Consolidate Python and .NET dependency updates (#14222)

### Motivation and Context

Consolidates the currently open Python and .NET Dependabot updates into
one coordinated dependency change. This reduces duplicate review and CI
work while preserving each source PR's update intent.

The npm and Yarn updates are intentionally excluded from this draft and
remain in their original Dependabot PRs.

### Related Issue

Supersedes:

- #14178
- #14184
- #14185
- #14186
- #14187
- #14188
- #14189
- #14191
- #14192
- #14202
- #14203
- #14204
- #14205
- #14207
- #14208
- #14211
- #14212
- #14213
- #14214
- #14215
- #14216
- #14217
- #14218
- #14219
- #14221

### Description

- Updates the selected .NET Aspire and AWS SDK package versions in
central package management.
- Updates the selected Python requirements and regenerates both affected
uv lockfiles without losing earlier bumps.
- Keeps the compatible ONNX Runtime/GenAI pair on Python 3.10 while
applying ONNX Runtime GenAI 0.14.1 on Python 3.11 and newer.
- Retains pyOpenSSL 26.2.0, which is newer than the 26.0.0 requested by
its source PR and is required by the consolidated cryptography update.
- Uses Pinecone 7.3 or newer on Windows, where Pinecone 7.0.1 imports
the unavailable Unix `readline` module, while retaining the existing
`~=7.0` range on macOS and Linux.
- Constrains MCP to the compatible 1.x API because the current Semantic
Kernel integration imports interfaces removed by MCP 2.0.

### Validation

- Python unit tests passed across Python 3.10-3.13 on Ubuntu, Windows,
and macOS, including Dapr jobs.
- Python pre-commit, lock validation, spell checking, and
integration-test aggregate checks passed.
- .NET 9/10 builds, package-install checks, unit tests, AOT tests,
formatting, and coverage checks passed on Ubuntu and Windows.
- Merge Gatekeeper passed.

### Contribution Checklist

- [x] The code builds clean without any errors or warnings
- [x] The PR follows the [SK Contribution
Guidelines](https://github.com/microsoft/semantic-kernel/blob/main/CONTRIBUTING.md)
and the [pre-submission formatting
script](https://github.com/microsoft/semantic-kernel/blob/main/CONTRIBUTING.md#development-scripts)
raises no violations
- [x] All unit tests pass, and I have added new tests where possible
- [x] I didn't break anyone 😄

Author: moonbox3

dotnet/Directory.Packages.props

@@ -12,15 +12,15 @@
     <PackageVersion Include="Aspire.Hosting.NodeJs" Version="9.5.2" />
     <PackageVersion Include="CommunityToolkit.Aspire.Hosting.Dapr" Version="9.9.0" />
     <PackageVersion Include="CommunityToolkit.Aspire.Hosting.NodeJS.Extensions" Version="9.9.0" />
-    <PackageVersion Include="Aspire.Hosting.Azure.Search" Version="13.3.0" />
+    <PackageVersion Include="Aspire.Hosting.Azure.Search" Version="13.4.6" />
     <PackageVersion Include="MessagePack" Version="3.1.7" /> <!-- Transitive dependency of Aspire pinned to newer version due to vulnerability in 2.5.192 -->
-    <PackageVersion Include="AWSSDK.BedrockAgent" Version="4.0.8.5" />
-    <PackageVersion Include="AWSSDK.BedrockAgentRuntime" Version="4.0.8.5" />
-    <PackageVersion Include="AWSSDK.BedrockRuntime" Version="4.0.14.5" />
-    <PackageVersion Include="AWSSDK.Core" Version="4.0.6.1" />
+    <PackageVersion Include="AWSSDK.BedrockAgent" Version="4.0.100.7" />
+    <PackageVersion Include="AWSSDK.BedrockAgentRuntime" Version="4.0.100.7" />
+    <PackageVersion Include="AWSSDK.BedrockRuntime" Version="4.0.100.7" />
+    <PackageVersion Include="AWSSDK.Core" Version="4.0.100.9" />
     <PackageVersion Include="AWSSDK.Extensions.Bedrock.MEAI" Version="4.0.5.3" />
-    <PackageVersion Include="AWSSDK.Extensions.NETCore.Setup" Version="4.0.3.19" />
-    <PackageVersion Include="AWSSDK.SecurityToken" Version="4.0.5.6" />
+    <PackageVersion Include="AWSSDK.Extensions.NETCore.Setup" Version="4.0.100.7" />
+    <PackageVersion Include="AWSSDK.SecurityToken" Version="4.0.100.7" />
     <PackageVersion Include="Azure.AI.Agents.Persistent" Version="1.1.0" />
     <PackageVersion Include="Azure.AI.ContentSafety" Version="1.0.0" />
     <PackageVersion Include="Azure.AI.OpenAI" Version="2.9.0-beta.1" />

python/pyproject.toml

@@ -24,7 +24,7 @@ classifiers = [
 ]
 dependencies = [
     # azure agents
-    "azure-ai-projects >= 1.0,< 2.3",
+    "azure-ai-projects >= 1.0,< 2.5",
     "azure-ai-agents >= 1.2.0b3",
     "aiohttp ~= 3.8",
     "cloudevents >=1,<3",
@@ -45,7 +45,7 @@ dependencies = [
     # OpenTelemetry
     "opentelemetry-api ~= 1.24",
     "opentelemetry-sdk ~= 1.24",
-    "prance >= 23.6.21,< 25.4.9",
+    "prance >= 23.6.21,< 26.7.20",
     # templating
     "pybars4 ~= 0.9",
     "jinja2 ~= 3.1",
@@ -56,7 +56,7 @@ dependencies = [
     # Protobuf
     # explicit typing extensions
     "typing-extensions>=4.13",
-    "mcp>=1.26.0",
+    "mcp>=1.26.0,<2.0",
 ]
 
 ### Optional dependencies
@@ -91,19 +91,19 @@ google = [
     "google-genai >= 1.51,< 1.75"
 ]
 hugging_face = [
-    "transformers[torch] ~= 4.28",
+    "transformers[torch] >= 4.28,< 6.0",
     "sentence-transformers >= 2.2,< 6.0",
     "torch==2.13.0"
 ]
 mcp = [
-    "mcp>=1.8",
+    "mcp>=1.8,<2.0",
 ]
 milvus = [
     "pymilvus >= 2.3,< 2.7",
     "milvus >= 2.3,<2.3.8; platform_system != 'Windows'"
 ]
 mistralai = [
-    "mistralai >= 1.2,< 2.4.6"
+    "mistralai >= 1.2,< 2.7.3"
 ]
 mongo = [
     "pymongo >= 4.8.0, < 4.17",
@@ -116,10 +116,11 @@ ollama = [
     "ollama ~= 0.4"
 ]
 onnx = [
-  # onnxruntime>=1.24.0 dropped Python 3.10 support; pin to last compatible version for 3.10.
+  # onnxruntime>=1.24.0 dropped Python 3.10 support; retain the last compatible runtime/genai pair for 3.10.
   "onnxruntime==1.22.1; python_version == '3.10'",
-  "onnxruntime>=1.24.3; python_version > '3.10'",
-  "onnxruntime-genai==0.9.0"
+  "onnxruntime>=1.26.0; python_version > '3.10'",
+  "onnxruntime-genai==0.9.0; python_version == '3.10'",
+  "onnxruntime-genai==0.14.1; python_version > '3.10'"
 ]
 oracledb = [
     "oracledb >= 3.4.1"
@@ -128,7 +129,8 @@ pandas = [
     "pandas ~= 2.2"
 ]
 pinecone = [
-    "pinecone[asyncio, grpc] ~= 7.0"
+    "pinecone[asyncio, grpc] ~= 7.0; sys_platform == 'darwin' or sys_platform == 'linux'",
+    "pinecone[asyncio, grpc] ~= 7.3; sys_platform == 'win32'"
 ]
 postgres = [
     "psycopg[binary,pool] ~= 3.2"