Dependency sweep blocked: Microsoft feed proxy denied by firewall

[Copilot]

Description

Attempted the automated dependency sweep via the update-deps skill, which requires resolving/syncing exclusively through the Microsoft feed proxy (packagefeedproxy.microsoft.io) and forbids public PyPI. That feed is unreachable in this environment, so no dependency or lockfile changes could be produced.

Related Issues

Automated dependency update sweep.

Proposed Changes

No source changes were made. The sweep is blocked by the sandbox firewall:

• Feed unreachable — all requests to packagefeedproxy.microsoft.io and its download hosts *.pkgs.visualstudio.com are denied as NotInAllowList (6,600+ DNS-BLOCKED events in fw.jsonl, 0 allowed).
• Only PyPI allowlisted — pypi.org / files.pythonhosted.org are reachable but forbidden by the skill (too-new packages, uv.lock drift from the release-owned feed), so no fallback was used.
• Working tree untouched — no speculative specifier bumps or PyPI-resolved lock, since neither uv lock --upgrade nor uv sync --all-packages / uv run poe check / test_unit can run without a sanctioned feed.

Unblock: add packagefeedproxy.microsoft.io (and *.pkgs.visualstudio.com) to the firewall allowlist, then re-run. The sweep then follows the standard flow: bump specifiers → uv lock --upgrade → uv sync --all-packages → fix fallout → semversioner add-change.

Checklist

• I have tested these changes locally.
• I have reviewed the code changes.
• I have updated the documentation (if necessary).
• I have added appropriate unit tests (if applicable).

Additional Notes

The blocked-domain attempts are logged, so the environment owner should be notified to grant allowlist access.

• Fixes Update Dependencies Sweep #2511