Consolidate Dependabot dependency updates

.github/labeler.yml

@@ -1,43 +1,56 @@
 # Add 'kernel' label to any change within Connectors, Extensions, Skills, and tests directories
 kernel:
-  - dotnet/src/Connectors/**/*
-  - dotnet/src/Extensions/**/*
-  - dotnet/src/Skills/**/*
-  - dotnet/src/IntegrationTests/**/*
-  - dotnet/src/SemanticKernel.UnitTests/**/*
+  - changed-files:
+      - any-glob-to-any-file:
+          - dotnet/src/Connectors/**/*
+          - dotnet/src/Extensions/**/*
+          - dotnet/src/Skills/**/*
+          - dotnet/src/IntegrationTests/**/*
+          - dotnet/src/SemanticKernel.UnitTests/**/*
 
 # Add 'kernel.core' label to any change within the 'SemanticKernel', 'SemanticKernel.Abstractions', or 'SemanticKernel.MetaPackage' directories
 kernel.core:
-  - dotnet/src/SemanticKernel/**/*
-  - dotnet/src/SemanticKernel.Abstractions/**/*
-  - dotnet/src/SemanticKernel.MetaPackage/**/*
+  - changed-files:
+      - any-glob-to-any-file:
+          - dotnet/src/SemanticKernel/**/*
+          - dotnet/src/SemanticKernel.Abstractions/**/*
+          - dotnet/src/SemanticKernel.MetaPackage/**/*
 
 # Add 'python' label to any change within the 'python' directory
 python:
-  - python/**/*
+  - changed-files:
+      - any-glob-to-any-file: python/**/*
 
 # Add 'java' label to any change within the 'java' directory
 java:
-  - java/**/*
+  - changed-files:
+      - any-glob-to-any-file: java/**/*
 
 # Add 'samples' label to any change within the 'samples' directory
 samples:
-  - samples/**/*
+  - changed-files:
+      - any-glob-to-any-file: samples/**/*
 
 # Add '.NET' label to any change within samples or kernel 'dotnet' directories.
 .NET:
-  - dotnet/**/*
+  - changed-files:
+      - any-glob-to-any-file: dotnet/**/*
 
 # Add 'copilot chat' label to any change within the 'samples/apps/copilot-chat-app' directory
 copilot chat:
-  - samples/apps/copilot-chat-app/**/*
+  - changed-files:
+      - any-glob-to-any-file: samples/apps/copilot-chat-app/**/*
 
 # Add 'documentation' label to any change within the 'docs' directory, or any '.md' files
 documentation:
-  - docs/**/*
-  - '**/*.md'
+  - changed-files:
+      - any-glob-to-any-file:
+          - docs/**/*
+          - '**/*.md'
 
 # Add 'memory' label to any memory connectors in dotnet/ or python/
 memory:
-  - dotnet/src/Connectors/Connectors.Memory.*/**/*
-  - python/semantic_kernel/connectors/memory/**/*
+  - changed-files:
+      - any-glob-to-any-file:
+          - dotnet/src/Connectors/Connectors.Memory.*/**/*
+          - python/semantic_kernel/connectors/memory/**/*

.github/workflows/close-inactive-issues.yml

@@ -10,7 +10,7 @@ jobs:
       issues: write
       pull-requests: write
     steps:
-      - uses: actions/stale@v5
+      - uses: actions/stale@v10
         with:
           days-before-issue-stale: 90
           days-before-issue-close: 14

.github/workflows/dotnet-build-and-test.yml

@@ -184,7 +184,7 @@ jobs:
 
       # Generate test reports and check coverage
       - name: Generate test reports
-        uses: danielpalme/ReportGenerator-GitHub-Action@5.4.12
+        uses: danielpalme/ReportGenerator-GitHub-Action@5.4.15
         with:
           reports: "./TestResults/Coverage/**/coverage.cobertura.xml"
           targetdir: "./TestResults/Reports"
@@ -232,13 +232,13 @@ jobs:
       - name: Fail workflow if tests failed
         id: check_tests_failed
         if: contains(join(needs.*.result, ','), 'failure')
-        uses: actions/github-script@v6
+        uses: actions/github-script@v8
         with:
           script: core.setFailed('Integration Tests Failed!')
 
       - name: Fail workflow if tests cancelled
         id: check_tests_cancelled
         if: contains(join(needs.*.result, ','), 'cancelled')
-        uses: actions/github-script@v6
+        uses: actions/github-script@v8
         with:
           script: core.setFailed('Integration Tests Cancelled!')

.github/workflows/label-issues.yml

@@ -13,7 +13,7 @@ jobs:
     permissions:
       issues: write
     steps:
-      - uses: actions/github-script@v6
+      - uses: actions/github-script@v8
         with:
           github-token: ${{ secrets.GH_ACTIONS_PR_WRITE }}
           script: |

.github/workflows/label-pr.yml

@@ -16,6 +16,6 @@ jobs:
       pull-requests: write
 
     steps:
-      - uses: actions/labeler@v4
+      - uses: actions/labeler@v6
         with:
           repo-token: "${{ secrets.GH_ACTIONS_PR_WRITE }}"

.github/workflows/label-title-prefix.yml

@@ -15,7 +15,7 @@ jobs:
       pull-requests: write
 
     steps:
-      - uses: actions/github-script@v6
+      - uses: actions/github-script@v8
         name: "Issue/PR: update title"
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/python-integration-tests.yml

@@ -534,14 +534,14 @@ jobs:
       - name: Fail workflow if tests failed
         id: check_tests_failed
         if: contains(join(needs.*.result, ','), 'failure')
-        uses: actions/github-script@v6
+        uses: actions/github-script@v8
         with:
           script: core.setFailed('Integration Tests Failed!')
 
       - name: Fail workflow if tests cancelled
         id: check_tests_cancelled
         if: contains(join(needs.*.result, ','), 'cancelled')
-        uses: actions/github-script@v6
+        uses: actions/github-script@v8
         with:
           script: core.setFailed('Integration Tests Cancelled!')
 

.github/workflows/typos.yaml

@@ -22,10 +22,18 @@ jobs:
       - name: Check out code
         uses: actions/checkout@v5
         with:
+          fetch-depth: 0
           persist-credentials: false
 
+      - name: Get changed files
+        id: changed-files
+        if: github.event_name == 'pull_request'
+        uses: jitterbit/get-changed-files@v1
+        continue-on-error: true
+
       - name: Use custom config file
-        uses: crate-ci/typos@v1.36.2
+        uses: crate-ci/typos@v1.44.0
         with:
+          files: ${{ github.event_name == 'pull_request' && steps.changed-files.outputs.added_modified || '.' }}
           config: .github/_typos.toml
           write_changes: false

dotnet/Directory.Packages.props

@@ -6,18 +6,18 @@
   </PropertyGroup>
   <ItemGroup>
     <PackageVersion Include="Aspire.Azure.AI.OpenAI" Version="9.3.1-preview.1.25305.6" />
-    <PackageVersion Include="Aspire.Azure.Search.Documents" Version="13.3.0" />
-    <PackageVersion Include="Aspire.Hosting.AppHost" Version="13.3.0" />
-    <PackageVersion Include="Aspire.Hosting.Azure.CognitiveServices" Version="13.3.0" />
+    <PackageVersion Include="Aspire.Azure.Search.Documents" Version="13.4.6" />
+    <PackageVersion Include="Aspire.Hosting.AppHost" Version="13.4.6" />
+    <PackageVersion Include="Aspire.Hosting.Azure.CognitiveServices" Version="13.4.6" />
     <PackageVersion Include="Aspire.Hosting.NodeJs" Version="9.5.2" />
     <PackageVersion Include="CommunityToolkit.Aspire.Hosting.Dapr" Version="9.9.0" />
     <PackageVersion Include="CommunityToolkit.Aspire.Hosting.NodeJS.Extensions" Version="9.9.0" />
     <PackageVersion Include="Aspire.Hosting.Azure.Search" Version="13.3.0" />
     <PackageVersion Include="MessagePack" Version="3.1.7" /> <!-- Transitive dependency of Aspire pinned to newer version due to vulnerability in 2.5.192 -->
-    <PackageVersion Include="AWSSDK.BedrockAgent" Version="4.0.7.5" />
+    <PackageVersion Include="AWSSDK.BedrockAgent" Version="4.0.8.5" />
     <PackageVersion Include="AWSSDK.BedrockAgentRuntime" Version="4.0.8.5" />
     <PackageVersion Include="AWSSDK.BedrockRuntime" Version="4.0.14.5" />
-    <PackageVersion Include="AWSSDK.Core" Version="4.0.3.8" />
+    <PackageVersion Include="AWSSDK.Core" Version="4.0.6.1" />
     <PackageVersion Include="AWSSDK.Extensions.Bedrock.MEAI" Version="4.0.5.3" />
     <PackageVersion Include="AWSSDK.Extensions.NETCore.Setup" Version="4.0.3.19" />
     <PackageVersion Include="AWSSDK.SecurityToken" Version="4.0.5.6" />
@@ -107,6 +107,7 @@
     <PackageVersion Include="PdfPig" Version="0.1.13" />
     <PackageVersion Include="Pinecone.Client" Version="3.1.0" />
     <PackageVersion Include="Prompty.Core" Version="2.0.0-beta.3" />
+    <PackageVersion Include="SQLitePCLRaw.lib.e_sqlite3" Version="3.53.3" /> <!-- Transitive dependency of Microsoft.Data.Sqlite pinned to newer version due to vulnerability in <= 2.1.11 (GHSA-2m69-gcr7-jv3q) -->
     <PackageVersion Include="PuppeteerSharp" Version="20.2.5" />
     <PackageVersion Include="System.Diagnostics.DiagnosticSource" Version="10.0.2" />
     <PackageVersion Include="System.IdentityModel.Tokens.Jwt" Version="8.16.0" />
@@ -261,4 +262,4 @@
     <PackageVersion Include="NAudio" Version="2.2.1" />
     <PackageVersion Include="WebRtcVadSharp" Version="1.3.2" />
   </ItemGroup>
-</Project>
+</Project>

dotnet/samples/Demos/AgentFrameworkWithAspire/ChatWithAgent.ApiService/ChatWithAgent.ApiService.csproj

@@ -14,6 +14,7 @@
   <ItemGroup>
     <PackageReference Include="Aspire.Azure.AI.OpenAI" />
     <PackageReference Include="Aspire.Azure.Search.Documents" />
+    <PackageReference Include="Azure.Identity" />
     <PackageReference Include="Microsoft.SemanticKernel.Connectors.AzureAISearch" />
   </ItemGroup>