chore(deps): consolidate all open dependabot updates

Consolidates 17 open Dependabot PRs into a single update:

Dev dependencies (requirements-dev.txt):
- aiohttp: 3.12.15 -> 3.13.4 (#1430, supersedes #1382)
- cryptography: 45.0.7 -> 46.0.7 (#1433)
- Deprecated: 1.2.18 -> 1.3.1 (#1387)
- docutils: 0.22 -> 0.22.3 (#1388)
- frozenlist: 1.7.0 -> 1.8.0 (#1380)
- idna: 3.10 -> 3.11 (#1386)
- isort: 6.0.1 -> 6.1.0 (#1385)
- multidict: 6.6.4 -> 6.7.0 (#1383)
- pylint: 3.3.8 -> 3.3.9 (#1407)
- tomli: 2.2.1 -> 2.3.0 (#1381)
- urllib3: 2.5.0 -> 2.6.3 (#1408)
- yarl: 1.20.1 -> 1.22.0 (#1384)

GitHub Actions:
- actions/checkout: v4/v5 -> v6 (#1392)
- actions/create-github-app-token: v2 -> v3 (#1421)
- actions/upload-artifact: v5 -> v7 (#1419)
- dependabot/fetch-metadata: v2.4.0 -> v3.0.0 (#1427)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: ramsessanchez

.github/workflows/auto-merge-dependabot.yml

@@ -17,7 +17,7 @@ jobs:
     steps:
       - name: Dependabot metadata
         id: metadata
-        uses: dependabot/fetch-metadata@v2.4.0
+        uses: dependabot/fetch-metadata@v3.0.0
         with:
           github-token: "${{ secrets.GITHUB_TOKEN }}"
 

.github/workflows/build.yml

@@ -17,7 +17,7 @@ jobs:
       matrix:
         python-version: ["3.9", "3.10", "3.11", "3.12", "3.13"]
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
     - name: Set up Python ${{ matrix.python-version }}
       uses: actions/setup-python@v6
       with:

.github/workflows/codeql.yml

@@ -46,7 +46,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL

.github/workflows/project-auto-add.yml

@@ -18,7 +18,7 @@ jobs:
     steps:
       - name: Generate token
         id: generate_token
-        uses: actions/create-github-app-token@v2
+        uses: actions/create-github-app-token@v3
         with:
           app-id: ${{ secrets.GRAPHBOT_APP_ID }}
           private-key: ${{ secrets.GRAPHBOT_APP_PEM }}

.github/workflows/publish.yml

@@ -17,7 +17,7 @@ jobs:
     needs: [build]
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Set up Python
         uses: actions/setup-python@v6
         with:

.github/workflows/release-please-gha.yml

@@ -19,11 +19,11 @@ jobs:
   release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Generate GitHub App token
         id: app-token
-        uses: actions/create-github-app-token@v2
+        uses: actions/create-github-app-token@v3
         with:
           app-id: ${{ vars.RELEASE_PLEASE_TOKEN_PROVIDER_APP_ID }}
           private-key: ${{ secrets.RELEASE_PLEASE_TOKEN_PROVIDER_PEM }}

.github/workflows/validate-public-api-surface.yml

@@ -16,7 +16,7 @@ jobs:
   validate-public-api-surface:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: microsoftgraph/kiota-dom-export-diff-tool/export@main
         id: generatePatch
       - uses: microsoftgraph/kiota-dom-export-diff-tool/tool@main
@@ -34,14 +34,14 @@ jobs:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - name: Upload patch file as artifact
         if: always()
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v7
         continue-on-error: true
         with:
           name: patch
           path: '*.patch'
       - name: Upload explanations file as artifact
         if: always()
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v7
         continue-on-error: true
         with:
           name: explanations

requirements-dev.txt

@@ -1,4 +1,4 @@
-aiohttp==3.12.15
+aiohttp==3.13.4
 aiosignal==1.4.0
 anyio==4.10.0
 astroid==3.3.11
@@ -13,22 +13,22 @@ cffi==2.0.0
 charset-normalizer==3.4.3
 click==8.1.8
 colorama==0.4.6
-cryptography==45.0.7
-Deprecated==1.2.18
+cryptography==46.0.7
+Deprecated==1.3.1
 dill==0.4.0
-docutils==0.22
+docutils==0.22.3
 flit==3.12.0
 flit_core==3.12.0
-frozenlist==1.7.0
+frozenlist==1.8.0
 h11==0.16.0
 h2==4.3.0
 hpack==4.1.0
 httpcore==1.0.9
 httpx==0.28.1
 hyperframe==6.1.0
-idna==3.10
+idna==3.11
 importlib-metadata==8.5.0
-isort==6.0.1
+isort==6.1.0
 lazy-object-proxy==1.12.0
 lexid==2021.1006
 looseversion==1.3.0
@@ -43,7 +43,7 @@ microsoft-kiota-serialization-text==1.9.7
 msal==1.33.0
 msal-extensions==1.3.1
 msgraph-core==1.3.8
-multidict==6.6.4
+multidict==6.7.0
 mypy==1.18.2
 mypy-extensions==1.1.0
 opentelemetry-api==1.38.0
@@ -55,7 +55,7 @@ platformdirs==4.4.0
 portalocker==2.10.1
 pycparser==2.23
 PyJWT==2.12.0
-pylint==3.3.8
+pylint==3.3.9
 pyproject_hooks==1.2.0
 python-dateutil==2.9.0.post0
 requests==2.32.5
@@ -64,14 +64,14 @@ sniffio==1.3.1
 std-uritemplate>=2.0.0
 time-machine==2.19.0
 toml==0.10.2
-tomli==2.2.1
+tomli==2.3.0
 tomli_w==1.2.0
 tomlkit==0.13.3
 typing_extensions==4.15.0
 tzdata==2025.2
 uritemplate==4.2.0
-urllib3==2.5.0
+urllib3==2.6.3
 wrapt==1.17.3
 yapf==0.43.0
-yarl==1.20.1
+yarl==1.22.0
 zipp==3.23.0