Merge pull request microsoft#124 from microsoft/main

Downmerge from main to dev

Author: Prajwal-Microsoft

.github/CODEOWNERS

@@ -0,0 +1,5 @@
+# Lines starting with '#' are comments.
+# Each line is a file pattern followed by one or more owners.
+
+# These owners will be the default owners for everything in the repo.
+* @toherman-msft @hunterjam @Avijit-Microsoft @Roopan-Microsoft @Prajwal-Microsoft

.github/dependabot.yml

@@ -5,7 +5,20 @@
 
 version: 2
 updates:
-  - package-ecosystem: "pip" # See documentation for possible values
-    directory: "/" # Location of package manifests
+  - package-ecosystem: "npm" # for frontend dependencies
+    directory: "/frontend"  
     schedule:
-      interval: "weekly"
+      interval: "monthly"
+    commit-message:
+      prefix: "build"
+    target-branch: "dependabotchanges"
+    open-pull-requests-limit: 10
+
+  - package-ecosystem: "pip" # for backend dependencies
+    directory: "/"   
+    schedule:
+      interval: "monthly"
+    commit-message:
+      prefix: "build"
+    target-branch: "dependabotchanges"
+    open-pull-requests-limit: 10

.github/pull_request_template.md

@@ -1,25 +1,40 @@
-### Motivation and Context
-
-<!-- Thank you for your contribution to this repo!
-Please help reviewers and future users, providing the following information:
-  1. Why is this change required? 
-  2. What problem does it solve?
-  3. What scenario does it contribute to?
-  4. If it fixes an open issue, please link to the issue here.
-  5. Does this solve an issue or add a feature that *all* users of this sample app can benefit from? Contributions will only be accepted that apply across all users of this app.
--->
+## Purpose
+<!-- Describe the intention of the changes being proposed. What problem does it solve or functionality does it add? -->
+* ...
 
-### Description
+## Does this introduce a breaking change?
+<!-- Mark one with an "x". -->
 
-<!-- Describe your changes, the overall approach, the underlying design.
-     These notes will help understanding how your code works. Thanks! -->
+- [ ] Yes
+- [ ] No
 
+<!-- Please prefix your PR title with one of the following:
+  * `feat`: A new feature
+  * `fix`: A bug fix
+  * `docs`: Documentation only changes
+  * `style`: Changes that do not affect the meaning of the code (white-space, formatting, missing semi-colons, etc)
+  * `refactor`: A code change that neither fixes a bug nor adds a feature
+  * `perf`: A code change that improves performance
+  * `test`: Adding missing tests or correcting existing tests
+  * `build`: Changes that affect the build system or external dependencies (example scopes: gulp, broccoli, npm)
+  * `ci`: Changes to our CI configuration files and scripts (example scopes: Travis, Circle, BrowserStack, SauceLabs)
+  * `chore`: Other changes that don't modify src or test files
+  * `revert`: Reverts a previous commit
+  * !: A breaking change is indicated with a `!` after the listed prefixes above, e.g. `feat!`, `fix!`, `refactor!`, etc.
+-->
 
-### Contribution Checklist
+## Golden Path Validation
+- [ ] I have tested the primary workflows (the "golden path") to ensure they function correctly without errors.
 
-<!-- Before submitting this PR, please make sure: -->
+## Deployment Validation
+- [ ] I have validated the deployment process successfully and all services are running as expected with this change.
 
+## What to Check
+Verify that the following are valid
 - [ ] I have built and tested the code locally and in a deployed app
 - [ ] For frontend changes, I have pulled the latest code from main, built the frontend, and committed all static files.
 - [ ] This is a change for all users of this app. No code or asset is specific to my use case or my organization.
-- [ ] I didn't break any existing functionality :smile:
+
+
+## Other Information
+<!-- Add any other helpful information that may be needed here.. -->

.github/workflows/sync-branches.yml

@@ -0,0 +1,44 @@
+name: Sync Main to dependabotchanges
+
+on:
+  # Schedule the sync job to run daily or customize as needed
+  schedule:
+    - cron: '0 1 * * *'  # Runs every day at 1 AM UTC
+  # Trigger the sync job on pushes to the main branch
+  push:
+    branches:
+      - main
+
+jobs:
+  sync:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0  # Fetch all history for accurate branch comparison
+
+      - name: Configure Git
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+
+      - name: Sync main to dependabotchanges
+        run: |
+          # Ensure we're on the main branch
+          git checkout main
+          # Fetch the latest changes
+          git pull origin main
+
+          # Switch to dependabotchanges branch
+          git checkout dependabotchanges
+          # Merge main branch changes
+          git merge main --no-edit
+
+          # Push changes back to dependabotchanges1 branch
+          git push origin dependabotchanges
+
+      - name: Notify on Failure
+        if: failure()
+        run: echo "Sync from main to dependabotchanges failed!"

requirements.txt

@@ -1,12 +1,12 @@
 azure-identity==1.17.1
 # Flask[async]==2.3.2
-openai==1.6.1
+openai==1.55.3
 azure-search-documents==11.4.0b6
 azure-storage-blob==12.17.0
 python-dotenv==1.0.0
 azure-cosmos==4.7.0
-quart==0.19.4
+quart==0.19.9
 uvicorn==0.24.0
 aiohttp==3.10.5
 gunicorn==20.1.0
-pydantic-settings==2.2.1
+pydantic-settings==2.2.1