog: corydolphin/flask-cors@6.0.3...6.0.5

6.0.4

What's Changed

Full Changelog: corydolphin/flask-cors@6.0.3...6.0.4

6.0.3

What's Changed

Full Changelog: corydolphin/flask-cors@6.0.2...6.0.3

6.0.3-pre

What's Changed

Full Changelog: corydolphin/flask-cors@6.0.2...6.0.3

6.0.2

What's Changed

New Contributors

Full Changelog: corydolphin/flask-cors@6.0.1...6.0.2

Commits

Updates azure-storage-blob from 12.26.0 to 12.30.0

Commits
  • 245d202 Branch prep for release
  • 28ec40e Modified changelogs
  • 3339854 Merge branch 'main' into release/storage/stg102
  • 33075a4 [Storage] Fix Changelog Typos (#46930)
  • 4b183cf [Storage] Updated changelogs after 101 GA (#46914)
  • edf5833 Regenerate azure-mgmt-storagesync with latest code generator tool (#46884)
  • 1f5e399 [Storage] [Datalake] Fixed all next-pylint errors for `azure-storage-file-d...
  • 1a07881 [Storage] Fixed all errors in next-pylint for azure-storage-file-share (#...
  • 49343c0 [Storage] Fix all next-pylint errors for azure-storage-blob (#46601)
  • a1e9a01 ensure that when azure-storage-extensions is added as a dev_req to any of azu...
  • Additional commits viewable in compare view

Updates azure-messaging-webpubsubservice from 1.2.2 to 1.3.0

Release notes

Sourced from azure-messaging-webpubsubservice's releases.

azure-mgmt-computelimit_1.3.0

1.3.0 (2026-07-17)

Features Added

  • Client ComputeLimitMgmtClient added operation group trusted_host_subscriptions
  • Added model TrustedHostSubscription
  • Added operation group TrustedHostSubscriptionsOperations

azure-ai-voicelive_1.3.0

1.3.0 (2026-08-03)

Features Added

  • Azure Realtime Native Voice Support: Added AzureRealtimeNativeVoice and AzureRealtimeNativeVoiceName, and expanded voice fields to accept Azure realtime native voices.
  • Input Text Streaming Support: Added ClientEventInputTextDelta and ClientEventInputTextDone for incrementally streaming text input into existing conversation items.
  • Hosted Agent Invocation Input: Added invoke_input to ResponseCreateParams and ServerEventResponseInvocationDelta for hosted agent invocation passthrough data.
  • Echo Cancellation Configuration: Added EchoCancellationReferenceSource and new reference_source / channels options on AudioEchoCancellation to support both the default server loopback reference path and client-provided stereo echo reference input.
  • Parallel Tool Call Control: Added parallel_tool_calls to session models so callers can control whether tool calls may run in parallel.
  • Session Expiration: Added expires_at to ResponseSession, a server-set datetime indicating when the session expires.

Breaking Changes

  • Default API Version Update: Changed the SDK default API version from 2026-06-01-preview to the GA version 2026-07-15. Pass api_version="2026-06-01-preview" explicitly to keep the previous default behavior.

Bugs Fixed

  • Image Input Field Rename: Renamed RequestImageContentPart.url to image_url. Update image input construction to use image_url= instead of url=.

Other Changes

  • Removed Preview Features: The following features introduced in 1.3.0b1 are not part of the GA release and have been removed:
    • WebRTC Call Negotiation Support: Removed ClientEventRtcCallSdpCreate, ServerEventRtcCallSdpCreated, ServerEventRtcCallError, and RtcCallErrorDetails.
    • Audio Playback Lifecycle Events: Removed ServerEventOutputAudioBufferStarted and ServerEventOutputAudioBufferStopped.
    • Smart End-of-Turn Detection: Removed SmartEndOfTurnDetection.
Commits

Updates azure-identity from 1.23.0 to 1.25.3

Commits

Updates asgiref from 3.9.1 to 3.12.1

Changelog

Sourced from asgiref's changelog.

3.12.1 (2026-07-14)

  • Restored the previous SyncToAsync.call internal code shape, which was relied on by some APM services. (#572)

    Note, this change was available whilst maintaining the underlying fix (from #564). It does not constitute an API stability promise. Ideally APMs are not monkey patching internal APIs, and future changes will be made here if needed.

3.12.0 (2026-07-14)

  • AsyncToSync no longer captures the running event loop on instantiation. (#562)

    This resolves a series of deadlocks that users experienced after asgiref 3.9.0, particularly with pytest-asyncio. pytest-asyncio stops the event loop between tests, and long-running unawaited futures could find themselves trying to schedule work onto a stopped loop, and so would never complete. Ideally, code should be structured to await long-running futures before returning, but this change should help users experiencing issues here.

    The loop is now resolved when the callable is invoked rather than when it is created. If async_to_sync is called from within sync_to_async, the parent event loop is still used, as before.

    The possibility of deadlock therefore remains in some nested patterns. For example, an async function may call a long-running sync_to_async function that itself uses async_to_sync; if the outer function returns before the sync future completes, the parent event loop may already be stopped, and the nested calls cannot be driven to completion.

    This is not a bug in asgiref — the same patterns deadlock in plain asyncio. As above, restructure your code to await the sync_to_async future before exiting the driving coroutine.

  • Fixed an event loop deadlock when exiting ThreadSensitiveContext while its executor thread was still blocked waiting on the event loop. (#535)

  • Dropped support for EOL Python 3.9.

  • Fixed StatelessServer.run() failing on Python 3.14, where asyncio.get_event_loop() no longer creates an event loop if none exists. It now uses asyncio.run(). (#559)

  • Fixed Local leaking data between unrelated sync threads when sys.flags.thread_inherit_context is enabled (Python 3.14+), so a newly

... (truncated)

Commits
  • ef9d4b8 Releasing 3.12.1
  • 34fba63 Restore previous SyncToAsync.call internal code shape.
  • a43900c Separate mypy from tests extra.
  • 1b7c338 Releasing 3.12.0
  • 157d9d4 Renovate precommit (#552)
  • deda0d4 Test free-threading builds and fix Local data leak for thread_inherit_context...
  • a54250a Don’t capture the event loop in AsyncToSync.__init__ (#562)
  • 836356a Use asyncio.run in StatelessServer.run (#561)
  • e04afd5 Dropped support for Python 3.9. (#543)
  • 95d2430 Fixed #535: ThreadSensitiveContext.aexit blocking the event loop. (#563)
  • Additional commits viewable in compare view

Updates python-dotenv from 1.0.1 to 1.2.2

Release notes

Sourced from python-dotenv's releases.

v1.2.2

Added

  • Support for Python 3.14, including the free-threaded (3.14t) build. (#)

Changed

  • The dotenv run command now forwards flags directly to the specified command by @​bbc2 in theskumar/python-dotenv#607
  • Improved documentation clarity regarding override behavior and the reference page.
  • Updated PyPy support to version 3.11.
  • Documentation for FIFO file support.
  • Support for Python 3.9.

Fixed

Breaking Changes

  • dotenv.set_key and dotenv.unset_key used to follow symlinks in some situations. This is no longer the case. For that behavior to be restored in all cases, follow_symlinks=True should be used.

  • In the CLI, set and unset used to follow symlinks in some situations. This is no longer the case.

  • dotenv.set_key, dotenv.unset_key and the CLI commands set and unset used to reset the file mode of the modified .env file to 0o600 in some situations. This is no longer the case: The original mode of the file is now preserved. Is the file needed to be created or wasn't a regular file, mode 0o600 is used.

Misc

New Contributors

Full Changelog: theskumar/python-dotenv@v1.2.1...v1.2.2

v1.2.1

What's Changed

... (truncated)

Changelog

Sourced from python-dotenv's changelog.

[1.2.2] - 2026-03-01

Added

  • Support for Python 3.14, including the free-threaded (3.14t) build. (#588)

Changed

  • The dotenv run command now forwards flags directly to the specified command by [@​bbc2] in #607
  • Improved documentation clarity regarding override behavior and the reference page.
  • Updated PyPy support to version 3.11.
  • Documentation for FIFO file support.
  • Dropped Support for Python 3.9.

Fixed

  • Improved set_key and unset_key behavior when interacting with symlinks by [@​bbc2] in [790c5c0]
  • Corrected the license specifier and added missing Python 3.14 classifiers in package metadata by [@​JYOuyang] in #590

Breaking Changes

  • dotenv.set_key and dotenv.unset_key used to follow symlinks in some situations. This is no longer the case. For that behavior to be restored in all cases, follow_symlinks=True should be used.

  • In the CLI, set and unset used to follow symlinks in some situations. This is no longer the case.

  • dotenv.set_key, dotenv.unset_key and the CLI commands set and unset used to reset the file mode of the modified .env file to 0o600 in some situations. This is no longer the case: The original mode of the file is now preserved. Is the file needed to be created or wasn't a regular file, mode 0o600 is used.

[1.2.1] - 2025-10-26

  • Move more config to pyproject.toml, removed setup.cfg
  • Add support for reading .env from FIFOs (Unix) by [@​sidharth-sudhir] in #586

[1.2.0] - 2025-10-26

[1.1.1] - 2025-06-24

Fixed

... (truncated)

Commits

Updates pytest-timeout from 2.3.1 to 2.4.0

Commits

Updates flask from 3.0.0 to 3.1.3

Release notes

Sourced from flask's releases.

3.1.3

This is the Flask 3.1.3 security fix release, which fixes a security issue but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Flask/3.1.3/ Changes: https://flask.palletsprojects.com/page/changes/#version-3-1-3

  • The session is marked as accessed for operations that only access the keys but not the values, such as in and len. GHSA-68rp-wp8r-4726

3.1.2

This is the Flask 3.1.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Flask/3.1.2/ Changes: https://flask.palletsprojects.com/page/changes/#version-3-1-2 Milestone: https://github.com/pallets/flask/milestone/38?closed=1

  • stream_with_context does not fail inside async views. #5774
  • When using follow_redirects in the test client, the final state of session is correct. #5786
  • Relax type hint for passing bytes IO to send_file. #5776

3.1.1

This is the Flask 3.1.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Flask/3.1.1/ Changes: https://flask.palletsprojects.com/en/stable/changes/#version-3-1-1 Milestone https://github.com/pallets/flask/milestone/36?closed=1

  • Fix signing key selection order when key rotation is enabled via SECRET_KEY_FALLBACKS. GHSA-4grg-w6v8-c28g
  • Fix type hint for cli_runner.invoke. #5645
  • flask --help loads the app and plugins first to make sure all commands are shown. #5673
  • Mark sans-io base class as being able to handle views that return AsyncIterable. This is not accurate for Flask, but makes typing easier for Quart. #5659

3.1.0

This is the Flask 3.1.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecations, or introduce potentially breaking changes. We encourage everyone to upgrade, and to use a tool such as pip-tools to pin all dependencies and control upgrades. Test with warnings treated as errors to be able to adapt to deprecation warnings early.

PyPI: https://pypi.org/project/Flask/3.1.0/ Changes: https://flask.palletsprojects.com/en/stable/changes/#version-3-1-0 Milestone: https://github.com/pallets/flask/milestone/33?closed=1

  • Drop support for Python 3.8. #5623
  • Update minimum dependency versions to latest feature releases. Werkzeug >= 3.1, ItsDangerous >= 2.2, Blinker >= 1.9. #5624, #5633
  • Provide a configuration option to control automatic option responses. #5496
  • Flask.open_resource/open_instance_resource and Blueprint.open_resource take an encoding parameter to use when opening in text mode. It defaults to utf-8. #5504
  • Request.max_content_length can be customized per-request instead of only through the MAX_CONTENT_LENGTH config. Added MAX_FORM_MEMORY_SIZE and MAX_FORM_PARTS config. Added documentation about resource limits to the security page. #5625
  • Add support for the Partitioned cookie attribute (CHIPS), with the SESSION_COOKIE_PARTITIONED config. #5472
  • -e path takes precedence over default .env and .flaskenv files. load_dotenv loads default files in addition to a path unless load_defaults=False is passed. #5628
  • Support key rotation with the SECRET_KEY_FALLBACKS config, a list of old secret keys that can still be used for unsigning. Extensions will need to add support. #5621
  • Fix how setting host_matching=True or subdomain_matching=False interacts with SERVER_NAME. Setting SERVER_NAME no longer restricts requests to only that domain. #5553
  • Request.trusted_hosts is checked during routing, and can be set through the TRUSTED_HOSTS config. #5636

3.0.3

... (truncated)

Changelog

Sourced from flask's changelog.

Version 3.1.3

Released 2026-02-18

  • The session is marked as accessed for operations that only access the keys but not the values, such as in and len. :ghsa:68rp-wp8r-4726

Version 3.1.2

Released 2025-08-19

  • stream_with_context does not fail inside async views. :issue:5774
  • When using follow_redirects in the test client, the final state of session is correct. :issue:5786
  • Relax type hint for passing bytes IO to send_file. :issue:5776

Version 3.1.1

Released 2025-05-13

  • Fix signing key selection order when key rotation is enabled via SECRET_KEY_FALLBACKS. :ghsa:4grg-w6v8-c28g
  • Fix type hint for cli_runner.invoke. :issue:5645
  • flask --help loads the app and plugins first to make sure all commands are shown. :issue:5673
  • Mark sans-io base class as being able to handle views that return AsyncIterable. This is not accurate for Flask, but makes typing easier for Quart. :pr:5659

Version 3.1.0

Released 2024-11-13

  • Drop support for Python 3.8. :pr:5623
  • Update minimum dependency versions to latest feature releases. Werkzeug >= 3.1, ItsDangerous >= 2.2, Blinker >= 1.9. :pr:5624,5633
  • Provide a configuration option to control automatic option responses. :pr:5496
  • Flask.open_resource/open_instance_resource and Blueprint.open_resource take an encoding parameter to use when opening in text mode. It defaults to utf-8. :issue:5504
  • Request.max_content_length can be customized per-request instead of only through the MAX_CONTENT_LENGTH config. Added

... (truncated)

Commits
  • 22d9247 release version 3.1.3
  • 089cb86 Merge commit from fork
  • c17f379 request context tracks session access
  • 27be933 start version 3.1.3
  • 4e652d3 Abort if the instance folder cannot be created (#5903)
  • 3d03098 Abort if the instance folder cannot be created
  • 407eb76 document using gevent for async (#5900)
  • ac5664d document using gevent for async
  • 4f79d5b Increase required flit_core version to 3.11 (#5865)
  • fe3b215 Increase required flit_core version to 3.11
  • Additional commits viewable in compare view

Updates flask-cors from 6.0.1 to 6.0.5

Release notes

Sourced from flask-cors's releases.

6.0.5

Supersedes 6.0.4

What's Changed

Full Changelog: corydolphin/flask-cors@6.0.3...6.0.5

6.0.4

What's Changed

Full Changelog: corydolphin/flask-cors@6.0.3...6.0.4

6.0.3

What's Changed

Full Changelog: corydolphin/flask-cors@6.0.2...6.0.3

6.0.3-pre

What's Changed

Full Changelog: corydolphin/flask-cors@6.0.2...6.0.3

6.0.2

What's Changed

New Contributors

Full Changelog: corydolphin/flask-cors@6.0.1...6.0.2

Commits

Updates azure-storage-blob from 12.26.0 to 12.30.0

Commits
  • 245d202 Branch prep for release
  • 28ec40e Modified changelogs
  • 3339854 Merge branch 'main' into release/storage/stg102

@dependabot
deps: bump the pip-minor-patch group across 12 directories with 8 upd…
c848cab 
…ates

Bumps the pip-minor-patch group with 8 updates in the /samples/ai directory:

| Package | From | To |
| --- | --- | --- |
| [flask](https://github.com/pallets/flask) | `3.0.0` | `3.1.3` |
| [flask-cors](https://github.com/corydolphin/flask-cors) | `6.0.1` | `6.0.5` |
| [azure-storage-blob](https://github.com/Azure/azure-sdk-for-python) | `12.26.0` | `12.30.0` |
| [azure-messaging-webpubsubservice](https://github.com/Azure/azure-sdk-for-python) | `1.2.2` | `1.3.0` |
| [azure-identity](https://github.com/Azure/azure-sdk-for-python) | `1.23.0` | `1.25.3` |
| [asgiref](https://github.com/django/asgiref) | `3.9.1` | `3.12.1` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.0.1` | `1.2.2` |
| [pytest-timeout](https://github.com/pytest-dev/pytest-timeout) | `2.3.1` | `2.4.0` |

Bumps the pip-minor-patch group with 8 updates in the /samples/ai/chat-demo directory:

| Package | From | To |
| --- | --- | --- |
| [flask](https://github.com/pallets/flask) | `3.0.0` | `3.1.3` |
| [flask-cors](https://github.com/corydolphin/flask-cors) | `6.0.1` | `6.0.5` |
| [azure-storage-blob](https://github.com/Azure/azure-sdk-for-python) | `12.26.0` | `12.30.0` |
| [azure-messaging-webpubsubservice](https://github.com/Azure/azure-sdk-for-python) | `1.2.2` | `1.3.0` |
| [azure-identity](https://github.com/Azure/azure-sdk-for-python) | `1.23.0` | `1.25.3` |
| [asgiref](https://github.com/django/asgiref) | `3.9.1` | `3.12.1` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.0.1` | `1.2.2` |
| [pytest-timeout](https://github.com/pytest-dev/pytest-timeout) | `2.3.1` | `2.4.0` |

Bumps the pip-minor-patch group with 1 update in the /samples/ai/chat-demo/python_server directory: [flask](https://github.com/pallets/flask).
Bumps the pip-minor-patch group with 1 update in the /samples/python directory: [azure-messaging-webpubsubservice](https://github.com/Azure/azure-sdk-for-python).
Bumps the pip-minor-patch group with 1 update in the /samples/python/chatapp directory: [azure-messaging-webpubsubservice](https://github.com/Azure/azure-sdk-for-python).
Bumps the pip-minor-patch group with 1 update in the /samples/python/chatapp-microsoft-entra-id directory: [azure-messaging-webpubsubservice](https://github.com/Azure/azure-sdk-for-python).
Bumps the pip-minor-patch group with 1 update in the /samples/python/logstream directory: [azure-messaging-webpubsubservice](https://github.com/Azure/azure-sdk-for-python).
Bumps the pip-minor-patch group with 1 update in the /samples/python/logstream-protobuf directory: [azure-messaging-webpubsubservice](https://github.com/Azure/azure-sdk-for-python).
Bumps the pip-minor-patch group with 1 update in the /samples/python/pubsub directory: [azure-messaging-webpubsubservice](https://github.com/Azure/azure-sdk-for-python).
Bumps the pip-minor-patch group with 1 update in the /samples/python/pubsub-groups directory: [azure-messaging-webpubsubservice](https://github.com/Azure/azure-sdk-for-python).
Bumps the pip-minor-patch group with 1 update in the /tests/integration-tests directory: [azure-messaging-webpubsubservice](https://github.com/Azure/azure-sdk-for-python).
Bumps the pip-minor-patch group with 1 update in the /tests/integration-tests/python directory: [azure-messaging-webpubsubservice](https://github.com/Azure/azure-sdk-for-python).


Updates `flask` from 3.0.0 to 3.1.3
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst)
- [Commits](pallets/flask@3.0.0...3.1.3)

Updates `flask-cors` from 6.0.1 to 6.0.5
- [Release notes](https://github.com/corydolphin/flask-cors/releases)
- [Changelog](https://github.com/corydolphin/flask-cors/blob/main/CHANGELOG.md)
- [Commits](corydolphin/flask-cors@6.0.1...6.0.5)

Updates `azure-storage-blob` from 12.26.0 to 12.30.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-storage-blob_12.26.0...azure-storage-blob_12.30.0)

Updates `azure-messaging-webpubsubservice` from 1.2.2 to 1.3.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-messaging-webpubsubservice_1.2.2...azure-messaging-webpubsubservice_1.3.0)

Updates `azure-identity` from 1.23.0 to 1.25.3
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-identity_1.23.0...azure-identity_1.25.3)

Updates `asgiref` from 3.9.1 to 3.12.1
- [Changelog](https://github.com/django/asgiref/blob/main/CHANGELOG.txt)
- [Commits](django/asgiref@3.9.1...3.12.1)

Updates `python-dotenv` from 1.0.1 to 1.2.2
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.0.1...v1.2.2)

Updates `pytest-timeout` from 2.3.1 to 2.4.0
- [Commits](pytest-dev/pytest-timeout@2.3.1...2.4.0)

Updates `flask` from 3.0.0 to 3.1.3
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst)
- [Commits](pallets/flask@3.0.0...3.1.3)

Updates `flask-cors` from 6.0.1 to 6.0.5
- [Release notes](https://github.com/corydolphin/flask-cors/releases)
- [Changelog](https://github.com/corydolphin/flask-cors/blob/main/CHANGELOG.md)
- [Commits](corydolphin/flask-cors@6.0.1...6.0.5)

Updates `azure-storage-blob` from 12.26.0 to 12.30.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-storage-blob_12.26.0...azure-storage-blob_12.30.0)

Updates `azure-messaging-webpubsubservice` from 1.2.2 to 1.3.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-messaging-webpubsubservice_1.2.2...azure-messaging-webpubsubservice_1.3.0)

Updates `azure-identity` from 1.23.0 to 1.25.3
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-identity_1.23.0...azure-identity_1.25.3)

Updates `asgiref` from 3.9.1 to 3.12.1
- [Changelog](https://github.com/django/asgiref/blob/main/CHANGELOG.txt)
- [Commits](django/asgiref@3.9.1...3.12.1)

Updates `python-dotenv` from 1.0.1 to 1.2.2
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.0.1...v1.2.2)

Updates `pytest-timeout` from 2.3.1 to 2.4.0
- [Commits](pytest-dev/pytest-timeout@2.3.1...2.4.0)

Updates `flask` from 3.0.0 to 3.1.3
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst)
- [Commits](pallets/flask@3.0.0...3.1.3)

Updates `azure-messaging-webpubsubservice` from 1.0.0 to 1.3.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-messaging-webpubsubservice_1.2.2...azure-messaging-webpubsubservice_1.3.0)

Updates `azure-messaging-webpubsubservice` from 1.0.0 to 1.3.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-messaging-webpubsubservice_1.2.2...azure-messaging-webpubsubservice_1.3.0)

Updates `azure-messaging-webpubsubservice` from 1.0.0 to 1.3.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-messaging-webpubsubservice_1.2.2...azure-messaging-webpubsubservice_1.3.0)

Updates `azure-messaging-webpubsubservice` from 1.0.0 to 1.3.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-messaging-webpubsubservice_1.2.2...azure-messaging-webpubsubservice_1.3.0)

Updates `azure-messaging-webpubsubservice` from 1.0.0 to 1.3.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-messaging-webpubsubservice_1.2.2...azure-messaging-webpubsubservice_1.3.0)

Updates `azure-messaging-webpubsubservice` from 1.0.0 to 1.3.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-messaging-webpubsubservice_1.2.2...azure-messaging-webpubsubservice_1.3.0)

Updates `azure-messaging-webpubsubservice` from 1.0.0 to 1.3.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-messaging-webpubsubservice_1.2.2...azure-messaging-webpubsubservice_1.3.0)

Updates `azure-messaging-webpubsubservice` from 1.1.0 to 1.3.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-messaging-webpubsubservice_1.2.2...azure-messaging-webpubsubservice_1.3.0)

Updates `azure-messaging-webpubsubservice` from 1.1.0 to 1.3.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-messaging-webpubsubservice_1.2.2...azure-messaging-webpubsubservice_1.3.0)

---
updated-dependencies:
- dependency-name: flask
  dependency-version: 3.1.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-minor-patch
- dependency-name: flask-cors
  dependency-version: 6.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-minor-patch
- dependency-name: azure-storage-blob
  dependency-version: 12.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-minor-patch
- dependency-name: azure-messaging-webpubsubservice
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-minor-patch
- dependency-name: azure-identity
  dependency-version: 1.25.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-minor-patch
- dependency-name: asgiref
  dependency-version: 3.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-minor-patch
- dependency-name: python-dotenv
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-minor-patch
- dependency-name: pytest-timeout
  dependency-version: 2.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pip-minor-patch
- dependency-name: flask
  dependency-version: 3.1.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-minor-patch
- dependency-name: flask-cors
  dependency-version: 6.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-minor-patch
- dependency-name: azure-storage-blob
  dependency-version: 12.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-minor-patch
- dependency-name: azure-messaging-webpubsubservice
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-minor-patch
- dependency-name: azure-identity
  dependency-version: 1.25.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-minor-patch
- dependency-name: asgiref
  dependency-version: 3.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-minor-patch
- dependency-name: python-dotenv
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-minor-patch
- dependency-name: pytest-timeout
  dependency-version: 2.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pip-minor-patch
- dependency-name: flask
  dependency-version: 3.1.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-minor-patch
- dependency-name: azure-messaging-webpubsubservice
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-minor-patch
- dependency-name: azure-messaging-webpubsubservice
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-minor-patch
- dependency-name: azure-messaging-webpubsubservice
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-minor-patch
- dependency-name: azure-messaging-webpubsubservice
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-minor-patch
- dependency-name: azure-messaging-webpubsubservice
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-minor-patch
- dependency-name: azure-messaging-webpubsubservice
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-minor-patch
- dependency-name: azure-messaging-webpubsubservice
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-minor-patch
- dependency-name: azure-messaging-webpubsubservice
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-minor-patch
- dependency-name: azure-messaging-webpubsubservice
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 13, 2026
vicancy
Liangying.Wei (vicancy) approved these changes Aug 13, 2026
View reviewed changes

@vicancy Liangying.Wei (vicancy) left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Checks are green. Approved for squash auto-merge; Dependabot should keep the branch current with main.

@vicancy
Liangying.Wei (vicancy) enabled auto-merge (squash) August 13, 2026 12:36
@vicancy

Liangying.Wei (vicancy) commented Aug 13, 2026

Copy link
Copy Markdown
Member

Dependabot (@dependabot) rebase

@dependabot @github

dependabot Bot commented on behalf of github Aug 13, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

@vicancy
Liangying.Wei (vicancy) merged commit cac333a into main Aug 14, 2026
21 of 22 checks passed
@dependabot
dependabot Bot deleted the dependabot/pip/samples/ai/pip-minor-patch-928c0b0bb5 branch August 14, 2026 05:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@vicancy Liangying.Wei (vicancy) vicancy approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@vicancy