Agent Framework Updates & Release Notes

[1.16.0] - 2026-08-27

Added

agent-framework-core: Add configurable timeouts for waiting on the first background-agent task completion (#7908)

agent-framework-core: Allow programmatic OpenTelemetry service metadata, resource attributes, and OTLP exporter configuration (#7703)

Changed

agent-framework-foundry-hosting: Update Agent Server dependencies and expose parent FoundryToolbox constructor options (#7921)

samples: Apply ChatKit attachment lifecycle checks consistently in the end-to-end sample (#7846)

Fixed

agent-framework-ag-ui, agent-framework-foundry-hosting: Preserve backend-owned service-session snapshots and validate incremental provider continuation input (#7770)

agent-framework-anthropic, agent-framework-mistral: Preserve unmapped provider finish reasons (#7850)

agent-framework-azure-ai-search: Preserve the kinds of heterogeneous knowledge sources (#7875)

agent-framework-core: Prevent workflow checkpoints from being mutated outside storage implementations (#7847)

agent-framework-core: Discard unsafe Content fields during deep copy (#7903)

agent-framework-core: Avoid mutating caller input in SerializationMixin.from_dict() (#7901)

agent-framework-core: Keep the private agent-loop iteration marker out of provider SDK requests (#7860)

agent-framework-gemini: Preserve unmapped finish reasons and attach usage details to the correct response (#7837)

agent-framework-openai: Preserve streaming when GenAI instrumentation replaces the raw SDK response (#7705)

What's Changed

• .NET: Add session-persisted chat client routing by westey (@westey-m) in #7641
• .NET: Fix snake_case argument names in Harness file tool descriptions by westey (@westey-m) with @Copilot in #7731
• .NET: Pass IServiceProvider to ChatClientAgent in AddAIAgent overloads by westey (@westey-m) in #7737
• .NET: Python: Clarify PR review comment resolution by Evan Mattson (@moonbox3) in #7746
• .NET: Update AG-UI samples for latest MAF + AG-UI SDK and align with docs by Daniel Roth (@danroth27) in #7295
• .NET: Migrate remaining Foundry hosted samples to source deployment by Roger Barreto (@rogerbarreto) in #7668
• .NET: agent-hooks interception contract as a first-class experimental feature by MohammadHaroonAbuomar in #7564
• .NET: Forward AG-UI context and additional properties by Javier Calvarro Nelson (@javiercn) in #7742
• .NET: Suppress Swagger UI CodeQL alert in AgentWebChat sample by SergeyMenshykh in #7764
• .NET: Remove AGUI history special cases from ChatClientAgent by Javier Calvarro Nelson (@javiercn) in #7741
• .NET: Fix A2A streaming artifact updates by SergeyMenshykh in #7722
• Python: Harness blog part4 samples by westey (@westey-m) in #7698
• .NET: Clarify compaction provider and chat reducer choices by Ravi Kiran Pagidi (@ravikiranpagidi) in #7678
• .NET: Add Azure Blob Storage session persistence by Korolev Dmitry (@DeagleGross) in #1893
• .NET: Persist hosted agent state in Foundry by Roger Barreto (@rogerbarreto) in #7649
• .NET: [BREAKING] Migrate MCP long-running task support to the 2026-07-28 Tasks extension by Peter Ibekwe (@peibekwe) in #7774
• .NET: Add feature-usage bitmask by Peter Ibekwe (@peibekwe) in #7709
• Bump Anthropic from 12.35.1 to 12.42.0 by Dependabot (@dependabot)[bot] in #7778
• .NET: Fix ReasoningSummary passthrough in GitHub Copilot resume config by Chandramouleswaran (@chandramouleswaran) in #6441
• .NET: Bump AgentMemory from 1.3.0 to 1.4.1 by Dependabot (@dependabot)[bot] in #7639
• .NET: Add support for Resilient long-running and Steerable Foundry Hosted Agents by Roger Barreto (@rogerbarreto) in #7370
• .NET: Update version for 1.19.0 release by Roger Barreto (@rogerbarreto) in #7814

New Contributors

• Daniel Roth (@danroth27) made their first contribution in #7295
• Manjunath Janardhan (@manjunathshiva) made their first contribution in #7755
• ALEX LILUZ (@alexliluz) made their first contribution in #7766
• Dan Fiedler (@danfiedler-msft) made their first contribution in #7768
• Ravi Kiran Pagidi (@ravikiranpagidi) made their first contribution in #7678
• Sadok Barbouche (@cr-sbarbouche) made their first contribution in #7734
• Ran Shemtov (@ranst91) made their first contribution in #7423
• Quim Muntal (@qmuntal) made their first contribution in #7754

Full Changelog: dotnet-1.18.0...dotnet-1.19.0

[1.15.0] - 2026-08-21

Added

• agent-framework-ag-ui, agent-framework-openai: Add optional A2UI support for agent-generated interfaces and preserve streaming tool-call indices for A2UI consumers (#7423)
• agent-framework-core: Add MiddlewareFailure as a first-class fatal signal for function middleware (#7562)
• agent-framework-core, agent-framework-azure-cosmos: Add a process-wide workflow checkpoint type registry, register Cosmos checkpoint state types, and declare the compatibility dependency required by the supported Cosmos SDK floor (#7636)
• agent-framework-core, agent-framework-foundry-hosting: Add steering, retry, and recovery support for resilient Foundry Hosted Agents, with long-running workflow samples (#7670)
• samples: Add the production-ready installment of the build-your-own-claw harness sample (#7698)

Changed

• agent-framework-ag-ui, agent-framework-core: [BREAKING] Consolidate OpenTelemetry GenAI semantic-convention support around stable and experimental modes with explicit message-event controls (#7673)
• agent-framework-ag-ui: Align run continuity and avoid emitting unchanged predictive state snapshots (#7662, #7766)
• agent-framework-core: Defer turn-scoped after_run context providers to the agent-loop boundary (#7289)
• agent-framework-ag-ui, agent-framework-core, agent-framework-declarative: Persist approval state and distinguish absent values from falsey approval data (#7631)
• agent-framework-devui: Forward function_invocation_kwargs through DevUI agent runs (#7779)
• agent-framework-core, samples: Clarify skill script arguments and MCP tool argument-filtering behavior (#7695, #7801)
• tests: Update uv, Ruff, mypy, ty, Flit, and the root build-system dependency range (#7644, #7645, #7780, #7781, #7782, #7783, #7784)
• docs: Clarify PR review resolution and pin the Agent Lightning installation documentation link (#7746, #7693)

Fixed

• agent-framework-a2a, agent-framework-core, agent-framework-orchestrations: Preserve and normalize A2A inputs when used through orchestrations (#7761)
• agent-framework-ag-ui: Preserve tool-message IDs, URL-source attachments, and JSON workflow resume payloads (#7510, #7655, #7684)
• agent-framework-anthropic, agent-framework-core: Preserve structured instructions when merging chat options (#7730)
• agent-framework-core: Preserve all fan-in trace contexts and restrict workflow type deserialization (#7557, #7500)
• agent-framework-core: Avoid remote MCP tool-name shadowing while retaining the documented argument allowlist (#7799)
• agent-framework-core: Always emit an arguments field for zero-argument tool calls in Foundry evaluations (#7734)
• agent-framework-core, agent-framework-github-copilot: Forward telemetry configuration to the GitHub Copilot client (#7625)
• agent-framework-core, agent-framework-redis: Prevent superlinear history growth by deduplicating saved messages (#7242)
• agent-framework-devui: Deduplicate streamed tool calls (#7652)
• agent-framework-foundry-hosting: Surface A2A preview consent URLs and prevent duplicate streamed function calls (#7606, #7486)
• agent-framework-orchestrations: Preserve agent additional_properties in handoff clones (#7755)

What's Changed

• .NET: [Experimental] Extend A2A task store with isolation key scoping by SergeyMenshykh in #7504
• .NET: Add CodeQL suppression for DevUI proxy validation by SergeyMenshykh in #7505
• .NET: Bound the tool-approval auto-approval loop (#7472) by Atharva Vichare (@atty57) in #7474
• .NET: Harden file skill discovery by SergeyMenshykh in #7540
• .NET: Give a hosted agent a single source of conversation history by Roger Barreto (@rogerbarreto) in #7525
• .NET: Aggregate usage across looping agents and chat clients by westey (@westey-m) in #7539
• .NET: Store executable function calls bypassed by declaration-only tool calls by westey (@westey-m) in #7388
• .NET: [BREAKING] Rename to AgentIsolationKeyProvider by SergeyMenshykh in #7567
• .NET: Improve string parsing in declarative workflows by Peter Ibekwe (@peibekwe) in #7535
• .NET: Add Cosmos NoSQL vector memory sample by Saurish (@nos-redacted) in #7552
• .NET: Fix misleading workflow protocol attribute diagnostics by Peter Ibekwe (@peibekwe) in #7609
• .NET: Prevent telemetry serialization failures from failing workflows by Peter Ibekwe (@peibekwe) in #7612
• .NET: Add Options for Hosted Agent to Allow Backend Storage by Roger Barreto (@rogerbarreto) in #7572
• .NET: Add BackgroundAgentsProvider.ReleaseSessionAsync to cancel and release per-session background tasks by westey (@westey-m) in #7602
• .NET: Remove clear and package source mapping from nuget.config to allow user level config inheritance by westey (@westey-m) in #7646
• .NET: Fix IDE0039 by using local functions in samples by Roger Barreto (@rogerbarreto) in #7666
• .NET: Allow agents to opt into concurrent tool invocation by ump45nose in #7650
• .NET: Add Foundry hosted session and user identity pass-through by Roger Barreto (@rogerbarreto) in #7648
• .NET: Add Cosmos chat history retrieval API by Ilia Sokolov (@ilia-sokolov) in #7412
• .NET: Fix declarative workflows deep research sample by Peter Ibekwe (@peibekwe) in #7674
• .NET: Update version for 1.18.0 release by SergeyMenshykh in #7713
• .NET: Fix release build analyzer failures by SergeyMenshykh in #7721

New Contributors

• Saurish (@nos-redacted) made their first contribution in #7552
• Luis Rodriguez (@luisangelrod) made their first contribution in #7509
• Ruiming Zhao (@uuzzrm) made their first contribution in #7597
• Chinmay V (@chinmayv095) made their first contribution in #7470
• ump45nose made their first contribution in #7650
• Ilia Sokolov (@ilia-sokolov) made their first contribution in #7412
• LeoZhaoo (@LobsterQBA) made their first contribution in #7606
• badhope (@weed33834) made their first contribution in #7557

Full Changelog: dotnet-1.17.0...dotnet-1.18.0

[1.14.0] - 2026-08-13

Added

• agent-framework-core, agent-framework-mistral: Add a Mistral chat client with native chat, streaming, tools, structured output, and embeddings support (#7392)
• agent-framework-core: Add experimental AGENT-HOOKS-0.1 enforcement middleware behind the opt-in agent-hooks extra (#7515)
• agent-framework-openai: Add request preparation and response parsing hooks to OpenAIChatCompletionClient (#7028)
• agent-framework-ag-ui: Add workflow checkpoint creation and resume support to AgentFrameworkWorkflow (#6646)
• agent-framework-core: Add BackgroundAgentsProvider.release_session() for safely cancelling work and releasing per-session runtime state (#7450)
• agent-framework-foundry-hosting: Add provider-based Foundry state stores for agent sessions, checkpoints, and function approvals (#7533)
• agent-framework-foundry: Export the Foundry hosted-agent session-state key used for service session continuity (#7608)
• agent-framework-orchestrations: Expose the Magentic orchestrator manager name as MagenticOrchestrator.MANAGER_NAME (#7350)
• agent-framework-gemini: Surface Gemini thought summaries as reasoning content (#7488)
• samples: Add a locally hosted Responses sample for the agent harness (#7010)

Changed

• agent-framework, agent-framework-core, agent-framework-azurefunctions, agent-framework-durabletask: Move the Durable Task and Azure Functions integrations to the Durable Agent Framework extension repository; core continues to re-export their public symbols and install their independently published packages through the all extra (#7465)
• agent-framework-core: [BREAKING — experimental] Require functional workflow definitions to be built into stateful workflow instances before running or adapting them as agents (#7521)
• agent-framework-foundry-hosting: [BREAKING — beta] Migrate Foundry Hosted Agents to the Agent Server Responses 2.x storage model (#7533)
• agent-framework-foundry-hosting, agent-framework-azure-contentunderstanding: Update Azure Agent Server dependencies to the 2.1 beta line and adapt request and storage handling (#7621)
• agent-framework-foundry: Make encrypted reasoning opt-in for Foundry chat requests (#7536)
• agent-framework-mem0: Separate Mem0 storage and search scopes (#7531)
• agent-framework-ag-ui: Consolidate thread-snapshot ownership and remove unused internal orchestration helpers (#7426, #7479)
• agent-framework-devui: Update frontend transitive dependencies (#7493, #7554)
• agent-framework-mistral, agent-framework-ollama: Expand the supported uv_build version range (#7445)
• tests: Update Python development tools and improve sample validation with deterministic replay (#7350, #7445, #7541, #7545)
• samples: Update frontend dependencies and add a Foundry Hosted Agents custom-storage sample (#7529, #7621)

Fixed

• agent-framework-core: Ignore excluded tool results during compaction (#7391)
• agent-framework-core: Bound tool-result compaction summaries before provider calls (#7396)
• agent-framework-core: Report evaluator results with zero checks correctly (#7399)
• agent-framework-core: Reject Windows junctions while discovering and accessing skills (#7507)
• agent-framework-core: Warn when advertised MCP archives are rejected (#7622)
• agent-framework-core: Prevent streaming transcript duplication with message injection and per-service-call persistence (#7605)
• agent-framework-ag-ui, agent-framework-core: Preserve conversation correlation across AG-UI runs (#7430)
• agent-framework-ag-ui: Preserve approval resume semantics at the protocol boundary (#7480)
• agent-framework-ag-ui: Make approval lifecycle, interruption recovery, and replay behavior occurrence-safe (#7594)
• agent-framework-azure-ai-search: Forward query-source identity to Azure AI Search (#7278)
• agent-framework-azure-cosmos-memory: Call the renamed Cosmos toolkit registration API (#7635)
• agent-framework-claude: Avoid reusing one Claude SDK client across distinct fresh sessions (#7404)
• agent-framework-copilotstudio: Handle large activities without line-length failures, update the Copilot Studio client dependency, and declare its required HTTP and authentication runtime dependencies (#7417)
• agent-framework-declarative: Preserve falsey EditTableV2 items and robustly extract JSON from declarative workflow responses (#7380, #7550)
• agent-framework-foundry: Preserve Foundry hosted-agent session IDs independently from conversation continuation IDs (#7608)
• agent-framework-gemini: Restore thought_signature values during approval replay (#7546)
• agent-framework-github-copilot: Scope under-specified approve-for-session decisions to the current tool and align package metadata with the SDK's Python 3.11 minimum (#7607)
• agent-framework-mistral: Preserve prompt-cache usage details (#7597)
• agent-framework-openai: Prevent orphaned local approval responses and safely ignore non-string Chat Completions content (#7462, #7028)
• agent-framework-redis: Honor a max_messages retention limit of zero (#7470)

Full Changelog: python-1.13.0...python-1.14.0

[1.13.0] - 2026-07-30

Added

agent-framework-core, agent-framework-foundry-hosting: Add bounded, in-memory archive skill discovery for MCP sources and expose archive controls through FoundryToolbox (#7121)

agent-framework-core, agent-framework-foundry-hosting, agent-framework-hosting, agent-framework-hosting-responses, agent-framework-hosting-telegram: Add reusable session stores and persist complete Foundry Responses sessions (#7306)

agent-framework-a2a, agent-framework-ag-ui, agent-framework-anthropic, agent-framework-azure-ai-search, agent-framework-azure-contentunderstanding, agent-framework-azure-cosmos, agent-framework-azure-cosmos-memory, agent-framework-azurefunctions, agent-framework-bedrock, agent-framework-chatkit, agent-framework-claude, agent-framework-copilotstudio, agent-framework-core, agent-framework-declarative, agent-framework-devui, agent-framework-durabletask, agent-framework-foundry, agent-framework-foundry-hosting, agent-framework-foundry-local, agent-framework-gemini, agent-framework-github-copilot, agent-framework-hosting, agent-framework-hosting-a2a, agent-framework-hosting-mcp, agent-framework-hosting-responses, agent-framework-hosting-telegram, agent-framework-hyperlight, agent-framework-lab, agent-framework-mem0, agent-framework-mistral, agent-framework-monty, agent-framework-ollama, agent-framework-openai, agent-framework-orchestrations, agent-framework-purview, agent-framework-redis, agent-framework-tools: Add process-wide feature-usage telemetry with first-party User-Agent reporting (#7420)

agent-framework-core, agent-framework-openai: Add OpenAI cache-write token usage details to observability data (#7369)

agent-framework-openai: Support ephemeral per-request instructions in the Responses API (#7292)

agent-framework-foundry-hosting: Support asynchronous credentials in FoundryToolbox (#7208)

samples: Demonstrate archive-backed MCP skills with progressive disclosure in the Foundry Toolbox sample (#7121)

samples: Add FileMemoryProvider, TodoProvider, AgentModeProvider, and GitHub Copilot BYOK samples (#7309, #7336, #7428)

Changed

agent-framework-ag-ui, agent-framework-core: [BREAKING] Make workflow checkpoints fully replayable from initial input and human-in-the-loop responses (#7374)

agent-framework-devui: Update frontend transitive dependencies (#7232)

samples: Remove numeric prefixes from Foundry Hosted Agent sample names and update frontend dependencies (#7314, #7315, #7405)

tests: Add isolated lower- and upper-bound release validation and improve Python package-management tooling (#7274, #7342)

Fixed

agent-framework-core: Restrict unpickler module-prefix allowances to type objects (#5923)

agent-framework-core: Apply MCP header_provider headers to initialization and ambient requests (#7305)

agent-framework-core: Enforce the documented target-type check in SerializationMixin.from_dict (#7256)

agent-framework-ag-ui: Preserve model emission order in MESSAGES_SNAPSHOT events (#7239)

agent-framework-foundry: Prevent agent-reference requests from inheriting OPENAI_CHAT_MODEL (#7283)

agent-framework-core: Bound summarization input before provider calls (#7375)

agent-framework-openai: Sanitize Chat Completions message author names (#7127)

agent-framework-anthropic: Prevent streaming token usage from being counted twice (#7162)

agent-framework-core: Preserve declaration-only streaming metadata (#7409)

agent-framework-openai: Preserve approval decisions across Responses API continuations (#7407)

agent-framework-core: Omit tool content returned after function invocation limits are reached (#7408)

agent-framework-core: Keep function-call and result occurrences atomic during compaction (#7406)

agent-framework-ag-ui: Correlate confirm_changes snapshots by call ID (#7411)

agent-framework-ag-ui: Defer provider-injected approvals to in-run execution (#7410)

agent-framework-foundry-hosting: Store hosted checkpoints under the durable home directory (#7220)

agent-framework-ag-ui, agent-framework-core: Improve function approval resume and replay behavior (#7345)

agent-framework-openai: Pass raw JSON Schema response formats through Chat Completions without wrapping (#7199)

agent-framework-core: Extract keywords from non-English text for topic selection (#7130)

agent-framework-gemini: Preserve harness tool declarations (#7322)

agent-framework-core: Handle callable-class middleware safely during type detection (#7333)

agent-framework-core: Reject Windows junctions in FileSystemAgentFileStore (#7291)

agent-framework-azurefunctions, agent-framework-core, agent-framework-durabletask: Preserve sub-workflow state during checkpoint restoration (#7097)

agent-framework-core: Prevent duplicate function calls after approval round trips (#7271)

agent-framework-foundry-hosting: Preserve authentication credentials across FoundryToolbox reconnections (#7202)

agent-framework-ag-ui: Scope workflow caches correctly (#7277)

samples: Fix stale agent.json references in the A2A sample (#7281)

tests: Fix GitHub Actions token propagation for Python integration and sample-validation workflows (#7427)

What's Changed

• .NET: fix InMemoryChatHistoryProvider persisting when service stores history by westey (@westey-m) in #7284
• .NET: Add TodoProvider and AgentModeProvider samples by westey (@westey-m) in #7262
• .NET: Graduate GitHub Copilot agent to stable by Giles Odigwe (@giles17) in #7313
• .NET: Create session for tool approval agent when none provided by westey (@westey-m) in #7310
• .NET: Add Microsoft.Agents.AI.LocalCodeAct to release solution filter by westey (@westey-m) with @Copilot in #7343
• .NET: Preserve table state after declarative EditTable Add by KXH (@KXHXK) in #7324
• .NET: Forward A2A MessageSendParams.Configuration in the A2A adapter by SergeyMenshykh in #7365
• .NET: Workflows: quarantine flaky InputWaiter timeout test (#7360) by Roger Barreto (@rogerbarreto) in #7361
• .NET: Preserve table state across declarative EditTable operations by Peter Ibekwe (@peibekwe) in #7353
• .NET: Add GitHub Copilot BYOK sample by Dineshsuriya D (@droideronline) in #7337
• .NET: Add Anthropic-backed live tests for the OpenAI Responses hosting helpers by Alexander Nachtmann (@ANcpLua) in #7362
• .NET: Fix and re-enable flaky InputWaiter timeout test by Peter Ibekwe (@peibekwe) in #7377
• .NET: Add source (ZIP) deploy oriented hosted agent samples by Roger Barreto (@rogerbarreto) in #7372
• .NET: Bump .NET SDK from 10.0.301 to 10.0.302 by Giles Odigwe (@giles17) in #7376
• .NET: Add FileMemoryProvider sample to 02-agents/AgentWithMemory by westey (@westey-m) in #7401
• .NET: Add regression tests and sample guidance for stable agent IDs in checkpointed workflows by Peter Ibekwe (@peibekwe) in #7415
• .NET: Updating version for dotnet release 1.16.0 by SergeyMenshykh in #7441

New Contributors

• Atharva Vichare (@atty57) made their first contribution in #7271
• Sriraj (@sricursion) made their first contribution in #7291
• KXH (@KXHXK) made their first contribution in #7324
• Henry Su (@hsusul) made their first contribution in #7333
• Alexander Nachtmann (@ANcpLua) made their first contribution in #7362
• Nadjib Attig (@itjuba) made their first contribution in #7127

Full Changelog: python-github-copilot-1.0.0...dotnet-1.16.0

[1.12.1] - 2026-07-22

Added

• agent-framework-openai: Add explicit prompt cache breakpoints for GPT-5.6 models and a usage sample (#7163)

Changed

• agent-framework-ag-ui: Promote the package from release candidate to stable
• agent-framework-core: Add security guidance for custom MCP Streamable HTTP clients (#7245)

Fixed

• agent-framework-gemini: Preserve Gemini 3 thought signatures across function-call replays (#7095)
• agent-framework-core, agent-framework-foundry, agent-framework-foundry-hosting, agent-framework-openai: Fix stateless replay of reasoning-paired tool calls (#7233)

Full Changelog: python-1.12.0...python-1.12.1

What's Changed

Python: Add MCPStreamableHTTPTool security guidance for custom http client by Tao Chen (@TaoChenOSU) in #7245

Harden workflow credential selection by Evan Mattson (@moonbox3) in #7249

Python: preserve Gemini 3 thought_signature across function-call replays by Giles Odigwe (@giles17) in #7095

.NET: [BREAKING] Hosting OpenAI Responses protocol helpers and optional execution state by Roger Barreto (@rogerbarreto) in #7000

.NET: Fix declarative autosend output by Ben Thomas (@alliscode) in #7217

.NET: Updating dotnet version for release. by Ben Thomas (@alliscode) in #7265

.NET: Added GettingStarted example demonstrating Dapr as an agent provider by Whit Waldo (@WhitWaldo) in #1615

Python: Support prompt cache breakpoints for GPT-5.6 models in OpenAI clients by Yunus Emre Gültepe (@Mordris) in #7163

.NET: Fix expensive logging by Ben Thomas (@alliscode) in #7268

Python: Fix stateless replay of reasoning-paired tool calls by Evan Mattson (@moonbox3) in #7233

Reduce workflow credential exposure by Evan Mattson (@moonbox3) in #7270

New Contributors

Whit Waldo (@WhitWaldo) made their first contribution in #1615

Yunus Emre Gültepe (@Mordris) made their first contribution in #7163

Full Changelog: python-1.12.0...dotnet-1.15.0

What's Changed

• .NET: Fix CosmosChatHistoryProvider: omit ttl when MessageTtlSeconds is nul… by Theo van Kraay (@TheovanKraay) in #7030
• .NET: Fix CompactionMessageIndex.IsSummaryMessage by Patrick Woo-Sam (@pwoosam) in #7042
• .NET: Fix workflow session bug by Peter Ibekwe (@peibekwe) in #7032
• .NET: Enable Valkey NuGet package publishing by westey (@westey-m) with @Copilot in #7059
• .NET: [BREAKING] Graduate message injection out of experimental by westey (@westey-m) in #7044
• .NET: [BREAKING] Graduate todo and agent mode providers out of experimental by westey (@westey-m) in #7052
• Update issue triage by Evan Mattson (@moonbox3) in #7098
• .NET: Add name collision warnings for auto-approvals by westey (@westey-m) in #7089
• .NET: Update Microsoft Foundry branding by Nick Brady (@nicholasdbrady) in #6999
• .NET: [BREAKING] Harness: Switch FileAccess to opt-in by westey (@westey-m) in #7093
• fix typos in XML doc comments, ADR docs, and test comments by Rince Yuan (@rinceyuan) in #7085
• .NET: [BREAKING] Graduate ToolApprovalAgent and add ToolAutoApprovalRuleContext by westey (@westey-m) in #7107
• Harden manual integration test trust boundary by Evan Mattson (@moonbox3) in #7081
• CI: resolve PR author in community team check by Roger Barreto (@rogerbarreto) in #7129
• Fix message ordering in workflow-hosted agents by Peter Ibekwe (@peibekwe) in #7123
• .NET: [BREAKING] Graduate FileMemoryProvider by westey (@westey-m) in #7114
• .NET: Preserve UTF-8 order in HeadTailBuffer by King Star (@jstar0) in #7128
• .NET: [Feature]: .NET Improve ChatClientAgentSession constructor by feiyun0112 in #7142
• .NET: Fix LocalCodeAct validation and package checks by Eduard van Valkenburg (@eavanvalkenburg) in #7138
• samples: add AgentMemory (Neo4j-agent memory reimplemented in NET ) shopping assistant sample by Jose Luis Latorre Millas (@joslat) in #7096
• .NET: Honor terminal workflow outputs in Workflow.AsAIAgent responses by ssccinng in #6212
• .NET: Refactor Workflows MessageMerger to preserve message order and structure by Marco Minerva (@marcominerva) in #6826
• .NET: Populate AgentResponse metadata in CopilotStudioAgent by Charles (@anneheartrecord) in #6791
• .NET: [BREAKING] Bind tool-approval responses to surfaced approval requests by Roger Barreto (@rogerbarreto) in #7111
• .NET: [BREAKING] Graduate HarnessAgent by westey (@westey-m) in #7119
• .NET: Version bump for .net release by westey (@westey-m) in #7237
• .NET: Cover source-type-agnostic toolbox consent parsing (a2a_preview) by Roger Barreto (@rogerbarreto) in #7229
• [BREAKING] Python: add Responses conversation ID helper by Eduard van Valkenburg (@eavanvalkenburg) in #7234

The legacy .NET package Microsoft.Agents.AI.AGUI has been split into external AG-UI SDK packages: AGUI.Client, AGUI.Server, AGUI.Abstractions, AGUI.Protobuf (optional transport), and AGUI.Formatting. The ASP.NET Core hosting integration remains in this repository as Microsoft.Agents.AI.Hosting.AGUI.AspNetCore, now layered on top of AGUI.Server. If you are upgrading, replace Microsoft.Agents.AI.AGUI with the relevant AGUI.* packages and rename AddAGUI()/MapAGUI() to AddAGUIServer()/MapAGUIServer().

Full Changelog: python-1.11.0...dotnet-1.14.0

[1.12.0] - 2026-07-21

Added

• agent-framework-azure-cosmos-memory: Add an alpha Azure Cosmos DB semantic-memory context provider with fact extraction, user profiles, samples, and integration coverage (#6719)
• agent-framework-azurefunctions, agent-framework-core, agent-framework-durabletask: Add HITL response-URL addressing for requests raised from inside workflows (#7001)
• agent-framework-core: Add cross-session origin attribution to context-injected messages (#7041)
• agent-framework-core, agent-framework-tools: Warn when auto-approved tools have name collisions (#7090)
• agent-framework-core: Add a session_provider option to MCPSkillsSource and MCPSkill (mutually exclusive with client) that resolves the MCP session on every fetch, keeping cached skills reconnect-safe when the underlying session is replaced (#7135)
• agent-framework-hosting-a2a: Add app-owned A2A hosting helpers (#7050)
• agent-framework-hosting-mcp: Add app-owned MCP hosting helpers for exposing agents and workflows as native MCP tools (#7209)
• agent-framework-hosting-responses: [BREAKING] Add Responses conversation ID creation and parsing helpers, and distinguish conversation IDs from previous response IDs (#7234)
• agent-framework-hosting-telegram: Add Telegram hosting helpers and samples (#7047)
• samples: Add a Microsoft OpenTelemetry Distro observability sample (#5632)

Changed

• agent-framework-ag-ui: [BREAKING] Emit TOOL_CALL events for workflow participant tool calls (#7039)
• agent-framework-a2a: Reduce A2AExecutor log noise for content types without protocol mappings (#7034)
• agent-framework-ag-ui, agent-framework-core: Optimize shared serialization paths (#7165)
• agent-framework-ag-ui, agent-framework-bedrock, agent-framework-claude, agent-framework-core, agent-framework-github-copilot, agent-framework-ollama, agent-framework-openai: Normalize chat finish reasons across providers (#7105)
• agent-framework-anthropic, agent-framework-azure-contentunderstanding, agent-framework-azure-cosmos, agent-framework-core, agent-framework-declarative, agent-framework-devui, agent-framework-foundry, agent-framework: Update Microsoft Foundry branding in shipped APIs and package documentation (#6999)
• agent-framework-azure-contentunderstanding, agent-framework-azure-cosmos-memory, agent-framework-chatkit, agent-framework-core, agent-framework-durabletask, agent-framework-foundry, agent-framework-foundry-hosting, agent-framework-gemini, agent-framework-hyperlight, agent-framework-lab, agent-framework-monty, agent-framework-openai, agent-framework-tools, agent-framework: Consolidate dependency updates and compatibility adjustments (#7204)
• agent-framework-azurefunctions, agent-framework-devui, agent-framework-foundry, agent-framework-hosting-responses, agent-framework-lab, agent-framework-mistral, agent-framework: Clean up dependency groups and compatibility handling (#7046)
• agent-framework-azurefunctions, agent-framework-durabletask: Normalize initial durable workflow inputs across hosting paths (#7205)
• agent-framework-core: [BREAKING — experimental] Correct harness before-strategy compaction when state persists per service call (#7055)
• agent-framework-core: [BREAKING] Graduate create_harness_agent from experimental to stable (#7120)
• agent-framework-core: Graduate the mode and todo providers from experimental to stable (#7053)
• agent-framework-core: Graduate ToolApprovalMiddleware from experimental to stable (#7106)
• agent-framework-core: Graduate FileMemoryProvider from experimental to stable (#7113)
• agent-framework-core: Make FileAccessProvider opt-in for harness agents (#7094)
• agent-framework-core: Serialize tool definitions best-effort for observability (#7029)
• agent-framework-declarative: Promote declarative workflows from release candidate to stable (#7065)
• agent-framework-devui: Refine request logging (#7083)
• agent-framework-foundry-hosting: Promote the package to beta and add it to the main installation surface; make the Foundry Toolbox MCP skills sample self-contained (#7099)
• agent-framework-azure-contentunderstanding, agent-framework-gemini, agent-framework-mistral, agent-framework-monty, agent-framework-tools: Promote the packages to beta, add them to the main installation surface, expose lazy-loading namespaces, and move package-local samples into the root sample tree
• agent-framework-github-copilot: Forward GitHubCopilotOptions verbatim when creating sessions (#7155)
• docs: Add self-hosting sample snippets (#7104)
• docs: Add environment-file templates for Durable Task hosting samples (#5948)
• samples: Keep ChatKit attachments close to the sample application that owns them (#7038)

Fixed

• agent-framework-ag-ui: Bind streamed tool arguments to their call ids (#6342)
• agent-framework-ag-ui: Accept state data URIs whose media type includes parameters (#6905)
• agent-framework-ag-ui: Coalesce reasoning deltas without content ids into a single reasoning block (#6804)
• agent-framework-ag-ui: Bridge request state and session continuity (#7084)
• agent-framework-ag-ui: Replay workflow handoff results correctly (#7102)
• agent-framework-ag-ui: Clarify require_confirmation documentation for confirm_changes HITL gating (#6884)
• agent-framework-anthropic: Prevent per-run additional_beta_flags from leaking into request keyword arguments (#7060)
• agent-framework-core: Clear service_session_id in the agent wrapper when session propagation is enabled (#5875)
• agent-framework-core: Preserve tool span context for parallel calls (#6512)
• agent-framework-core: Parse structured values assembled from split text chunks (#6990)
• agent-framework-core: Raise ValueError for malformed data URIs (#6916)
• agent-framework-core: Preserve function-call names when merging streaming deltas (#6809)
• agent-framework-core, agent-framework-durabletask: Handle checkpoint encodings consistently (#6579)
• agent-framework-core: Preserve explicit null arguments during automatic function calling (#7108)
• agent-framework-core: Count non-ASCII text correctly during compaction (#7124)
• agent-framework-core: Forward header_provider headers to streamable HTTP MCP transports (#7218)
• agent-framework-core: Prevent compaction from emitting empty projections (#7219)
• agent-framework-core: Return MCP tool-use sampling results to the requesting server (#7189)
• agent-framework-foundry-hosting: Make FoundryToolbox.as_skills_provider() cache toolbox skill discovery by default so skill://index.json is read once instead of on every agent run, give disable_caching an observable effect, and add a cache_refresh_interval option (#7135)
• agent-framework-hosting, agent-framework-hosting-responses: Isolate stored session snapshots from later mutations (#7141)
• agent-framework-ollama: Generate distinct call ids for parallel tool calls (#6822)
• agent-framework-orchestrations: Prevent the Magentic manager from duplicating conversation history (#6297)
• samples: Correct the concurrent agents sample's handling of workflow output (#6548)

[1.11.0] - 2026-07-09

Added

• agent-framework-core: Add message injection middleware so tools or host code can enqueue messages into an active run and drain them into the next model call within the same AgentSession (#6998)
• agent-framework-core: Integrate message injection into create_harness_agent and the harness console sample so a running harness agent can be nudged mid-turn (#7027)
• agent-framework-core: Add progressive MCP disclosure so agents can discover, load, and unload MCP tool schemas on demand while keeping the allowed_tools boundary intact (#6850)
• agent-framework-core: Add refresh_interval (TTL) to CachingSkillsSource so cached skill lists expire and re-fetch on a configured interval (#6977)
• agent-framework-core, agent-framework-foundry-hosting: Add SkillsSourceContext (invoking agent plus optional session) threaded through the skills source pipeline, enabling context-aware filtering and per-key cache isolation (#6895)
• agent-framework-core: Allow disabling approval for SkillsProvider tools (#6867)
• agent-framework-core: Allow opting out of FileAccessProvider tool approval (#6879)
• agent-framework-core: Allow custom argument parsing for inline skill scripts so non-conforming tool-call argument shapes (for example, vLLM) can be handled (#6817)
• agent-framework-hosting, agent-framework-hosting-responses: Add a hosting protocol helper surface (AgentState, WorkflowState, SessionStore, AgentRunArgs, WorkflowRunArgs) and Responses helpers (create_response_id, responses_session_id, responses_to_run, responses_from_run, responses_from_streaming_run) (#6891)
• agent-framework-ag-ui: Add FastAPI SSE keepalive support for long, output-silent streams (#6980)
• agent-framework-github-copilot: Forward skill_directories and disabled_skills to the Copilot session (#6937)
• agent-framework-openai: Allow tool_choice: required when allowed_tools is set (#7024)
• agent-framework-anthropic, agent-framework-core, agent-framework-foundry-hosting, agent-framework-gemini, agent-framework-openai: Mark hosted/provider-executed tool calls as informational-only via Content.informational_only so they remain visible in transcripts without local re-invocation (#6997)
• samples: Add a deterministic action-boundary validation middleware sample (#6528)
• samples: Add Agent Harness blog post accompanying samples, part 3 (#6741)
• samples: Add a declarative Foundry Hosted Agent workflow sample (#6897)

Changed

• agent-framework-core: [BREAKING — experimental] Extract caching from SkillsProvider into a CachingSkillsSource decorator (#6847)
• agent-framework-core: [BREAKING — experimental] Treat nested SKILL.md content as part of the parent skill instead of discovering it as a separate skill root (#6849)
• agent-framework-core: [BREAKING — experimental] FileAccess/FileMemory replace_lines now performs literal replacement (including line deletion) instead of always re-adding a line terminator (#6859)
• agent-framework-core: Remove the experimental marker from the Skills API now that its surface is stable (#6974)
• agent-framework-core: Lazy-load root agent_framework exports to reduce import cost for narrow-surface scenarios (#6962)
• agent-framework-a2a, agent-framework-claude, agent-framework-copilotstudio, agent-framework-core, agent-framework-durabletask, agent-framework-github-copilot, agent-framework-purview: Implement ADR-0029 service_session_id lifecycle mapping, separating durable continuation state, per-run identity forwarding, and telemetry conversation-id extraction (#6724)
• agent-framework-azurefunctions, agent-framework-core, agent-framework-durabletask: [BREAKING] Support multi-workflow hosting and sub-workflows on the Durable Task host, including per-workflow durable naming and nested human-in-the-loop request routing (#6696)
• agent-framework-ag-ui: [BREAKING] Canonicalize AG-UI interrupt and resume handling around RUN_FINISHED.outcome.interrupts and canonical ResumeEntry payloads (#6925)
• agent-framework-mem0: Support the mem0ai 2.x OSS search call shape (#7004)
• agent-framework-mistral: Widen the uv_build backend requirement to allow newer uv releases (#7033)
• agent-framework-lab: Raise the agentlightning dependency ceiling for the lightning extra (#6984)
• agent-framework-claude, agent-framework-durabletask, agent-framework-gemini, agent-framework-monty, agent-framework-openai: Raise dependency floors to the first versions that provide the SDK APIs and typing consumed by these packages
• docs: Clarify AgentSession.service_session_id scoping to document backing API key/project boundaries and hosted multi-tenant guidance (#6993)
• docs: Add security guidance for external skill sources and script execution to harness feature docstrings (#6936)
• samples: Bump vite and @vitejs/plugin-react-swc in the ChatKit integration sample frontend (#6613)
• samples: Add a multi-tenant hosting security consideration note to the A2A sample (#6983)
• samples: Update Foundry Hosted Agent samples for the v2 protocol changes (#6841)
• samples: Use a writable runtime directory for the Foundry Skills sample (#6606)
• tests: Add Agent typing smoke tests across chat clients (#6950)
• tests: Skip NumPy stubs during mypy typing to unblock scheduled dependency-maintenance typing runs (#6969)
• tests: Consolidate Dependabot dependency updates for dev tooling (uv, ruff, pytest, mypy, pyright, mcp, opentelemetry-sdk, poethepoet) across the workspace and package dev-dependency groups (#6984, #7033)
• tests: Bump the transitive js-yaml dependency in the DevUI frontend lockfile (#6813)

Fixed

• agent-framework-core: Parse the structured response value from the final message instead of concatenated text, avoiding spurious ValidationError/JSONDecodeError (#6383)
• agent-framework-core: Fix read_skill_resource instruction dropping the .md extension (#7031)
• agent-framework-core: Bind policy-enforcement approvals to a single tool invocation (call id, function, arguments, security label, and session) and consume them on first use (#6966)
• agent-framework-core: Process messages to an executor serially within a superstep to prevent concurrent handler invocations for the same target executor (#6776)
• agent-framework-core: Auto-inject local conversation history on stateless clients even when non-history context providers (for example, SkillsProvider and FileAccessProvider) are registered (#6810)
• agent-framework-core: Improve the error message when a TypeVar is used in handler/executor registration (#4553)
• agent-framework-anthropic, agent-framework-core: Fix Anthropic requests that mix tool calls and tool results in one assistant message, and return a deterministic result when the function-loop limit is reached with a blank final response (#6794)
• agent-framework-anthropic, agent-framework-core, agent-framework-foundry-hosting, agent-framework-openai: Fix Foundry reasoning/MCP compaction so reasoning output keeps its provider id and reasoning plus MCP call pairs stay atomic (#6907)
• agent-framework-anthropic: Normalize a single Anthropic tool value the same as a one-item sequence during request preparation (#6903)
• agent-framework-anthropic: Migrate structured outputs to the stable output_config.format shape to avoid malformed/concatenated JSON when tools are also present (#5884)
• agent-framework-azure-ai-search: Pass include_reference_source_data in agentic search requests so source_data is populated on returned references (#5100)
• agent-framework-bedrock: Fix non-ASCII escaping in JSON content blocks returned by the Converse API (#6628)
• agent-framework-foundry: Strip tools from the Foundry agent request on the preview path (allow_preview=True) to avoid invalid_payload errors (#6644)
• agent-framework-gemini: Fix GeminiChatClient dropping image/file content on multimodal messages (#6751)
• agent-framework-claude, agent-framework-core, agent-framework-github-copilot, agent-framework-ollama: Fix response metadata construction so usage, finish reason, raw response, continuation token, and structured value are propagated consistently across providers (#6955)
• agent-framework-a2a: Accept A2A data URIs whose media type includes parameters before the ;base64 marker (#6818)
• agent-framework-ag-ui: Prefer explicit AG-UI resume payloads over message-derived responses (#6360)
• agent-framework-ag-ui: Clear queued approvals on cancel so cancelled flows do not leave stale prompts for later turns (#6947)
• agent-framework-ag-ui: Preserve the streamed text message id in mixed snapshots with pending tool calls and streamed trailing text (#6269)
• agent-framework-devui: Fix list[Message] input handling for declarative ToolAgent entries (#6534)
• agent-framework-devui: Fix DevUI deployment Dockerfile auth args (#6150)
• agent-framework-hyperlight: Harden workspace staging against symlinks and reparse points that could escape the sandbox workspace/mount root (#6856)
• agent-framework-openai: Fix web_search_options sent to the Azure OpenAI Chat Completions API (#6225)
• docs: Fix stale ChatAgent references in _clients.py docstrings and make tool-support examples copy/paste-safe (#6924)
• samples: Fix an invalid options kwarg in the workflow shared-session sample (#6294)
• docs: Add prerequisite command documentation for Python hosting samples (#5935)

Removed

• agent-framework-hosting-telegram: [BREAKING] Remove the unreleased hosting-telegram package and the earlier host/channel surface from the workspace, superseded by the new hosting protocol helper surface (#6891)

Full Changelog: python-1.10.0...python-1.11.0