Skip to content

Bump the microsoft group with 11 updates#31

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/nuget/microsoft-ea44c96bd8
Open

Bump the microsoft group with 11 updates#31
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/nuget/microsoft-ea44c96bd8

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 6, 2026

Updated Microsoft.Agents.AI from 1.2.0 to 1.4.0.

Release notes

Sourced from Microsoft.Agents.AI's releases.

1.4.0

What's Changed

Full Changelog: microsoft/agent-framework@dotnet-1.3.0...dotnet-1.4.0

1.3.0

What's Changed

Full Changelog: microsoft/agent-framework@dotnet-1.2.0...dotnet-1.3.0

1.2.2

[1.2.2] - 2026-04-29

Added

  • agent-framework-azure-contentunderstanding: New alpha package — Azure AI Content Understanding context provider that auto-analyzes file attachments (documents, images, audio, video) and injects structured results into the LLM context, with multi-document session state, configurable timeout, output filtering via AnalysisSection, and auto-registered list_documents / get_analyzed_document tools (#​4829)
  • agent-framework-foundry-hosting: Add hosted Durable Workflow support — propagate full conversation history to workflow agents and wire Workflow.as_agent() end-to-end via the foundry hosting layer (#​5531)

Changed

  • agent-framework-orchestrations: [BREAKING] Standardize orchestration terminal outputs as AgentResponse so Workflow.as_agent() returns the final answer only; aligns sequential-approval (with_request_info) and concurrent (intermediate_outputs=True) flows on the same output contract (#​5301)
  • agent-framework-core, agent-framework-declarative: Preserve Workflow.run() shared state across calls so multi-turn WorkflowAgent invocations retain context, accept list[Message] input in the declarative start executor, and coerce Enum values when serializing PowerFx symbols (#​5531)
  • dependencies: Update workspace package dependencies and preserve mcp[ws] / uvicorn[standard] extras through override-dependencies in /python (#​5555)

Fixed

  • agent-framework-core: Fix observability spans not being correctly nested when using streaming (#​5552)
  • agent-framework-openai: Fix file_search citations breaking the assistant-message history roundtrip — skip hosted_file content in the assistant role so the Responses API no longer rejects input_file (#​5557)

Full Changelog: microsoft/agent-framework@python-1.2.1...python-1.2.2

1.2.1

[1.2.1] - 2026-04-28

Added

  • agent-framework-foundry-hosting: Add file data type support to hosted-agent Responses, refresh foundry-hosted-agents samples, and add response test coverage (#​5485)
  • samples: Add requirements.txt and .env.example to the a2a/ hosting sample for pip-based setup (#​5510)

Changed

  • dependencies: Update rich requirement from <15.0.0,>=13.7.1 to >=13.7.1,<16.0.0 in /python (#​5227)
  • dependencies: Bump prek from 0.3.8 to 0.3.9 in /python (#​5228)
  • dependencies: Bump python-multipart from 0.0.22 to 0.0.26 in /python (#​5286)
  • dependencies: Bump pyasn1 from 0.6.2 to 0.6.3 in /python (#​4748)
  • dependencies: Bump pytest from 9.0.2 to 9.0.3 in /python/packages/ag-ui (#​5461)
  • dependencies: Bump pytest from 9.0.2 to 9.0.3 in /python/packages/devui (#​5492)
  • dependencies: Bump pytest from 9.0.2 to 9.0.3 in /python/packages/lab (#​5470)
  • dependencies: Bump uv from 0.11.3 to 0.11.6 in /python/packages/lab (#​5469)
  • dependencies: Bump vite from 7.1.12 to 7.3.2 in /python/packages/devui/frontend (#​5127)
  • dependencies: Bump vite from 7.1.12 to 7.3.2 in /python/samples/05-end-to-end/chatkit-integration/frontend (#​5126)
  • dependencies: Bump postcss from 8.5.6 to 8.5.10 in /python/packages/devui/frontend (#​5484)
  • dependencies: Bump postcss from 8.5.6 to 8.5.10 in /python/samples/05-end-to-end/chatkit-integration/frontend (#​5491)
  • dependencies: Bump postcss from 8.5.6 to 8.5.12 in /python/samples/05-end-to-end/ag_ui_workflow_handoff/frontend (#​5527)
  • dependencies: Bump picomatch from 4.0.3 to 4.0.4 in /python/packages/devui/frontend (#​4921)
  • dependencies: Bump picomatch from 4.0.3 to 4.0.4 in /python/samples/05-end-to-end/ag_ui_workflow_handoff/frontend (#​4936)

Fixed

  • agent-framework-core: Prevent inner_exception from being lost in AgentFrameworkException (#​5167)

Full Changelog: microsoft/agent-framework@python-1.2.0...python-1.2.1

Commits viewable in compare view.

Updated Microsoft.Agents.AI.OpenAI from 1.2.0 to 1.4.0.

Release notes

Sourced from Microsoft.Agents.AI.OpenAI's releases.

1.4.0

What's Changed

Full Changelog: microsoft/agent-framework@dotnet-1.3.0...dotnet-1.4.0

1.3.0

What's Changed

Full Changelog: microsoft/agent-framework@dotnet-1.2.0...dotnet-1.3.0

1.2.2

[1.2.2] - 2026-04-29

Added

  • agent-framework-azure-contentunderstanding: New alpha package — Azure AI Content Understanding context provider that auto-analyzes file attachments (documents, images, audio, video) and injects structured results into the LLM context, with multi-document session state, configurable timeout, output filtering via AnalysisSection, and auto-registered list_documents / get_analyzed_document tools (#​4829)
  • agent-framework-foundry-hosting: Add hosted Durable Workflow support — propagate full conversation history to workflow agents and wire Workflow.as_agent() end-to-end via the foundry hosting layer (#​5531)

Changed

  • agent-framework-orchestrations: [BREAKING] Standardize orchestration terminal outputs as AgentResponse so Workflow.as_agent() returns the final answer only; aligns sequential-approval (with_request_info) and concurrent (intermediate_outputs=True) flows on the same output contract (#​5301)
  • agent-framework-core, agent-framework-declarative: Preserve Workflow.run() shared state across calls so multi-turn WorkflowAgent invocations retain context, accept list[Message] input in the declarative start executor, and coerce Enum values when serializing PowerFx symbols (#​5531)
  • dependencies: Update workspace package dependencies and preserve mcp[ws] / uvicorn[standard] extras through override-dependencies in /python (#​5555)

Fixed

  • agent-framework-core: Fix observability spans not being correctly nested when using streaming (#​5552)
  • agent-framework-openai: Fix file_search citations breaking the assistant-message history roundtrip — skip hosted_file content in the assistant role so the Responses API no longer rejects input_file (#​5557)

Full Changelog: microsoft/agent-framework@python-1.2.1...python-1.2.2

1.2.1

[1.2.1] - 2026-04-28

Added

  • agent-framework-foundry-hosting: Add file data type support to hosted-agent Responses, refresh foundry-hosted-agents samples, and add response test coverage (#​5485)
  • samples: Add requirements.txt and .env.example to the a2a/ hosting sample for pip-based setup (#​5510)

Changed

  • dependencies: Update rich requirement from <15.0.0,>=13.7.1 to >=13.7.1,<16.0.0 in /python (#​5227)
  • dependencies: Bump prek from 0.3.8 to 0.3.9 in /python (#​5228)
  • dependencies: Bump python-multipart from 0.0.22 to 0.0.26 in /python (#​5286)
  • dependencies: Bump pyasn1 from 0.6.2 to 0.6.3 in /python (#​4748)
  • dependencies: Bump pytest from 9.0.2 to 9.0.3 in /python/packages/ag-ui (#​5461)
  • dependencies: Bump pytest from 9.0.2 to 9.0.3 in /python/packages/devui (#​5492)
  • dependencies: Bump pytest from 9.0.2 to 9.0.3 in /python/packages/lab (#​5470)
  • dependencies: Bump uv from 0.11.3 to 0.11.6 in /python/packages/lab (#​5469)
  • dependencies: Bump vite from 7.1.12 to 7.3.2 in /python/packages/devui/frontend (#​5127)
  • dependencies: Bump vite from 7.1.12 to 7.3.2 in /python/samples/05-end-to-end/chatkit-integration/frontend (#​5126)
  • dependencies: Bump postcss from 8.5.6 to 8.5.10 in /python/packages/devui/frontend (#​5484)
  • dependencies: Bump postcss from 8.5.6 to 8.5.10 in /python/samples/05-end-to-end/chatkit-integration/frontend (#​5491)
  • dependencies: Bump postcss from 8.5.6 to 8.5.12 in /python/samples/05-end-to-end/ag_ui_workflow_handoff/frontend (#​5527)
  • dependencies: Bump picomatch from 4.0.3 to 4.0.4 in /python/packages/devui/frontend (#​4921)
  • dependencies: Bump picomatch from 4.0.3 to 4.0.4 in /python/samples/05-end-to-end/ag_ui_workflow_handoff/frontend (#​4936)

Fixed

  • agent-framework-core: Prevent inner_exception from being lost in AgentFrameworkException (#​5167)

Full Changelog: microsoft/agent-framework@python-1.2.0...python-1.2.1

Commits viewable in compare view.

Updated Microsoft.Agents.AI.Workflows from 1.2.0 to 1.4.0.

Release notes

Sourced from Microsoft.Agents.AI.Workflows's releases.

1.4.0

What's Changed

Full Changelog: microsoft/agent-framework@dotnet-1.3.0...dotnet-1.4.0

1.3.0

What's Changed

Full Changelog: microsoft/agent-framework@dotnet-1.2.0...dotnet-1.3.0

1.2.2

[1.2.2] - 2026-04-29

Added

  • agent-framework-azure-contentunderstanding: New alpha package — Azure AI Content Understanding context provider that auto-analyzes file attachments (documents, images, audio, video) and injects structured results into the LLM context, with multi-document session state, configurable timeout, output filtering via AnalysisSection, and auto-registered list_documents / get_analyzed_document tools (#​4829)
  • agent-framework-foundry-hosting: Add hosted Durable Workflow support — propagate full conversation history to workflow agents and wire Workflow.as_agent() end-to-end via the foundry hosting layer (#​5531)

Changed

  • agent-framework-orchestrations: [BREAKING] Standardize orchestration terminal outputs as AgentResponse so Workflow.as_agent() returns the final answer only; aligns sequential-approval (with_request_info) and concurrent (intermediate_outputs=True) flows on the same output contract (#​5301)
  • agent-framework-core, agent-framework-declarative: Preserve Workflow.run() shared state across calls so multi-turn WorkflowAgent invocations retain context, accept list[Message] input in the declarative start executor, and coerce Enum values when serializing PowerFx symbols (#​5531)
  • dependencies: Update workspace package dependencies and preserve mcp[ws] / uvicorn[standard] extras through override-dependencies in /python (#​5555)

Fixed

  • agent-framework-core: Fix observability spans not being correctly nested when using streaming (#​5552)
  • agent-framework-openai: Fix file_search citations breaking the assistant-message history roundtrip — skip hosted_file content in the assistant role so the Responses API no longer rejects input_file (#​5557)

Full Changelog: microsoft/agent-framework@python-1.2.1...python-1.2.2

1.2.1

[1.2.1] - 2026-04-28

Added

  • agent-framework-foundry-hosting: Add file data type support to hosted-agent Responses, refresh foundry-hosted-agents samples, and add response test coverage (#​5485)
  • samples: Add requirements.txt and .env.example to the a2a/ hosting sample for pip-based setup (#​5510)

Changed

  • dependencies: Update rich requirement from <15.0.0,>=13.7.1 to >=13.7.1,<16.0.0 in /python (#​5227)
  • dependencies: Bump prek from 0.3.8 to 0.3.9 in /python (#​5228)
  • dependencies: Bump python-multipart from 0.0.22 to 0.0.26 in /python (#​5286)
  • dependencies: Bump pyasn1 from 0.6.2 to 0.6.3 in /python (#​4748)
  • dependencies: Bump pytest from 9.0.2 to 9.0.3 in /python/packages/ag-ui (#​5461)
  • dependencies: Bump pytest from 9.0.2 to 9.0.3 in /python/packages/devui (#​5492)
  • dependencies: Bump pytest from 9.0.2 to 9.0.3 in /python/packages/lab (#​5470)
  • dependencies: Bump uv from 0.11.3 to 0.11.6 in /python/packages/lab (#​5469)
  • dependencies: Bump vite from 7.1.12 to 7.3.2 in /python/packages/devui/frontend (#​5127)
  • dependencies: Bump vite from 7.1.12 to 7.3.2 in /python/samples/05-end-to-end/chatkit-integration/frontend (#​5126)
  • dependencies: Bump postcss from 8.5.6 to 8.5.10 in /python/packages/devui/frontend (#​5484)
  • dependencies: Bump postcss from 8.5.6 to 8.5.10 in /python/samples/05-end-to-end/chatkit-integration/frontend (#​5491)
  • dependencies: Bump postcss from 8.5.6 to 8.5.12 in /python/samples/05-end-to-end/ag_ui_workflow_handoff/frontend (#​5527)
  • dependencies: Bump picomatch from 4.0.3 to 4.0.4 in /python/packages/devui/frontend (#​4921)
  • dependencies: Bump picomatch from 4.0.3 to 4.0.4 in /python/samples/05-end-to-end/ag_ui_workflow_handoff/frontend (#​4936)

Fixed

  • agent-framework-core: Prevent inner_exception from being lost in AgentFrameworkException (#​5167)

Full Changelog: microsoft/agent-framework@python-1.2.0...python-1.2.1

Commits viewable in compare view.

Updated Microsoft.Data.SqlClient from 7.0.0 to 7.0.1.

Release notes

Sourced from Microsoft.Data.SqlClient's releases.

7.0.1

This update brings the following changes since the 7.0.0 release:

Fixed

  • Fixed SqlBulkCopy failing on SQL Server 2016 with Invalid column name 'graph_type' error. The column metadata query now uses dynamic SQL so that references to the graph_type column (introduced in SQL Server 2017) are not compiled on older versions that lack the column. (#​3714, #​4092, #​4147)

  • Fixed SqlBulkCopy failing on Azure Synapse Analytics dedicated SQL pools. The column-list query previously used a variable-assignment pattern that Synapse does not support; it now uses STRING_AGG when targeting Synapse (engine edition 6) and falls back to the variable-assignment approach for SQL Server 2016 compatibility. (#​4149, #​4176, #​4182)

  • Fixed SqlDataReader.GetFieldType() and GetProviderSpecificFieldType() returning typeof(byte[]) instead of typeof(SqlVector<float>) for vector float32 columns. The methods now follow the same type-determination logic as GetValue(). (#​4104, #​4105, #​4152)

  • Added missing System.Data.Common (v4.3.0) NuGet package dependency for .NET Framework consumers. The inbox System.Data.Common assembly on .NET Framework predates APIs such as IDbColumnSchemaGenerator; without the explicit NuGet dependency, consumers encountered CS0012 compilation errors when using these types through Microsoft.Data.SqlClient. (#​4063, #​4074)

Changed

  • Enabled the User Agent TDS feature extension unconditionally. The Switch.Microsoft.Data.SqlClient.EnableUserAgent AppContext switch has been removed; the driver now always sends User Agent information during login. (#​4124, #​4154)

  • Added type forwards from the core Microsoft.Data.SqlClient assembly to public types that were moved to the Microsoft.Data.SqlClient.Extensions.Abstractions package: SqlAuthenticationMethod, SqlAuthenticationParameters, SqlAuthenticationProvider, SqlAuthenticationProviderException, and SqlAuthenticationToken. This ensures binary compatibility for assemblies compiled against earlier versions of Microsoft.Data.SqlClient where these types lived in the core assembly. (#​4067, #​4117)

  • Fixed API documentation include paths and duplicate doc snippets. (#​4084, #​4086, #​4107, #​4161)

Contributors

We thank the following public contributors. Their efforts toward this project are very much appreciated.

Target Platform Support

  • .NET Framework 4.6.2+ (Windows x86, Windows x64, Windows ARM64)
  • .NET 8.0+ (Windows x86, Windows x64, Windows ARM, Windows ARM64, Linux, macOS)

Dependencies

.NET 9.0

  • Microsoft.Bcl.Cryptography 9.0.13
  • Microsoft.Data.SqlClient.Extensions.Abstractions 1.0.0
  • Microsoft.Data.SqlClient.Internal.Logging 1.0.0
  • Microsoft.Data.SqlClient.SNI.runtime 6.0.2
  • Microsoft.Extensions.Caching.Memory 9.0.13
  • Microsoft.IdentityModel.JsonWebTokens 8.16.0
  • Microsoft.IdentityModel.Protocols.OpenIdConnect 8.16.0
  • Microsoft.SqlServer.Server 1.0.0
  • System.Configuration.ConfigurationManager 9.0.13
  • System.Security.Cryptography.Pkcs 9.0.13

.NET 8.0

  • Microsoft.Bcl.Cryptography 8.0.0
  • Microsoft.Data.SqlClient.Extensions.Abstractions 1.0.0
    ... (truncated)

Commits viewable in compare view.

Updated Microsoft.Extensions.AI from 10.5.0 to 10.5.2.

Release notes

Sourced from Microsoft.Extensions.AI's releases.

10.5.2

This patch release ships a single fix to Microsoft.Extensions.VectorData.Abstractions, correcting StorageName resolution when external serialization is enabled. Microsoft.Extensions.VectorData.ConformanceTests, Microsoft.Extensions.AI.Abstractions, Microsoft.Extensions.AI, and Microsoft.Extensions.AI.OpenAI are published alongside it for version coherency — they contain no code changes from 10.5.1.

Packages in this release

Package Version
Microsoft.Extensions.VectorData.Abstractions 10.5.2
Microsoft.Extensions.VectorData.ConformanceTests 10.5.2
Microsoft.Extensions.AI.Abstractions 10.5.2
Microsoft.Extensions.AI 10.5.2
Microsoft.Extensions.AI.OpenAI 10.5.2

What's Changed

Microsoft.Extensions.VectorData.Abstractions

  • Minor fixes to MEVD.Abstractions: correct StorageName behavior when external serialization is enabled, and disable a warning for net462. (by @​roji in #​7475)

Full Changelog: dotnet/extensions@v10.5.1...v10.5.2

10.5.1

Version 10.5.1 of the Microsoft.Extensions.AI packages stabilizes CodeInterpreter, WebSearch, and ImageGeneration tool content types. The release adds new experimental tool search and OpenAI request policy hooks. And the OpenTelemetry gen-ai semantic conventions are updated to align with v1.41.

The 'aiagent-webapi' project template in Microsoft.Agents.AI.ProjectTemplates is updated to align with v1.3.0 of Agent Framework, updating the OpenTelemetry dependencies within the template projects as well.

Packages in this release

Package Version
Microsoft.Extensions.AI 10.5.1
Microsoft.Extensions.AI.Abstractions 10.5.1
Microsoft.Extensions.AI.OpenAI 10.5.1
Microsoft.Extensions.AI.Templates 10.5.1-preview.3.26251.3
Microsoft.Agents.AI.ProjectTemplates 1.3.0-preview.1.26251.3

Experimental API Changes

Now Stable

The following types previously emitted the MEAI001 experimental diagnostic and are now stable.

  • CodeInterpreter and WebSearch tool content types are now stable #​7493
    • CodeInterpreterToolCallContent
    • CodeInterpreterToolResultContent
    • WebSearchToolCallContent
    • WebSearchToolResultContent
  • ImageGeneration tool content types and tool are now stable #​7476
    • ImageGenerationToolCallContent
    • ImageGenerationToolResultContent
    • HostedImageGenerationTool
    • ImageGenerationOptions
    • ImageGenerationResponseFormat (the Hosted enum value remains experimental)
    • IImageGenerator and the rest of the image generation infrastructure also remain experimental

New Experimental APIs

The following new APIs emit the MEAI001 experimental diagnostic.

  • New experimental API: HostedToolSearchTool with DeferredTools for tool-search-driven deferred tool loading #​7471
  • New experimental API: OpenAIRequestPolicies extension hook for appending System.ClientModel.PipelinePolicy instances to outgoing OpenAI requests #​7495

Breaking Changes to Experimental APIs

  • WebSearchToolResultContent.Results was renamed to Outputs as part of the stabilization in #​7493, aligning with CodeInterpreterToolResultContent.Outputs. The original Results property was included in version 10.4.0 and 10.5.0; this is a binary breaking change and consumers need to update to consume the updated property.

    WebSearchToolResultContent content = ...;
    - IList<AIContent>? items = content.Results;
    + IList<AIContent>? items = content.Outputs;

... (truncated)

Commits viewable in compare view.

Updated Microsoft.Extensions.AI.Abstractions from 10.5.0 to 10.5.2.

Release notes

Sourced from Microsoft.Extensions.AI.Abstractions's releases.

10.5.2

This patch release ships a single fix to Microsoft.Extensions.VectorData.Abstractions, correcting StorageName resolution when external serialization is enabled. Microsoft.Extensions.VectorData.ConformanceTests, Microsoft.Extensions.AI.Abstractions, Microsoft.Extensions.AI, and Microsoft.Extensions.AI.OpenAI are published alongside it for version coherency — they contain no code changes from 10.5.1.

Packages in this release

Package Version
Microsoft.Extensions.VectorData.Abstractions 10.5.2
Microsoft.Extensions.VectorData.ConformanceTests 10.5.2
Microsoft.Extensions.AI.Abstractions 10.5.2
Microsoft.Extensions.AI 10.5.2
Microsoft.Extensions.AI.OpenAI 10.5.2

What's Changed

Microsoft.Extensions.VectorData.Abstractions

  • Minor fixes to MEVD.Abstractions: correct StorageName behavior when external serialization is enabled, and disable a warning for net462. (by @​roji in #​7475)

Full Changelog: dotnet/extensions@v10.5.1...v10.5.2

10.5.1

Version 10.5.1 of the Microsoft.Extensions.AI packages stabilizes CodeInterpreter, WebSearch, and ImageGeneration tool content types. The release adds new experimental tool search and OpenAI request policy hooks. And the OpenTelemetry gen-ai semantic conventions are updated to align with v1.41.

The 'aiagent-webapi' project template in Microsoft.Agents.AI.ProjectTemplates is updated to align with v1.3.0 of Agent Framework, updating the OpenTelemetry dependencies within the template projects as well.

Packages in this release

Package Version
Microsoft.Extensions.AI 10.5.1
Microsoft.Extensions.AI.Abstractions 10.5.1
Microsoft.Extensions.AI.OpenAI 10.5.1
Microsoft.Extensions.AI.Templates 10.5.1-preview.3.26251.3
Microsoft.Agents.AI.ProjectTemplates 1.3.0-preview.1.26251.3

Experimental API Changes

Now Stable

The following types previously emitted the MEAI001 experimental diagnostic and are now stable.

  • CodeInterpreter and WebSearch tool content types are now stable #​7493
    • CodeInterpreterToolCallContent
    • CodeInterpreterToolResultContent
    • WebSearchToolCallContent
    • WebSearchToolResultContent
  • ImageGeneration tool content types and tool are now stable #​7476
    • ImageGenerationToolCallContent
    • ImageGenerationToolResultContent
    • HostedImageGenerationTool
    • ImageGenerationOptions
    • ImageGenerationResponseFormat (the Hosted enum value remains experimental)
    • IImageGenerator and the rest of the image generation infrastructure also remain experimental

New Experimental APIs

The following new APIs emit the MEAI001 experimental diagnostic.

  • New experimental API: HostedToolSearchTool with DeferredTools for tool-search-driven deferred tool loading #​7471
  • New experimental API: OpenAIRequestPolicies extension hook for appending System.ClientModel.PipelinePolicy instances to outgoing OpenAI requests #​7495

Breaking Changes to Experimental APIs

  • WebSearchToolResultContent.Results was renamed to Outputs as part of the stabilization in #​7493, aligning with CodeInterpreterToolResultContent.Outputs. The original Results property was included in version 10.4.0 and 10.5.0; this is a binary breaking change and consumers need to update to consume the updated property.

    WebSearchToolResultContent content = ...;
    - IList<AIContent>? items = content.Results;
    + IList<AIContent>? items = content.Outputs;

... (truncated)

Commits viewable in compare view.

Updated Microsoft.Extensions.AI.OpenAI from 10.5.0 to 10.5.2.

Release notes

Sourced from Microsoft.Extensions.AI.OpenAI's releases.

10.5.2

This patch release ships a single fix to Microsoft.Extensions.VectorData.Abstractions, correcting StorageName resolution when external serialization is enabled. Microsoft.Extensions.VectorData.ConformanceTests, Microsoft.Extensions.AI.Abstractions, Microsoft.Extensions.AI, and Microsoft.Extensions.AI.OpenAI are published alongside it for version coherency — they contain no code changes from 10.5.1.

Packages in this release

Package Version
Microsoft.Extensions.VectorData.Abstractions 10.5.2
Microsoft.Extensions.VectorData.ConformanceTests 10.5.2
Microsoft.Extensions.AI.Abstractions 10.5.2
Microsoft.Extensions.AI 10.5.2
Microsoft.Extensions.AI.OpenAI 10.5.2

What's Changed

Microsoft.Extensions.VectorData.Abstractions

  • Minor fixes to MEVD.Abstractions: correct StorageName behavior when external serialization is enabled, and disable a warning for net462. (by @​roji in #​7475)

Full Changelog: dotnet/extensions@v10.5.1...v10.5.2

10.5.1

Version 10.5.1 of the Microsoft.Extensions.AI packages stabilizes CodeInterpreter, WebSearch, and ImageGeneration tool content types. The release adds new experimental tool search and OpenAI request policy hooks. And the OpenTelemetry gen-ai semantic conventions are updated to align with v1.41.

The 'aiagent-webapi' project template in Microsoft.Agents.AI.ProjectTemplates is updated to align with v1.3.0 of Agent Framework, updating the OpenTelemetry dependencies within the template projects as well.

Packages in this release

Package Version
Microsoft.Extensions.AI 10.5.1
Microsoft.Extensions.AI.Abstractions 10.5.1
Microsoft.Extensions.AI.OpenAI 10.5.1
Microsoft.Extensions.AI.Templates 10.5.1-preview.3.26251.3
Microsoft.Agents.AI.ProjectTemplates 1.3.0-preview.1.26251.3

Experimental API Changes

Now Stable

The following types previously emitted the MEAI001 experimental diagnostic and are now stable.

  • CodeInterpreter and WebSearch tool content types are now stable #​7493
    • CodeInterpreterToolCallContent
    • CodeInterpreterToolResultContent
    • WebSearchToolCallContent
    • WebSearchToolResultContent
  • ImageGeneration tool content types and tool are now stable #​7476
    • ImageGenerationToolCallContent
    • ImageGenerationToolResultContent
    • HostedImageGenerationTool
    • ImageGenerationOptions
    • ImageGenerationResponseFormat (the Hosted enum value remains experimental)
    • IImageGenerator and the rest of the image generation infrastructure also remain experimental

New Experimental APIs

The following new APIs emit the MEAI001 experimental diagnostic.

  • New experimental API: HostedToolSearchTool with DeferredTools for tool-search-driven deferred tool loading #​7471
  • New experimental API: OpenAIRequestPolicies extension hook for appending System.ClientModel.PipelinePolicy instances to outgoing OpenAI requests #​7495

Breaking Changes to Experimental APIs

  • WebSearchToolResultContent.Results was renamed to Outputs as part of the stabilization in #​7493, aligning with CodeInterpreterToolResultContent.Outputs. The original Results property was included in version 10.4.0 and 10.5.0; this is a binary breaking change and consumers need to update to consume the updated property.

    WebSearchToolResultContent content = ...;
    - IList<AIContent>? items = content.Results;
    + IList<AIContent>? items = content.Outputs;

... (truncated)

Commits viewable in compare view.

Updated Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore from 10.0.0 to 10.0.7.

Release notes

Sourced from Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Options.DataAnnotations from 10.0.0 to 10.0.7.

Release notes

Sourced from Microsoft.Extensions.Options.DataAnnotations's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Identity.Web from 4.8.0 to 4.9.0.

Release notes

Sourced from Microsoft.Identity.Web's releases.

4.9.0

New features

  • Sidecar: per-route override gating. New Sidecar:AllowOverrides configuration section provides explicit, per-route control over whether optionsOverride.* query-string parameters are honored. Authenticated routes default to allowing overrides (preserving existing behavior); unauthenticated routes default to rejecting them. optionsOverride.BaseUrl is unconditionally rejected on all routes as a hardening measure. See #​3794.

Bug fixes

  • Fix AccountController.Challenge redirect URI validation to reject percent-encoded protocol-relative bypasses (%2F%2F, %5C%2F, etc.) that could be decoded by misconfigured reverse proxies. See #​3792.

Behavior changes

  • DownstreamApi: reserved header filtering. Headers supplied via DownstreamApiOptions.ExtraHeaderParameters whose names match reserved HTTP headers (Authorization, Host, Content-Length, Proxy-Authorization, Sec-*, Proxy-*, etc.) or duplicate a header the library already set are now silently skipped. A warning-level log entry (ReservedHeaderIgnored / DuplicateHeaderIgnored) is emitted so operators can spot misconfigurations. No exception is thrown. See #​3793.

Dependencies updates

  • Update Azure.Identity 1.11.4 → 1.17.2 and establish Microsoft.Extensions.* 8.0.x minimum on older TFMs. Azure.Identity 1.17.2 (sovereign-cloud fixes) pulls in Azure.Core 1.50.0, which introduces a transitive dependency on Microsoft.Extensions.DependencyInjection.Abstractions 8.0.2 on non-framework-coupled TFMs (net462, net472, netstandard2.0). This caused a CS0433 type collision with the previously-pinned Microsoft.Extensions.DependencyInjection 2.1.0. Rather than patch individual packages, the entire Microsoft.Extensions.* stack on these older TFMs has been bumped to 8.0.x, closing several 5-year version gaps and aligning with the net8.0 baseline. If your application targets net462, net472, or netstandard2.0, your resolved Microsoft.Extensions.* versions will increase (e.g., Extensions.Http 3.1.3 → 8.0.0, Extensions.DependencyInjection 2.1.0 → 8.0.0, Extensions.Caching.Memory 2.1.0/6.0.2 → 8.0.1). Applications already targeting net8.0+ are unaffected. See #​3787.
  • Bump System.Text.Json 8.0.5 → 8.0.6 (CVE-2024-43485). See #​3787.
  • Bump Microsoft.AspNetCore.DataProtection to 10.0.7 for CVE fix on net10.0. See #​3796.
  • Bump OpenTelemetry.Exporter.OpenTelemetryProtocol 1.14.0 → 1.15.3. See #​3788.

Full Changelog: AzureAD/microsoft-identity-web@4.8.0...4.9.0

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.4.0 to 18.5.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.5.1

What's Changed

Full Changelog: microsoft/vstest@v18.5.0...v18.5.1

18.5.0

⚠️ Unlisted on Nuget, because of #​15718

What's Changed

Full Changelog: microsoft/vstest@v18.4.0...v18.5.0

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Microsoft.Agents.AI from 1.2.0 to 1.4.0
Bumps Microsoft.Agents.AI.OpenAI from 1.2.0 to 1.4.0
Bumps Microsoft.Agents.AI.Workflows from 1.2.0 to 1.4.0
Bumps Microsoft.Data.SqlClient from 7.0.0 to 7.0.1
Bumps Microsoft.Extensions.AI from 10.5.0 to 10.5.2
Bumps Microsoft.Extensions.AI.Abstractions from 10.5.0 to 10.5.2
Bumps Microsoft.Extensions.AI.OpenAI from 10.5.0 to 10.5.2
Bumps Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore from 10.0.0 to 10.0.7
Bumps Microsoft.Extensions.Options.DataAnnotations from 10.0.0 to 10.0.7
Bumps Microsoft.Identity.Web from 4.8.0 to 4.9.0
Bumps Microsoft.NET.Test.Sdk from 18.4.0 to 18.5.1

---
updated-dependencies:
- dependency-name: Microsoft.Agents.AI
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft
- dependency-name: Microsoft.Agents.AI.OpenAI
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft
- dependency-name: Microsoft.Agents.AI.Workflows
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft
- dependency-name: Microsoft.Data.SqlClient
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft
- dependency-name: Microsoft.Extensions.AI
  dependency-version: 10.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft
- dependency-name: Microsoft.Extensions.AI.Abstractions
  dependency-version: 10.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft
- dependency-name: Microsoft.Extensions.AI.OpenAI
  dependency-version: 10.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft
- dependency-name: Microsoft.Extensions.Diagnostics.HealthChecks.EntityFrameworkCore
  dependency-version: 10.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft
- dependency-name: Microsoft.Extensions.Options.DataAnnotations
  dependency-version: 10.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft
- dependency-name: Microsoft.Identity.Web
  dependency-version: 4.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels May 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants