fix: update dependencies (#1238)

MIchaelMainer · dependabot[bot] · ramsessanchez · web-flow · commit 7116cb970afa · 2025-09-17T13:54:43.000-06:00
* chore(deps): bump actions/checkout from 4 to 5 Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4...v5) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> * chore(deps): bump actions/setup-java from 4 to 5 Bumps [actions/setup-java](https://github.com/actions/setup-java) from 4 to 5. - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@v4...v5) --- updated-dependencies: - dependency-name: actions/setup-java dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> * Updated for https://dev.azure.com/microsoftgraph/0985d294-5762-4bc2-a565-161ef349ca3e/_build?definitionId=634 by using baselines generated in https://dev.azure.com/microsoftgraph/0985d294-5762-4bc2-a565-161ef349ca3e/_build/results?buildId=196112 * chore(deps): bump com.microsoft.graph:microsoft-graph-core Bumps [com.microsoft.graph:microsoft-graph-core](https://github.com/microsoftgraph/msgraph-sdk-java-core) from 3.6.4 to 3.6.5. - [Release notes](https://github.com/microsoftgraph/msgraph-sdk-java-core/releases) - [Changelog](https://github.com/microsoftgraph/msgraph-sdk-java-core/blob/main/CHANGELOG.md) - [Commits](microsoftgraph/msgraph-sdk-java-core@v3.6.4...v3.6.5) --- updated-dependencies: - dependency-name: com.microsoft.graph:microsoft-graph-core dependency-version: 3.6.5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * chore(deps): bump com.microsoft.graph:microsoft-graph-core in /android Bumps [com.microsoft.graph:microsoft-graph-core](https://github.com/microsoftgraph/msgraph-sdk-java-core) from 3.6.4 to 3.6.5. - [Release notes](https://github.com/microsoftgraph/msgraph-sdk-java-core/releases) - [Changelog](https://github.com/microsoftgraph/msgraph-sdk-java-core/blob/main/CHANGELOG.md) - [Commits](microsoftgraph/msgraph-sdk-java-core@v3.6.4...v3.6.5) --- updated-dependencies: - dependency-name: com.microsoft.graph:microsoft-graph-core dependency-version: 3.6.5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * chore(deps): bump the kiota-dependencies group across 2 directories with 6 updates Bumps the kiota-dependencies group with 1 update in the / directory: [com.microsoft.kiota:microsoft-kiota-authentication-azure](https://github.com/microsoft/kiota-java). Bumps the kiota-dependencies group with 1 update in the /java-8 directory: [com.microsoft.kiota:microsoft-kiota-authentication-azure](https://github.com/microsoft/kiota-java). Updates `com.microsoft.kiota:microsoft-kiota-authentication-azure` from 1.8.9 to 1.8.10 - [Release notes](https://github.com/microsoft/kiota-java/releases) - [Changelog](https://github.com/microsoft/kiota-java/blob/main/CHANGELOG.md) - [Commits](microsoft/kiota-java@v1.8.9...v1.8.10) Updates `com.microsoft.kiota:microsoft-kiota-http-okHttp` from 1.8.9 to 1.8.10 - [Release notes](https://github.com/microsoft/kiota-java/releases) - [Changelog](https://github.com/microsoft/kiota-java/blob/main/CHANGELOG.md) - [Commits](microsoft/kiota-java@v1.8.9...v1.8.10) Updates `com.microsoft.kiota:microsoft-kiota-serialization-json` from 1.8.9 to 1.8.10 - [Release notes](https://github.com/microsoft/kiota-java/releases) - [Changelog](https://github.com/microsoft/kiota-java/blob/main/CHANGELOG.md) - [Commits](microsoft/kiota-java@v1.8.9...v1.8.10) Updates `com.microsoft.kiota:microsoft-kiota-serialization-text` from 1.8.9 to 1.8.10 - [Release notes](https://github.com/microsoft/kiota-java/releases) - [Changelog](https://github.com/microsoft/kiota-java/blob/main/CHANGELOG.md) - [Commits](microsoft/kiota-java@v1.8.9...v1.8.10) Updates `com.microsoft.kiota:microsoft-kiota-serialization-form` from 1.8.9 to 1.8.10 - [Release notes](https://github.com/microsoft/kiota-java/releases) - [Changelog](https://github.com/microsoft/kiota-java/blob/main/CHANGELOG.md) - [Commits](microsoft/kiota-java@v1.8.9...v1.8.10) Updates `com.microsoft.kiota:microsoft-kiota-serialization-multipart` from 1.8.9 to 1.8.10 - [Release notes](https://github.com/microsoft/kiota-java/releases) - [Changelog](https://github.com/microsoft/kiota-java/blob/main/CHANGELOG.md) - [Commits](microsoft/kiota-java@v1.8.9...v1.8.10) Updates `com.microsoft.kiota:microsoft-kiota-authentication-azure` from 1.8.9 to 1.8.10 - [Release notes](https://github.com/microsoft/kiota-java/releases) - [Changelog](https://github.com/microsoft/kiota-java/blob/main/CHANGELOG.md) - [Commits](microsoft/kiota-java@v1.8.9...v1.8.10) Updates `com.microsoft.kiota:microsoft-kiota-http-okHttp` from 1.8.9 to 1.8.10 - [Release notes](https://github.com/microsoft/kiota-java/releases) - [Changelog](https://github.com/microsoft/kiota-java/blob/main/CHANGELOG.md) - [Commits](microsoft/kiota-java@v1.8.9...v1.8.10) Updates `com.microsoft.kiota:microsoft-kiota-serialization-json` from 1.8.9 to 1.8.10 - [Release notes](https://github.com/microsoft/kiota-java/releases) - [Changelog](https://github.com/microsoft/kiota-java/blob/main/CHANGELOG.md) - [Commits](microsoft/kiota-java@v1.8.9...v1.8.10) Updates `com.microsoft.kiota:microsoft-kiota-serialization-text` from 1.8.9 to 1.8.10 - [Release notes](https://github.com/microsoft/kiota-java/releases) - [Changelog](https://github.com/microsoft/kiota-java/blob/main/CHANGELOG.md) - [Commits](microsoft/kiota-java@v1.8.9...v1.8.10) Updates `com.microsoft.kiota:microsoft-kiota-serialization-form` from 1.8.9 to 1.8.10 - [Release notes](https://github.com/microsoft/kiota-java/releases) - [Changelog](https://github.com/microsoft/kiota-java/blob/main/CHANGELOG.md) - [Commits](microsoft/kiota-java@v1.8.9...v1.8.10) Updates `com.microsoft.kiota:microsoft-kiota-serialization-multipart` from 1.8.9 to 1.8.10 - [Release notes](https://github.com/microsoft/kiota-java/releases) - [Changelog](https://github.com/microsoft/kiota-java/blob/main/CHANGELOG.md) - [Commits](microsoft/kiota-java@v1.8.9...v1.8.10) --- updated-dependencies: - dependency-name: com.microsoft.kiota:microsoft-kiota-authentication-azure dependency-version: 1.8.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: kiota-dependencies - dependency-name: com.microsoft.kiota:microsoft-kiota-http-okHttp dependency-version: 1.8.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: kiota-dependencies - dependency-name: com.microsoft.kiota:microsoft-kiota-serialization-json dependency-version: 1.8.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: kiota-dependencies - dependency-name: com.microsoft.kiota:microsoft-kiota-serialization-text dependency-version: 1.8.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: kiota-dependencies - dependency-name: com.microsoft.kiota:microsoft-kiota-serialization-form dependency-version: 1.8.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: kiota-dependencies - dependency-name: com.microsoft.kiota:microsoft-kiota-serialization-multipart dependency-version: 1.8.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: kiota-dependencies - dependency-name: com.microsoft.kiota:microsoft-kiota-authentication-azure dependency-version: 1.8.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: kiota-dependencies - dependency-name: com.microsoft.kiota:microsoft-kiota-http-okHttp dependency-version: 1.8.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: kiota-dependencies - dependency-name: com.microsoft.kiota:microsoft-kiota-serialization-json dependency-version: 1.8.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: kiota-dependencies - dependency-name: com.microsoft.kiota:microsoft-kiota-serialization-text dependency-version: 1.8.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: kiota-dependencies - dependency-name: com.microsoft.kiota:microsoft-kiota-serialization-form dependency-version: 1.8.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: kiota-dependencies - dependency-name: com.microsoft.kiota:microsoft-kiota-serialization-multipart dependency-version: 1.8.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: kiota-dependencies ... Signed-off-by: dependabot[bot] <support@github.com> * chore(deps): bump the kiota-dependencies group Bumps the kiota-dependencies group in /android with 6 updates: | Package | From | To | | --- | --- | --- | | [com.microsoft.kiota:microsoft-kiota-authentication-azure](https://github.com/microsoft/kiota-java) | `1.8.9` | `1.8.10` | | [com.microsoft.kiota:microsoft-kiota-http-okHttp](https://github.com/microsoft/kiota-java) | `1.8.9` | `1.8.10` | | [com.microsoft.kiota:microsoft-kiota-serialization-json](https://github.com/microsoft/kiota-java) | `1.8.9` | `1.8.10` | | [com.microsoft.kiota:microsoft-kiota-serialization-text](https://github.com/microsoft/kiota-java) | `1.8.9` | `1.8.10` | | [com.microsoft.kiota:microsoft-kiota-serialization-form](https://github.com/microsoft/kiota-java) | `1.8.9` | `1.8.10` | | [com.microsoft.kiota:microsoft-kiota-serialization-multipart](https://github.com/microsoft/kiota-java) | `1.8.9` | `1.8.10` | Updates `com.microsoft.kiota:microsoft-kiota-authentication-azure` from 1.8.9 to 1.8.10 - [Release notes](https://github.com/microsoft/kiota-java/releases) - [Changelog](https://github.com/microsoft/kiota-java/blob/main/CHANGELOG.md) - [Commits](microsoft/kiota-java@v1.8.9...v1.8.10) Updates `com.microsoft.kiota:microsoft-kiota-http-okHttp` from 1.8.9 to 1.8.10 - [Release notes](https://github.com/microsoft/kiota-java/releases) - [Changelog](https://github.com/microsoft/kiota-java/blob/main/CHANGELOG.md) - [Commits](microsoft/kiota-java@v1.8.9...v1.8.10) Updates `com.microsoft.kiota:microsoft-kiota-serialization-json` from 1.8.9 to 1.8.10 - [Release notes](https://github.com/microsoft/kiota-java/releases) - [Changelog](https://github.com/microsoft/kiota-java/blob/main/CHANGELOG.md) - [Commits](microsoft/kiota-java@v1.8.9...v1.8.10) Updates `com.microsoft.kiota:microsoft-kiota-serialization-text` from 1.8.9 to 1.8.10 - [Release notes](https://github.com/microsoft/kiota-java/releases) - [Changelog](https://github.com/microsoft/kiota-java/blob/main/CHANGELOG.md) - [Commits](microsoft/kiota-java@v1.8.9...v1.8.10) Updates `com.microsoft.kiota:microsoft-kiota-serialization-form` from 1.8.9 to 1.8.10 - [Release notes](https://github.com/microsoft/kiota-java/releases) - [Changelog](https://github.com/microsoft/kiota-java/blob/main/CHANGELOG.md) - [Commits](microsoft/kiota-java@v1.8.9...v1.8.10) Updates `com.microsoft.kiota:microsoft-kiota-serialization-multipart` from 1.8.9 to 1.8.10 - [Release notes](https://github.com/microsoft/kiota-java/releases) - [Changelog](https://github.com/microsoft/kiota-java/blob/main/CHANGELOG.md) - [Commits](microsoft/kiota-java@v1.8.9...v1.8.10) --- updated-dependencies: - dependency-name: com.microsoft.kiota:microsoft-kiota-authentication-azure dependency-version: 1.8.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: kiota-dependencies - dependency-name: com.microsoft.kiota:microsoft-kiota-http-okHttp dependency-version: 1.8.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: kiota-dependencies - dependency-name: com.microsoft.kiota:microsoft-kiota-serialization-json dependency-version: 1.8.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: kiota-dependencies - dependency-name: com.microsoft.kiota:microsoft-kiota-serialization-text dependency-version: 1.8.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: kiota-dependencies - dependency-name: com.microsoft.kiota:microsoft-kiota-serialization-form dependency-version: 1.8.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: kiota-dependencies - dependency-name: com.microsoft.kiota:microsoft-kiota-serialization-multipart dependency-version: 1.8.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: kiota-dependencies ... Signed-off-by: dependabot[bot] <support@github.com> * chore: update dependabot cadence --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ramses Sanchez-Hernandez <63934382+ramsessanchez@users.noreply.github.com> Co-authored-by: microsoft-github-policy-service[bot] <77245923+microsoft-github-policy-service[bot]@users.noreply.github.com>
diff --git a/.config/1espt/PipelineAutobaseliningConfig.yml b/.config/1espt/PipelineAutobaseliningConfig.yml
@@ -0,0 +1,23 @@
+## DO NOT MODIFY THIS FILE MANUALLY. This is part of auto-baselining from 1ES Pipeline Templates. Go to [https://aka.ms/1espt-autobaselining] for more details.
+
+pipelines:
+  634:
+    retail:
+      source:
+        credscan:
+          lastModifiedDate: 2025-09-11
+        eslint:
+          lastModifiedDate: 2025-09-11
+        psscriptanalyzer:
+          lastModifiedDate: 2025-09-11
+        armory:
+          lastModifiedDate: 2025-09-11
+        accessibilityinsights:
+          lastModifiedDate: 2025-09-11
+      binary:
+        credscan:
+          lastModifiedDate: 2025-09-11
+        binskim:
+          lastModifiedDate: 2025-09-11
+        spotbugs:
+          lastModifiedDate: 2025-09-11
diff --git a/.config/guardian/.gdnbaselines b/.config/guardian/.gdnbaselines
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -5,7 +5,7 @@ updates:
   - "/"
   - "/java-8"
   schedule:
-    interval: daily
+    interval: weekly
     time: "09:00" # 9am UTC
   open-pull-requests-limit: 10
   groups:
@@ -18,10 +18,11 @@ updates:
     open-telemetry:
       patterns:
         - "*opentelemetry*"
+    
 - package-ecosystem: gradle
   directory: "/android"
   schedule:
-    interval: daily
+    interval: weekly
     time: "10:00" # 10am UTC. Scheduled after core java dependencies to prevent duplicate PRs
   open-pull-requests-limit: 10
   groups:
@@ -37,7 +38,7 @@ updates:
 - package-ecosystem: maven
   directory: "/"
   schedule:
-    interval: daily
+    interval: weekly
   open-pull-requests-limit: 10
   groups:
     kiota-dependencies:
@@ -52,5 +53,10 @@ updates:
 - package-ecosystem: github-actions
   directory: "/"
   schedule:
-    interval: daily
+    interval: weekly
   open-pull-requests-limit: 10
+  groups:
+    github-actions-dependencies:
+      patterns:
+        - "actions/*"
+
diff --git a/.github/workflows/api-level-lint.yml b/.github/workflows/api-level-lint.yml
@@ -11,8 +11,8 @@ jobs:
   lint-api-level:
     runs-on: [self-hosted, 1ES.Pool=1es-ubuntu-msgraph-beta-sdk-java-mem-lates-m]
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-java@v4
+      - uses: actions/checkout@v5
+      - uses: actions/setup-java@v5
         with:
           distribution: 'temurin'
           java-version: 21
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
@@ -42,10 +42,10 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Set up JDK
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           java-version: 21
           distribution: 'temurin'
diff --git a/.github/workflows/gradle-build.yml b/.github/workflows/gradle-build.yml
@@ -14,9 +14,9 @@ jobs:
   build-latest-java:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Set up JDK
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           java-version: 21
           distribution: 'temurin'
@@ -55,9 +55,9 @@ jobs:
   build-java-8:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Set up JDK
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           java-version: 8
           distribution: 'temurin'
diff --git a/gradle/dependencies.gradle b/gradle/dependencies.gradle
@@ -4,12 +4,12 @@ dependencies {
     implementation 'jakarta.annotation:jakarta.annotation-api:2.1.1'
 
     // Core Http library
-    api 'com.microsoft.graph:microsoft-graph-core:3.6.4'
+    api 'com.microsoft.graph:microsoft-graph-core:3.6.5'
 
-    implementation 'com.microsoft.kiota:microsoft-kiota-authentication-azure:1.8.9'
-    implementation 'com.microsoft.kiota:microsoft-kiota-http-okHttp:1.8.9'
-    implementation 'com.microsoft.kiota:microsoft-kiota-serialization-json:1.8.9'
-    implementation 'com.microsoft.kiota:microsoft-kiota-serialization-text:1.8.9'
-    implementation 'com.microsoft.kiota:microsoft-kiota-serialization-form:1.8.9'
-    implementation 'com.microsoft.kiota:microsoft-kiota-serialization-multipart:1.8.9'
+    implementation 'com.microsoft.kiota:microsoft-kiota-authentication-azure:1.8.10'
+    implementation 'com.microsoft.kiota:microsoft-kiota-http-okHttp:1.8.10'
+    implementation 'com.microsoft.kiota:microsoft-kiota-serialization-json:1.8.10'
+    implementation 'com.microsoft.kiota:microsoft-kiota-serialization-text:1.8.10'
+    implementation 'com.microsoft.kiota:microsoft-kiota-serialization-form:1.8.10'
+    implementation 'com.microsoft.kiota:microsoft-kiota-serialization-multipart:1.8.10'
 }
