CHORE: Bump the production-dependencies group across 1 directory with 6 updates

[dependabot]

Bumps the production-dependencies group with 6 updates in the / directory:

Package	From	To
msal	1.32.3	1.37.0
msal-extensions	1.2.0	1.3.1
tomli	2.2.1	2.4.1
websockets	15.0.1	16.0
email-validator	2.2.0	2.3.0
tenacity	9.1.2	9.1.4

Updates msal from 1.32.3 to 1.37.0

Release notes

Sourced from msal's releases.

1.37.0

Breaking Changes

• Removed support for Python 3.8 in #910

New Features

• Add User Federated Identity Credential (user_fic) grant type support in #918

Bug Fixes and Improvements

• Use unsigned redirect URI for macOS broker silent flows in #907
• Escape username parameter in #901
• Forward MSAL client metadata headers through IMDS to ESTS in #902

Dependency Updates

• Update pymsalruntime minimum version to 0.20.6 in #919
• Bump cryptography dependency ceiling to <50 (N+3) in #906

1.36.0

What's Changed

• Fix the PoP flow in the console app by @​PetarSDimov in AzureAD/microsoft-authentication-library-for-python#887
• Add ADO CI, SDL, and release pipelines with e2e test enablement by @​RyAuld in AzureAD/microsoft-authentication-library-for-python#890
• Add documentation for Managed Identity v2 Hackathon by @​gladjohn in AzureAD/microsoft-authentication-library-for-python#885
• Potential fix for code scanning alert no. 74: Workflow does not contain permissions by @​Avery-Dunn in AzureAD/microsoft-authentication-library-for-python#884
• Added withFmi method for cca app by @​4gust in AzureAD/microsoft-authentication-library-for-python#876
• Use cryptographically secure randomness for PKCE, state, and nonce generation by @​ashok672 in AzureAD/microsoft-authentication-library-for-python#894
• Fix OIDC issuer domain spoofing in B2C host validation by @​4gust in AzureAD/microsoft-authentication-library-for-python#896

New Contributors

• @​PetarSDimov made their first contribution in AzureAD/microsoft-authentication-library-for-python#887
• @​gladjohn made their first contribution in AzureAD/microsoft-authentication-library-for-python#885

Full Changelog: AzureAD/microsoft-authentication-library-for-python@1.35.1...1.36.0

1.35.1

What's Changed

• Instance discovery remains cloud local on known clouds by @​bgavrilMS in AzureAD/microsoft-authentication-library-for-python#875

Full Changelog: AzureAD/microsoft-authentication-library-for-python@1.35.0...1.35.1

1.35.0

What's Changed

• Set Redirect Uri for broker silent flow on Linux platform by @​xinyuxu1026 in AzureAD/microsoft-authentication-library-for-python#846
• ROPC deprecation by @​Ugonnaak1 in AzureAD/microsoft-authentication-library-for-python#855
• Update pymsalruntime version range to handle the latest 0.20.0 release by @​DharshanBJ in AzureAD/microsoft-authentication-library-for-python#858
• Document how to enable sha256 for client credential by @​rayluo in AzureAD/microsoft-authentication-library-for-python#833
• Remove the reliance on getfqdn() by @​rayluo in AzureAD/microsoft-authentication-library-for-python#859

... (truncated)

Commits

• ebb980f Update version to 1.37.0 (#922)
• c504b41 Migrate CI/CD from GitHub Actions to ADO; remove GH Actions workflow (#895)
• 192a82d Removed support for Python 3.8 (#910)
• 08aa7fd Add User Federated Identity Credential (user_fic) grant type support (#918)
• d4f58ec Add documentation for MSI v2 mTLS in Python (#904)
• 5866feb Create design document for MSI v2 In-Memory Key Approach (#905)
• 651d54b Update pymsalruntime minimum version to 0.20.6 (#919)
• 895b581 Use unsigned redirect uri for mac broker flows (#907)
• 8ea1eaa Switch FMI tests from disabled IDLABS_APP_FMI to MISE-App-FMICLIENT (#913)
• faf5dce Bump cryptography dependency ceiling to <50 (N+3) (#906)
• Additional commits viewable in compare view

Updates msal-extensions from 1.2.0 to 1.3.1

Release notes

Sourced from msal-extensions's releases.

MSAL Extensions 1.3.1 for Python

What's Changed

• Do not install tests in site-packages by @​musicinmybrain in AzureAD/microsoft-authentication-extensions-for-python#139
• Also dropped Python 3.7 and 3.8 since this release

Full Changelog: AzureAD/microsoft-authentication-extensions-for-python@1.3.0...1.3.1

MSAL Extensions 1.3.0 for Python

What's Changed

• Fix a typo in README.md (persistance/persistence) by @​musicinmybrain in AzureAD/microsoft-authentication-extensions-for-python#133
• Maintenance by @​rayluo in AzureAD/microsoft-authentication-extensions-for-python#137
• Allow portalocker version 3 by @​musicinmybrain in AzureAD/microsoft-authentication-extensions-for-python#136
• Make portalocker optional (opt in by pip install msal-extensions[portalocker]) by @​rayluo in AzureAD/microsoft-authentication-extensions-for-python#117

New Contributors

• @​musicinmybrain made their first contribution in AzureAD/microsoft-authentication-extensions-for-python#133

Full Changelog: AzureAD/microsoft-authentication-extensions-for-python@1.2.0...1.3.0

Commits

• c9bf606 MSAL EX 1.3.1
• 7b3a333 Dropping Python 3.7 and 3.8
• 76c91d1 Do not install tests in site-packages
• 2adbf8a Update pipelines for PyGObject 3.51+
• 871fc80 1.3.0
• 4b90cc8 Make portalocker optional
• 7a5d39e Allow portalocker version 3
• 9d372c6 Skip Python 3.7 test on ubuntu-latest
• 3b4e30b Fixing new pylint complaint
• ba841e6 Fix a typo in README.md (persistance/persistence) (#133)
• See full diff in compare view

Updates tomli from 2.2.1 to 2.4.1

Changelog

Sourced from tomli's changelog.

2.4.1

• Fixed
  • Limit number of parts of a TOML key to address quadratic time complexity

2.4.0

• Added
  • TOML v1.1.0 compatibility
  • Binary wheels for Windows arm64

2.3.0

• Added
  • Binary wheels for Python 3.14 (also free-threaded)
• Performance
  • Reduced import time

Commits

• c5f4469 Bump version: 2.4.0 → 2.4.1
• 2bcd262 Add change log for 2.4.1 and 2.3.1
• e1fdb94 Limit number of parts of a key (#286)
• c20c491 pre-commit autoupdate
• 920e20b Update performance benchmark and results
• 064e492 Merge pull request #280 from hukkin/version-2.4.0
• a678e6f Bump version: 2.3.0 → 2.4.0
• b8a1358 Tests: remove now needless "TOML compliance"->"burntsushi" format conversion
• 4979375 Update GitHub actions
• f890dd1 Update pre-commit hooks
• Additional commits viewable in compare view

Updates websockets from 15.0.1 to 16.0

Release notes

Sourced from websockets's releases.

16.0

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

Commits

• d4303a5 Release version 16.0.
• 851bcd7 Bump pypa/cibuildwheel from 3.3.0 to 3.3.1
• 740c8d3 Temporarily remove the trio implementation.
• 92ea055 Add missing changelog entry.
• ba74244 Document bug fix.
• 9410483 Pin sphinx to avoid error in sphinxcontrib-trio.
• 8e4d408 Document asyncio's TLS read buffer.
• cb3500b Stop referring to the asyncio implementation as new.
• 6563a9c The threading implementation supports max_queue.
• 9f17e92 Clarify that protocol_mutex protects pending_pings.
• Additional commits viewable in compare view

Updates email-validator from 2.2.0 to 2.3.0

Release notes

Sourced from email-validator's releases.

v2.3.0

• The package name is changed from using an underscore (email_validator) to a dash (email-validator) to match PyPi's normalized package name.
• The library no longer checks that the local part is at most 64 characters because a more careful reading of RFC 5321 indicates the limit is optional and such email addresses have been found in the wild. However the check can be restored using a new strict=True parameter, and the overall 254 character email address length limit is still in place.
• New EmailSyntaxError messages are used for some exiting syntax errors related to @-sign homoglyphs and invalid characters in internationalized domains.
• When using allow_display_name=True, display names are now returned with Unicode NFC normalization.
• TypeError is now raised if something other than str (or bytes) is passed as the email address.

Changelog

Sourced from email-validator's changelog.

2.3.0 (August 26, 2025)

• The package name is changed from using an underscore (email_validator) to a dash (email-validator) to match PyPi's normalized package name.
• The library no longer checks that the local part is at most 64 characters because a more careful reading of RFC 5321 indicates the limit is optional and such email addresses have been found in the wild. However the check can be restored using a new strict=True parameter, and the overall 254 character email address length limit is still in place.
• New EmailSyntaxError messages are used for some exiting syntax errors related to @-sign homoglyphs and invalid characters in internationalized domains.
• When using allow_display_name=True, display names are now returned with Unicode NFC normalization.
• TypeError is now raised if something other than str (or bytes) is passed as the email address.

Commits

• 030a63a Version 2.3.0
• e943a0f Raise TypeError when an invalid argument is passed for email, closes #155
• f90d256 Remove local part length check unless new strict flag is given, fixes #158
• 98800ba Add explicit checks for internationalized domain name characters invalid unde...
• 936aead Fix final syntax checks on normalized internationalized domains checking the ...
• 8043de4 NFC-normalize display names per UTS #39
• bc08faa Add one-off error messages for full-width-at and small-commercial-at which ar...
• a1c90ab Split exceptions_types.py into exceptions.py and types.py
• dbcf07c Change package name from using underscore to dash to match PyPi normalized pa...
• 7c22208 Support ALLOW_DISPLAY_NAME and ALLOW_EMPTY_LOCAL in the CLI (#145)
• Additional commits viewable in compare view

Updates tenacity from 9.1.2 to 9.1.4

Release notes

Sourced from tenacity's releases.

9.1.4

What's Changed

• Fix retry() annotations with async sleep= function by @​Zac-HD in jd/tenacity#555

Full Changelog: jd/tenacity@9.1.3...9.1.4

9.1.3

What's Changed

• Apply formatting to num seconds in before_sleep_log by @​aguinane in jd/tenacity#489
• Support Python 3.14 by @​sandrobonazzola in jd/tenacity#528
• Typing: Accept non-standard logger in helpers logging something by @​k4nar in jd/tenacity#540
• feat(wait): add wait_exception strategy by @​capitan-davide in jd/tenacity#541
• docs: fix syntax error in wait_chain docstring example by @​VedantMadane in jd/tenacity#548
• chore: drop Python 3.9 support (EOL) by @​Zac-HD in jd/tenacity#552
• Support async sleep for sync fn-to-retry by @​Zac-HD in jd/tenacity#551

New Contributors

• @​aguinane made their first contribution in jd/tenacity#489
• @​sandrobonazzola made their first contribution in jd/tenacity#528
• @​k4nar made their first contribution in jd/tenacity#540
• @​capitan-davide made their first contribution in jd/tenacity#541
• @​VedantMadane made their first contribution in jd/tenacity#548
• @​Zac-HD made their first contribution in jd/tenacity#552

Full Changelog: jd/tenacity@9.1.2...9.1.3

Commits

• d4e868d Fix retry() annotations with async sleep= function (#555)
• 24415eb support async sleep for sync fn (#551)
• 3bf33b4 chore: drop Python 3.9 support (EOL) (#552)
• 7027da3 chore(deps): bump the github-actions group with 2 updates (#550)
• 21ae7d0 docs: fix syntax error in wait_chain docstring example (#548)
• ef12c9e chore(deps): bump actions/checkout in the github-actions group (#547)
• c35a4b3 chore(deps): bump the github-actions group with 2 updates (#545)
• e792bba ci: fix mypy (#546)
• 0f55245 ci: remove reno requirements (#542)
• 815c34f feat(wait): add wait_exception strategy (#541)
• Additional commits viewable in compare view