Merge pull request #51 from Azure-Samples/dependabot/pip/app/backend/h2-4.3.0

Bump h2 from 4.1.0 to 4.3.0 in /app/backend

Author: pamelafox

.github/dependabot.yaml

@@ -0,0 +1,30 @@
+version: 2
+updates:
+
+  # Maintain dependencies for GitHub Actions
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    groups:
+      github-actions:
+        patterns:
+          - "*"
+
+  # Maintain dependencies for npm
+  - package-ecosystem: "npm"
+    directory: "/app/frontend"
+    schedule:
+      interval: "weekly"
+
+  # Maintain dependencies for pip
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    groups:
+      h2-dependencies:
+        patterns:
+          - "h2"
+          - "hpack"
+          - "hyperframe"

app/backend/requirements.txt

@@ -17,10 +17,10 @@ colorama==0.4.6
 cryptography==44.0.1
 Flask==3.0.1
 h11==0.14.0
-h2==4.1.0
-hpack==4.0.0
+h2==4.3.0
+hpack==4.1.0
 Hypercorn==0.16.0
-hyperframe==6.0.1
+hyperframe==6.1.0
 idna==3.7
 isodate==0.6.1
 itsdangerous==2.1.2