fix: Dev to main merge

[Dhruvkumar-Microsoft]

Purpose

This pull request updates the urllib3 dependency from version 2.7.0 to 2.8.0 across multiple Python project modules. This ensures consistency and brings in the latest fixes and improvements from the urllib3 library.

Dependency updates:

• Updated urllib3 from 2.7.0 to 2.8.0 in src/App/pyproject.toml to ensure the application uses the latest version.
• Updated urllib3 from 2.7.0 to 2.8.0 in src/backend/pyproject.toml for improved security and compatibility.
• Updated urllib3 from 2.7.0 to 2.8.0 in src/mcp_server/pyproject.toml to maintain alignment across services.

Does this introduce a breaking change?

• Yes
• No

How to Test

• Get the code

git clone [repo-address]
cd [repo-name]
git checkout [branch-name]
npm install

• Test the code

What to Check

Verify that the following are valid

• ...

Other Information

[github-actions]

Coverage Report •

File	Stmts	Miss	Cover	Missing
common/utils
team_utils.py	114	9	92%	135–136, 138–144
TOTAL	3835	552	85%

Tests	Skipped	Failures	Errors	Time
841	0 💤	0 ❌	0 🔥	8.724s ⏱️

[Copilot]

Copilot review overview

🟡 Changes recommended

The App Docker installation bypasses the updated manifest and lockfile, leaving urllib3 2.8.0 unenforced in production.

Review effort: Balanced
Findings: 1

Open (1)

• App Docker image ignores urllib3 version pin · New

What changed in this PR

Aligns urllib3 dependencies across the App, backend, and MCP server.

Changes:

• Updates urllib3 pins from 2.7.0 to 2.8.0.
• Refreshes lockfiles, also upgrading AnyIO and PyJWT.

File	Description
src/​mcp_server/​uv.lock	Updates locked dependencies and artifacts.
src/​mcp_server/​pyproject.toml	Pins urllib3 to 2.8.0.
src/​backend/​uv.lock	Updates locked dependencies and artifacts.
src/​backend/​pyproject.toml	Pins urllib3 to 2.8.0.
src/​App/​uv.lock	Updates locked dependencies and artifacts.
src/​App/​pyproject.toml	Pins urllib3 to 2.8.0.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

Copilot review overview

🔵 Needs a closer look

The reported App installation path bypasses the updated dependency files, leaving the intended urllib3 version unenforced.

Review effort: Balanced
Findings: None

Resolved since last review (1)

• App Docker image ignores urllib3 version pin