Skip to content

build: bump esbuilt, vite and qs package upgrade#712

Merged
Avijit-Microsoft merged 9 commits intodevfrom
dependabotchanges
Feb 18, 2026
Merged

build: bump esbuilt, vite and qs package upgrade#712
Avijit-Microsoft merged 9 commits intodevfrom
dependabotchanges

Conversation

@VishalS-Microsoft
Copy link
Contributor

Purpose

This pull request primarily updates dependencies across multiple parts of the project to ensure compatibility, security, and access to new features. It also updates GitHub Actions workflows to use the latest versions of key actions for improved reliability and support.

Dependency Updates

  • Updated frontend dependencies in archive-doc-gen/src/frontend/package.json, including major upgrades for react (to 19.x), react-dom, @fluentui/*, lodash, and various dev tools, aligning with the latest stable releases.
  • Upgraded Python dependencies in archive-doc-gen/src/requirements.txt and archive-doc-gen/src/requirements-dev.txt, such as openai, azure-*, aiohttp, gunicorn, black, and several opentelemetry packages. [1] [2] [3]
  • Updated qs package to version 6.14.2 in content-gen/src/app/frontend-server/package-lock.json for improved security and bug fixes.
  • Upgraded vite to 7.3.1 in content-gen/src/app/frontend/package.json.

CI/CD Workflow Improvements

  • Updated actions/checkout to v6 in all relevant GitHub Actions workflow files for Linux, Windows, Docker, and test automation, ensuring the use of the latest features and security patches. [1] [2] [3] [4] [5]
  • Upgraded actions/upload-artifact to v6 in the test automation workflow for improved artifact handling.

Does this introduce a breaking change?

  • Yes
  • No

Golden Path Validation

  • I have tested the primary workflows (the "golden path") to ensure they function correctly without errors.

Deployment Validation

  • I have validated the deployment process successfully and all services are running as expected with this change.

What to Check

Verify that the following are valid

  • ...

Other Information

dependabot bot and others added 6 commits February 5, 2026 00:36
Bumps the github-actions group with 2 updates: [actions/checkout](https://github.com/actions/checkout) and [actions/upload-artifact](https://github.com/actions/upload-artifact).


Updates `actions/checkout` from 4 to 6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v6)

Updates `actions/upload-artifact` from 4 to 6
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the all-frontend-deps group in /src/frontend with 22 updates:

| Package | From | To |
| --- | --- | --- |
| [@fluentui/react](https://github.com/microsoft/fluentui) | `8.125.3` | `8.125.4` |
| [@fluentui/react-components](https://github.com/microsoft/fluentui) | `9.72.9` | `9.72.11` |
| [@fluentui/react-icons](https://github.com/microsoft/fluentui-system-icons) | `2.0.316` | `2.0.317` |
| [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.17.23` |
| [lodash-es](https://github.com/lodash/lodash) | `4.17.22` | `4.17.23` |
| [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `18.3.1` | `19.2.4` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `18.3.20` | `19.2.10` |
| [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `18.3.1` | `19.2.4` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `18.3.6` | `19.2.3` |
| [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.11.0` | `7.13.0` |
| [undici](https://github.com/nodejs/undici) | `7.18.2` | `7.20.0` |
| [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.1` | `16.3.2` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.0.3` | `25.2.0` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `6.21.0` | `8.54.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `6.21.0` | `8.54.0` |
| [eslint](https://github.com/eslint/eslint) | `8.57.1` | `9.39.2` |
| [eslint-plugin-n](https://github.com/eslint-community/eslint-plugin-n) | `16.6.2` | `17.23.2` |
| [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) | `5.5.4` | `5.5.5` |
| [eslint-plugin-promise](https://github.com/eslint-community/eslint-plugin-promise) | `6.6.0` | `7.2.1` |
| [globals](https://github.com/sindresorhus/globals) | `17.0.0` | `17.3.0` |
| [prettier](https://github.com/prettier/prettier) | `3.7.4` | `3.8.1` |
| [react-test-renderer](https://github.com/facebook/react/tree/HEAD/packages/react-test-renderer) | `18.3.1` | `19.2.4` |


Updates `@fluentui/react` from 8.125.3 to 8.125.4
- [Release notes](https://github.com/microsoft/fluentui/releases)
- [Commits](https://github.com/microsoft/fluentui/compare/@fluentui/react_v8.125.3...@fluentui/react_v8.125.4)

Updates `@fluentui/react-components` from 9.72.9 to 9.72.11
- [Release notes](https://github.com/microsoft/fluentui/releases)
- [Commits](https://github.com/microsoft/fluentui/compare/@fluentui/react-components_v9.72.9...@fluentui/react-components_v9.72.11)

Updates `@fluentui/react-icons` from 2.0.316 to 2.0.317
- [Commits](https://github.com/microsoft/fluentui-system-icons/commits)

Updates `lodash` from 4.17.21 to 4.17.23
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.21...4.17.23)

Updates `lodash-es` from 4.17.22 to 4.17.23
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/commits/4.17.23)

Updates `react` from 18.3.1 to 19.2.4
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.4/packages/react)

Updates `@types/react` from 18.3.20 to 19.2.10
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 18.3.1 to 19.2.4
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.4/packages/react-dom)

Updates `@types/react-dom` from 18.3.6 to 19.2.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `react-router-dom` from 7.11.0 to 7.13.0
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.13.0/packages/react-router-dom)

Updates `undici` from 7.18.2 to 7.20.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v7.18.2...v7.20.0)

Updates `@testing-library/react` from 16.3.1 to 16.3.2
- [Release notes](https://github.com/testing-library/react-testing-library/releases)
- [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md)
- [Commits](testing-library/react-testing-library@v16.3.1...v16.3.2)

Updates `@types/node` from 25.0.3 to 25.2.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/react` from 18.3.20 to 19.2.10
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 18.3.6 to 19.2.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `@typescript-eslint/eslint-plugin` from 6.21.0 to 8.54.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.54.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 6.21.0 to 8.54.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.54.0/packages/parser)

Updates `eslint` from 8.57.1 to 9.39.2
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v8.57.1...v9.39.2)

Updates `eslint-plugin-n` from 16.6.2 to 17.23.2
- [Release notes](https://github.com/eslint-community/eslint-plugin-n/releases)
- [Changelog](https://github.com/eslint-community/eslint-plugin-n/blob/master/CHANGELOG.md)
- [Commits](eslint-community/eslint-plugin-n@16.6.2...v17.23.2)

Updates `eslint-plugin-prettier` from 5.5.4 to 5.5.5
- [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/eslint-plugin-prettier@v5.5.4...v5.5.5)

Updates `eslint-plugin-promise` from 6.6.0 to 7.2.1
- [Release notes](https://github.com/eslint-community/eslint-plugin-promise/releases)
- [Changelog](https://github.com/eslint-community/eslint-plugin-promise/blob/main/CHANGELOG.md)
- [Commits](eslint-community/eslint-plugin-promise@v6.6.0...v7.2.1)

Updates `globals` from 17.0.0 to 17.3.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.0.0...v17.3.0)

Updates `prettier` from 3.7.4 to 3.8.1
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.7.4...3.8.1)

Updates `react-test-renderer` from 18.3.1 to 19.2.4
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.4/packages/react-test-renderer)

---
updated-dependencies:
- dependency-name: "@fluentui/react"
  dependency-version: 8.125.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-frontend-deps
- dependency-name: "@fluentui/react-components"
  dependency-version: 9.72.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-frontend-deps
- dependency-name: "@fluentui/react-icons"
  dependency-version: 2.0.317
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-frontend-deps
- dependency-name: lodash
  dependency-version: 4.17.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-frontend-deps
- dependency-name: lodash-es
  dependency-version: 4.17.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-frontend-deps
- dependency-name: react
  dependency-version: 19.2.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-frontend-deps
- dependency-name: "@types/react"
  dependency-version: 19.2.10
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-frontend-deps
- dependency-name: react-dom
  dependency-version: 19.2.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-frontend-deps
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-frontend-deps
- dependency-name: react-router-dom
  dependency-version: 7.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-frontend-deps
- dependency-name: undici
  dependency-version: 7.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-frontend-deps
- dependency-name: "@testing-library/react"
  dependency-version: 16.3.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-frontend-deps
- dependency-name: "@types/node"
  dependency-version: 25.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-frontend-deps
- dependency-name: "@types/react"
  dependency-version: 19.2.10
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-frontend-deps
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-frontend-deps
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.54.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-frontend-deps
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.54.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-frontend-deps
- dependency-name: eslint
  dependency-version: 9.39.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-frontend-deps
- dependency-name: eslint-plugin-n
  dependency-version: 17.23.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-frontend-deps
- dependency-name: eslint-plugin-prettier
  dependency-version: 5.5.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-frontend-deps
- dependency-name: eslint-plugin-promise
  dependency-version: 7.2.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-frontend-deps
- dependency-name: globals
  dependency-version: 17.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-frontend-deps
- dependency-name: prettier
  dependency-version: 3.8.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-frontend-deps
- dependency-name: react-test-renderer
  dependency-version: 19.2.4
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-frontend-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
---
updated-dependencies:
- dependency-name: openai
  dependency-version: 2.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-backend-deps
- dependency-name: azure-storage-blob
  dependency-version: 12.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-backend-deps
- dependency-name: azure-cosmos
  dependency-version: 4.14.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-backend-deps
- dependency-name: aiohttp
  dependency-version: 3.13.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-backend-deps
- dependency-name: gunicorn
  dependency-version: 25.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-backend-deps
- dependency-name: black
  dependency-version: 26.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-backend-deps
- dependency-name: opentelemetry-sdk
  dependency-version: 1.39.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-backend-deps
- dependency-name: opentelemetry-api
  dependency-version: 1.39.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-backend-deps
- dependency-name: opentelemetry-semantic-conventions
  dependency-version: 0.60b1
  dependency-type: direct:production
  dependency-group: all-backend-deps
- dependency-name: opentelemetry-instrumentation
  dependency-version: 0.60b1
  dependency-type: direct:production
  dependency-group: all-backend-deps
- dependency-name: azure-monitor-opentelemetry
  dependency-version: 1.8.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-backend-deps
- dependency-name: markdown
  dependency-version: 3.10.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-backend-deps
- dependency-name: tqdm
  dependency-version: 4.67.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-backend-deps
- dependency-name: langchain
  dependency-version: 1.2.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-backend-deps
- dependency-name: urllib3
  dependency-version: 2.6.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-backend-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
build: bump esbuilt, vite and qs package upgrade
@VishalS-Microsoft VishalS-Microsoft changed the title Dependabotchanges build: bump esbuilt, vite and qs package upgrade Feb 17, 2026
@Avijit-Microsoft Avijit-Microsoft merged commit 5953bca into dev Feb 18, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants