Skip to content

deps: Bump the microsoft-packages group with 2 updates - #163

Merged
DeDuva merged 1 commit into
devfrom
dependabot/nuget/src/Squad.Agents.AI/microsoft-packages-ced18dd1c2
Sep 28, 2026
Merged

deps: Bump the microsoft-packages group with 2 updates#163
DeDuva merged 1 commit into
devfrom
dependabot/nuget/src/Squad.Agents.AI/microsoft-packages-ced18dd1c2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 28, 2026

Copy link
Copy Markdown
Contributor

Updated Microsoft.Agents.AI.GitHub.Copilot from 1.20.0 to 1.22.0.

Release notes

Sourced from Microsoft.Agents.AI.GitHub.Copilot's releases.

1.22.0

What's Changed

New Contributors

1.21.0

What's Changed

New Contributors

Commits viewable in compare view.

Updated Microsoft.Extensions.AI from 10.9.0 to 10.10.0.

Release notes

Sourced from Microsoft.Extensions.AI's releases.

10.10.0

This month's release focuses on AI package reliability: closing gaps in evaluation scoring, hardening OpenAI image-option handling, and removing the deprecated OpenAI Assistants API support.

Experimental API Changes

Removed Experimental APIs

  • OpenAI Assistants experimental APIs removed (was experimental under OPENAI001) #​7724

What's Changed

AI

  • Remove OpenAI Assistants API support #​7724 by @​jozkee (co-authored by @​Copilot)
  • Update OpenAI package version to 2.13.0 #​7726 by @​jozkee
  • OpenAI: Avoid null implicit conversions for image options #​7727 by @​jozkee (co-authored by @​Copilot)

AI Evaluation

  • Fail closed when a quality metric has no valid score #​7735 by @​thaildhe172591
  • Validate path segments in Azure storage result store and response cache #​7718 by @​Lroca88

Repository Infrastructure Updates

  • Add TfxInstaller for publishing #​7695 by @​peterwaltonwork
  • Bump PowerShell from 7.6.4 to 7.6.5 #​7702
  • [Infrastructure] Update vulnerable npm dependencies #​7705 by @​wtgodbe
  • Add Node installation for TfxInstaller #​7703 by @​peterwaltonwork
  • Publish VSIX using publish task instead of output #​7711 by @​peterwaltonwork
  • Bump dotnet-coverage from 18.9.0 to 18.10.0 #​7708
  • Do not validate extension during publish step #​7725 by @​peterwaltonwork
  • Add skill for upgrading OpenAI #​7728 by @​jozkee
  • Fix source indexer stage #​7694 by @​jjonescz

Acknowledgements

  • @​Lroca88 made their first contribution in #​7718
  • @​thaildhe172591 made their first contribution in #​7735
  • @​ANcpLua submitted issue #​7665 (resolved by #​7735)
  • @​jeffhandley @​peterwald @​shyamnamboodiripad reviewed pull requests

Full Changelog: dotnet/extensions@v10.9.0...v10.10.0

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps: Bump the microsoft-packages group with 2 updates
3014e60 
Bumps Microsoft.Agents.AI.GitHub.Copilot from 1.20.0 to 1.22.0
Bumps Microsoft.Extensions.AI from 10.9.0 to 10.10.0

---
updated-dependencies:
- dependency-name: Microsoft.Agents.AI.GitHub.Copilot
  dependency-version: 1.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft-packages
- dependency-name: Microsoft.Extensions.AI
  dependency-version: 10.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Dependency updates (Dependabot) label Sep 28, 2026
@DeDuva Claude

DeDuva commented Sep 28, 2026 •
edited
Loading

Copy link
Copy Markdown
Owner

Approved — minor updates, CI-validated. Head SHA 3014e60d4829a73046c2d08cb6ffe52cace2440b.

Two NuGet minor bumps in src/Squad.Agents.AI/Squad.Agents.AI.csproj:

  • Microsoft.Agents.AI.GitHub.Copilot 1.20.0 → 1.22.0
  • Microsoft.Extensions.AI 10.9.0 → 10.10.0

Scope. Diff is 2 added / 2 removed lines, both Version= attributes on existing PackageReference elements. No other file changed. There is no packages.lock.json or Directory.Packages.props in the tree and RestorePackagesWithLockFile is not set, so a csproj-only diff is complete here — nothing was left unregenerated.

CI evidence. .NET ubuntu-latest → success and .NET windows-latest → success. Both are required for these paths because the two platforms have diverged before.

Local validation: unavailable. dotnet is not installed on this runner, so no local restore/build/test was performed. This row rests on CI evidence alone.

Breaking changes — checked, judged not applicable. The 1.22.0 release notes carry several entries tagged [BREAKING] / [PREVIEW BREAKING], which is worth flagging on a nominally-minor bump. They concern AgentSessionStore being promoted into Agents.AI.Abstractions, approval-binding replay support, per-invocation scoping of provider-backed MCP sessions, and Foundry delegated user identity on AgentSession. None of those APIs appear in src/ or test/ — this project's surface against the package is DelegatingAIAgent, AIAgent, and client.AsAIAgent(...), none of which are touched by those changes. Combined with green .NET builds on both platforms, that is sufficient evidence to proceed.

Merging via squash.

@DeDuva
DeDuva merged commit 3d40b33 into dev Sep 28, 2026
19 checks passed
@dependabot
dependabot Bot deleted the dependabot/nuget/src/Squad.Agents.AI/microsoft-packages-ced18dd1c2 branch September 28, 2026 12:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Dependency updates (Dependabot)

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@DeDuva