fix: Update dependabot packages

.github/workflows/Create-Release.yml

@@ -18,7 +18,7 @@ jobs:
          with:
            ref: ${{ github.event.workflow_run.head_sha }}
 
-       - uses: codfish/semantic-release-action@v4
+       - uses: codfish/semantic-release-action@v5
          id: semantic
          with:
            tag-format: 'v${version}'

.github/workflows/broken-links-checker.yml

@@ -24,7 +24,7 @@ jobs:
       - name: Get changed markdown files (PR only)
         id: changed-markdown-files
         if: github.event_name == 'pull_request'
-        uses: tj-actions/changed-files@e0021407031f5be11a464abee9a0776171c79891 # v46
+        uses: tj-actions/changed-files@22103cc46bda19c2b464ffe86db46df6922fd323 # v46
         with:
           files: |
             **/*.md
@@ -34,7 +34,7 @@ jobs:
       - name: Check Broken Links in Changed Markdown Files
         id: lychee-check-pr
         if: github.event_name == 'pull_request' && steps.changed-markdown-files.outputs.any_changed == 'true'
-        uses: lycheeverse/lychee-action@v2.7.0
+        uses: lycheeverse/lychee-action@v2.8.0
         with:
           args: >
             --verbose --no-progress --exclude ^https?://
@@ -47,7 +47,7 @@ jobs:
       - name: Check Broken Links in All Markdown Files in Entire Repo (Manual Trigger)
         id: lychee-check-manual
         if: github.event_name == 'workflow_dispatch'
-        uses: lycheeverse/lychee-action@v2.7.0
+        uses: lycheeverse/lychee-action@v2.8.0
         with:
           args: >
             --verbose --no-progress --exclude ^https?://

.github/workflows/build-docker.yml

@@ -38,7 +38,7 @@ jobs:
       run: az acr login --name ${{ inputs.registry }}
 
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v3
+      uses: docker/setup-buildx-action@v4
 
     - name: Get current date
       id: date
@@ -61,7 +61,7 @@ jobs:
 
 
     - name: Build Docker Image and optionally push
-      uses: docker/build-push-action@v6
+      uses: docker/build-push-action@v7
       with:
         context: .
         file: ${{ inputs.dockerfile }}

.github/workflows/job-deploy-linux.yml

@@ -49,7 +49,7 @@ jobs:
       WEBAPP_URL: ${{ steps.get_output_linux.outputs.WEBAPP_URL }}
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Validate Workflow Input Parameters
         shell: bash

.github/workflows/job-docker-build.yml

@@ -45,7 +45,7 @@ jobs:
           echo "Generated unique Docker tag: $UNIQUE_TAG"
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Login to Azure
         uses: azure/login@v2
@@ -58,7 +58,7 @@ jobs:
         run: az acr login --name ${{ secrets.ACR_TEST_LOGIN_SERVER }}
 
       - name: Build and Push Cod Mod backend Docker image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         env:
           DOCKER_BUILD_SUMMARY: false
         with:
@@ -70,7 +70,7 @@ jobs:
             ${{ secrets.ACR_TEST_LOGIN_SERVER }}/cmsabackend:${{ steps.generate_docker_tag.outputs.IMAGE_TAG }}_${{ github.run_number }}
 
       - name: Build and Push Cod Mod frontend Docker image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         env:
           DOCKER_BUILD_SUMMARY: false
         with:

.github/workflows/stale-bot.yml

@@ -75,7 +75,7 @@ jobs:
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - name: Upload CSV Report of Inactive Branches
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: merged-branches-report
           path: merged_branches_report.csv

.github/workflows/test-automation-v2.yml

@@ -136,7 +136,7 @@ jobs:
 
       - name: Upload test report
         id: upload_report
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         if: ${{ !cancelled() }}
         with:
           name: test-report

.github/workflows/test-automation.yml

@@ -29,7 +29,7 @@ jobs:
           python-version: '3.13'
 
       - name: Azure CLI Login
-        uses: azure/login@v2
+        uses: azure/login@v3
         with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}
@@ -82,7 +82,7 @@ jobs:
 
       - name: Upload test report
         id: upload_report
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         if: ${{ !cancelled() }}
         with:
           name: test-report

azure.yaml

@@ -4,7 +4,7 @@ metadata:
 
 requiredVersions:
   azd: '>= 1.18.0 != 1.23.9'
-  bicep: '>= 0.33.0'
+  bicep: '>= 0.33.0'
 
 parameters:
   AzureAiServiceLocation:
@@ -22,4 +22,4 @@ deployment:
   parameters:
     AzureAiServiceLocation: ${{ parameters.AzureAiServiceLocation }}
     Prefix: ${{ parameters.Prefix }}
-    baseUrl: ${{ parameters.baseUrl }}
+    baseUrl: ${{ parameters.baseUrl }}

src/backend/requirements.txt

@@ -35,7 +35,7 @@ structlog
 typing-extensions
 python-jose[cryptography]
 passlib[bcrypt]
-semantic-kernel[azure]==1.39.4
+semantic-kernel[azure]==1.41.1
 sqlparse
 sqlglot
 unittest2
@@ -45,10 +45,10 @@ aiortc
 opentelemetry-exporter-otlp-proto-grpc
 opentelemetry-exporter-otlp-proto-http
 azure-monitor-events-extension
-opentelemetry-sdk==1.39.0
-opentelemetry-api==1.39.0
-opentelemetry-semantic-conventions==0.60b0
-opentelemetry-instrumentation==0.60b0
-opentelemetry-instrumentation-fastapi==0.60b0
-azure-monitor-opentelemetry==1.8.6
-azure-ai-projects==1.0.0
+opentelemetry-sdk==1.40.0
+opentelemetry-api==1.40.0
+opentelemetry-semantic-conventions==0.61b0
+opentelemetry-instrumentation==0.61b0
+opentelemetry-instrumentation-fastapi==0.61b0
+azure-monitor-opentelemetry==1.8.7
+azure-ai-projects==1.0.0b12