Python: Consolidate Dependabot dependency updates

[Evan Mattson (moonbox3)]

Motivation & Context

Nine open Python Dependabot pull requests update overlapping development, build, and lockfile dependencies. Consolidating them keeps the workspace on one coherent resolution and avoids repeated uv.lock conflicts across the individual updates.

Description & Review Guide

• What are the major changes? Updates uv-build, uv, pytest, tqdm, Azure Monitor OpenTelemetry, poethepoet, pyright, and mypy; aligns duplicated Lab tool pins; moves opentelemetry-sdk to 1.43.0 as required by Azure Monitor OpenTelemetry 1.8.9; and regenerates uv.lock.
• What is the impact of these changes? Python development, testing, build, and telemetry tooling use the newer compatible versions. There are no Agent Framework public API changes.
• What do you want reviewers to focus on? The companion Lab and OpenTelemetry pin changes required to make the combined dependency set resolvable, plus the regenerated lockfile.

Related Issue

Supersedes #7012, #7013, #7014, #7015, #7016, #7017, #7018, #7019, and #7021. These are Dependabot pull requests rather than an umbrella issue, so this PR does not close an issue.

Contribution Checklist

• The code builds clean without any errors or warnings
• All unit tests pass, and I have added new tests where possible
• The PR follows the Contribution Guidelines
• This PR is linked to an issue and there is no other open PR for this issue (see Related Issue above).
• This is not a breaking change. If it is a breaking change, add the breaking change label (or add "[BREAKING]" to the title prefix, before or after any language prefix) — a workflow keeps the label and title prefix in sync automatically.

[github-actions]

Automated Code Review

Reviewers: 5 | Confidence: 74% | Result: All clear

Reviewed: Correctness, Security Reliability, Test Coverage, Failure Modes, Design Approach

---

Automated review by moonbox3's agents

[Copilot]

Pull request overview

This PR consolidates a set of overlapping Python Dependabot updates into a single coherent dependency resolution for the Python workspace, reducing repeated lockfile conflicts and keeping dev/build/test tooling aligned across packages.

Changes:

• Updated Python dev tooling pins (uv, pytest, mypy, pyright, poethepoet) and telemetry deps (azure-monitor-opentelemetry + opentelemetry-sdk) in the workspace and lab package.
• Broadened uv_build build-system constraints for the ollama and mistral packages to support newer uv_build versions.
• Updated package optional dev dependencies to align pytest version where relevant.

Reviewed changes

Copilot reviewed 6 out of 7 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
python/pyproject.toml	Bumps workspace dev/tooling + telemetry pins (uv/pytest/mypy/pyright/poethepoet + OTel/Azure Monitor).
python/packages/lab/pyproject.toml	Aligns lab dev/tooling pins with the workspace updates.
python/packages/devui/pyproject.toml	Updates optional dev/all pytest pin to 9.1.1.
python/packages/ag-ui/pyproject.toml	Updates optional dev pytest pin to 9.1.1.
python/packages/ollama/pyproject.toml	Expands uv_build version range in build-system requirements.
python/packages/mistral/pyproject.toml	Expands uv_build version range in build-system requirements.

[github-actions]

Python Test Coverage Report •

File	Stmts	Miss	Cover	Missing
TOTAL	44098	5270	88%

report-only-changed-files is enabled. No files were changed during this commit :)

Python Unit Test Overview

Tests	Skipped	Failures	Errors	Time
8836	33 💤	0 ❌	0 🔥	2m 12s ⏱️

[github-actions]

Automated Code Review

Reviewers: 5 | Confidence: 64% | Result: All clear

Reviewed: Correctness, Security Reliability, Test Coverage, Failure Modes, Design Approach

---

Automated review by moonbox3's agents