fix: Dependabot package upgrade changes

[Priyanka-Microsoft]

Purpose

• ...
  This pull request primarily updates dependencies across the project to their latest stable versions, including both Python and JavaScript packages, and modernizes the GitHub Actions workflow files by upgrading action versions and improving workflow steps. These changes aim to enhance security, compatibility, and reliability of CI/CD pipelines and the application itself.

Dependency Upgrades

• Updated JavaScript dependencies in code/frontend/package.json, including major upgrades to react (to v19), @fluentui/react, @fortawesome/react-fontawesome, lodash-es, and development tools such as vitest and prettier. This ensures compatibility with the latest features and bug fixes.
• Upgraded Python dependencies in pyproject.toml, including azure-functions, streamlit, python-dotenv, azure-storage-blob, semantic-kernel, pydantic, and added rfc3987. Development dependencies like pytest, black, and pre-commit were also updated. [1] [2]
• Updated Cypress and related dependencies in tests/integration/ui/package-lock.json, along with various type definitions and licenses, improving test automation reliability. [1] [2] [3] [4] [5] [6] [7] [8] [9]

GitHub Actions Workflow Modernization

• Upgraded all usages of actions/checkout from v5 to v6, actions/download-artifact from v5 to v7, actions/upload-artifact from v4 to v6, and other actions such as actions/setup-python and actions/setup-node to their latest versions in various workflow files. This improves security and maintains support for new features. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14]

Workflow Logic Improvements

• Improved logic in .github/workflows/broken-links-checker.yml for detecting changed markdown files in PRs by replacing the tj-actions/changed-files step with a direct git diff command, and upgraded lycheeverse/lychee-action to v2.7.0 for broken link checking.
• Added a new Docker login step for the main branch in .github/workflows/build-docker.yml, ensuring proper authentication for registry pushes.
• Upgraded github/codeql-action/upload-sarif from v3 to v4 in .github/workflows/bicep-audit.yml for improved security alert uploads.

Does this introduce a breaking change?

• Yes
• No

How to Test

• Get the code

git clone [repo-address]
cd [repo-name]
git checkout [branch-name]
npm install

• Test the code

What to Check

Verify that the following are valid

• ...

Other Information