chore(deps): consolidate dependabot dependency updates

Combines 12 open dependabot PRs into a single update:

requirements-dev.txt:
- azure-core: 1.38.0 -> 1.39.0 (#1022)
- azure-identity: 1.25.1 -> 1.25.3 (#1022)
- certifi: 2025.8.3 -> 2026.2.25 (#1025)
- microsoft-kiota-abstractions: 1.9.7 -> 1.9.10 (#1021)
- microsoft-kiota-authentication-azure: 1.9.7 -> 1.9.10 (#1021)
- microsoft-kiota-http: 1.9.7 -> 1.9.10 (#1021)
- microsoft-kiota-serialization-form: 1.9.7 -> 1.9.10 (#1021)
- microsoft-kiota-serialization-json: 1.9.7 -> 1.9.10 (#1021)
- microsoft-kiota-serialization-multipart: 1.9.7 -> 1.9.10 (#1021)
- microsoft-kiota-serialization-text: 1.9.7 -> 1.9.10 (#1021)
- msal: 1.34.0 -> 1.36.0 (#1023)
- mypy: 1.17.1 -> 1.19.1 (#1027)
- opentelemetry-api: 1.38.0 -> 1.41.1 (#1020)
- opentelemetry-sdk: 1.38.0 -> 1.41.1 (#1020)
- opentelemetry-semantic-conventions: 0.59b0 -> 0.62b1 (#1020)
- packaging: 25.0 -> 26.1 (#1032)
- PyJWT: 2.12.0 -> 2.12.1 (#1026)
- tomli: 2.3.0 -> 2.4.1 (#1029)
- wrapt: 2.0.1 -> 2.1.2 (#1024)

GitHub Actions:
- googleapis/release-please-action: v4 -> v5 (#1037)
- dependabot/fetch-metadata: v3.0.0 -> v3.1.0 (#1034)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: jingjingjia-ms

.github/workflows/auto-merge-dependabot.yml

@@ -17,7 +17,7 @@ jobs:
     steps:
       - name: Dependabot metadata
         id: metadata
-        uses: dependabot/fetch-metadata@v3.0.0
+        uses: dependabot/fetch-metadata@v3.1.0
         with:
           github-token: "${{ secrets.GITHUB_TOKEN }}"
 

.github/workflows/release-please-gha.yml

@@ -29,7 +29,7 @@ jobs:
           private-key: ${{ secrets.RELEASE_PLEASE_TOKEN_PROVIDER_PEM }}
 
       - name: Release Please
-        uses: googleapis/release-please-action@v4
+        uses: googleapis/release-please-action@v5
         with:
           token: ${{ steps.app-token.outputs.token }}
           config-file: release-please-config.json

requirements-dev.txt

@@ -4,11 +4,11 @@ anyio==4.12.0
 astroid==3.3.11
 async-timeout==5.0.1
 attrs==25.4.0
-azure-core==1.38.0
-azure-identity==1.25.1
+azure-core==1.39.0
+azure-identity==1.25.3
 build==1.3.0
 bumpver==2025.1131
-certifi==2025.8.3
+certifi==2026.2.25
 cffi==2.0.0
 click==8.1.8
 colorama==0.4.6
@@ -32,28 +32,28 @@ lazy-object-proxy==1.12.0
 lexid==2021.1006
 looseversion==1.3.0
 mccabe==0.7.0
-microsoft-kiota-abstractions==1.9.7
-microsoft-kiota-authentication-azure==1.9.7
-microsoft-kiota-http==1.9.7
-microsoft-kiota-serialization-form==1.9.7
-microsoft-kiota-serialization-json==1.9.7
-microsoft-kiota-serialization-multipart==1.9.7
-microsoft-kiota-serialization-text==1.9.7
-msal==1.34.0
+microsoft-kiota-abstractions==1.9.10
+microsoft-kiota-authentication-azure==1.9.10
+microsoft-kiota-http==1.9.10
+microsoft-kiota-serialization-form==1.9.10
+microsoft-kiota-serialization-json==1.9.10
+microsoft-kiota-serialization-multipart==1.9.10
+microsoft-kiota-serialization-text==1.9.10
+msal==1.36.0
 msal-extensions==1.3.1
 msgraph-core==1.3.8
 multidict==6.7.1
-mypy==1.17.1
+mypy==1.19.1
 mypy-extensions==1.1.0
-opentelemetry-api==1.38.0
-opentelemetry-sdk==1.38.0
-opentelemetry-semantic-conventions==0.59b0
-packaging==25.0
+opentelemetry-api==1.41.1
+opentelemetry-sdk==1.41.1
+opentelemetry-semantic-conventions==0.62b1
+packaging==26.1
 pathlib2==2.3.7.post1
 platformdirs==4.4.0
 portalocker==2.10.1
 pycparser==2.23
-PyJWT==2.12.0
+PyJWT==2.12.1
 pylint==3.3.9
 pyproject_hooks==1.2.0
 python-dateutil==2.9.0.post0
@@ -63,14 +63,14 @@ sniffio==1.3.1
 std-uritemplate==2.0.0
 time-machine==2.19.0
 toml==0.10.2
-tomli==2.3.0
+tomli==2.4.1
 tomli_w==1.2.0
 tomlkit==0.13.3
 typing_extensions==4.15.0
 tzdata==2025.2
 uritemplate==4.2.0
 urllib3==2.6.3
-wrapt==2.0.1
+wrapt==2.1.2
 yapf==0.43.0
 yarl==1.20.1
 zipp==3.23.0