[Copilot]

Description

This is the automated dependency sweep. It moves every dependency to the newest version that is more than 7 days old on the Microsoft feed proxy. It also fixes the lint and type errors that the new versions caused.

Related Issues

Automated "Update Dependencies Sweep" issue.

Proposed Changes

• Lockfile: refreshed with uv lock --upgrade (examples: ruff 0.17.1, pydantic 2.14.1, pandas 3.0.6, pillow 13).
• Wider version ranges:
  • litellm ==1.100.1 → ==1.106.0, the newest release older than 7 days.
  • lancedb ~=0.38.0 → ~=0.40.0.
  • pyarrow ~=25.0 → ~=26.0, in both graphrag and graphrag-vectors.
• ruff 0.17 (UP052): the five @contextmanager functions in graphrag-llm (thread runners, LLMCompletion/LLMEmbedding base classes, sliding-window rate limiter) now return Generator[...] instead of Iterator[...].
• litellm 1.106 typing: completion() and embedding() called with **dict kwargs now match an overload that returns Coroutine. Each call is wrapped in typing.cast; runtime behavior is unchanged:

  response = cast("EmbeddingResponse", litellm.embedding(**new_args))

• Semversioner patch entry.

Checklist

• I have tested these changes locally.
• I have reviewed the code changes.
• I have updated the documentation (if necessary).
• I have added appropriate unit tests (if applicable).

Additional Notes

• Held on purpose:
  • graspologic-native<1.3 and nltk~=3.9.0: newer versions change outputs that the golden regression data depends on.
  • numpy~=2.4 and networkx~=3.6: the next minor versions require Python 3.12, and this project still supports 3.11.
• Downgrades pulled in by litellm 1.106.0: huggingface-hub 2.2.0 → 1.33.0 and filelock 4.2.3 → 3.32.7. Please check these are acceptable.
• Local test results: poe check passes. test_unit and test_verbs pass except for 8 tests that download the o200k_base tiktoken encoding; network is blocked in the sandbox, so CI needs to confirm those.

• Fixes Update Dependencies Sweep #2611