chore: Dev to Main

[Shreyas-Microsoft]

Purpose

This pull request primarily updates dependencies across both backend and frontend components to address compatibility, security, and feature improvements. Notable changes include upgrading key libraries, adding new dependencies, and introducing override configurations for dependency management.

Dependency upgrades and additions:

• Upgraded semantic-kernel to version 1.40.0 in both src/backend-api/pyproject.toml and src/processor/pyproject.toml for enhanced AI integration and compatibility. [1] [2]
• Added protobuf==7.34.0 to backend dependencies for improved serialization support. [1] [2]
• Upgraded python-multipart from 0.0.20 to 0.0.22 in backend and frontend requirements for better file upload handling. [1] [2]
• Upgraded openai to 2.26.0 and mcp to 1.26.0 in src/processor/pyproject.toml for access to latest features and fixes.

Frontend dependency updates:

• Upgraded axios to 1.13.6 and react-router-dom to 7.13.1 in src/frontend/package.json for improved HTTP handling and routing. [1] [2]
• Upgraded rollup to 4.59.0 and added overrides for form-data and minimatch to address compatibility and security concerns.

Dependency override configuration:

• Introduced [tool.uv] override dependencies in both backend pyproject.toml files to ensure consistent versions of av and starlette. [1] [2]

Does this introduce a breaking change?

• Yes
• No

Golden Path Validation

• I have tested the primary workflows (the "golden path") to ensure they function correctly without errors.

Deployment Validation

• I have validated the deployment process successfully and all services are running as expected with this change.

What to Check

Verify that the following are valid

• ...

Other Information

[Copilot]

Pull request overview

This PR updates backend and frontend dependencies (plus lockfiles) to pick up security/compatibility fixes and newer features, including newer Semantic Kernel and OpenAI/MCP versions, and introduces uv/npm override configuration to control transitive dependency versions.

Changes:

• Upgrade Python dependencies in backend-api and processor (e.g., semantic-kernel, openai, mcp) and add protobuf / bump python-multipart.
• Add uv override configuration and record override manifests in uv lockfiles.
• Upgrade frontend dependencies (axios, react-router-dom, rollup) and add npm overrides for form-data and minimatch.

Reviewed changes

Copilot reviewed 4 out of 7 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
src/processor/uv.lock	Updates locked Python dependency set; adds manifest overrides; upgrades OpenAI/MCP/Semantic Kernel and others.
src/processor/pyproject.toml	Updates processor direct dependencies and adds [tool.uv] override-dependencies.
src/frontend/requirements.txt	Bumps python-multipart pin used by the frontend Python env.
src/frontend/package.json	Upgrades key JS deps and adds npm overrides for transitive dependency control.
src/frontend/package-lock.json	Regenerates lockfile to reflect JS dependency upgrades/overrides.
src/backend-api/uv.lock	Updates locked backend dependency set; adds manifest overrides; upgrades Semantic Kernel and adds protobuf/multipart to lock metadata.
src/backend-api/pyproject.toml	Updates backend direct dependencies; adds [tool.uv] override-dependencies.

Files not reviewed (1)

• src/frontend/package-lock.json: Language not supported

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.