Bump the nuget-all group with 18 updates by dependabot[bot] · Pull Request #733 · microsoft/Agents

dependabot · 2026-09-22T15:01:35Z

Updated Azure.Monitor.OpenTelemetry.Exporter from 1.8.3 to 1.9.0.

Release notes

Sourced from Azure.Monitor.OpenTelemetry.Exporter's releases.

1.9.0 1.9.0 (2026-09-04)

Features Added

Add support for project id attributes propagation
(#62052)
Shutting down a provider (including Dispose()) now writes pending telemetry to offline storage and uploads it in the background instead of blocking on ingestion. Short-lived applications such as CLI tools previously lost this telemetry, because they exit before a transmission completes; the telemetry is now durable before exit, and delivery is completed by a background drain in this or a subsequent run. ForceFlush is unchanged by default and can be opted in with the Azure.Monitor.OpenTelemetry.Exporter.PersistOnForceFlush AppContext switch, which applies to traces and logs only: a metric reader cannot distinguish a caller's flush from its periodic collection, so metric ForceFlush always transmits. The previous behavior can be restored with the Azure.Monitor.OpenTelemetry.Exporter.DisablePersistOnShutdown AppContext switch.
(#61818)
How long shutdown waits for that background drain can now be set through the Azure.Monitor.OpenTelemetry.Exporter.ShutdownDrainBudgetMilliseconds AppContext data value, using either AppContext.SetData or a runtimeconfig.json configProperty. Dispose() passes a finite timeout, so by default part of that window is spent delivering telemetry and process exit tracks ingestion latency. Short-lived applications should set this to 0, which makes exit cost only the file write: measured at 2.7 ms regardless of ingestion latency, against 2011 ms with a two second ingestion delay. The default is unchanged, so long-running services keep delivering their final batch within the window Dispose() allows. A single-run CI job, where no later run exists to drain storage, should not raise this value but set the Azure.Monitor.OpenTelemetry.Exporter.DisablePersistOnShutdown switch with a bounded Retry.NetworkTimeout: raising the budget cannot guarantee delivery, because Shutdown() waits on the drain for no time at all and Dispose() is capped by the five second grace period OpenTelemetry allows it.
(#62340)

Bugs Fixed

Telemetry left in offline storage by a process that exited during a transmission is no longer stranded permanently. A leased blob is renamed so that it matches neither the storage provider's blob enumeration nor its retention sweep, and the provider only reclaims those leases on a two minute maintenance timer that a short-lived process never reaches. Expired leases are now reclaimed when storage is drained.
(#61818)
Offline storage is now drained shortly after startup rather than only after the process has been running for two minutes, so telemetry persisted by a previous run is uploaded even when no single run is long-lived.
(#61818)
Telemetry is no longer dropped when the offline storage directory reaches its size cap. The oldest stored telemetry is evicted to make room.
(#61818)
Statsbeat no longer holds up process exit. It exports once more as its meter provider is disposed, which put an ingestion round trip on the exit path; that final export now runs in the background, and its network timeout is bounded at five seconds rather than the pipeline default of 100 seconds. The customer SDK stats meter provider is instead left to live for the process lifetime, so it never exports on the exit path at all; its stats are delivered by its own periodic reader.
(#62340)
Log fields are now culture-invariant. (#61996)
Added the telemetrySuccess dimension to Item_Dropped_Count for request and dependency telemetry.
(#62081)

Other Changes

Updated OpenTelemetry dependencies to 1.18.0 and OpenTelemetry.PersistentStorage.FileSystem to 1.1.1.
(#62698)
Improved activity conversion performance by reading recognized attributes from a fixed index instead of scanning the tag list for each one. Every span shape converts faster, by about a third for spans carrying Application Insights override attributes, and each conversion rents fewer pooled buffers. Standard metrics no longer collect the tags they never read.
(#62614)
- Fixed pooled tag buffers being leaked whenever converting an activity failed, and retaining tag keys and values after being returned to the pool.
- Fixed the buffer rent size being process-wide mutable state written without synchronization.
- Fixed an activity tag with a null key dropping the remaining tags from custom properties.
- Removed two attribute lookups that could never match. http.server_name and server.socket.address are still exported as custom properties, unchanged.

Commits viewable in compare view.

Updated GitHub.Copilot.SDK from 1.0.11 to 1.0.14.

Release notes

Sourced from GitHub.Copilot.SDK's releases.

1.0.14

Feature: typed message provenance for user, system, and agent sources

Messages sent through the SDK can now carry typed source provenance, distinguishing human user input, internal system injections, and identified agent- senders, so recipients can reliably tell agent input from human authorization. (#2573)

await session.send("Looks good to me.", { source: "agent-reviewer" });

await session.send("Looks good to me.", source=AgentMessageSource("reviewer"))

Feature: Auto model routing Fast tier

Sessions using auto model routing can now select the fast tier alongside the existing efficiency, balance, and intelligence tiers, giving integrators a latency-focused routing preset across all six SDKs. (#2669)

await session.setAutoTier("fast");

Feature: force-refresh managed settings cache

The new managedSettings.clearCache RPC method wipes the persistent server-policy cache and drops the runtime's in-memory retained policy, giving hosts a primitive for a "force refresh account policy" action. (#2438)

await client.rpc.managedSettings.clearCache();

await client.Rpc.ManagedSettings.ClearCacheAsync();

Feature: Rust SDK model allowlists

SessionConfig and ResumeSessionConfig in the Rust SDK now accept an optional allowed_models list, letting hosts restrict which model IDs a session may use without duplicating runtime validation. (#2512)

let config = SessionConfig::default().with_allowed_models(["gpt-4o", "claude-3.7-sonnet"]);

Other changes

feature: [Core] add factory pause checkpoints for the Node.js Agent Factories API, letting a paused run resume without losing invocation limits or execution identity (#2537)
feature: forward the optional host OAuth client metadata URL across all six SDKs on session create and resume (#2258)
feature: [TypeScript] add max_output_tokens to the model capabilities override, previously unreachable without an unsafe cast (#2569)
bugfix: [.NET] include Copilot CLI runtime assets in PackAsTool packages so dotnet pack --no-build produces a working tool (#2557)
bugfix: apply the runtime's connection_close callback-quiescence contract consistently across all six in-process C ABI adapters, preventing races with freed callback state during disposal (#2610, #2622)
bugfix: [Rust] fix codegen for CLI 1.0.84 schemas, correctly mapping the CatalogTrustEligibility unknown value and re-exporting shared session-event types (#2631)
bugfix: [C#] fix codegen for runtime schema unions, unblocking single-variant anyOf/oneOf handling (#2656)
bugfix: [Rust] isolate the hostless in-process runtime cache from the bundled CLI cache to prevent cross-deletion of a shared executable (#2659)
... (truncated)

1.0.14-preview.1

Feature: pause and resume durable factory runs at checkpoints

Agent Factories can now pause deliberately instead of only stopping at hard limits. Call ctx.pause(key) inside a factory body to register a durable, one-shot checkpoint that ends the current attempt; resuming replays the journal and returns from that checkpoint instead of redoing prior work. Callers can also pause a running attempt from outside the factory body. (#2537)

await ctx.step("prepare", prepareInput);
await ctx.pause("review-ready");
await ctx.agent("Review the prepared input");

const paused = await session.factory.pause(runId);

[!WARNING]
Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

github.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:
network:
  allowed:
    - defaults
    - "github.com"
See Network Configuration for more information.

Generated by Release Changelog Generator · copilot · auto · 52.5 AIC · ⌖ 5.57 AIC · ⊞ 10.3K

1.0.14-preview.0

Feature: typed message provenance across all SDKs

Sending a message can now declare its source as user, system, or an identified agent (serialized as agent-<id>), so recipients can reliably distinguish human input from system injections and forwarded agent output. Ordinary sends remain unaffected: source stays omitted unless the caller opts in. (#2573)

await session.send({ prompt: "Reviewed and approved.", source: "agent-reviewer" });

await session.send(prompt="Reviewed and approved.", source=AgentMessageSource("reviewer"))

session.Send(ctx, copilot.SendOptions{Source: copilot.MessageSourceAgent("reviewer")})

C#: Source = MessageSource.Agent("reviewer")
Java: .setSource(MessageSource.agent("reviewer"))
Rust: .with_source(MessageSource::Agent("reviewer".into()))

Feature: force-refresh enterprise managed settings

A new managedSettings.clearCache RPC wipes the persistent server-policy cache and drops the runtime's in-memory retained policy, so hosts can wire up a "sync account policy" action (for example VS Code's Developer: Sync Account Policy command). It's available in TypeScript, C#, Python, Go, and Rust; Java support follows once the underlying CLI release is pinned. (#2438)

await client.rpc.managedSettings.clearCache();

Other changes

feature: [TypeScript] allow setting max_output_tokens on model capability overrides (#2569)
feature: forward an optional host OAuth client metadata document URL across all six SDKs (#2258)
bugfix: [.NET] include Copilot CLI runtime assets in PackAsTool publish output so packed tools install correctly (#2557)
bugfix: [Rust] isolate GitHub token callbacks from the request-routing loop so a callback panic can no longer stall session requests (#2567)
bugfix: [Python, Node.js] serialize concurrent client startup so racing callers reuse the same connection instead of launching duplicate runtimes (#2570)
bugfix: [.NET] fix a vulnerable transitive SourceLink dependency (#2587)
bugfix: fix in-process callback reclamation and FFI close responsiveness across all six SDKs to prevent use-after-free races and event-loop stalls during disposal (#2610, #2622)
bugfix: [Rust] fix codegen for CLI 1.0.84 schemas (#2631)

[!WARNING]
Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

github.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

... (truncated)

1.0.13

Feature: cancellation for host-owned external tools

Host-owned external tool callbacks are now cancelled when their runtime request completes or their SDK session terminates. The cancellation primitive is idiomatic per SDK: .NET passes a request token to AIFunction, Node.js exposes ToolInvocation.signal, Go cancels ToolInvocation.TraceContext, Java cancels the returned CompletableFuture, Python cancels the handler task, and Rust drops the handler future. Go handlers that retain TraceContext for background work must derive a separate lifetime because the invocation context is cancelled when the request ends.

Feature: declare application identity with client info

Client options now accept optional client info (application name and version, integration name and version) across all six SDKs, exposed idiomatically per language (clientInfo in Node.js, client_info in Python and Rust, ClientInfo in Go and .NET, setClientInfo in Java). When set, the SDK forwards it on the server.connect handshake so the telemetry the runtime emits on the connection is attributed to the application and its Copilot integration instead of the runtime's own build. All fields are optional, and leaving client info unset keeps the runtime's default attribution. See Client info.

Feature: Node Agent Factories pagination and run notifications

The experimental Node.js Agent Factories convenience API now supports paginated run history. Existing session.factory.listRuns() calls still return the runs array, while calls with afterSeq, beforeSeq, or limit return the full page with cursor and truncation metadata.

Factory run and resume options now accept notifyOnComplete and logPhaseNames. The SDK forwards these options to the Copilot CLI for new and resumed runs.

Feature: selectable `ask_user` session behavior

Session create and cold resume now accept a language-specific askUserVariant option with legacy and elicitation values. SDK sessions retain the legacy question-and-answer tool by default. Select elicitation and provide an elicitation handler to expose the structured form-based ask_user tool.

Feature: rotating session-scoped GitHub credentials

All six SDKs can now acquire short-lived GitHub credentials through a session-scoped callback. The SDK registers the callback before session create or resume, maps initial and refresh requests to the owning session, and removes registrations on rollback, replacement, session close, and client close. Static per-session gitHubToken credentials remain supported and are mutually exclusive with the callback.

Token responses use the shared tagged token/cancelled shape and require expiresIn, expressed as the positive number of seconds remaining when the callback completes. See github/copilot-agent-runtime#16381 for the runtime credential-authority implementation.

Initial acquisition occurs during create or resume; cancellation, callback errors, and invalid credentials reject that operation instead of falling back to ambient authentication. Idle sessions refresh only before their next credential-consuming operation.

Feature: extensions can request sensitive environment variables

Copilot CLI extensions can now ask for named sensitive environment variables when they join a session. joinSession() accepts a requestedEnvironmentVariables option listing the variable names the extension needs. The CLI shows a permission prompt naming the extension and the exact variables requested. On approval, only those variables reach that extension and their values are written into the extension process's process.env before joinSession() resolves. On denial, joinSession() rejects, the extension does not load, and its tools never reach the model.

An approval is remembered against the exact set of names the user saw, so an extension that later asks for one more variable prompts again. Names that are unset, or that the CLI does not filter from extensions, are not prompted for. This is the client half of the feature; it requires a Copilot CLI that supports extension environment access, and older CLIs ignore the request and grant nothing.

import { joinSession } from "@github/copilot-sdk/extension";

const session = await joinSession({
    requestedEnvironmentVariables: ["GITHUB_TOKEN"],
});
const token = process.env.GITHUB_TOKEN;

Feature: early session-event subscription (Rust)

The Rust SDK can now observe every event routed to a session, starting with that session's very first routed event. Client::prepare_session and Client::prepare_resume_session return an inert PreparedSession that owns the session's event channel, so a subscription can be installed before any protocol activity begins:

let prepared = client.prepare_session(
    SessionConfig::default().with_event_buffer_capacity(2048),
)?;
let mut events = prepared.subscribe();
 ... (truncated)

## 1.0.13-preview.4

### Feature: rewind support across all SDKs

Sessions can now opt into file-change tracking and rewind conversation history and tracked file changes to any prior checkpoint. Enable file tracking when creating a session, then use `rewind` to roll back. ([#2321](https://github.com/github/copilot-sdk/pull/2321))

```ts
const session = await client.createSession({ enableFileChangeTracking: true });
// ...later
const points = await session.rpc.rewind.list();
await session.rpc.rewind.rewind({ rewindTarget: points[0].id });

var session = await client.CreateSessionAsync(new SessionOptions { EnableFileChangeTracking = true });
var points = await session.Rpc.Rewind.ListAsync();
await session.Rpc.Rewind.RewindAsync(new RewindRequest { RewindTarget = points[0].Id });

session = await client.create_session(enable_file_change_tracking=True)
points = await session.rpc.rewind.list()
await session.rpc.rewind.rewind(rewind_target=points[0].id)

Feature: session-scoped GitHub token providers

Sessions now support expiry-aware GitHub token callbacks in addition to static tokens. The SDK handles refresh requests from the runtime, so extensions always receive fresh credentials. (#2412)

const session = await client.createSession({
  gitHubTokenProvider: async ({ host, reason }) => ({ token: await fetchToken(host) })
});

var session = await client.CreateSessionAsync(new SessionOptions {
    GitHubTokenProvider = async (req, ct) =>
        new GitHubTokenResult { Token = await FetchTokenAsync(req.Host) }
});

session, _ := client.CreateSession(ctx, copilot.SessionOptions{
    GitHubTokenProvider: func(ctx context.Context, req copilot.TokenProviderRequest) (copilot.TokenProviderResult, error) {
        return copilot.TokenProviderResult{Token: fetchToken(req.Host)}, nil
    },
})

Feature: Java in-process native runtime on all platforms

... (truncated)

1.0.13-preview.3

Feature: rewind support across all SDKs

Sessions can now opt into file-change tracking and conversation rewind. When enableFileChangeTracking is enabled, the session records which files were changed during a conversation turn. You can then list pending rewind points, preview changes, and rewind the conversation history together with any tracked file modifications. (#2321)

const session = await client.createSession({ enableFileChangeTracking: true });
const points = await session.rpc.rewind.listPendingRewindPoints();
await session.rpc.rewind.rewind({ id: points[0].id });

var session = await client.CreateSessionAsync(new SessionOptions { EnableFileChangeTracking = true });
var points = await session.Rpc.Rewind.ListPendingRewindPointsAsync();
await session.Rpc.Rewind.RewindAsync(new RewindRequest { Id = points[0].Id });

session = await client.create_session(enable_file_change_tracking=True)
points = await session.rpc.rewind.list_pending_rewind_points()
await session.rpc.rewind.rewind(id=points[0].id)

Feature: session-scoped GitHub token providers

Sessions now support a dynamic, expiry-aware GitHub token callback as an alternative to a static gitHubToken. The SDK maps each host request (with host, session, and reason context) to your callback, handling concurrent-session isolation automatically. (#2412)

const session = await client.createSession({
  gitHubTokenProvider: async ({ host }) => ({ token: await getToken(host), expiresIn: 3600 }),
});

var session = await client.CreateSessionAsync(new SessionOptions
{
    GitHubTokenProvider = async (req, ct) =>
        new GitHubToken { Token = await GetTokenAsync(req.Host, ct), ExpiresIn = TimeSpan.FromHours(1) }
});

session, err := client.CreateSession(ctx, copilot.SessionOptions{
    GitHubTokenProvider: func(ctx context.Context, req copilot.GitHubTokenRequest) (copilot.GitHubToken, error) {
        return copilot.GitHubToken{Token: getToken(req.Host), ExpiresIn: 3600}, nil
    },
})

Feature: built-in plugin directory support

... (truncated)

1.0.13-preview.2

Feature: rewind support across all SDKs

Sessions can now opt in to file-change tracking so that rewinding restores both conversation history and the files that were modified. Enable it with the new enableFileChangeTracking session option. (#2321)

const session = await client.startSession({ enableFileChangeTracking: true });

var session = await client.StartSessionAsync(new SessionOptions { EnableFileChangeTracking = true });

session = await client.start_session(enable_file_change_tracking=True)

session, _ := client.StartSession(ctx, &copilot.SessionOptions{EnableFileChangeTracking: true})

Session session = client.startSession(new SessionOptions().setEnableFileChangeTracking(true)).get();

let session = client.start_session(SessionOptions { enable_file_change_tracking: Some(true), ..Default::default() }).await?;

Feature: session-scoped GitHub token providers

Applications can now supply a dynamic GitHub token callback instead of a static gitHubToken string. The runtime calls the callback before each token use, so short-lived tokens stay fresh across long-running sessions. (#2412)

const session = await client.startSession({
  gitHubTokenProvider: async ({ host, reason }) => ({ token: await fetchToken(host) })
});

var session = await client.StartSessionAsync(new SessionOptions
{
    GitHubTokenProvider = async (request, ct) => new GitHubTokenResult(await FetchTokenAsync(request.Host))
});

async def token_provider(request):
    return GitHubTokenResult(token=await fetch_token(request.host))

session = await client.start_session(github_token_provider=token_provider)
 ... (truncated)

## 1.0.13-preview.1

### Feature: `ClientMode::Empty` now disables built-in skills by default

`ClientMode::Empty` now applies deny-by-default isolation to runtime-bundled skills in addition to other built-in capabilities. `includedBuiltinSkills` defaults to `[]` in Empty mode; pass an explicit allowlist to re-enable specific skills. This behavior is consistent across all six SDKs. ([#2410](https://github.com/github/copilot-sdk/pull/2410))

```ts
// Node — empty mode: built-in skills excluded by default
const session = await client.createSession({ mode: ClientMode.Empty });
// opt back in:
const session = await client.createSession({ mode: ClientMode.Empty, includedBuiltinSkills: ["edit"] });

// C#
var session = await client.CreateSessionAsync(new SessionOptions { Mode = ClientMode.Empty });
// opt back in:
var session = await client.CreateSessionAsync(new SessionOptions { Mode = ClientMode.Empty, IncludedBuiltinSkills = ["edit"] });

# Python
session = await client.create_session(mode=ClientMode.EMPTY)
# opt back in:
session = await client.create_session(mode=ClientMode.EMPTY, included_builtin_skills=["edit"])

// Go
session, err := client.CreateSession(ctx, copilot.SessionOptions{Mode: copilot.ClientModeEmpty})
// opt back in:
session, err := client.CreateSession(ctx, copilot.SessionOptions{Mode: copilot.ClientModeEmpty, IncludedBuiltinSkills: []string{"edit"}})

Generated by Release Changelog Generator · sonnet46 28.6 AIC · ⌖ 4.12 AIC · ⊞ 8.1K

1.0.13-preview.0

Feature: rewind support across all SDKs

Sessions can now opt into file-change tracking and rewind conversation history along with tracked file changes. Enable the new enableFileChangeTracking session option to allow calling rewind later. (#2321)

const session = await client.createSession({ enableFileChangeTracking: true });
// later:
await session.rpc.conversation.rewind({ ...rewindPoint });

var session = await client.CreateSessionAsync(new SessionOptions { EnableFileChangeTracking = true });

session = await client.create_session(enable_file_change_tracking=True)

session, err := client.CreateSession(ctx, copilot.SessionOptions{EnableFileChangeTracking: true})

Feature: Java in-process runtime (experimental)

The Java SDK now ships platform-native classifier JARs that load the Copilot runtime directly in-process via JNA — no separate CLI child process required. Currently available for linux-x64, Windows x64, and Apple Silicon macOS. (#2301, #2393, #2402)

CopilotClientOptions options = new CopilotClientOptions()
    .setConnection(RuntimeConnection.forInProcess());
CopilotClient client = new CopilotClient(options);
client.start().get();

Feature: permission decision context forwarding

Permission handlers can now attach decisionContext so the runtime can attribute whether a decision came from a person, host policy, or an automated recommendation. This is additive for Node, Python, Go, .NET, and Java. Rust clients that construct or match PermissionResult::Decision directly must migrate to the new struct variant. (#2294)

TypeScript: createAttributedPermissionResult(result, context)
Python: copilot.create_attributed_permission_result(result, context)
Go: copilot.NewAttributedPermissionResult(result, context)
C#: set DecisionContext on the permission decision
Java: PermissionRequestResult.approveOnce().setDecisionContext(context)
Rust: PermissionResult::approve_once().with_context(context)

Feature: built-in plugin directory support

Applications can now register a set of host-bundled plugin directories that are trusted unconditionally and loaded before any user session begins. (#2330)

Feature: extensions can request sensitive environment variables (Node)

... (truncated)

1.0.12-preview.0

Feature: rewind support across all SDKs

Sessions now support rewinding conversation history and tracked file changes. Enable file-change tracking when creating a session, then rewind to a previous checkpoint to discard later turns and restore file state. (#2321)

const session = await client.createSession({ enableFileChangeTracking: true });
const rewindPoints = await session.rpc.rewind.listRewindPoints();
await session.rpc.rewind.rewind({ rewindPointId: rewindPoints[0].rewindPointId });

session = await client.create_session(enable_file_change_tracking=True)
rewind_points = await session.rpc.rewind.list_rewind_points()
await session.rpc.rewind.rewind(rewind_point_id=rewind_points[0].rewind_point_id)

session, _ := client.CreateSession(ctx, &copilot.SessionOptions{EnableFileChangeTracking: true})
points, _ := session.RPC.Rewind.ListRewindPoints(ctx)
_ = session.RPC.Rewind.Rewind(ctx, &copilot.RewindRequest{RewindPointId: points[0].RewindPointId})

var session = await client.CreateSessionAsync(new SessionOptions { EnableFileChangeTracking = true });
var points = await session.Rpc.Rewind.ListRewindPointsAsync();
await session.Rpc.Rewind.RewindAsync(new RewindRequest { RewindPointId = points[0].RewindPointId });

SessionOptions options = new SessionOptions().setEnableFileChangeTracking(true);
var session = client.createSession(options).get();
var points = session.getRpc().getRewind().listRewindPoints().get();
session.getRpc().getRewind().rewind(new RewindRequest().setRewindPointId(points.get(0).getRewindPointId())).get();

let session = client.create_session(SessionOptions { enable_file_change_tracking: Some(true), ..Default::default() }).await?;
let points = session.rpc.rewind.list_rewind_points().await?;
session.rpc.rewind.rewind(RewindRequest { rewind_point_id: points[0].rewind_point_id.clone() }).await?;

Feature: Java in-process Copilot CLI (linux-x64)

The Java SDK now supports an in-process connection mode on linux-x64 that loads the Copilot runtime as a native library via JNA — no separate CLI child process required. Add the copilot-sdk-java-runtime classifier JAR for your platform alongside the core SDK JAR. (#2301)

CopilotClientOptions options = new CopilotClientOptions()
    .setConnection(RuntimeConnection.forInProcess());
CopilotClient client = new CopilotClient(options);
client.start().get();
 ... (truncated)

Commits viewable in [compare view](https://github.com/github/copilot-sdk/compare/v1.0.11...v1.0.14).
</details>

Updated [Microsoft.Agents.AI](https://github.com/microsoft/agent-framework) from 1.20.0 to 1.22.0.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.Agents.AI's releases](https://github.com/microsoft/agent-framework/releases)._

## 1.22.0

## What's Changed
* .NET: fix: race concdition in workflow formula state by @baywet in https://github.com/microsoft/agent-framework/pull/8252
* .NET: update remaining dependencies by @baywet in https://github.com/microsoft/agent-framework/pull/8307
* .NET: fix: inspect for delemiter value before adding headers by @baywet in https://github.com/microsoft/agent-framework/pull/8301
* docs: fix 'availble' typo in ADR 0001 by @mrchatam in https://github.com/microsoft/agent-framework/pull/8325
* .NET: docs: use 'a FunctionApprovalRequestContent' in ADR 0006 by @mrchatam in https://github.com/microsoft/agent-framework/pull/8322
* .NET: docs: fix 'valueable' typo in ADR 0001 by @mrchatam in https://github.com/microsoft/agent-framework/pull/8318
* .NET: docs: remove duplicate 'turns' in ADR 0006 by @mrchatam in https://github.com/microsoft/agent-framework/pull/8317
* .NET: docs: fix 'extention' typo in ADR 0001 by @mrchatam in https://github.com/microsoft/agent-framework/pull/8316
* docs: fix 'allow to' grammar in ADR 0011 by @mrchatam in https://github.com/microsoft/agent-framework/pull/8335
* Improve issue triage by @moonbox3 in https://github.com/microsoft/agent-framework/pull/8362
* .NET: expose OpenTelemetryAgent.DefaultSourceName by @YashvantHange in https://github.com/microsoft/agent-framework/pull/7815
* .NET: Temporarily skip flaky steering harness session reuse test by @rogerbarreto with @Copilot in https://github.com/microsoft/agent-framework/pull/8377
* .NET: [PREVIEW BREAKING] Promote `AgentSessionStore` into Agents.AI.Abstractions by @rogerbarreto in https://github.com/microsoft/agent-framework/pull/7991
* .NET: Preserve hosted session key boundaries by @Ricky-7-Yan in https://github.com/microsoft/agent-framework/pull/8263
* .NET: Preserve cached and reasoning token counts in Foundry Hosting by @manjunathshiva in https://github.com/microsoft/agent-framework/pull/8334
* .NET: [BREAKING] Improve replay support with Approval Binding by @westey-m in https://github.com/microsoft/agent-framework/pull/8375
* .NET: fix: uri canonization in workflow http handler by @baywet in https://github.com/microsoft/agent-framework/pull/8406
* .NET: tests(workflows): adds a regression test for cookie jar handling in redirection by @baywet in https://github.com/microsoft/agent-framework/pull/8427
* .NET: Add AsIChatClient extension to expose an AIAgent as an IChatClient by @tomas-rampas in https://github.com/microsoft/agent-framework/pull/7687
* .NET/Python: Refine skill frontmatter parsing by @SergeyMenshykh in https://github.com/microsoft/agent-framework/pull/8430
* .NET/Python: Add more content types to purview handling by @westey-m in https://github.com/microsoft/agent-framework/pull/8370
* .NET: [BREAKING] Scope provider-backed MCP sessions per invocation by @jpalvarezl in https://github.com/microsoft/agent-framework/pull/8425
* .NET: Add per-tool AgentModeProvider controls by @westey-m in https://github.com/microsoft/agent-framework/pull/8458
* .NET: Clarify Agent Skills caching behavior by @SergeyMenshykh in https://github.com/microsoft/agent-framework/pull/8474
* ci: excludes samples from dotnet dependabot because they are causing a timeout by @baywet in https://github.com/microsoft/agent-framework/pull/8476
* docs: clarifies the additional languages policy by @baywet in https://github.com/microsoft/agent-framework/pull/8477
* .NET: [BREAKING] Make Foundry delegated user identity sticky on AgentSession by @rogerbarreto in https://github.com/microsoft/agent-framework/pull/8434
* Build(deps): Bump astral-sh/setup-uv from 10.0.1 to 10.1.0 by @dependabot[bot] in https://github.com/microsoft/agent-framework/pull/8482
* Build(deps): Bump azure/login from 3.0.2 to 3.1.0 in /.github/actions/github-app-token by @dependabot[bot] in https://github.com/microsoft/agent-framework/pull/8483
* Build(deps): Bump astral-sh/setup-uv from 10.0.1 to 10.1.0 in /.github/actions/python-setup by @dependabot[bot] in https://github.com/microsoft/agent-framework/pull/8484
* Build(deps): Bump azure/login from 3.0.2 to 3.1.0 in /.github/actions/sample-validation-setup by @dependabot[bot] in https://github.com/microsoft/agent-framework/pull/8485
* Build(deps): Bump the codeql-actions group across 1 directory with 3 updates by @dependabot[bot] in https://github.com/microsoft/agent-framework/pull/8480
* Build(deps): Bump azure/login from 3.0.2 to 3.1.0 by @dependabot[bot] in https://github.com/microsoft/agent-framework/pull/8481
* Build(deps-dev): Bump uv from 0.12.9 to 0.12.12 in /python/packages/lab in the basics group across 1 directory by @dependabot[bot] in https://github.com/microsoft/agent-framework/pull/8469
* Build(deps-dev): Bump pyright from 1.1.411 to 1.1.414 in /python/packages/lab in the python-type-checkers group across 1 directory by @dependabot[bot] in https://github.com/microsoft/agent-framework/pull/8470
* .NET: Bind always approval responses to surfaced requests by @westey-m in https://github.com/microsoft/agent-framework/pull/8432
* [BREAKING] Python: Add request-scoped Foundry agent factories by @rogerbarreto in https://github.com/microsoft/agent-framework/pull/8372
* .NET: Preserve harness middleware for dynamic tools by @rogerbarreto in https://github.com/microsoft/agent-framework/pull/8402
* .NET: 2026-09-18 Release version bump by @westey-m in https://github.com/microsoft/agent-framework/pull/8529
* .NET: Pass ChatClientAgent tools per run only rather than setting on FICC by @westey-m in https://github.com/microsoft/agent-framework/pull/8531

## New Contributors
* @mrchatam made their first contribution in https://github.com/microsoft/agent-framework/pull/8325
* @Shy7777 made their first contribution in https://github.com/microsoft/agent-framework/pull/8331
* @ktz03 made their first contribution in https://github.com/microsoft/agent-framework/pull/8149
* @ManoharPaturi made their first contribution in https://github.com/microsoft/agent-framework/pull/8351
* @HeZ2z made their first contribution in https://github.com/microsoft/agent-framework/pull/7999
* @fzfzzfzzzfzzzz made their first contribution in https://github.com/microsoft/agent-framework/pull/8260
* @googio made their first contribution in https://github.com/microsoft/agent-framework/pull/8319
 ... (truncated)

## 1.21.0

## What's Changed
* .NET: Replace deprecated AWSSDK.Extensions.Bedrock.MEAI with AWS.Bedrock.MEAI by @BenGearset in https://github.com/microsoft/agent-framework/pull/7983
* .NET: Remove Azure.AI.OpenAI dependency by @rogerbarreto in https://github.com/microsoft/agent-framework/pull/7986
* .NET: Track and update A2A task state by @SergeyMenshykh in https://github.com/microsoft/agent-framework/pull/7998
* .NET: Update Azure AI Projects to 3.0.0 beta 1 by @rogerbarreto in https://github.com/microsoft/agent-framework/pull/7995
* .NET: Bump Aspire.Hosting from 13.5.2 to 13.5.3 by @dependabot[bot] in https://github.com/microsoft/agent-framework/pull/8029
* .NET: [BREAKING] Add file_access_read_lines and move the line-numbering contract onto AgentFileStore by @antsok in https://github.com/microsoft/agent-framework/pull/7671
* Bump Anthropic from 12.42.0 to 12.43.0 by @dependabot[bot] in https://github.com/microsoft/agent-framework/pull/8028
* .NET: Bump AgentMemory.AgentFramework from 1.4.1 to 1.5.0 by @dependabot[bot] in https://github.com/microsoft/agent-framework/pull/8027
* .NET: [BREAKING] Clarify A2A agent run modes by @SergeyMenshykh in https://github.com/microsoft/agent-framework/pull/8032
* .NET: Clarify declarative workflow input serialization by @UniversePeak in https://github.com/microsoft/agent-framework/pull/8046
* .NET: Preserve streamed annotations in Foundry hosted responses by @rogerbarreto in https://github.com/microsoft/agent-framework/pull/7984
* .NET: Improve Hosted Agent LRA Resilient Recovery Sample by @rogerbarreto in https://github.com/microsoft/agent-framework/pull/8082
* .NET: Include workflow outputs in hosted agent responses by @UniversePeak in https://github.com/microsoft/agent-framework/pull/8020
* .NET: Improve inline skill argument error guidance by @SergeyMenshykh in https://github.com/microsoft/agent-framework/pull/8118
* .NET: Bump Azure.Monitor.OpenTelemetry.Exporter from 1.5.0 to 1.8.3 by @dependabot[bot] in https://github.com/microsoft/agent-framework/pull/7887
* [BREAKING] .NET: Isolate LocalCodeAct subprocess environment by @eavanvalkenburg in https://github.com/microsoft/agent-framework/pull/8159
* .NET: Scope OpenAI hosting storage by isolation key by @SergeyMenshykh in https://github.com/microsoft/agent-framework/pull/8146
* .NET: chore: updates source link dependency due to transitive vulnerability by @baywet in https://github.com/microsoft/agent-framework/pull/8179
* .NET: chore: updates Microsoft owned testing dependencies by @baywet in https://github.com/microsoft/agent-framework/pull/8167
* .NET: ci: update Microsoft.CodeAnalysis.NetAnalyzers and Microsoft.VisualStudio.Threading.Analyzers versions by @baywet in https://github.com/microsoft/agent-framework/pull/8166
* .NET: chore: updates microsoft extensions and related packages to their latest version, as well as global.json dotnet sdk version to align by @baywet in https://github.com/microsoft/agent-framework/pull/8190
* .NET: Bump Azure.AI.Projects to 3.0.0-beta.2 by @rogerbarreto in https://github.com/microsoft/agent-framework/pull/8165
* .NET: fix: revalidate file skill paths before use by @SergeyMenshykh in https://github.com/microsoft/agent-framework/pull/8151
* .NET: Opt in to client function forwarding for Responses hosting by @rogerbarreto with @Copilot in https://github.com/microsoft/agent-framework/pull/7844
* .NET: chore: updates additional analyzers packages by @baywet in https://github.com/microsoft/agent-framework/pull/8198
* .NET: Harden LocalCodeAct OS validation by @eavanvalkenburg in https://github.com/microsoft/agent-framework/pull/8239
* .NET: upgrades xunit and other dependencies by @baywet in https://github.com/microsoft/agent-framework/pull/8202
* .NET: ci/promote removed apis by @baywet in https://github.com/microsoft/agent-framework/pull/8229
* .NET: fix: do not forward headers on redirect by @baywet in https://github.com/microsoft/agent-framework/pull/8164
* .NET: updates open telemetry deps by @baywet in https://github.com/microsoft/agent-framework/pull/8253
* .NET: Dotnet: reset $LASTEXITCODE per command in persistent PowerShell sessions by @westey-m in https://github.com/microsoft/agent-framework/pull/8259
* .NET: Implement same approval process for LocalCodeAct as is used by Hyperlight by @westey-m in https://github.com/microsoft/agent-framework/pull/8289
* .NET: Add Foundry hosted session client samples by @rogerbarreto in https://github.com/microsoft/agent-framework/pull/8227
* .NET: deps/ai extensions by @baywet in https://github.com/microsoft/agent-framework/pull/8270
* .Net + Python: [BREAKING] Limit MCP skill archives to the ZIP format by @SergeyMenshykh in https://github.com/microsoft/agent-framework/pull/8290
* .NET: Update version for 1.21.0 release by @SergeyMenshykh in https://github.com/microsoft/agent-framework/pull/8297
* .NET: Canonicalize Hyperlight sandbox fingerprints by @eavanvalkenburg in https://github.com/microsoft/agent-framework/pull/8295

## New Contributors
* @BenGearset made their first contribution in https://github.com/microsoft/agent-framework/pull/7983
* @xiaobaZeo made their first contribution in https://github.com/microsoft/agent-framework/pull/8004
* @Ricky-7-Yan made their first contribution in https://github.com/microsoft/agent-framework/pull/7680
* @Choppaaahh made their first contribution in https://github.com/microsoft/agent-framework/pull/8011
* @karthikchundi-commits made their first contribution in https://github.com/microsoft/agent-framework/pull/7855
* @antsok made their first contribution in https://github.com/microsoft/agent-framework/pull/7671
* @CoffeeDrivenCoder made their first contribution in https://github.com/microsoft/agent-framework/pull/7790
* @UniversePeak made their first contribution in https://github.com/microsoft/agent-framework/pull/8046
* @Shxiao101 made their first contribution in https://github.com/microsoft/agent-framework/pull/8090
* @georgeatparallel made their first contribution in https://github.com/microsoft/agent-framework/pull/8084
 ... (truncated)

Commits viewable in [compare view](https://github.com/microsoft/agent-framework/compare/dotnet-1.20.0...dotnet-1.22.0).
</details>

Updated [Microsoft.Extensions.AI](https://github.com/dotnet/extensions) from 10.9.0 to 10.10.0.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.Extensions.AI's releases](https://github.com/dotnet/extensions/releases)._

## 10.10.0

This month's release focuses on AI package reliability: closing gaps in evaluation scoring, hardening OpenAI image-option handling, and removing the deprecated OpenAI Assistants API support.

## Experimental API Changes

### Removed Experimental APIs
* OpenAI Assistants experimental APIs removed (was experimental under `OPENAI001`) #7724

## What's Changed

### AI

* Remove OpenAI Assistants API support #7724 by @jozkee (co-authored by @Copilot)
* Update OpenAI package version to 2.13.0 #7726 by @jozkee
* OpenAI: Avoid null implicit conversions for image options #7727 by @jozkee (co-authored by @Copilot)

### AI Evaluation

* Fail closed when a quality metric has no valid score #7735 by @thaildhe172591
* Validate path segments in Azure storage result store and response cache #7718 by @Lroca88

## Repository Infrastructure Updates

* Add TfxInstaller for publishing #7695 by @peterwaltonwork
* Bump PowerShell from 7.6.4 to 7.6.5 #7702
* [Infrastructure] Update vulnerable npm dependencies #7705 by @wtgodbe
* Add Node installation for TfxInstaller #7703 by @peterwaltonwork
* Publish VSIX using publish task instead of output #7711 by @peterwaltonwork
* Bump dotnet-coverage from 18.9.0 to 18.10.0 #7708
* Do not validate extension during publish step #7725 by @peterwaltonwork
* Add skill for upgrading OpenAI #7728 by @jozkee
* Fix source indexer stage #7694 by @jjonescz

## Acknowledgements

* @Lroca88 made their first contribution in #7718
* @thaildhe172591 made their first contribution in #7735
* @ANcpLua submitted issue #7665 (resolved by #7735)
* @jeffhandley @peterwald @shyamnamboodiripad reviewed pull requests

**Full Changelog**: https://github.com/dotnet/extensions/compare/v10.9.0...v10.10.0


Commits viewable in [compare view](https://github.com/dotnet/extensions/compare/v10.9.0...v10.10.0).
</details>

Updated [Microsoft.Extensions.AI.Abstractions](https://github.com/dotnet/extensions) from 10.9.0 to 10.10.0.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.Extensions.AI.Abstractions's releases](https://github.com/dotnet/extensions/releases)._

## 10.10.0

This month's release focuses on AI package reliability: closing gaps in evaluation scoring, hardening OpenAI image-option handling, and removing the deprecated OpenAI Assistants API support.

## Experimental API Changes

### Removed Experimental APIs
* OpenAI Assistants experimental APIs removed (was experimental under `OPENAI001`) #7724

## What's Changed

### AI

* Remove OpenAI Assistants API support #7724 by @jozkee (co-authored by @Copilot)
* Update OpenAI package version to 2.13.0 #7726 by @jozkee
* OpenAI: Avoid null implicit conversions for image options #7727 by @jozkee (co-authored by @Copilot)

### AI Evaluation

* Fail closed when a quality metric has no valid score #7735 by @thaildhe172591
* Validate path segments in Azure storage result store and response cache #7718 by @Lroca88

## Repository Infrastructure Updates

* Add TfxInstaller for publishing #7695 by @peterwaltonwork
* Bump PowerShell from 7.6.4 to 7.6.5 #7702
* [Infrastructure] Update vulnerable npm dependencies #7705 by @wtgodbe
* Add Node installation for TfxInstaller #7703 by @peterwaltonwork
* Publish VSIX using publish task instead of output #7711 by @peterwaltonwork
* Bump dotnet-coverage from 18.9.0 to 18.10.0 #7708
* Do not validate extension during publish step #7725 by @peterwaltonwork
* Add skill for upgrading OpenAI #7728 by @jozkee
* Fix source indexer stage #7694 by @jjonescz

## Acknowledgements

* @Lroca88 made their first contribution in #7718
* @thaildhe172591 made their first contribution in #7735
* @ANcpLua submitted issue #7665 (resolved by #7735)
* @jeffhandley @peterwald @shyamnamboodiripad reviewed pull requests

**Full Changelog**: https://github.com/dotnet/extensions/compare/v10.9.0...v10.10.0


Commits viewable in [compare view](https://github.com/dotnet/extensions/compare/v10.9.0...v10.10.0).
</details>

Updated [Microsoft.Extensions.AI.OpenAI](https://github.com/dotnet/extensions) from 10.9.0 to 10.10.0.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.Extensions.AI.OpenAI's releases](https://github.com/dotnet/extensions/releases)._

## 10.10.0

This month's release focuses on AI package reliability: closing gaps in evaluation scoring, hardening OpenAI image-option handling, and removing the deprecated OpenAI Assistants API support.

## Experimental API Changes

### Removed Experimental APIs
* OpenAI Assistants experimental APIs removed (was experimental under `OPENAI001`) #7724

## What's Changed

### AI

* Remove OpenAI Assistants API support #7724 by @jozkee (co-authored by @Copilot)
* Update OpenAI package version to 2.13.0 #7726 by @jozkee
* OpenAI: Avoid null implicit conversions for image options #7727 by @jozkee (co-authored by @Copilot)

### AI Evaluation

* Fail closed when a quality metric has no valid score #7735 by @thaildhe172591
* Validate path segments in Azure storage result store and response cache #7718 by @Lroca88

## Repository Infrastructure Updates

* Add TfxInstaller for publishing #7695 by @peterwaltonwork
* Bump PowerShell from 7.6.4 to 7.6.5 #7702
* [Infrastructure] Update vulnerable npm dependencies #7705 by @wtgodbe
* Add Node installation for TfxInstaller #7703 by @peterwaltonwork
* Publish VSIX using publish task instead of output #7711 by @peterwaltonwork
* Bump dotnet-coverage from 18.9.0 to 18.10.0 #7708
* Do not validate extension during publish step #7725 by @peterwaltonwork
* Add skill for upgrading OpenAI #7728 by @jozkee
* Fix source indexer stage #7694 by @jjonescz

## Acknowledgements

* @Lroca88 made their first contribution in #7718
* @thaildhe172591 made their first contribution in #7735
* @ANcpLua submitted issue #7665 (resolved by #7735)
* @jeffhandley @peterwald @shyamnamboodiripad reviewed pull requests

**Full Changelog**: https://github.com/dotnet/extensions/compare/v10.9.0...v10.10.0


Commits viewable in [compare view](https://github.com/dotnet/extensions/compare/v10.9.0...v10.10.0).
</details>

Updated [Microsoft.Extensions.Hosting](https://github.com/dotnet/dotnet) from 10.0.11 to 10.0.12.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.Extensions.Hosting's releases](https://github.com/dotnet/dotnet/releases)._

No release notes found for this version range.

Commits viewable in [compare view](https://github.com/dotnet/dotnet/commits).
</details>

Updated [Microsoft.Identity.Client.Extensions.Msal](https://github.com/AzureAD/microsoft-authentication-library-for-dotnet) from 4.88.0 to 4.90.0.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.Identity.Client.Extensions.Msal's releases](https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/releases)._

## 4.90.0

### Changes
- Updated the KeyGuardAttestation package version to 1.1.7. [#6189](https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/pull/6189)

## 4.89.0

## What's Changed
* Add repository guidance for AI agents by @bgavrilMS in https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/pull/6158
* Add Linux Attested Managed Identity Flow documentation by @gladjohn in https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/pull/6149
* Remove internal authority example from API docs by @bgavrilMS in https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/pull/6170
* Update SNI MTLS PoP Token Design documentation by @bgavrilMS in https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/pull/6171
* Add SNI mTLS E2E coverage for a non-exportable VBS-protected certificate by @gladjohn in https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/pull/6167
* Revise mTLS PoP acceptance-test matrix structure by @gladjohn in https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/pull/6161
* Add ICloudConfiguration for cross-cloud metadata resolution by @Avery-Dunn in https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/pull/6104
* Fix IMDSv2 SCHANNEL failures bypassing certificate re-mint retry by @Robbie-Microsoft in https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/pull/6173
* Always record RawStsErrorCode on MsalFailure metric by @ssmelov in https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/pull/6175
* Add MSAL_MI_DISABLE_IMDS_V2 kill switch for managed identity by @Robbie-Microsoft in https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/pull/6178
* Add timeout for managed identity capability discovery by @Robbie-Microsoft in https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/pull/6181
* Pin GitHub Actions to full-length commit SHAs by @danfiedler-msft in https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/pull/6182

## New Contributors
* @danfiedler-msft made their first contribution in https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/pull/6182

**Full Changelog**: https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/compare/4.88.0...4.89.0

Commits viewable in [compare view](https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/compare/4.88.0...4.90.0).
</details>

Updated [Microsoft.SemanticKernel.Agents.Core](https://github.com/microsoft/semantic-kernel) from 1.80.0 to 1.80.1.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.SemanticKernel.Agents.Core's releases](https://github.com/microsoft/semantic-kernel/releases)._

## 1.80.1


## Changes:

* d8ec44919265b3641b7898a02038cbfe14590ee5 .NET: Bump package version to 1.80.1 (#14370)
* 3438d882147b6e3e19a161a5f0dcb64e23e181db .NET: update SDK to 10.0.303 (#14353)
* 437336175b8ef841a8ccace6c6cf909f34f0cad6 .NET: Remove retired OpenAI Assistants integration tests (#14354)
* a64827ec8c5621eeaf7c4c5dabdb5355bb253177 ci: removes extraneous nuget.config file (#14341)
* a2200032989f05b35477b17423364a32d503d758 chore: bumps the OpenAPI dependencies to the latest versions (#14340)
* 60264bbdc87071ded45af3ff3eb538ee8cc3fc72 tests: refactors redirection tests to avoid race condition (#14342) [ #14340 ]
* b4b0ae7780876a69971d7afe1856aee1dd1092b1 chore: fixes typos (#14343)
<details><summary><b>See More</b></summary>

* a256f1ae030bebb270e514e11cad677722a174c1 ci: updates aws credential task to fix node20 retirement for GHA (#14345)
* abf10dd6ea072f5a25ebc6f811fc1e3004295ebe Update CommunityToolkit VectorData package names (#14333)
* 6eab62d273a1f19b9a1d6aa1ab2150f2f938941c Pin GitHub Actions to full-length commit SHAs (#14307)
* cd7b533ed19cc8a4cce38cac5dca6b0785ece492 Switch failing test to new model. (#14332)

This list of changes was [auto generated](https://msdata.visualstudio.com/Vienna/_build/results?buildId=234363375&view=logs).</details>

Commits viewable in [compare view](https://github.com/microsoft/semantic-kernel/compare/dotnet-1.80.0...dotnet-1.80.1).
</details>

Updated [Microsoft.SemanticKernel.Connectors.AzureOpenAI](https://github.com/microsoft/semantic-kernel) from 1.80.0 to 1.80.1.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.SemanticKernel.Connectors.AzureOpenAI's releases](https://github.com/microsoft/semantic-kernel/releases)._

## 1.80.1


## Changes:

* d8ec44919265b3641b7898a02038cbfe14590ee5 .NET: Bump package version to 1.80.1 (#14370)
* 3438d882147b6e3e19a161a5f0dcb64e23e181db .NET: update SDK to 10.0.303 (#14353)
* 437336175b8ef841a8ccace6c6cf909f34f0cad6 .NET: Remove retired OpenAI Assistants integration tests (#14354)
* a64827ec8c5621eeaf7c4c5dabdb5355bb253177 ci: removes extraneous nuget.config file (#14341)
* a2200032989f05b35477b17423364a32d503d758 chore: bumps the OpenAPI dependencies to the latest versions (#14340)
* 60264bbdc87071ded45af3ff3eb538ee8cc3fc72 tests: refactors redirection tests to avoid race condition (#14342) [ #14340 ]
* b4b0ae7780876a69971d7afe1856aee1dd1092b1 chore: fixes typos (#14343)
<details><summary><b>See More</b></summary>

* a256f1ae030bebb270e514e11cad677722a174c1 ci: updates aws credential task to fix node20 retirement for GHA (#14345)
* abf10dd6ea072f5a25ebc6f811fc1e3004295ebe Update CommunityToolkit VectorData package names (#14333)
* 6eab62d273a1f19b9a1d6aa1ab2150f2f938941c Pin GitHub Actions to full-length commit SHAs (#14307)
* cd7b533ed19cc8a4cce38cac5dca6b0785ece492 Switch failing test to new model. (#14332)

This list of changes was [auto generated](https://msdata.visualstudio.com/Vienna/_build/results?buildId=234363375&view=logs).</details>

Commits viewable in [compare view](https://github.com/microsoft/semantic-kernel/compare/dotnet-1.80.0...dotnet-1.80.1).
</details>

Updated [Microsoft.SemanticKernel.Connectors.OpenAI](https://github.com/microsoft/semantic-kernel) from 1.80.0 to 1.80.1.

<details>
<summary>Release notes</summary>

_Sourced from [Microsoft.SemanticKernel.Connectors.OpenAI's releases](https://github.com/microsoft/semantic-kernel/releases)._

## 1.80.1


## Changes:

* d8ec44919265b3641b7898a02038cbfe14590ee5 .NET: Bump package version to 1.80.1 (#14370)
* 3438d882147b6e3e19a161a5f0dcb64e23e181db .NET: update SDK to 10.0.303 (#14353)
* 437336175b8ef841a8ccace6c6cf909f34f0cad6 .NET: Remove retired OpenAI Assistants integration tests (#14354)
* a64827ec8c5621eeaf7c4c5dabdb5355bb253177 ci: removes extraneous nuget.config file (#14341)
* a2200032989f05b35477b17423364a32d503d758 chore: bumps the OpenAPI dependencies to the latest versions (#14340)
* 60264bbdc87071ded45af3ff3eb538ee8cc3fc72 tests: refactors redirection tests to avoid race condition (#14342) [ #14340 ]
* b4b0ae7780876a69971d7afe1856aee1dd1092b1 chore: fixes typos (#14343)
<details><summary><b>See More</b></summary>

* a256f1ae030bebb270e514e11cad677722a174c1 ci: updates aws credential task to fix node20 retirement for GHA (#14345)
* abf10dd6ea072f5a25ebc6f811fc1e3004295ebe Update CommunityToolkit VectorData package names (#14333)
* 6eab62d273a1f19b9a1d6aa1ab2150f2f938941c Pin GitHub Actions to full-length commit SHAs (#14307)
* cd7b533ed19cc8a4cce38cac5dca6b0785ece492 Switch failing test to new model. (#14332)

This list of changes was [auto generated](https://msdata.visualstudio.com/Vienna/_build/results?buildId=234363375&view=logs).</details>

Commits viewable in [compare view](https://github.com/microsoft/semantic-kernel/compare/dotnet-1.80.0...dotnet-1.80.1).
</details>

Updated [OpenTelemetry](https://github.com/open-telemetry/opentelemetry-dotnet) from 1.18.0 to 1.19.1.

<details>
<summary>Release notes</summary>

_Sourced from [OpenTelemetry's releases](https://github.com/open-telemetry/opentelemetry-dotnet/releases)._

## 1.19.1

For highlights and announcements pertaining to this release see: [Release Notes > 1.19.1](https://github.com/open-telemetry/opentelemetry-dotnet/blob/main/RELEASENOTES.md#1191).

The following changes are from the previous release [1.19.0](https://github.com/open-telemetry/opentelemetry-dotnet/releases/tag/core-1.19.0).

* NuGet: [OpenTelemetry v1.19.1](https://www.nuget.org/packages/OpenTelemetry/1.19.1)

  * Fixed `NotSupportedException` thrown when building a `TracerProvider` or `MeterProvider` with a large number of wildcard source/meter patterns on `net8.0`, and a related `OutOfMemoryException` that could occur when many such providers were built over the lifetime of a process.
    ([#7788](https://github.com/open-telemetry/opentelemetry-dotnet/pull/7788))

  See [CHANGELOG](https://github.com/open-telemetry/opentelemetry-dotnet/blob/core-1.19.1/src/OpenTelemetry/CHANGELOG.md) for details.

* NuGet: [OpenTelemetry.Api v1.19.1](https://www.nuget.org/packages/OpenTelemetry.Api/1.19.1)

  No notable changes.

  See [CHANGELOG](https://github.com/open-telemetry/opentelemetry-dotnet/blob/core-1.19.1/src/OpenTelemetry.Api/CHANGELOG.md) for details.

* NuGet: [OpenTelemetry.Api.ProviderBuilderExtensions v1.19.1](https://www.nuget.org/packages/OpenTelemetry.Api.ProviderBuilderExtensions/1.19.1)

  No notable changes.

  See [CHANGELOG](https://github.com/open-telemetry/opentelemetry-dotnet/blob/core-1.19.1/src/OpenTelemetry.Api.ProviderBuilderExtensions/CHANGELOG.md) for details.

* NuGet: [OpenTelemetry.Exporter.Console v1.19.1](https://www.nuget.org/packages/OpenTelemetry.Exporter.Console/1.19.1)

  No notable changes.

  See [CHANGELOG](https://github.com/open-telemetry/opentelemetry-dotnet/blob/core-1.19.1/src/OpenTelemetry.Exporter.Console/CHANGELOG.md) for details.

* NuGet: [OpenTelemetry.Exporter.InMemory v1.19.1](https://www.nuget.org/packages/OpenTelemetry.Exporter.InMemory/1.19.1)

  No notable changes.

  See [CHANGELOG](https://github.com/open-telemetry/opentelemetry-dotnet/blob/core-1.19.1/src/OpenTelemetry.Exporter.InMemory/CHANGELOG.md) for details.

* NuGet: [OpenTelemetry.Exporter.OpenTelemetryProtocol v1.19.1](https://www.nuget.org/packages/OpenTelemetry.Exporter.OpenTelemetryProtocol/1.19.1)

  No notable changes.

  See [CHANGELOG](https://github.com/open-telemetry/opentelemetry-dotnet/blob/core-1.19.1/src/OpenTelemetry.Exporter.OpenTelemetryProtocol/CHANGELOG.md) for details.

* NuGet: [OpenTelemetry.Exporter.Zipkin v1.19.1](https://www.nuget.org/packages/OpenTelemetry.Exporter.Zipkin/1.19.1)

  No notable changes.

  See [CHANGELOG](https://github.com/open-telemetry/opentelemetry-dotnet/blob/core-1.19.1/src/OpenTelemetry.Exporter.Zipkin/CHANGELOG.md) for details.

* NuGet: [OpenTelemetry.Extensions.Hosting v1.19.1](https://www.nuget.org/packages/OpenTelemetry.Extensions.Hosting/1.19.1)

  No notable changes.
 ... (truncated)

## 1.19.1-rc.1

The following changes are from the previous release [1.19.0](https://github.com/open-telemetry/opentelemetry-dotnet/releases/tag/core-1.19.0).

* NuGet: [OpenTelemetry v1.19.1-rc.1](https://www.nuget.org/packages/OpenTelemetry/1.19.1-rc.1)

  * Fixed `NotSupportedException` thrown when building a `TracerProvider` or `MeterProvider` with a large number of wildcard source/meter patterns on `net8.0`, and a related `OutOfMemoryException` that could occur when many such providers were built over the lifetime of a process.
    ([#7788](https://github.com/open-telemetry/opentelemetry-dotnet/pull/7788))

  See [CHANGELOG](https://github.com/open-telemetry/opentelemetry-dotnet/blob/core-1.19.1-rc.1/src/OpenTelemetry/CHANGELOG.md) for details.

* NuGet: [OpenTelemetry.Api v1.19.1-rc.1](https://www.nuget.org/packages/OpenTelemetry.Api/1.19.1-rc.1)

  No notable changes.

  See [CHANGELOG](https://github.com/open-telemetry/opentelemetry-dotnet/blob/core-1.19.1-rc.1/src/OpenTelemetry.Api/CHANGELOG.md) for details.

* NuGet: [OpenTelemetry.Api.ProviderBuilderExtensions v1.19.1-rc.1](https://www.nuget.org/packages/OpenTelemetry.Api.ProviderBuilderExtensions/1.19.1-rc.1)

  No notable changes.

  See [CHANGELOG](https://github.com/open-telemetry/opentelemetry-dotnet/blob/core-1.19.1-rc.1/src/OpenTelemetry.Api.ProviderBuilderExtensions/CHANGELOG.md) for details.

* NuGet: [OpenTelemetry.Exporter.Console v1.19.1-rc.1](https://www.nuget.org/packages/OpenTelemetry.Exporter.Console/1.19.1-rc.1)

  No notable changes.

  See [CHANGELOG](https://github.com/open-telemetry/opentelemetry-dotnet/blob/core-1.19.1-rc.1/src/OpenTelemetry.Exporter.Console/CHANGELOG.md) for details.

* NuGet: [OpenTelemetry.Exporter.InMemory v1.19.1-rc.1](https://www.nuget.org/packages/OpenTelemetry.Exporter.InMemory/1.19.1-rc.1)

  No notable changes.

  See [CHANGELOG](https://github.com/open-telemetry/opentelemetry-dotnet/blob/core-1.19.1-rc.1/src/OpenTelemetry.Exporter.InMemory/CHANGELOG.md) for details.

* NuGet: [OpenTelemetry.Exporter.OpenTelemetryProtocol v1.19.1-rc.1](https://www.nuget.org/packages/OpenTelemetry.Exporter.OpenTelemetryProtocol/1.19.1-rc.1)

  No notable changes.

  See [CHANGELOG](...

_Description has been truncated_

Bumps Azure.Monitor.OpenTelemetry.Exporter from 1.8.3 to 1.9.0 Bumps GitHub.Copilot.SDK from 1.0.11 to 1.0.14 Bumps Microsoft.Agents.AI from 1.20.0 to 1.22.0 Bumps Microsoft.Extensions.AI from 10.9.0 to 10.10.0 Bumps Microsoft.Extensions.AI.Abstractions from 10.9.0 to 10.10.0 Bumps Microsoft.Extensions.AI.OpenAI from 10.9.0 to 10.10.0 Bumps Microsoft.Extensions.Hosting from 10.0.11 to 10.0.12 Bumps Microsoft.Identity.Client.Extensions.Msal from 4.88.0 to 4.90.0 Bumps Microsoft.SemanticKernel.Agents.Core from 1.80.0 to 1.80.1 Bumps Microsoft.SemanticKernel.Connectors.AzureOpenAI from 1.80.0 to 1.80.1 Bumps Microsoft.SemanticKernel.Connectors.OpenAI from 1.80.0 to 1.80.1 Bumps OpenTelemetry from 1.18.0 to 1.19.1 Bumps OpenTelemetry.Exporter.Console from 1.18.0 to 1.19.1 Bumps OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.18.0 to 1.19.1 Bumps OpenTelemetry.Extensions.Hosting from 1.18.0 to 1.19.1 Bumps OpenTelemetry.Instrumentation.AspNetCore from 1.18.0 to 1.19.0 Bumps OpenTelemetry.Instrumentation.Http from 1.18.0 to 1.19.0 Bumps OpenTelemetry.Instrumentation.Runtime from 1.18.0 to 1.19.0 --- updated-dependencies: - dependency-name: Microsoft.Agents.AI dependency-version: 1.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-all - dependency-name: Microsoft.Extensions.AI dependency-version: 10.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-all - dependency-name: Microsoft.Extensions.AI.Abstractions dependency-version: 10.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-all - dependency-name: Microsoft.Extensions.AI.OpenAI dependency-version: 10.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-all - dependency-name: OpenTelemetry.Exporter.Console dependency-version: 1.19.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-all - dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol dependency-version: 1.19.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-all - dependency-name: OpenTelemetry.Extensions.Hosting dependency-version: 1.19.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-all - dependency-name: OpenTelemetry.Instrumentation.AspNetCore dependency-version: 1.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-all - dependency-name: OpenTelemetry.Instrumentation.Http dependency-version: 1.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-all - dependency-name: OpenTelemetry.Instrumentation.Runtime dependency-version: 1.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-all - dependency-name: GitHub.Copilot.SDK dependency-version: 1.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-all - dependency-name: Microsoft.Extensions.Hosting dependency-version: 10.0.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-all - dependency-name: Microsoft.Identity.Client.Extensions.Msal dependency-version: 4.90.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-all - dependency-name: Azure.Monitor.OpenTelemetry.Exporter dependency-version: 1.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-all - dependency-name: OpenTelemetry dependency-version: 1.19.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-all - dependency-name: OpenTelemetry.Exporter.Console dependency-version: 1.19.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-all - dependency-name: OpenTelemetry.Exporter.OpenTelemetryProtocol dependency-version: 1.19.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-all - dependency-name: OpenTelemetry.Extensions.Hosting dependency-version: 1.19.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-all - dependency-name: OpenTelemetry.Instrumentation.AspNetCore dependency-version: 1.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-all - dependency-name: OpenTelemetry.Instrumentation.Http dependency-version: 1.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-all - dependency-name: OpenTelemetry.Instrumentation.Runtime dependency-version: 1.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget-all - dependency-name: Microsoft.SemanticKernel.Agents.Core dependency-version: 1.80.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-all - dependency-name: Microsoft.SemanticKernel.Connectors.AzureOpenAI dependency-version: 1.80.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-all - dependency-name: Microsoft.SemanticKernel.Connectors.OpenAI dependency-version: 1.80.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: nuget-all ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Sep 22, 2026

github-actions Bot added the Samples Changes to Samples label Sep 22, 2026

tracyboehrer (tracyboehrer) enabled auto-merge September 22, 2026 16:09

tracyboehrer (tracyboehrer) approved these changes Sep 22, 2026

View reviewed changes

tracyboehrer (tracyboehrer) merged commit 010a6af into main Sep 22, 2026
9 checks passed

tracyboehrer (tracyboehrer) deleted the dependabot/nuget/samples/dotnet/Agent-Framework/nuget-all-53b881bf26 branch September 22, 2026 16:10

Navigation Menu

Bump the nuget-all group with 18 updates - #733

Bump the nuget-all group with 18 updates#733
tracyboehrer (tracyboehrer) merged 1 commit into
mainfrom
dependabot/nuget/samples/dotnet/Agent-Framework/nuget-all-53b881bf26

dependabot Bot commented on behalf of github Sep 22, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 22, 2026

1.9.0

1.9.0 (2026-09-04)

Features Added

Bugs Fixed

Other Changes

1.0.14

Feature: typed message provenance for user, system, and agent sources

Feature: Auto model routing Fast tier

Feature: force-refresh managed settings cache

Feature: Rust SDK model allowlists

Other changes

1.0.14-preview.1

Feature: pause and resume durable factory runs at checkpoints

1.0.14-preview.0

Feature: typed message provenance across all SDKs

Feature: force-refresh enterprise managed settings

Other changes

1.0.13

Feature: cancellation for host-owned external tools

Feature: declare application identity with client info

Feature: Node Agent Factories pagination and run notifications

Feature: selectable ask_user session behavior

Feature: rotating session-scoped GitHub credentials

Feature: extensions can request sensitive environment variables

Feature: early session-event subscription (Rust)

Feature: session-scoped GitHub token providers

Feature: Java in-process native runtime on all platforms

1.0.13-preview.3

Feature: rewind support across all SDKs

Feature: session-scoped GitHub token providers

Feature: built-in plugin directory support

1.0.13-preview.2

Feature: rewind support across all SDKs

Feature: session-scoped GitHub token providers

1.0.13-preview.0

Feature: rewind support across all SDKs

Feature: Java in-process runtime (experimental)

Feature: permission decision context forwarding

Feature: built-in plugin directory support

Feature: extensions can request sensitive environment variables (Node)

1.0.12-preview.0

Feature: rewind support across all SDKs

Feature: Java in-process Copilot CLI (linux-x64)

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Feature: selectable `ask_user` session behavior