Skip to content

Bump the nuget-all group with 21 updates#21

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/samples/dotnet/Agent-Framework/nuget-all-7272f23343
Open

Bump the nuget-all group with 21 updates#21
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/samples/dotnet/Agent-Framework/nuget-all-7272f23343

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 11, 2026

Copy link
Copy Markdown

Updated Microsoft.Agents.AI from 1.8.0 to 1.13.0.

Release notes

Sourced from Microsoft.Agents.AI's releases.

1.13.0

What's Changed

New Contributors

Full Changelog: microsoft/agent-framework@dotnet-1.12.0...dotnet-1.13.0

1.12.0

What's Changed

New Contributors

Full Changelog: microsoft/agent-framework@dotnet-1.11.1...dotnet-1.12.0

1.11.1

Changes:

  • d9ec5eaab4918612ae0f7ddf11499576bdb510bf update package version (#​6752)
  • e3b64fdc4749256fa2d559be18a41f1a008dd7f6 .NET: [BREAKING] Make all AgentSkillsProvider tools require approval by default (#​6729) [ #​6727 ]
  • 3a5bbb5f8e3991d06fc3fe67fe3b01f2441cab0a .NET: Add DeclarativeWorkflowJsonOptions for AOT-safe declarative workflow checkpointing (#​6745)
  • a7332d69a8ffac3ad6039466d60761c970d7c367 .NET: Fix issue with resuming checkpoint after package version upgrade (#​6670)
  • e57e9455b367b1b83526fdaa21257125baac5d5d Build(deps): Bump hyperlight-sandbox-python-guest in /python (#​6737)
  • d97bc4fe3912cc32b99d654336e543d0ca5ff446 Build(deps): Bump huggingface-hub from 1.20.1 to 1.21.0 in /python (#​6738)
  • 5d57b10b9f2161ed765cbe4b8336604d6db7a6c2 Build(deps): Bump google-genai from 1.75.0 to 2.10.0 in /python (#​6739)
  • 8cd71dd4f62c35d2f868ac1b5d08956e9116f599 Build(deps): Bump fastapi from 0.124.4 to 0.138.0 in /python (#​6740)
  • 5e5dd87c91f0941ad69d247fe00b484644c125f6 Update .NET SDK to 10.0.301 (#​6730)
  • d0be98d649f97ee2b723730ae63ddc1567bb87dc Remove {resource_instructions} and {script_instructions} placeholder mechanism (#​6706)
See More
  • 802fe13053d379d68cb21aed108fa55aaf65ed38 Disable failing durable function integration tests (#​6731)
  • d75f2286f4c234d860919a78bcaf4040b91db0c4 Python: Add Telegram channel for agent-framework-hosting (#​6698) [ #​6588, #​6265 ]
  • ce74c84bdb1f2647fe8a484744ea359bc42e6e0f Python: Preserve OTel parent context for deferred streams (#​6709)
  • 4fb1fb615a1729f5cf1d017427f7fd12ee2ed8d2 Python: Fix Hyperlight CodeAct span parenting (#​6712)
  • 41a9c54bbee3c0724c14d4975b3f0630e0f0d28f Add Foundry project environment variables (#​6721)
  • 9f1ee23a4bcdb92dd9011a1ce778dc25d2dc5f16 Python: [BREAKING] Refactor FileSkillsSource for depth-based discovery and predicate filters (#​6488) [ #​6109 ]
  • 336a19fd326fd3e2d8c580096ca3e5d13a4e1342 .NET: .NET samples: migrate coding samples to Foundry-first AIProjectClient (#​6557)
  • 0283fd00a12af27ad0a7a72b70ce4f2fc8c34629 .NET: Fix hosted agent crash after tool call by rooting session store under $HOME (#​6231) (#​6714)
  • 5627dc0493e525e948e9985adf37baff21574569 docs: Add Python session identity ADR (#​6630)
  • 1df47667eadf0283637cd73b99cda63f13a28df5 Python: surface cache and reasoning token counts for the Bedrock and Gemini connectors (#​6640)
  • 91f639a694f9b70b79328058f284400897b2d0d3 Python: Explicitly emit available_resources and available_scripts in skill content (#​6694) [ #​6348 ]
  • a9e5f6d7985a555d042ff807995da7ca908f86d2 .NET: .NET Foundry: add CreateMcpTool projectConnectionId overload (#​6703)
  • ea7ae1cc00e02918a231cc97e2794b02fcfbb87c .NET: [BREAKING] Support archive-type skills in AgentMcpSkillsSource (#​6631)
  • e049bb569179384f11eb8a1b41d8a987fa416203 .NET: Add IncludeDetailedErrors option for skill script execution (#​6680) [ #​6304 ]
  • dd4b7ff475e467ac4490090eb2436e80b898dd5c .NET: Fix SearchDirectoriesForSkills to stop recursing after finding SKILL.md (#​6686) [ #​6683 ]
  • d5c15f2fe15f00118d818f79b1b532ee4ec52f03 .NET/Python: Purview: prefer token principal for user identity (#​6693)
  • 4cf7ace4463d0b4aa4a320d9671325485433f3a7 Python: track dependency maintenance PR creation (#​6665)
  • 5fff0df2afda58e4898f6cbe1a18ef4f054b11ff Python: Add load_dotenv to get-started samples and fix chat_response_… (#​6691)
  • acb28a63b5b739f5fdba4d8ac46d8c805f30b56a Python: Fix MCP metadata and tool name handling (#​6656)
  • f2d02e58b3b0e7f7d87353e2c9bf36a5834da665 Python: Add hosting core and Responses channel (#​6580)
  • 36420c515eb80015de1a5ff2098db5f6ce041aab Python: Align serialized tool format to OTel GenAI tool def format (#​6556)

This list of changes was auto generated.

1.11.0

Changes:

  • 1109d0bf64f3d1dd1e1f2bcaf3b38912ec7e833b Get date suffix up to date with release date (#​6690)
  • e030fb53ded912d0ce71bd80fe4c0455bc9d5478 .NET: Replace the symlink index entries with regular file entries (#​6687)
  • e6ebba1884238134628ad081249b451c0eb15df9 Add ADR 0029: Skills over MCP implementation design options (#​6679)
  • 7051a4920d87387587a32ab217a2cf35433bece8 Python: Add MCP as a hard dep in Foundry Hosting (#​6634)
  • 15df1152fc8d0617c6e6cfc439a260cfa09fea14 .NET: Add sample for per-run refreshable MCP authentication headers (#​6624) [ #​1631 ]
  • a2018b40f907c012bc5398e9ff36d69897d35d6f Python: [BREAKING] Require approval for file-access tools with read-only auto-approval (#​6599)
  • e4b89373f1cdc2fe6a047fd74d48bf9ab74b951b .NET: Explicitly emit available_resources and available_scripts in skill content (#​6672)
  • 88f0b23fb022b0adf33f5772b4b56a41289db748 .NET: Change A2A default session store to NoopAgentSessionStore (#​6635)
  • 9ba6b3a94e40dd90765719e44f5807a4aed4209e Remove unnecessary declarative logging (#​6677)
  • 2999f7416f7f171e0a8ae78a8d6c747a7174e71c Update package release version (#​6673)
See More
  • 09791533cfc5aa4b862c1d2790d91a1881b222a0 .NET: Emit execute_tool spans by placing OpenTelemetry below FunctionInvokingChatClient (#​6667)
  • 7f2e19ca2ffd2c11047099f853b7b7a3e46cf0b9 Python: Ensure spans created inside sync preparations in streaming call are correctly nested (#​6552)
  • 7b6f582b13436a034ec293d6f663f98dde772076 Python: Agent Harness blog post accompanying samples part 1 (#​6605)
  • dc60722cee1b208b7e91482d3ecc661542cbd342 .NET: Project ToolExecution events as FunctionCallContent/FunctionResultContent in GitHubCopilotAgent streaming (#​6228) [ #​4734, #​5897 ]
  • 2f5a76ab1de1bb4f4710f320bc1074240802bfc2 Fix issue with resuming checkpoint after package version upgrade (#​6636)
  • a7381d8bef5cdffe4b9417a530989616aad4e760 Python: stabilize dependency maintenance final checks (#​6662)
  • d108d4b54937346eb56fa65a7455d1f26fdbd4a7 Python: [BREAKING] Integrate looping into HarnessAgent (#​6607)
  • fd160a77824e98a50661109c12eba981c8b0f16a Python: fix dependency maintenance cutoff (#​6658)
  • ad3c1535c4cdb4b898161a1e95c4f5bab8c01917 fix: propagate EnableSensitiveData to auto-wired inner OpenTelemetryChatClient (#​6096) [ #​5873 ]
  • 10b7d08bff96502229e102f5c3f0474940871124 .NET: fix(hosting): emit url_citation annotation events from streamed AI Search responses (#​6649) [ #​6641 ]
  • fc3111c391afd5451c055a86d5cfd37ffab59617 Python: Add FoundryAgent conversation session helper (#​6623)
  • 098e52158655561c18a9e2afadea6b63374c45e3 .NET: Bring Hosted-Toolbox sample to parity with sibling hosting samples (#​6633)
  • 7435dd48d0e13811ade0f112f1a1aa2afc4b469d Python: harden Hyperlight output capture against symlinks (#​6601)
  • 148f57020aaa9aabf797cdd5f0a42249972cd7ce Python: host MAF workflows on a standalone Durable Task worker (#​6418) [ #​6608 ]
  • 89d19a23704713b1f214e3e229b800cba9ac84bd .NET: Migrate 01-get-started samples to Foundry as canonical default (#​6555)
  • c81590234413c3ece097c486ebdf9e2c6339b41b .NET: InProcessRunnerContext bugfix for workflows (#​6551)
  • 074ac68a6c284ec9532f118a6593d3a300ef1693 .NET: Harden fan-in barrier checkpoint state and extend resume coverage (#​6574)
  • d049d94b4997782c4aa59ac86eddc8dcdb22dfef Python: consolidate dependency maintenance workflow (#​6570)
  • 41995e265de4183eea07ca14a0cb74baf9337442 Build(deps): Bump anthropic from 0.80.0 to 0.107.1 in /python (#​6396)
  • 2adacb3034013de1f5bb9ccc35af34705a03a92b Bump aiohttp from 3.13.4 to 3.14.1 in /python (#​6395)
  • 6e3836698bcb67db5da4f47cd101ef5868efdcdd Bump Anthropic.Foundry from 0.5.0 to 0.6.0 (#​6057)
  • 0d3e3504f0db55b4826f9efb05cd1f4c57009847 Build(deps): Bump mistralai from 2.4.2 to 2.4.9 in /python (#​6393)
  • 2ba97ebcca7f62764ccc03f5d82f0bdc00386119 Bump openai from 2.24.0 to 2.43.0 in /python (#​6394)
  • 2d0555c5375ba42eb92fb8d783669ffe4bba4b14 Python: re-role trailing assistant message to user for Anthropic compatibility (fixes #​5008) (#​6207) [ #​5934 ]
  • 5145d50be803830e5710592b0e3879a88b264cc7 Python: Fix AG-UI tool history replay sanitization  (#​6581)
  • 7f7c88bfa5b45fd9039837e205d79e08917a3b23 Build(deps): Bump python-multipart from 0.0.26 to 0.0.32 in /python (#​6406)
  • bcef77af6a5e811380d77db731989256b2940cdb .NET: (Durable): Scope workflow status/respond endpoints to route workflow name (#​6608)
  • 54a30571aa62a3c87b1a4ed924796d5d6e553b9c Dotnet - Add support for Foundry Adaptive evals (#​6267) [ #​6101 ]
  • dc445592ed4f4776b98e0e04cff3712dceb02746 Python: [BREAKING] Port FileMemoryProvider and integrate FileMemoryProvider & FileAccess into the harness agent (#​6547)
  • 92823e9e61e6233d049fce925cf4d075f504a0cf .NET: [BREAKING] Require approval for FileAccessProvider tools with auto-approval rules (#​6521)
  • 7a491f8e766a508fef37f3189bbc0a79ff4be3aa Python: Add hosting channel ADRs and spec (#​6578)
  • 015e3bcd3b05f998b9a6a1fe5eb81ed42c2a4c2e .NET: Enabling sequential orchestration to pass entire conversation or only previous output. (#​6554)
  • 6e95517659c34623f6249a52feaf615955a0826b Python: Split type checkers by target (pyright source, 5 checkers on tests/samples) (#​6443) [ #​6275 ]
  • 97bb1d588a074437e5b264a9e98779220ebbc906 Migrate to using issue type bug instead of label bug. (#​6595)
    ... (truncated)

1.10.0

Changes:

  • dd29f9aa654257ad807ef7fdcd25fcc7ded109f6 .NET: Hosted Agent Sample - Toolbox with various Auth (#​5777) (#​6018)
  • a5f4e0078e1c0d1d8fcd580a1bcccc8836093b98 .NET: Fix .NET Copilot integration tests for SDK v1.0.0 (#​6424)
  • 3c0c12cd463601c451130884b5442dc42b12cf1e .NET: Update release version for 2026-06-10 release and switch GH.CP Agent to RC (#​6454)
  • cea83bd8d543713ae81e57513732c2a51ee1927b .NET: Bump Microsoft.Extensions.AI packages to 10.6.0, align transitive dependency floor, and update Merge Gatekeeper ignores (#​6148)
  • 7ae73a68d66423c19a1401197db824e6fa0ec9c1 Remove broken Atomic Agents docs link (#​6442)
  • 5e097276a0292c50cc00f59d3b687edf4551b3e8 .NET: Add Foundry Deployment docs to HA sample READMEs (#​6365)
See More
  • 383d551b86fb227a22cbd666c0ed0a7c7e59affc Purview: Parallelize PSPC cold-cache scope refresh (#​5832)
  • 2a345e5d3b2ba3096bde727256faa1ed544b9895 .NET: Fix Magentic to share agent replies across team (#​6222)
  • 5e6eb6f121bf3c414734fd8edc2047e1c92c86ad New logo in banner (#​6380)
  • dbfacbfc4aa676aca1c0a866e78e4da08ea2d2de New Microsoft Agent Framework logos (#​6378)
  • 96d242fa7f47abfa322b5413ec5b7cd0b9a37531 .NET: Remove required token params from HarnessAgent, make compaction opt-in (#​6409) [ #​6333 ]
  • 9486c76ef80225a1dca590eb606733a963b96719 .NET: Add Reasoning to ChatClientAgent ChatOptions merging (#​5463)
  • d222079df9b672abe96c58ba04e78f8499b7b819 .NET: fix: preserve AG-UI session history (#​5904)
  • af772997af971268ce48ce4e99d48aab4fc286e0 .NET: [BREAKING] Migrate .NET GitHub Copilot SDK to v1.0.0 (#​6381) [ #​6402, #​6404 ]
  • b343625c1ff54b344e7facdf59b51003bd787921 .NET: Add approval bypassing to harness as the default (#​6387)
  • 9bc7b27813010d60ce643c05d07c27d3b0c55821 Match AG-UI approval responses to requested arguments (#​6376)
  • 6a2efeae7ceb7ae111df76b00cd1cb9d4e25a5b8 .NET: [BREAKING] Fix hosting bugs (#​6388)
  • 331201294bfda427b44dc49cfd730a1b41e4dedf .NET: Fix single-column value unwrap in declarative workflow (#​6367)
  • fa9e08657618a6cf50818f7069ee4af3d5c725e6 fix: preserve foreach record values (#​6208)
  • 6bd2cfec03a3f4cd6599da9f0b314e9de2786f60 .NET: [BREAKING] Add auto-approval rules (heuristics) to ToolApprovalAgent (#​6335)
  • ab8ba8fc6193f907aff519f875786f5c8bfbb924 .NET: Allow storage of auto-approved functions (#​4950)
  • bbccb7c28c86a0c2712d65e367fa8029065294eb .NET: Bump ModelContextProtocol from 1.1.0 to 1.2.0 (#​3956) (#​6239)
  • bb9ed63a347b3e437106b27ff7547bd388fd5bbe .NET: Restructure skill script schemas XML and remove resources from body (#​6343)
  • bc0e65d7162e9195249b43d869c6361789d73202 fix: drop hosted MCP calls when reasoning is stripped (#​6210)
  • c3901a4ddda0c0467472de786b21aad66ff138bf Fix Observability/WorkflowAsAnAgent sampl (#​6316)
  • ba617fc3b5028605e55dc56050871ef918913f5e Don't count dependabot prs as part of the limit (#​6317)

This list of changes was auto generated.

1.9.0

Changes:

  • afa7834e2ec8a93b2224fe7ab184b97fbcaa8c9a Updating dotnet package versions for 1.9 release (#​6314)
  • c6951c21f69af4c9a5d5cbe107b36fca9f648907 Python: Add MCP-based skills discovery (McpSkillsSource) (#​6169)
  • a9824289168c5af4acc5bfc7bd227206eb942fdc .NET: Bug fixes for AGUI hosting and workflows (#​6311)
  • 90a3e5de47cf48dfdef25c00c49cf56e0c80df8e .NET: Add ILoggerFactory and IServiceProvider to HarnessAgent constructor (#​6273) [ #​6103 ]
  • 49a6e433a332f5952cad275998fa954572810c11 Python: progressive tool exposure via FunctionInvocationContext (#​6233) [ #​3877 ]
  • 6086a743023c7b8a0e8ec8dde92316e42d634c09 Python: Promote agent-framework-declarative package to RC (#​6256)
  • fa8cfb75673eb2f8f3a9870b2d95e1a435ac3dc3 Python: Fix FoundryAgent stripping model from PromptAgent requests (#​5526) [ #​5525 ]
  • 6de4c24fdda68bb991bf76c017618b89c6197d87 .NET: Promote Workflows.Declarative packages to stable versions (#​6254)
  • a5f355e04a4cc13da8ce8ddc13430d343decfa8d Python: Fix OTLP HTTP base-endpoint losing /v1/{signal} auto-append (#​5913)
  • 0cf48923cd6793f9da042c6b8b819f632a65957e .NET: Add Hosted-ToolboxMcpSkills sample (#​6175)
See More
  • cdc4809b8a503ec86d78a90051e5cc5d053ebf21 ci: harden Python test coverage workflow (#​5982)
  • 043208241a4f54769cfe499b1b24e0c3ea720fcb Python: Persist hosted MCP call/results as canonical mcp_call output (#​6070)
  • 05ebb966cf7555aa3690a9fae11188b83f68daf1 fix: skip orphan anthropic thinking signatures (#​5784)
  • c83a944e85e7615d5c12adc772310e649667f637 Fix open pr count check (#​6255)
  • 5d98beddf52dd8e3d3323d2108c9fe3461ab0c04 Python: feat(bedrock): implement native structured output support via Converse API (#​6052) [ #​5966 ]
  • e0d0ad16a06b404ef7da38e31b2bcaecf2ac6efe Python: feat(evals): Foundry Adaptive Evals integration (rubric-generation) (#​6101)
  • f36096ce1a0258d62810561df5aeedd22e2448c0 Python: Fix core observability unsafe serialization of function-call arguments containing dataclass/framework objects (#​6026) [ #​5733 ]
  • 03e14ca18703a822f8d1b209a031d65aa882d9be .NET: Update hosted agents (#​6243)
  • b298113d15cf5c7e8a7299991cea98ef0400dbbf .NET - Fix missing id on function_call_output in Foundry Hosting (#​6246)
  • 8091d052d8175e1726a2ef238affa80a381a9b8a Python: refresh dev dependencies and validate runtime bounds (#​6238)
  • 52a8045bb670918ef8c1f970dad051092893ceee Python: Add background agent support to harness agent (#​6155)
  • 78d175a1e20eb65c2b80517fa1cc911a9272cee3 Python: coalesce code interpreter history chunks (#​5801)
  • b59a854fcdb4b5588615e22bea788572db6da6df Fix integration test worker crashes in Azure Functions on Py3.13 (#​4260)
  • 8b0db48d331354867c1066c32e05e822b17b6e45 Add community PR limit workflow (#​6229)
  • 5affc9c33392b2636e5a7b860a3d9628f4cd6e1e Python: Reorganize A2A samples and use package A2AExecutor (#​6165)
  • edcc786651ca3741ba005d7e5aef971ad24602cc .NET: Preserve and propagate CreatedAt through workflows (#​3930)
  • 07a1e834926b496b1d48eaed6e824740e1a9037a .NET: Forward Magentic participant replies to manager (#​6156)
  • fa2a6af4434fdfc310168d1b1f65cef2561b8eae Bump Azure.AI.AgentServer.* packages and align Azure.Core/System.ClientModel (#​6178)
  • 11c8d89ab2853ce3c71f9f0b730ee73c8df4bf22 .NET: Fix InvokeMcpTool approval path for declarative workflows (#​6177)
  • 6510d6e3c89fc9dcf4c45596f24517b73196ff08 .NET: Quarantine flaky DevUI test (#​6159)
  • dd9a4b6321f8922cb4505f84ed5c3e206dfbddb7 Python: [A2A] Set message_id on AgentResponseUpdate for message-bearing paths (#​6163) [ #​5949 ]
  • e8ff541ebf07339b12585a3d4984d78a13e7e1aa Python: consolidate MCP reliability fixes (#​6145)
  • d2d5384f28b60a91771e7e70c7452da89d3c7e02 Python: Add Mistral AI embedding client package (#​5480)
  • 1fccf16f1103107186c12fb5f4ad58b8a6ba7f62 feat: Remove [Experimental] tag from .NET Orchestrations (#​6164)
  • 8ed2159c4b0b6663dc92b3469c24648a37e8e289 .NET: Workflow Outputs Overhaul: Support Tagging, Filtering Agent Outputs (#​6045)
  • b000a2cf514a025b3cb7873c05c9a282a2c287c5 Python: Adding AgentFileStore and FileAccessProvider to support file access operations. (#​6099)
  • 0578f4c9107159346756d80d0650fa0a21c315a0 Backfill chat span request model if it's unknown and response model is avaliable (#​6160)
  • e9a606344adbe5e41d9376b1f8508da593ea6c3b Python A2A: Expose supported_protocol_bindings as configurable parameter (#​6098) [ #​6057 ]
  • d2f79930d5554e39add177f46f8bc61092c0ad34 .NET: feat: Update GroupChatManager semantics to match other Orchestration patterns (#​6140)

This list of changes was auto generated.

1.8.1

[1.8.1] - 2026-06-09

Added

  • agent-framework-core: Add MCP client OTel spans per GenAI semantic conventions (#​6349)
  • agent-framework-core: Add MCP long-running task support (#​6319)

Changed

  • agent-framework-claude: Bump claude-agent-sdk to 0.2.87 (#​6248)
  • agent-framework-core: Document checkpoint storage security model and deserialization trust boundaries (#​6295)
  • agent-framework-azurefunctions: Document checkpoint storage security model and deserialization trust boundaries (#​6295)

Fixed

  • agent-framework-core: Filter MCP tool kwargs to declared params via allowlist (#​6399)
  • agent-framework-core: Fix per-service-call history persistence with server-storing clients (#​6310)
  • agent-framework-openai: Use getattr for non-OpenAI provider response compatibility (#​6270)
  • agent-framework-foundry-hosting: Refactor workflow-as-agent pending request handling (#​6259)
  • agent-framework-gemini: Make Gemini honor declarative outputSchema, not just JSON mode (#​5893)
  • agent-framework-mem0: Isolate entity retrieval and correct app_id payload (#​6242)
  • agent-framework-ag-ui: Match AG-UI approval responses to requested arguments (#​6376)

Commits viewable in compare view.

Updated Microsoft.Agents.Authentication.Msal from 1.5.184 to 1.6.150.

Release notes

Sourced from Microsoft.Agents.Authentication.Msal's releases.

1.6.150

What's Changed

New Features

Slack Extension (Microsoft.Agents.Extensions.Slack)

New first-class Slack channel extension, enabling agents to communicate directly with Slack without requiring Azure Bot Service as an intermediary:

  • SlackAgentExtension: Extension class with routing helpers (OnSlackMessage, OnSlackEvent*) for handling Slack-specific events and messages.
  • SlackStream: Streaming support for Slack, allowing agents to stream responses back to Slack channels.
  • SlackApi: Low-level Slack API client for direct Slack Web API calls.
  • SlackChannelData: Strongly-typed channel data model with Payload support for action events.
  • MapSlackEndpoints: ASP.NET Core endpoint routing for Slack event subscriptions and interactions.
  • SlackExtensionAttribute: Source-generated attribute for declarative Slack event routing.
  • Includes a full SlackAgent sample demonstrating streaming, event handling, and action payloads.

Named Pipe Transport (Microsoft.Agents.Hosting.DirectLine.NamedPipes)

New Named Pipe transport layer for high-performance local inter-process agent communication:

  • NamedPipeProtocol: Binary protocol with chunked transfer, payload size limits, and content-type negotiation.
  • NamedPipeTransport: Reliable duplex transport with disconnect handling and error recovery.
  • NamedPipeMessageHandler: Activity message handler with streaming attachment support.
  • NamedPipeHostedService: IHostedService implementation for ASP.NET Core integration.
  • Enforces payload size limits and handles large object heap (LOH) pressure via 64 KB chunked trailing-byte drain.
  • Idempotent DisposeAsync to prevent ObjectDisposedException on double-dispose.
  • Comprehensive test coverage for chunking, content type handling, end flag semantics, boundary conditions, and streaming behavior.

Declarative Route Attributes (AgentApplicationAttributes)

New attribute-based routing model for agent handlers, complementing the existing fluent API:

  • AgentExtensionAttribute: Base attribute for agent extension registration with source-generated routing via AgentExtensionSourceGenerator.
  • Route builder base classes: ConversationUpdateRouteBuilderBase, EventRouteBuilderBase, FeedbackRouteBuilderBase, HandoffRouteBuilderBase, MessageRouteBuilderBase, TypeRouteBuilderBase — enabling extensible, attribute-driven route registration.
  • IRouteAttribute: Public interface for custom route attributes.
  • Full test coverage for attribute-based routing.

Agentic Header Propagation

  • AgenticHeaderProvider / IHeaderValueProvider: New infrastructure for propagating agentic context headers across agent-to-agent calls.
  • Enables forwarding of correlation and orchestration headers through the call chain.
  • Integrated in the AgentAI sample.

OAuth Sign-In Cancellation

  • TeamsSignInInProgressMessage: New message shown to Teams users when a sign-in flow is already in progress.
  • Added cancel options allowing users to abort an in-progress OAuth flow.

Authentication: IdentityProxyManager Auth Type

... (truncated)

Commits viewable in compare view.

Updated Microsoft.Agents.CopilotStudio.Client from 1.5.184 to 1.6.150.

Release notes

Sourced from Microsoft.Agents.CopilotStudio.Client's releases.

1.6.150

What's Changed

New Features

Slack Extension (Microsoft.Agents.Extensions.Slack)

New first-class Slack channel extension, enabling agents to communicate directly with Slack without requiring Azure Bot Service as an intermediary:

  • SlackAgentExtension: Extension class with routing helpers (OnSlackMessage, OnSlackEvent*) for handling Slack-specific events and messages.
  • SlackStream: Streaming support for Slack, allowing agents to stream responses back to Slack channels.
  • SlackApi: Low-level Slack API client for direct Slack Web API calls.
  • SlackChannelData: Strongly-typed channel data model with Payload support for action events.
  • MapSlackEndpoints: ASP.NET Core endpoint routing for Slack event subscriptions and interactions.
  • SlackExtensionAttribute: Source-generated attribute for declarative Slack event routing.
  • Includes a full SlackAgent sample demonstrating streaming, event handling, and action payloads.

Named Pipe Transport (Microsoft.Agents.Hosting.DirectLine.NamedPipes)

New Named Pipe transport layer for high-performance local inter-process agent communication:

  • NamedPipeProtocol: Binary protocol with chunked transfer, payload size limits, and content-type negotiation.
  • NamedPipeTransport: Reliable duplex transport with disconnect handling and error recovery.
  • NamedPipeMessageHandler: Activity message handler with streaming attachment support.
  • NamedPipeHostedService: IHostedService implementation for ASP.NET Core integration.
  • Enforces payload size limits and handles large object heap (LOH) pressure via 64 KB chunked trailing-byte drain.
  • Idempotent DisposeAsync to prevent ObjectDisposedException on double-dispose.
  • Comprehensive test coverage for chunking, content type handling, end flag semantics, boundary conditions, and streaming behavior.

Declarative Route Attributes (AgentApplicationAttributes)

New attribute-based routing model for agent handlers, complementing the existing fluent API:

  • AgentExtensionAttribute: Base attribute for agent extension registration with source-generated routing via AgentExtensionSourceGenerator.
  • Route builder base classes: ConversationUpdateRouteBuilderBase, EventRouteBuilderBase, FeedbackRouteBuilderBase, HandoffRouteBuilderBase, MessageRouteBuilderBase, TypeRouteBuilderBase — enabling extensible, attribute-driven route registration.
  • IRouteAttribute: Public interface for custom route attributes.
  • Full test coverage for attribute-based routing.

Agentic Header Propagation

  • AgenticHeaderProvider / IHeaderValueProvider: New infrastructure for propagating agentic context headers across agent-to-agent calls.
  • Enables forwarding of correlation and orchestration headers through the call chain.
  • Integrated in the AgentAI sample.

OAuth Sign-In Cancellation

  • TeamsSignInInProgressMessage: New message shown to Teams users when a sign-in flow is already in progress.
  • Added cancel options allowing users to abort an in-progress OAuth flow.

Authentication: IdentityProxyManager Auth Type

... (truncated)

Commits viewable in compare view.

Updated Microsoft.Agents.Hosting.AspNetCore from 1.5.184 to 1.6.150.

Release notes

Sourced from Microsoft.Agents.Hosting.AspNetCore's releases.

1.6.150

What's Changed

New Features

Slack Extension (Microsoft.Agents.Extensions.Slack)

New first-class Slack channel extension, enabling agents to communicate directly with Slack without requiring Azure Bot Service as an intermediary:

  • SlackAgentExtension: Extension class with routing helpers (OnSlackMessage, OnSlackEvent*) for handling Slack-specific events and messages.
  • SlackStream: Streaming support for Slack, allowing agents to stream responses back to Slack channels.
  • SlackApi: Low-level Slack API client for direct Slack Web API calls.
  • SlackChannelData: Strongly-typed channel data model with Payload support for action events.
  • MapSlackEndpoints: ASP.NET Core endpoint routing for Slack event subscriptions and interactions.
  • SlackExtensionAttribute: Source-generated attribute for declarative Slack event routing.
  • Includes a full SlackAgent sample demonstrating streaming, event handling, and action payloads.

Named Pipe Transport (Microsoft.Agents.Hosting.DirectLine.NamedPipes)

New Named Pipe transport layer for high-performance local inter-process agent communication:

  • NamedPipeProtocol: Binary protocol with chunked transfer, payload size limits, and content-type negotiation.
  • NamedPipeTransport: Reliable duplex transport with disconnect handling and error recovery.
  • NamedPipeMessageHandler: Activity message handler with streaming attachment support.
  • NamedPipeHostedService: IHostedService implementation for ASP.NET Core integration.
  • Enforces payload size limits and handles large object heap (LOH) pressure via 64 KB chunked trailing-byte drain.
  • Idempotent DisposeAsync to prevent ObjectDisposedException on double-dispose.
  • Comprehensive test coverage for chunking, content type handling, end flag semantics, boundary conditions, and streaming behavior.

Declarative Route Attributes (AgentApplicationAttributes)

New attribute-based routing model for agent handlers, complementing the existing fluent API:

  • AgentExtensionAttribute: Base attribute for agent extension registration with source-generated routing via AgentExtensionSourceGenerator.
  • Route builder base classes: ConversationUpdateRouteBuilderBase, EventRouteBuilderBase, FeedbackRouteBuilderBase, HandoffRouteBuilderBase, MessageRouteBuilderBase, TypeRouteBuilderBase — enabling extensible, attribute-driven route registration.
  • IRouteAttribute: Public interface for custom route attributes.
  • Full test coverage for attribute-based routing.

Agentic Header Propagation

  • AgenticHeaderProvider / IHeaderValueProvider: New infrastructure for propagating agentic context headers across agent-to-agent calls.
  • Enables forwarding of correlation and orchestration headers through the call chain.
  • Integrated in the AgentAI sample.

OAuth Sign-In Cancellation

  • TeamsSignInInProgressMessage: New message shown to Teams users when a sign-in flow is already in progress.
  • Added cancel options allowing users to abort an in-progress OAuth flow.

Authentication: IdentityProxyManager Auth Type

... (truncated)

Commits viewable in compare view.

Updated Microsoft.Extensions.AI from 10.6.0 to 10.7.0.

Release notes

Sourced from Microsoft.Extensions.AI's releases.

10.7.0

v10.7.0 graduates the Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes package to stable. The package registers a Kubernetes-aware ResourceQuotaProvider that reads the pod's CPU and memory requests and limits and exposes them to Microsoft.Extensions.Diagnostics.ResourceMonitoring as baseline and maximum quotas, which then feed the request and limit dimensions of the published resource utilization metrics. The companion ResourceQuota and ResourceQuotaProvider types in Microsoft.Extensions.Diagnostics.ResourceMonitoring graduate to stable in the same change so that consumers can implement custom quota providers without taking an experimental dependency.

On the AI side, Microsoft.Extensions.AI.OpenAI moves to OpenAI 2.11.0 and fixes a deserialization bug in ToolJson.AdditionalProperties so that JSON Schema additionalProperties values shaped as sub-schema objects (for example {"type":"string"}) are preserved instead of throwing during deserialization. HostedFileContent.SizeInBytes and HostedFileContent.CreatedAt graduate to stable since both values are consistently available across hosted-file providers, while Purpose and Scope remain experimental as provider-shaped vocabulary. FunctionInvokingChatClient drops a backward-compat path that auto-marked ToolApprovalResponseContent entries with InformationalOnly: true; consumers that need to continue accepting sessions serialized before #​7468 can use the sample ApprovalHistoryNormalizingChatClient middleware added in the test project.

Experimental API Changes

Now Stable

  • Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes package is now stable #​7253
  • Resource Monitoring ResourceQuota and ResourceQuotaProvider APIs are now stable (previously EXTEXP0008) #​7253
  • HostedFileContent.SizeInBytes and HostedFileContent.CreatedAt are now stable (previously MEAI001) #​7513

What's Changed

AI

  • Graduate HostedFileContent.SizeInBytes and HostedFileContent.CreatedAt #​7513 by @​jozkee (co-authored by @​Copilot)
  • Remove backward-compat InformationalOnly case from FICC; suggest middleware workaround #​7538 by @​jozkee (co-authored by @​Copilot)
  • Upgrade OpenAI package from 2.10.0 to 2.11.0 #​7544 by @​jozkee (co-authored by @​Copilot)
  • Fix ToolJson.AdditionalProperties to accept sub-schema objects #​7546 by @​jozkee (co-authored by @​Copilot)

Diagnostics, Health Checks, and Resource Monitoring

  • Move Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes to stable #​7253 by @​amadeuszl (co-authored by @​Copilot)

Repository Infrastructure Updates

  • [main] Update dependencies from dotnet/arcade #​7521
  • Bump dotnet-reportgenerator-globaltool from 5.5.9 to 5.5.10 #​7522
  • Bump dotnet-coverage from 18.6.2 to 18.7.0 #​7530
  • Bump PowerShell from 7.6.1 to 7.6.2 #​7531
  • Bump qs from 6.15.1 to 6.15.2 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7532
  • [main] Update dependencies from dotnet/arcade #​7534
  • Bump tmp from 0.2.5 to 0.2.6 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7537

Acknowledgements

  • @​ericstj submitted issue #​7509 (resolved by #​7544)
  • @​scottt732 submitted issue #​7540 (resolved by #​7546)
  • @​DeagleGross @​wtgodbe @​dariusclay @​evgenyfedorov2 @​peterwald @​PranavSenthilnathan @​shyamnamboodiripad @​stephentoub @​tarekgh reviewed pull requests

Full Changelog: dotnet/extensions@v10.6.0...v10.7.0

Commits viewable in compare view.

Updated Microsoft.Extensions.AI.Abstractions from 10.6.0 to 10.7.0.

Release notes

Sourced from Microsoft.Extensions.AI.Abstractions's releases.

10.7.0

v10.7.0 graduates the Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes package to stable. The package registers a Kubernetes-aware ResourceQuotaProvider that reads the pod's CPU and memory requests and limits and exposes them to Microsoft.Extensions.Diagnostics.ResourceMonitoring as baseline and maximum quotas, which then feed the request and limit dimensions of the published resource utilization metrics. The companion ResourceQuota and ResourceQuotaProvider types in Microsoft.Extensions.Diagnostics.ResourceMonitoring graduate to stable in the same change so that consumers can implement custom quota providers without taking an experimental dependency.

On the AI side, Microsoft.Extensions.AI.OpenAI moves to OpenAI 2.11.0 and fixes a deserialization bug in ToolJson.AdditionalProperties so that JSON Schema additionalProperties values shaped as sub-schema objects (for example {"type":"string"}) are preserved instead of throwing during deserialization. HostedFileContent.SizeInBytes and HostedFileContent.CreatedAt graduate to stable since both values are consistently available across hosted-file providers, while Purpose and Scope remain experimental as provider-shaped vocabulary. FunctionInvokingChatClient drops a backward-compat path that auto-marked ToolApprovalResponseContent entries with InformationalOnly: true; consumers that need to continue accepting sessions serialized before #​7468 can use the sample ApprovalHistoryNormalizingChatClient middleware added in the test project.

Experimental API Changes

Now Stable

  • Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes package is now stable #​7253
  • Resource Monitoring ResourceQuota and ResourceQuotaProvider APIs are now stable (previously EXTEXP0008) #​7253
  • HostedFileContent.SizeInBytes and HostedFileContent.CreatedAt are now stable (previously MEAI001) #​7513

What's Changed

AI

  • Graduate HostedFileContent.SizeInBytes and HostedFileContent.CreatedAt #​7513 by @​jozkee (co-authored by @​Copilot)
  • Remove backward-compat InformationalOnly case from FICC; suggest middleware workaround #​7538 by @​jozkee (co-authored by @​Copilot)
  • Upgrade OpenAI package from 2.10.0 to 2.11.0 #​7544 by @​jozkee (co-authored by @​Copilot)
  • Fix ToolJson.AdditionalProperties to accept sub-schema objects #​7546 by @​jozkee (co-authored by @​Copilot)

Diagnostics, Health Checks, and Resource Monitoring

  • Move Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes to stable #​7253 by @​amadeuszl (co-authored by @​Copilot)

Repository Infrastructure Updates

  • [main] Update dependencies from dotnet/arcade #​7521
  • Bump dotnet-reportgenerator-globaltool from 5.5.9 to 5.5.10 #​7522
  • Bump dotnet-coverage from 18.6.2 to 18.7.0 #​7530
  • Bump PowerShell from 7.6.1 to 7.6.2 #​7531
  • Bump qs from 6.15.1 to 6.15.2 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7532
  • [main] Update dependencies from dotnet/arcade #​7534
  • Bump tmp from 0.2.5 to 0.2.6 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7537

Acknowledgements

  • @​ericstj submitted issue #​7509 (resolved by #​7544)
  • @​scottt732 submitted issue #​7540 (resolved by #​7546)
  • @​DeagleGross @​wtgodbe @​dariusclay @​evgenyfedorov2 @​peterwald @​PranavSenthilnathan @​shyamnamboodiripad @​stephentoub @​tarekgh reviewed pull requests

Full Changelog: dotnet/extensions@v10.6.0...v10.7.0

Commits viewable in compare view.

Updated Microsoft.Extensions.AI.OpenAI from 10.6.0 to 10.7.0.

Release notes

Sourced from Microsoft.Extensions.AI.OpenAI's releases.

10.7.0

v10.7.0 graduates the Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes package to stable. The package registers a Kubernetes-aware ResourceQuotaProvider that reads the pod's CPU and memory requests and limits and exposes them to Microsoft.Extensions.Diagnostics.ResourceMonitoring as baseline and maximum quotas, which then feed the request and limit dimensions of the published resource utilization metrics. The companion ResourceQuota and ResourceQuotaProvider types in Microsoft.Extensions.Diagnostics.ResourceMonitoring graduate to stable in the same change so that consumers can implement custom quota providers without taking an experimental dependency.

On the AI side, Microsoft.Extensions.AI.OpenAI moves to OpenAI 2.11.0 and fixes a deserialization bug in ToolJson.AdditionalProperties so that JSON Schema additionalProperties values shaped as sub-schema objects (for example {"type":"string"}) are preserved instead of throwing during deserialization. HostedFileContent.SizeInBytes and HostedFileContent.CreatedAt graduate to stable since both values are consistently available across hosted-file providers, while Purpose and Scope remain experimental as provider-shaped vocabulary. FunctionInvokingChatClient drops a backward-compat path that auto-marked ToolApprovalResponseContent entries with InformationalOnly: true; consumers that need to continue accepting sessions serialized before #​7468 can use the sample ApprovalHistoryNormalizingChatClient middleware added in the test project.

Experimental API Changes

Now Stable

  • Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes package is now stable #​7253
  • Resource Monitoring ResourceQuota and ResourceQuotaProvider APIs are now stable (previously EXTEXP0008) #​7253
  • HostedFileContent.SizeInBytes and HostedFileContent.CreatedAt are now stable (previously MEAI001) #​7513

What's Changed

AI

  • Graduate HostedFileContent.SizeInBytes and HostedFileContent.CreatedAt #​7513 by @​jozkee (co-authored by @​Copilot)
  • Remove backward-compat InformationalOnly case from FICC; suggest middleware workaround #​7538 by @​jozkee (co-authored by @​Copilot)
  • Upgrade OpenAI package from 2.10.0 to 2.11.0 #​7544 by @​jozkee (co-authored by @​Copilot)
  • Fix ToolJson.AdditionalProperties to accept sub-schema objects #​7546 by @​jozkee (co-authored by @​Copilot)

Diagnostics, Health Checks, and Resource Monitoring

  • Move Microsoft.Extensions.Diagnostics.ResourceMonitoring.Kubernetes to stable #​7253 by @​amadeuszl (co-authored by @​Copilot)

Repository Infrastructure Updates

  • [main] Update dependencies from dotnet/arcade #​7521
  • Bump dotnet-reportgenerator-globaltool from 5.5.9 to 5.5.10 #​7522
  • Bump dotnet-coverage from 18.6.2 to 18.7.0 #​7530
  • Bump PowerShell from 7.6.1 to 7.6.2 #​7531
  • Bump qs from 6.15.1 to 6.15.2 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7532
  • [main] Update dependencies from dotnet/arcade #​7534
  • Bump tmp from 0.2.5 to 0.2.6 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7537

Acknowledgements

  • @​ericstj submitted issue #​7509 (resolved by #​7544)
  • @​scottt732 submitted issue #​7540 (resolved by #​7546)
  • @​DeagleGross @​wtgodbe @​dariusclay @​evgenyfedorov2 @​peterwald @​PranavSenthilnathan @​shyamnamboodiripad @​stephentoub @​tarekgh reviewed pull requests

Full Changelog: dotnet/extensions@v10.6.0...v10.7.0

Commits viewable in compare view.

Updated Microsoft.Extensions.Hosting from 10.0.8 to 10.0.9.

Release notes

Sourced from Microsoft.Extensions.Hosting's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Graph from 6.1.0 to 6.2.0.

Release notes

Sourced from Microsoft.Graph's releases.

6.2.0

6.2.0 (2026-06-05)

Features

  • generation: update request builders and models (802d755)

Commits viewable in compare view.

Updated Microsoft.Identity.Client.Extensions.Msal from 4.84.1 to 4.86.0.

Release notes

Sourced from Microsoft.Identity.Client.Extensions.Msal's releases.

4.86.0

What's Changed

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.85.2...4.86.0

4.85.2

What's Changed

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.85.1...4.85.2

4.85.1

What's Changed

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.85.0...4.85.1

4.85.0

What's Changed

New Contributors

Full Changelog: AzureAD/microsoft-authentication-library-for-dotnet@4.84.2...4.85.0

4.84.2

New Features

  • Added ManagedIdentityApplication.GetManagedIdentityCapabilitiesAsync(CancellationToken) returning a ManagedIdentityCapabilities object that reports the detected managed identity Source, the host's MaxSupportedBindingStrength (new MtlsBindingStrength enum: None, Software, KeyGuard), and a derived IsMtlsPopSupportedByHost. Replaces GetManagedIdentitySourceAsync()/ManagedIdentitySourceResult. The public ManagedIdentitySource.ImdsV2 value is folded into Imds (v1/v2 routing remains internal). #​6049
  • Added OID-based user identification to the User Federated Identity Credential (user_fic) flow via AcquireTokenByUserFederatedIdentityCredential(scopes, Guid userObjectId, assertion). #​6050
  • Added WithClaimsFromClient(claimsJson) to forward client-originated claims across managed identity and confidential client flows. #​5999
  • Added mTLS PoP support for WithCertificate(() => x509) (dynamic certificate credential). #​5957
  • Added opt-in token-acquisition metrics covering both successful and failed attempts. #​6004

Changes

  • Extended mTLS bearer transport (CertificateOptions.SendCertificateOverMtls) to the OBO, refresh-token, and authorization-code flows. #​6009
  • General Availability of the Microsoft.Identity.Client.KeyAttestation package. #​6038
  • Managed identity now probes IMDSv2 first and the preview latch was removed. #​6041
  • Updated NativeInterop baseline and corrected devapp version ranges. #​6045
  • Simplified GetTenantedAuthority in CiamAuthority and DstsAuthority. #​6001

Bug Fixes

  • Fixed WithExtraQueryParameters on ManagedIdentityApplicationBuilder bypassing token caching. #​6035
  • Guarded HTTP status codes on discovery endpoints in KnownInstanceMetadataIsUpToDateAsync. #​6048
  • Detect orphaned KeyGuard certificates via public-key modulus comparison. #​6020

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.6.0 to 18.7.0.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.7.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.6.0...v18.7.0

Commits viewable in compare view.

Updated Microsoft.SemanticKernel.Agents.Core from 1.77.0 to 1.78.0.

Release notes

Sourced from Microsoft.SemanticKernel.Agents.Core's releases.

1.78.0

Changes:

  • 35ba23e1b3092271c778ca057afe1a796e16e70e .Net: Update package version to 1.78.0 (#​14142)
  • e6c9673684ca03621885083faff1644e1f42695e .Net: Disable automatic HTTP redirects in HttpPlugin and WebFileDownloadPlugin default clients (#​14132)
  • f25753be0a126138d2eea39b0ca2985252dde25a Bump Scriban from 7.2.0 to 7.2.5 to fix NU1902 vulnerability (#​14133)
  • dfc5227227352e7cf4b11de1d9b8e49ebc7b43ff .Net: Update .NET SDK to 10.0.301 (#​14119)
  • cf9af8b966841e8f16d528bd0f2c69c51213b68d .Net: Bump axios to 1.16.0 and form-data to 4.0.6 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR (#​13858)
See More
  • e99c633fba9e4005bdb9b90a1f5441945b781040 .Net: Harden file path validation in Core, Document, and Web plugins (#​14118)
  • 99d1953e935bd88a4cc993cbad9485703734f1b5 Bump axios from 1.13.2 to 1.16.0 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#​14044) [ #​10795, #​10822, #​10825, #​10729, #​7378, #​10745, #​10810, #​10802, #​6485, #​10680, #​6897, #​10794, #​10800, #​6241, #​10708, #​10819, #​7149, #​10772, #​10806, #​7260, #​10787, #​10724, #​7276, #​7414, #​6389, #​6460, #​10833, #​10588, #​7419, #​10820, #​10791, #​10796, #​10821, #​10782, #​10759, #​10804, #​10785, #​10813, #​10814, #​10790, #​10834 ]
  • 82f244233b89d38bf5e424ca409caa46f14490e6 .Net: Update SK to use MEVD packages and move MEVD projects out of main solution (#​14117)
  • 8ce2bcc07f0ce5e56052ffd4abd0332cc8fc08e5 .Net: Bump Aspire.Hosting.Azure.CognitiveServices from 13.0.0 to 13.3.0 (#​13996)
  • 20be253d7b4a41c8943f36addd8b6365bdcf7299 .Net: Bump esbuild, @​vitejs/plugin-react, vite, and transitive lockfile deps in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#​14070)
  • 445fd0ea5364622d30069510f639032ecea6eaff .Net: Bump Aspire.Azure.Search.Documents from 9.5.1 to 13.3.0 (#​13994)
  • 367c75f4ff972e7a2281dcae4bd74800c5eef9eb .Net: Bump minimatch from 3.1.2 to 3.1.5 in /dotnet/samples/Demos/ProcessWithCloudEvents/ProcessWithCloudEvents.Client (#​13604)
  • 6209c77fd52d6ff99d7797d66639055b36a91ae3 .Net: Bump @​babel/core from 7.26.10 to 7.29.7 in /dotnet/samples/Demos/ProcessWithCloudEvents/ProcessWithCloudEvents.Client (#​14083) [ #​18014, #​18001, #​17998, #​17992, #​17974, #​17923, #​17931, #​17915, #​17788, #​17739, #​17606, #​17592, #​17589 ]
  • 1ad0b7501bd9c8f8dfbafb7c1aa69fab1ba4cd28 Bump Aspire.Hosting.AppHost from 13.0.0 to 13.3.0 (#​13995)
  • 56422ada8aa95702aab5c969805c3395dd2f5022 .Net: Bump follow-redirects from 1.15.11 to 1.16.0 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#​13877)
  • a5e8f9b43230675c86dcb7c3ff5021914537f8be .Net: Bump form-data from 4.0.5 to 4.0.6 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#​14082)
  • 7fd75c3c73ac84106ce2883bae32b50c99378e40 .Net: fix: prevent duplicate "null" in JSON Schema type arrays for nullable parameters (#​13635) [ #​13527 ]
  • f8c757b218cfe70cd9bc0d921eb0828d290cbe56 Fix MessagePack high severity vulnerability (#​14079)

This list of changes was auto generated.

Commits viewable in compare view.

Updated Microsoft.SemanticKernel.Connectors.AzureOpenAI from 1.77.0 to 1.78.0.

Release notes

Sourced from Microsoft.SemanticKernel.Connectors.AzureOpenAI's releases.

1.78.0

Changes:

  • 35ba23e1b3092271c778ca057afe1a796e16e70e .Net: Update package version to 1.78.0 (#​14142)
  • e6c9673684ca03621885083faff1644e1f42695e .Net: Disable automatic HTTP redirects in HttpPlugin and WebFileDownloadPlugin default clients (#​14132)
  • f25753be0a126138d2eea39b0ca2985252dde25a Bump Scriban from 7.2.0 to 7.2.5 to fix NU1902 vulnerability (#​14133)
  • dfc5227227352e7cf4b11de1d9b8e49ebc7b43ff .Net: Update .NET SDK to 10.0.301 (#​14119)
  • cf9af8b966841e8f16d528bd0f2c69c51213b68d .Net: Bump axios to 1.16.0 and form-data to 4.0.6 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR (#​13858)
See More
  • e99c633fba9e4005bdb9b90a1f5441945b781040 .Net: Harden file path validation in Core, Document, and Web plugins (#​14118)
  • 99d1953e935bd88a4cc993cbad9485703734f1b5 Bump axios from 1.13.2 to 1.16.0 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#​14044) [ #​10795, #​10822, #​10825, #​10729, #​7378, #​10745, #​10810, #​10802, #​6485, #​10680, #​6897, #​10794, #​10800, #​6241, #​10708, #​10819, #​7149, #​10772, #​10806, #​7260, #​10787, #​10724, #​7276, #​7414, #​6389, #​6460, #​10833, #​10588, #​7419, #​10820, #​10791, #​10796, #​10821, #​10782, #​10759, #​10804, #​10785, #​10813, #​10814, #​10790, #​10834 ]
  • 82f244233b89d38bf5e424ca409caa46f14490e6 .Net: Update SK to use MEVD packages and move MEVD projects out of main solution (#​14117)
  • 8ce2bcc07f0ce5e56052ffd4abd0332cc8fc08e5 .Net: Bump Aspire.Hosting.Azure.CognitiveServices from 13.0.0 to 13.3.0 (#​13996)
  • 20be253d7b4a41c8943f36addd8b6365bdcf7299 .Net: Bump esbuild, @​vitejs/plugin-react, vite, and transitive lockfile deps in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#​14070)
  • 445fd0ea5364622d30069510f639032ecea6eaff .Net: Bump Aspire.Azure.Search.Documents from 9.5.1 to 13.3.0 (#​13994)
  • 367c75f4ff972e7a2281dcae4bd74800c5eef9eb .Net: Bump minimatch from 3.1.2 to 3.1.5 in /dotnet/samples/Demos/ProcessWithCloudEvents/ProcessWithCloudEvents.Client (#​13604)
  • 6209c77fd52d6ff99d7797d66639055b36a91ae3 .Net: Bump @​babel/core from 7.26.10 to 7.29.7 in /dotnet/samples/Demos/ProcessWithCloudEvents/ProcessWithCloudEvents.Client (#​14083) [ #​18014, #​18001, #​17998, #​17992, #​17974, #​17923, #​17931, #​17915, #​17788, #​17739, #​17606, #​17592, #​17589 ]
  • 1ad0b7501bd9c8f8dfbafb7c1aa69fab1ba4cd28 Bump Aspire.Hosting.AppHost from 13.0.0 to 13.3.0 (#​13995)
  • 56422ada8aa95702aab5c969805c3395dd2f5022 .Net: Bump follow-redirects from 1.15.11 to 1.16.0 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#​13877)
  • a5e8f9b43230675c86dcb7c3ff5021914537f8be .Net: Bump form-data from 4.0.5 to 4.0.6 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#​14082)
  • 7fd75c3c73ac84106ce2883bae32b50c99378e40 .Net: fix: prevent duplicate "null" in JSON Schema type arrays for nullable parameters (#​13635) [ #​13527 ]
  • f8c757b218cfe70cd9bc0d921eb0828d290cbe56 Fix MessagePack high severity vulnerability (#​14079)

This list of changes was auto generated.

Commits viewable in compare view.

Updated Microsoft.SemanticKernel.Connectors.OpenAI from 1.77.0 to 1.78.0.

Release notes

Sourced from Microsoft.SemanticKernel.Connectors.OpenAI's releases.

1.78.0

Changes:

  • 35ba23e1b3092271c778ca057afe1a796e16e70e .Net: Update package version to 1.78.0 (#​14142)
  • e6c9673684ca03621885083faff1644e1f42695e .Net: Disable automatic HTTP redirects in HttpPlugin and WebFileDownloadPlugin default clients (#​14132)
  • f25753be0a126138d2eea39b0ca2985252dde25a Bump Scriban from 7.2.0 to 7.2.5 to fix NU1902 vulnerability (#​...

Description has been truncated

Bumps Microsoft.Agents.AI from 1.8.0 to 1.13.0
Bumps Microsoft.Agents.Authentication.Msal from 1.5.184 to 1.6.150
Bumps Microsoft.Agents.CopilotStudio.Client from 1.5.184 to 1.6.150
Bumps Microsoft.Agents.Hosting.AspNetCore from 1.5.184 to 1.6.150
Bumps Microsoft.Extensions.AI from 10.6.0 to 10.7.0
Bumps Microsoft.Extensions.AI.Abstractions from 10.6.0 to 10.7.0
Bumps Microsoft.Extensions.AI.OpenAI from 10.6.0 to 10.7.0
Bumps Microsoft.Extensions.Hosting from 10.0.8 to 10.0.9
Bumps Microsoft.Graph from 6.1.0 to 6.2.0
Bumps Microsoft.Identity.Client.Extensions.Msal from 4.84.1 to 4.86.0
Bumps Microsoft.NET.Test.Sdk from 18.6.0 to 18.7.0
Bumps Microsoft.SemanticKernel.Agents.Core from 1.77.0 to 1.78.0
Bumps Microsoft.SemanticKernel.Connectors.AzureOpenAI from 1.77.0 to 1.78.0
Bumps Microsoft.SemanticKernel.Connectors.OpenAI from 1.77.0 to 1.78.0
Bumps Microsoft.VisualStudio.Threading from 17.14.15 to 18.7.23
Bumps OpenTelemetry.Exporter.Console from 1.15.3 to 1.16.0
Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.15.3 to 1.16.0
Bumps OpenTelemetry.Extensions.Hosting from 1.15.3 to 1.16.0
Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.15.2 to 1.16.0
Bumps OpenTelemetry.Instrumentation.Http from 1.15.1 to 1.16.0
Bumps OpenTelemetry.Instrumentation.Runtime from 1.15.1 to 1.16.0

---
updated-dependencies:
- dependency-name: Microsoft.Agents.AI
  dependency-version: 1.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.Agents.Authentication.Msal
  dependency-version: 1.6.150
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.Agents.Hosting.AspNetCore
  dependency-version: 1.6.150
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.Extensions.AI
  dependency-version: 10.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.Extensions.AI.Abstractions
  dependency-version: 10.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.Extensions.AI.OpenAI
  dependency-version: 10.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: OpenTelemetry.Exporter.Console
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: OpenTelemetry.Extensions.Hosting
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: OpenTelemetry.Instrumentation.AspNetCore
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: OpenTelemetry.Instrumentation.Http
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: OpenTelemetry.Instrumentation.Runtime
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.Agents.Authentication.Msal
  dependency-version: 1.6.150
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.Agents.Hosting.AspNetCore
  dependency-version: 1.6.150
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.Graph
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.SemanticKernel.Agents.Core
  dependency-version: 1.78.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.SemanticKernel.Connectors.OpenAI
  dependency-version: 1.78.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.Agents.Authentication.Msal
  dependency-version: 1.6.150
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.Agents.Hosting.AspNetCore
  dependency-version: 1.6.150
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.Agents.Authentication.Msal
  dependency-version: 1.6.150
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.Agents.Hosting.AspNetCore
  dependency-version: 1.6.150
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.Extensions.AI.OpenAI
  dependency-version: 10.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.Agents.CopilotStudio.Client
  dependency-version: 1.6.150
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 10.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-all
- dependency-name: Microsoft.Identity.Client.Extensions.Msal
  dependency-version: 4.86.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.Agents.Authentication.Msal
  dependency-version: 1.6.150
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.Agents.Hosting.AspNetCore
  dependency-version: 1.6.150
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.Agents.Authentication.Msal
  dependency-version: 1.6.150
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.Agents.Hosting.AspNetCore
  dependency-version: 1.6.150
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.Agents.Authentication.Msal
  dependency-version: 1.6.150
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.Agents.CopilotStudio.Client
  dependency-version: 1.6.150
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.Agents.Hosting.AspNetCore
  dependency-version: 1.6.150
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.Agents.Authentication.Msal
  dependency-version: 1.6.150
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.Agents.Hosting.AspNetCore
  dependency-version: 1.6.150
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.Agents.Authentication.Msal
  dependency-version: 1.6.150
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.Agents.Hosting.AspNetCore
  dependency-version: 1.6.150
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.SemanticKernel.Agents.Core
  dependency-version: 1.78.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.SemanticKernel.Connectors.AzureOpenAI
  dependency-version: 1.78.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.SemanticKernel.Connectors.OpenAI
  dependency-version: 1.78.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-all
- dependency-name: Microsoft.VisualStudio.Threading
  dependency-version: 18.7.23
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: nuget-all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Jul 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants