chore: Dev to Main

[PadhiAjit-Microsoft]

Purpose

• This pull request updates the versions of several GitHub Actions used in the CI/CD workflows to improve security, reliability, and compatibility. The main changes include upgrading the actions/checkout, actions/setup-python, azure/login, and other related actions across all workflow files. Additionally, some actions have been updated to newer versions or commit SHAs to address bug fixes and enhancements.

Core CI/CD Action Upgrades:

• Upgraded actions/checkout to version v7 in all workflows for improved performance and security. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14] [15] [16] [17]
• Upgraded actions/setup-python to version v7 in all workflows for the latest Python environment setup. [1] [2] [3] [4] [5] [6]

Azure Integration Updates:

• Upgraded azure/login to version v3 in all workflows to use the latest Azure authentication improvements. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11]

Other Action and Workflow Updates:

• Updated versions of other key actions for bug fixes and enhancements:
  • docker/build-push-action to v7 [1] [2]
  • microsoft/template-validation-action to v0.4.4
  • github/codeql-action/init and analyze to v4.37.3 [1] [2]
  • lycheeverse/lychee-action to v2.9.0 [1] [2]
  • actions/stale to v11
  • tj-actions/changed-files to a new commit SHA
  • MishaKav/pytest-coverage-comment to a new commit SHA

Python Dependency Installation Change:

• Switched from using pip to uv for dependency installation in the workflow for ContentProcessorWorkflow for faster and more reliable dependency management.

These updates help ensure the workflows use the latest features and security patches, improving maintainability and reliability.

Does this introduce a breaking change?

• Yes
• No

Golden Path Validation

• I have tested the primary workflows (the "golden path") to ensure they function correctly without errors.

Deployment Validation

• I have validated the deployment process successfully and all services are running as expected with this change.

What to Check

Verify that the following are valid

• ...

Other Information

[github-actions]

Coverage Report •

File	Stmts	Miss	Cover	Missing
TOTAL	1217	161	87%

report-only-changed-files is enabled. No files were changed during this commit :)

Tests	Skipped	Failures	Errors	Time
244	0 💤	0 ❌	0 🔥	3.872s ⏱️

[Copilot]

Pull request overview

This PR modernizes the repository’s CI/CD tooling and runtime dependencies: it updates many GitHub Actions versions across workflows, switches the ContentProcessorWorkflow test job to use uv + uv.lock, and refreshes frontend and Python dependency stacks to newer versions.

Changes:

• Updated multiple GitHub Actions across workflows (e.g., actions/checkout@v7, actions/setup-python@v7, azure/login@v3, docker/build-push-action@v7, etc.).
• Switched ContentProcessorWorkflow CI dependency installation and test execution to uv sync / uv run using uv.lock.
• Updated application dependencies and tooling across Python projects and the web app (including React/React Router, TypeScript config, Docker base image, and various Python package pins).

Reviewed changes

Copilot reviewed 32 out of 36 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
src/ContentProcessorWorkflow/uv.lock	Updates the locked dependency graph used by uv for the workflow project.
src/ContentProcessorWorkflow/pyproject.toml	Bumps mcp, pyasn1, and adds pytest tooling dependencies for the workflow project.
src/ContentProcessorWeb/tsconfig.json	Changes TS moduleResolution to bundler to align with modern package export resolution.
src/ContentProcessorWeb/src/test-utils.tsx	Updates test router imports to the new React Router package layout.
src/ContentProcessorWeb/src/setupTests.ts	Updates test setup comment to reflect React Router dependency on TextEncoder/TextDecoder.
src/ContentProcessorWeb/src/Hooks/useHeaderHooks.tsx	Updates router imports for Link.
src/ContentProcessorWeb/src/Components/Header/Header.tsx	Updates router imports for navigation/location hooks.
src/ContentProcessorWeb/src/App.tsx	Updates router imports for HashRouter, routes, and navigation components.
src/ContentProcessorWeb/package.json	Adds Node engine constraint; bumps React/React Router and other dependency pins/overrides.
src/ContentProcessorWeb/Dockerfile	Moves build stage base image to node:22.22.0-bookworm.
src/ContentProcessorAPI/requirements.txt	Updates pinned Python dependencies for the API runtime environment.
src/ContentProcessorAPI/pyproject.toml	Updates direct dependency pins and dev tooling versions for the API project.
src/ContentProcessor/requirements.txt	Updates pinned Python dependencies for the ContentProcessor environment.
src/ContentProcessor/pyproject.toml	Updates direct dependency pins and dev tooling versions for the ContentProcessor project.
.github/workflows/validate-bicep-params.yml	Updates checkout/setup-python/upload-artifact action versions.
.github/workflows/test.yml	Updates checkout/setup-python and switches workflow tests to uv sync + uv run.
.github/workflows/test-automation.yml	Updates checkout/setup-python and bumps azure/login to v3.
.github/workflows/test-automation-v2.yml	Updates checkout/setup-python and bumps azure/login to v3.
.github/workflows/telemetry-template-check.yml	Updates actions/checkout to v7.
.github/workflows/stale-bot.yml	Updates actions/stale to v11.
.github/workflows/scheduled-Dependabot-PRs-Auto-Merge.yml	Updates actions/checkout to v7.
.github/workflows/pylint.yml	Updates checkout/setup-python to v7.
.github/workflows/job-docker-build.yml	Updates checkout, azure/login, and docker build/push action versions.
.github/workflows/job-deploy.yml	Updates actions/checkout and azure/login versions.
.github/workflows/job-deploy-windows.yml	Updates actions/checkout and azure/login versions.
.github/workflows/job-deploy-linux.yml	Updates actions/checkout and azure/login versions.
.github/workflows/job-cleanup-deployment.yml	Updates azure/login version.
.github/workflows/deploy.yml	Updates actions/checkout and azure/login versions.
.github/workflows/codeql.yml	Updates checkout and pins CodeQL init/analyze to v4.37.3.
.github/workflows/build-docker-image.yml	Updates checkout, azure/login, and docker build/push action versions.
.github/workflows/broken-links-checker.yml	Updates checkout, lychee, and tj-actions/changed-files commit pin.
.github/workflows/azure-dev.yaml	Updates checkout and azure/login versions.
.github/workflows/azd-template-validation.yml	Updates checkout and bumps microsoft/template-validation-action.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 32 out of 36 changed files in this pull request and generated no new comments.

Suppressed comments (1)

src/ContentProcessorWeb/package.json:7

• The PR description focuses on GitHub Actions upgrades and switching ContentProcessorWorkflow installs to uv, but this PR also introduces notable runtime/dependency changes (e.g., Node engine requirement and migrating the frontend from react-router-dom to react-router v8). Please update the PR description (Purpose/Changes) to reflect these additional scope changes so reviewers know to validate frontend/runtime compatibility as well.

  "engines": {
    "node": ">=22.22.0 <23"
  },