Merge pull request #898 from microsoft/DependentBotFix_Akhileswar

fix: Dependent bot fix

Author: Roopan-Microsoft

src/App/package-lock.json

@@ -16,7 +16,6 @@
     "@types/node": "^16.18.126",
     "@types/react": "^18.3.23",
     "@types/react-dom": "^18.3.7",
-    "axios": "^1.13.5",
     "react": "^18.3.1",
     "react-dom": "^18.3.1",
     "react-markdown": "^10.1.0",
@@ -69,10 +68,14 @@
     "jsdom": "^26.1.0",
     "rollup": "^4.59.0",
     "typescript": "^5.8.3",
-    "vite": "^7.1.2",
+    "vite": "7.1.11",
     "vitest": "^3.2.4"
   },
   "overrides": {
-    "minimatch": "3.1.3"
+    "minimatch": "3.1.3",
+    "vite": "7.1.11",
+    "mdast-util-to-hast": "13.2.1",
+    "picomatch": "4.0.4",
+    "js-yaml": "4.1.1"
   }
 }

src/App/package.json

@@ -30,15 +30,15 @@ dependencies = [
     "pylint-pydantic==0.3.5",
     "pexpect==4.9.0",
     "mcp==1.26.0",
-    "werkzeug==3.1.5",
+    "werkzeug==3.1.6",
     "azure-core==1.38.0",
     "agent-framework-azure-ai==1.0.0rc4",
     "agent-framework-core==1.0.0rc4",
     "agent-framework-orchestrations==1.0.0b260311",
     "urllib3==2.6.3",
     "protobuf==5.29.6",
-    "cryptography==46.0.5",
-    "aiohttp==3.13.3",
+    "cryptography==46.0.6",
+    "aiohttp==3.13.4",
     "pyasn1==0.6.3",
     "nltk==3.9.4",
 ]

src/App/uv.lock

@@ -25,15 +25,15 @@ agent-framework-core==1.0.0rc4
 agent-framework-orchestrations==1.0.0b260311
 
 mcp==1.26.0
-werkzeug==3.1.5
+werkzeug==3.1.6
 pylint-pydantic==0.3.5
 pexpect==4.9.0
 urllib3==2.6.3
 protobuf==5.29.6
-cryptography==46.0.5
-aiohttp==3.13.3
-pyasn1==0.6.2
-nltk==3.9.3
+cryptography==46.0.6
+aiohttp==3.13.4
+pyasn1==0.6.3
+nltk==3.9.4
 
 # Testing tools
 pytest==8.4.1

src/backend/pyproject.toml

@@ -13,20 +13,20 @@ authors = [
 ]
 dynamic = ["version"]
 
-# Core runtime dependencies (kept in sync with requirements.txt)
+# Core runtime dependencies managed in this pyproject.toml
 dependencies = [
-  "fastmcp==2.14.2",
+  "fastmcp==3.2.0",
   "uvicorn[standard]==0.38.0",
   "python-dotenv==1.1.1",
   "azure-identity==1.19.0",
   "pydantic==2.11.7",
   "pydantic-settings==2.6.1",
   "python-multipart==0.0.22",
   "httpx==0.28.1",
-  "werkzeug==3.1.5",
+  "werkzeug==3.1.6",
   "urllib3==2.6.3",
   "azure-core==1.38.0",
-  "cryptography==46.0.5",
+  "cryptography==46.0.6",
 ]
 
 [project.optional-dependencies]