refactor: dependabot package upgrades

.github/workflows/azure-dev.yaml

@@ -21,7 +21,7 @@ jobs:
       AZURE_DEV_COLLECT_TELEMETRY: ${{ vars.AZURE_DEV_COLLECT_TELEMETRY }}
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set timestamp and env name
         run: |

.github/workflows/broken-links-checker.yml

@@ -16,15 +16,15 @@ jobs:
 
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
       # For PR : Get only changed markdown files
       - name: Get changed markdown files (PR only)
         id: changed-markdown-files
         if: github.event_name == 'pull_request'
-        uses: tj-actions/changed-files@24d32ffd492484c1d75e0c0b894501ddb9d30d62 # v46
+        uses: tj-actions/changed-files@22103cc46bda19c2b464ffe86db46df6922fd323 # v46
         with:
           files: |
             **/*.md
@@ -34,7 +34,7 @@ jobs:
       - name: Check Broken Links in Changed Markdown Files
         id: lychee-check-pr
         if: github.event_name == 'pull_request' && steps.changed-markdown-files.outputs.any_changed == 'true'
-        uses: lycheeverse/lychee-action@v2.6.1
+        uses: lycheeverse/lychee-action@v2.8.0
         with:
           args: >
             --verbose --no-progress --exclude ^https?://
@@ -47,7 +47,7 @@ jobs:
       - name: Check Broken Links in All Markdown Files in Entire Repo (Manual Trigger)
         id: lychee-check-manual
         if: github.event_name == 'workflow_dispatch'
-        uses: lycheeverse/lychee-action@v2.6.1
+        uses: lycheeverse/lychee-action@v2.8.0
         with:
           args: >
             --verbose --no-progress --exclude ^https?://

.github/workflows/build-docker-image.yml

@@ -59,10 +59,10 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Get current date
         id: date
@@ -110,7 +110,7 @@ jobs:
           echo "Base tag: $BASE_TAG, Date tag: $DATE_TAG"
 
       - name: Build and Push ContentProcessor Docker image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: ./src/ContentProcessor
           file: ./src/ContentProcessor/Dockerfile
@@ -120,7 +120,7 @@ jobs:
             ${{ steps.registry.outputs.ext_registry }}/contentprocessor:${{ env.DATE_TAG }}
 
       - name: Build and Push ContentProcessorAPI Docker image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: ./src/ContentProcessorAPI
           file: ./src/ContentProcessorAPI/Dockerfile
@@ -130,7 +130,7 @@ jobs:
             ${{ steps.registry.outputs.ext_registry }}/contentprocessorapi:${{ env.DATE_TAG }}
 
       - name: Build and Push ContentProcessorWeb Docker image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: ./src/ContentProcessorWeb
           file: ./src/ContentProcessorWeb/Dockerfile

.github/workflows/create-release.yml

@@ -14,11 +14,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           ref: ${{ github.event.workflow_run.head_sha }}
 
-      - uses: codfish/semantic-release-action@v4
+      - uses: codfish/semantic-release-action@v5
         id: semantic
         with:
           tag-format: 'v${version}'

.github/workflows/deploy.yml

@@ -33,7 +33,7 @@ jobs:
 
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Login to Azure
         uses: azure/login@v2

.github/workflows/job-deploy-linux.yml

@@ -182,8 +182,8 @@ jobs:
           echo "✅ All input parameters validated successfully!"
 
       - name: Checkout Code
-        uses: actions/checkout@v4
-
+        uses: actions/checkout@v6
+      
       - name: Configure Parameters Based on WAF Setting
         shell: bash
         env:

.github/workflows/job-deploy-windows.yml

@@ -182,7 +182,7 @@ jobs:
           echo "✅ All input parameters validated successfully!"
 
       - name: Checkout Code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Configure Parameters Based on WAF Setting
         shell: bash

.github/workflows/job-deploy.yml

@@ -314,7 +314,7 @@ jobs:
           echo "Final EXP status: $EXP_ENABLED"
 
       - name: Checkout Code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Login to Azure
         uses: azure/login@v2

.github/workflows/job-docker-build.yml

@@ -29,7 +29,7 @@ jobs:
       IMAGE_TAG: ${{ steps.generate_docker_tag.outputs.IMAGE_TAG }}
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Generate Unique Docker Image Tag
         id: generate_docker_tag
@@ -46,7 +46,7 @@ jobs:
           echo "Generated unique Docker tag: $UNIQUE_TAG"
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Log in to Azure
         uses: azure/login@v2
@@ -59,7 +59,7 @@ jobs:
         run: az acr login --name ${{ secrets.ACR_TEST_LOGIN_SERVER }}
 
       - name: Build and Push ContentProcessor Docker image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         env:
           DOCKER_BUILD_SUMMARY: false
         with:
@@ -71,7 +71,7 @@ jobs:
             ${{ secrets.ACR_TEST_LOGIN_SERVER }}/contentprocessor:${{ steps.generate_docker_tag.outputs.IMAGE_TAG }}_${{ github.run_number }}
 
       - name: Build and Push ContentProcessorAPI Docker image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         env:
           DOCKER_BUILD_SUMMARY: false
         with:
@@ -83,7 +83,7 @@ jobs:
             ${{ secrets.ACR_TEST_LOGIN_SERVER }}/contentprocessorapi:${{ steps.generate_docker_tag.outputs.IMAGE_TAG }}_${{ github.run_number }}
 
       - name: Build and Push ContentProcessorWeb Docker image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         env:
           DOCKER_BUILD_SUMMARY: false
         with:

.github/workflows/pylint.yml

@@ -21,7 +21,7 @@ jobs:
     steps:
       # Step 1: Checkout code
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       # Step 2: Set up Python environment
       - name: Set up Python ${{ matrix.python-version }}

.github/workflows/scheduled-Dependabot-PRs-Auto-Merge.yml

@@ -36,7 +36,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Install GitHub CLI
         run: |

.github/workflows/telemetry-template-check.yml

@@ -14,7 +14,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Check for required metadata template line
         run: |

.github/workflows/test-automation-v2.yml

@@ -34,7 +34,7 @@ jobs:
       TEST_REPORT_URL: ${{ steps.upload_report.outputs.artifact-url }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Set up Python
         uses: actions/setup-python@v6
@@ -136,7 +136,7 @@ jobs:
 
       - name: Upload test report
         id: upload_report
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         if: ${{ !cancelled() }}
         with:
           name: test-report

.github/workflows/test-automation.yml

@@ -22,7 +22,7 @@ jobs:
     environment: production
     steps:      
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Set up Python
         uses: actions/setup-python@v6
@@ -113,7 +113,7 @@ jobs:
 
       - name: Upload test report
         id: upload_report
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         if: ${{ !cancelled() }}
         with:
           name: test-report

.github/workflows/test.yml

@@ -42,7 +42,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Set up Python
         uses: actions/setup-python@v6
@@ -83,7 +83,7 @@ jobs:
   #
   #   steps:
   #     - name: Checkout code
-  #       uses: actions/checkout@v5
+  #       uses: actions/checkout@v6
   #
   #     - name: Set up Node.js
   #       uses: actions/setup-node@v3

src/ContentProcessor/pyproject.toml

@@ -11,16 +11,16 @@ dependencies = [
     "azure-identity==1.26.0b1",
     "azure-storage-blob==12.29.0b1",
     "azure-storage-queue==12.16.0b1",
-    "certifi==2026.1.4",
-    "charset-normalizer==3.4.4",
+    "certifi==2026.2.25",
+    "charset-normalizer==3.4.6",
     "opentelemetry-api==1.39.1",
-    "pandas==3.0.0",
+    "pandas==3.0.2",
     "pdf2image==1.17.0",
     "poppler-utils==0.1.0",
-    "pydantic==2.12.5",
-    "pydantic-settings==2.12.0",
+    "pydantic==2.13.1",
+    "pydantic-settings==2.13.1",
     "pymongo==4.16.0",
-    "python-dotenv==1.2.1",
+    "python-dotenv==1.2.2",
     "tiktoken==0.12.0",
     "protobuf==6.33.6",
     "pyjwt==2.12.1",
@@ -30,14 +30,14 @@ dependencies = [
 
 [dependency-groups]
 dev = [
-    "coverage==7.13.2",
-    "pydantic==2.12.5",
-    "pytest==9.0.2",
+    "coverage==7.13.5",
+    "pydantic==2.13.1",
+    "pytest==9.0.3",
     "pytest-asyncio==1.3.0",
-    "pytest-cov==7.0.0",
+    "pytest-cov==7.1.0",
     "pytest-mock==3.15.1",
     "mongomock==4.3.0",
-    "ruff==0.14.14",
+    "ruff==0.15.8",
 ]
 
 [tool.pytest.ini_options]

src/ContentProcessor/requirements.txt

@@ -1,48 +1,48 @@
 annotated-types==0.7.0
 azure-ai-inference==1.0.0b9
 azure-appconfiguration==1.8.0
-azure-core==1.38.0
+azure-core==1.39.0
 azure-identity==1.26.0b1
 azure-storage-blob==12.29.0b1
 azure-storage-queue==12.16.0b1
-certifi==2026.1.4
+certifi==2026.2.25
 cffi==2.0.0
-charset-normalizer==3.4.4
+charset-normalizer==3.4.6
 click==8.3.1
 colorama==0.4.6
-coverage==7.13.2
+coverage==7.13.5
 cryptography==46.0.7
 dnspython==2.8.0
 idna==3.11
 iniconfig==2.3.0
 isodate==0.7.2
 mongomock==4.3.0
-msal==1.34.0
+msal==1.35.1
 msal-extensions==1.3.1
-numpy==2.4.1
-packaging==25.0
-pandas==3.0.0
+numpy==2.4.4
+packaging==26.0
+pandas==3.0.2
 pdf2image==1.17.0
 pillow==12.1.1
 pluggy==1.6.0
 poppler-utils==0.1.0
-pycparser==2.23
-pydantic==2.12.5
-pydantic-core==2.41.5
-pydantic-settings==2.12.0
-pygments==2.19.2
+pycparser==3.0
+pydantic==2.13.1
+pydantic-core==2.46.1
+pydantic-settings==2.13.1
+pygments==2.20.0
 pyjwt==2.12.1
 pymongo==4.16.0
 pytest==9.0.2
 pytest-asyncio==1.3.0
-pytest-cov==7.0.0
+pytest-cov==7.1.0
 pytest-mock==3.15.1
 python-dateutil==2.9.0.post0
-python-dotenv==1.2.1
-pytz==2025.2
-regex==2025.11.3
-requests==2.33.0
-ruff==0.14.14
+python-dotenv==1.2.2
+pytz==2026.1.post1
+regex==2026.3.32
+requests==2.33.1
+ruff==0.15.8
 sentinels==1.1.1
 six==1.17.0
 tiktoken==0.12.0