[1.13.0] - 2026-07-30

Added

agent-framework-core, agent-framework-foundry-hosting: Add bounded, in-memory archive skill discovery for MCP sources and expose archive controls through FoundryToolbox (#7121)

agent-framework-core, agent-framework-foundry-hosting, agent-framework-hosting, agent-framework-hosting-responses, agent-framework-hosting-telegram: Add reusable session stores and persist complete Foundry Responses sessions (#7306)

agent-framework-a2a, agent-framework-ag-ui, agent-framework-anthropic, agent-framework-azure-ai-search, agent-framework-azure-contentunderstanding, agent-framework-azure-cosmos, agent-framework-azure-cosmos-memory, agent-framework-azurefunctions, agent-framework-bedrock, agent-framework-chatkit, agent-framework-claude, agent-framework-copilotstudio, agent-framework-core, agent-framework-declarative, agent-framework-devui, agent-framework-durabletask, agent-framework-foundry, agent-framework-foundry-hosting, agent-framework-foundry-local, agent-framework-gemini, agent-framework-github-copilot, agent-framework-hosting, agent-framework-hosting-a2a, agent-framework-hosting-mcp, agent-framework-hosting-responses, agent-framework-hosting-telegram, agent-framework-hyperlight, agent-framework-lab, agent-framework-mem0, agent-framework-mistral, agent-framework-monty, agent-framework-ollama, agent-framework-openai, agent-framework-orchestrations, agent-framework-purview, agent-framework-redis, agent-framework-tools: Add process-wide feature-usage telemetry with first-party User-Agent reporting (#7420)

agent-framework-core, agent-framework-openai: Add OpenAI cache-write token usage details to observability data (#7369)

agent-framework-openai: Support ephemeral per-request instructions in the Responses API (#7292)

agent-framework-foundry-hosting: Support asynchronous credentials in FoundryToolbox (#7208)

samples: Demonstrate archive-backed MCP skills with progressive disclosure in the Foundry Toolbox sample (#7121)

samples: Add FileMemoryProvider, TodoProvider, AgentModeProvider, and GitHub Copilot BYOK samples (#7309, #7336, #7428)

Changed

agent-framework-ag-ui, agent-framework-core: [BREAKING] Make workflow checkpoints fully replayable from initial input and human-in-the-loop responses (#7374)

agent-framework-devui: Update frontend transitive dependencies (#7232)

samples: Remove numeric prefixes from Foundry Hosted Agent sample names and update frontend dependencies (#7314, #7315, #7405)

tests: Add isolated lower- and upper-bound release validation and improve Python package-management tooling (#7274, #7342)

Fixed

agent-framework-core: Restrict unpickler module-prefix allowances to type objects (#5923)

agent-framework-core: Apply MCP header_provider headers to initialization and ambient requests (#7305)

agent-framework-core: Enforce the documented target-type check in SerializationMixin.from_dict (#7256)

agent-framework-ag-ui: Preserve model emission order in MESSAGES_SNAPSHOT events (#7239)

agent-framework-foundry: Prevent agent-reference requests from inheriting OPENAI_CHAT_MODEL (#7283)

agent-framework-core: Bound summarization input before provider calls (#7375)

agent-framework-openai: Sanitize Chat Completions message author names (#7127)

agent-framework-anthropic: Prevent streaming token usage from being counted twice (#7162)

agent-framework-core: Preserve declaration-only streaming metadata (#7409)

agent-framework-openai: Preserve approval decisions across Responses API continuations (#7407)

agent-framework-core: Omit tool content returned after function invocation limits are reached (#7408)

agent-framework-core: Keep function-call and result occurrences atomic during compaction (#7406)

agent-framework-ag-ui: Correlate confirm_changes snapshots by call ID (#7411)

agent-framework-ag-ui: Defer provider-injected approvals to in-run execution (#7410)

agent-framework-foundry-hosting: Store hosted checkpoints under the durable home directory (#7220)

agent-framework-ag-ui, agent-framework-core: Improve function approval resume and replay behavior (#7345)

agent-framework-openai: Pass raw JSON Schema response formats through Chat Completions without wrapping (#7199)

agent-framework-core: Extract keywords from non-English text for topic selection (#7130)

agent-framework-gemini: Preserve harness tool declarations (#7322)

agent-framework-core: Handle callable-class middleware safely during type detection (#7333)

agent-framework-core: Reject Windows junctions in FileSystemAgentFileStore (#7291)

agent-framework-azurefunctions, agent-framework-core, agent-framework-durabletask: Preserve sub-workflow state during checkpoint restoration (#7097)

agent-framework-core: Prevent duplicate function calls after approval round trips (#7271)

agent-framework-foundry-hosting: Preserve authentication credentials across FoundryToolbox reconnections (#7202)

agent-framework-ag-ui: Scope workflow caches correctly (#7277)

samples: Fix stale agent.json references in the A2A sample (#7281)

tests: Fix GitHub Actions token propagation for Python integration and sample-validation workflows (#7427)

What's Changed

.NET: fix InMemoryChatHistoryProvider persisting when service stores history by @westey-m in #7284
.NET: Add TodoProvider and AgentModeProvider samples by @westey-m in #7262
.NET: Graduate GitHub Copilot agent to stable by @giles17 in #7313
.NET: Create session for tool approval agent when none provided by @westey-m in #7310
.NET: Add Microsoft.Agents.AI.LocalCodeAct to release solution filter by @westey-m with @Copilot in #7343
.NET: Preserve table state after declarative EditTable Add by @KXHXK in #7324
.NET: Forward A2A MessageSendParams.Configuration in the A2A adapter by @SergeyMenshykh in #7365
.NET: Workflows: quarantine flaky InputWaiter timeout test (#7360) by @rogerbarreto in #7361
.NET: Preserve table state across declarative EditTable operations by @peibekwe in #7353
.NET: Add GitHub Copilot BYOK sample by @droideronline in #7337
.NET: Add Anthropic-backed live tests for the OpenAI Responses hosting helpers by @ANcpLua in #7362
.NET: Fix and re-enable flaky InputWaiter timeout test by @peibekwe in #7377
.NET: Add source (ZIP) deploy oriented hosted agent samples by @rogerbarreto in #7372
.NET: Bump .NET SDK from 10.0.301 to 10.0.302 by @giles17 in #7376
.NET: Add FileMemoryProvider sample to 02-agents/AgentWithMemory by @westey-m in #7401
.NET: Add regression tests and sample guidance for stable agent IDs in checkpointed workflows by @peibekwe in #7415
.NET: Updating version for dotnet release 1.16.0 by @SergeyMenshykh in #7441

New Contributors

@atty57 made their first contribution in #7271
@sricursion made their first contribution in #7291
@KXHXK made their first contribution in #7324
@hsusul made their first contribution in #7333
@ANcpLua made their first contribution in #7362
@itjuba made their first contribution in #7127

Full Changelog: python-github-copilot-1.0.0...dotnet-1.16.0

[1.12.1] - 2026-07-22

Added

• agent-framework-openai: Add explicit prompt cache breakpoints for GPT-5.6 models and a usage sample (#7163)

Changed

• agent-framework-ag-ui: Promote the package from release candidate to stable
• agent-framework-core: Add security guidance for custom MCP Streamable HTTP clients (#7245)

Fixed

• agent-framework-gemini: Preserve Gemini 3 thought signatures across function-call replays (#7095)
• agent-framework-core, agent-framework-foundry, agent-framework-foundry-hosting, agent-framework-openai: Fix stateless replay of reasoning-paired tool calls (#7233)

Full Changelog: python-1.12.0...python-1.12.1

What's Changed

• Python: Add MCPStreamableHTTPTool security guidance for custom http client by @TaoChenOSU in #7245
• Harden workflow credential selection by @moonbox3 in #7249
• Python: preserve Gemini 3 thought_signature across function-call replays by @giles17 in #7095
• .NET: [BREAKING] Hosting OpenAI Responses protocol helpers and optional execution state by @rogerbarreto in #7000
• .NET: Fix declarative autosend output by @alliscode in #7217
• .NET: Updating dotnet version for release. by @alliscode in #7265
• .NET: Added GettingStarted example demonstrating Dapr as an agent provider by @WhitWaldo in #1615
• Python: Support prompt cache breakpoints for GPT-5.6 models in OpenAI clients by @Mordris in #7163
• .NET: Fix expensive logging by @alliscode in #7268
• Python: Fix stateless replay of reasoning-paired tool calls by @moonbox3 in #7233
• Reduce workflow credential exposure by @moonbox3 in #7270

New Contributors

• @WhitWaldo made their first contribution in #1615
• @Mordris made their first contribution in #7163

Full Changelog: python-1.12.0...dotnet-1.15.0

What's Changed

• .NET: Fix CosmosChatHistoryProvider: omit ttl when MessageTtlSeconds is nul… by @TheovanKraay in #7030
• .NET: Fix CompactionMessageIndex.IsSummaryMessage by @pwoosam in #7042
• .NET: Fix workflow session bug by @peibekwe in #7032
• .NET: Enable Valkey NuGet package publishing by @westey-m with @Copilot in #7059
• .NET: [BREAKING] Graduate message injection out of experimental by @westey-m in #7044
• .NET: [BREAKING] Graduate todo and agent mode providers out of experimental by @westey-m in #7052
• Update issue triage by @moonbox3 in #7098
• .NET: Add name collision warnings for auto-approvals by @westey-m in #7089
• .NET: Update Microsoft Foundry branding by @nicholasdbrady in #6999
• .NET: [BREAKING] Harness: Switch FileAccess to opt-in by @westey-m in #7093
• fix typos in XML doc comments, ADR docs, and test comments by @rinceyuan in #7085
• .NET: [BREAKING] Graduate ToolApprovalAgent and add ToolAutoApprovalRuleContext by @westey-m in #7107
• Harden manual integration test trust boundary by @moonbox3 in #7081
• CI: resolve PR author in community team check by @rogerbarreto in #7129
• Fix message ordering in workflow-hosted agents by @peibekwe in #7123
• .NET: [BREAKING] Graduate FileMemoryProvider by @westey-m in #7114
• .NET: Preserve UTF-8 order in HeadTailBuffer by @jstar0 in #7128
• .NET: [Feature]: .NET Improve ChatClientAgentSession constructor by @feiyun0112 in #7142
• .NET: Fix LocalCodeAct validation and package checks by @eavanvalkenburg in #7138
• samples: add AgentMemory (Neo4j-agent memory reimplemented in NET ) shopping assistant sample by @joslat in #7096
• .NET: Honor terminal workflow outputs in Workflow.AsAIAgent responses by @ssccinng in #6212
• .NET: Refactor Workflows MessageMerger to preserve message order and structure by @marcominerva in #6826
• .NET: Populate AgentResponse metadata in CopilotStudioAgent by @anneheartrecord in #6791
• .NET: [BREAKING] Bind tool-approval responses to surfaced approval requests by @rogerbarreto in #7111
• .NET: [BREAKING] Graduate HarnessAgent by @westey-m in #7119
• .NET: Version bump for .net release by @westey-m in #7237
• .NET: Cover source-type-agnostic toolbox consent parsing (a2a_preview) by @rogerbarreto in #7229
• [BREAKING] Python: add Responses conversation ID helper by @eavanvalkenburg in #7234

The legacy .NET package Microsoft.Agents.AI.AGUI has been split into external AG-UI SDK packages: AGUI.Client, AGUI.Server, AGUI.Abstractions, AGUI.Protobuf (optional transport), and AGUI.Formatting. The ASP.NET Core hosting integration remains in this repository as Microsoft.Agents.AI.Hosting.AGUI.AspNetCore, now layered on top of AGUI.Server. If you are upgrading, replace Microsoft.Agents.AI.AGUI with the relevant AGUI.* packages and rename AddAGUI()/MapAGUI() to AddAGUIServer()/MapAGUIServer().

Full Changelog: python-1.11.0...dotnet-1.14.0

[1.12.0] - 2026-07-21

Added

• agent-framework-azure-cosmos-memory: Add an alpha Azure Cosmos DB semantic-memory context provider with fact extraction, user profiles, samples, and integration coverage (#6719)
• agent-framework-azurefunctions, agent-framework-core, agent-framework-durabletask: Add HITL response-URL addressing for requests raised from inside workflows (#7001)
• agent-framework-core: Add cross-session origin attribution to context-injected messages (#7041)
• agent-framework-core, agent-framework-tools: Warn when auto-approved tools have name collisions (#7090)
• agent-framework-core: Add a session_provider option to MCPSkillsSource and MCPSkill (mutually exclusive with client) that resolves the MCP session on every fetch, keeping cached skills reconnect-safe when the underlying session is replaced (#7135)
• agent-framework-hosting-a2a: Add app-owned A2A hosting helpers (#7050)
• agent-framework-hosting-mcp: Add app-owned MCP hosting helpers for exposing agents and workflows as native MCP tools (#7209)
• agent-framework-hosting-responses: [BREAKING] Add Responses conversation ID creation and parsing helpers, and distinguish conversation IDs from previous response IDs (#7234)
• agent-framework-hosting-telegram: Add Telegram hosting helpers and samples (#7047)
• samples: Add a Microsoft OpenTelemetry Distro observability sample (#5632)

Changed

• agent-framework-ag-ui: [BREAKING] Emit TOOL_CALL events for workflow participant tool calls (#7039)
• agent-framework-a2a: Reduce A2AExecutor log noise for content types without protocol mappings (#7034)
• agent-framework-ag-ui, agent-framework-core: Optimize shared serialization paths (#7165)
• agent-framework-ag-ui, agent-framework-bedrock, agent-framework-claude, agent-framework-core, agent-framework-github-copilot, agent-framework-ollama, agent-framework-openai: Normalize chat finish reasons across providers (#7105)
• agent-framework-anthropic, agent-framework-azure-contentunderstanding, agent-framework-azure-cosmos, agent-framework-core, agent-framework-declarative, agent-framework-devui, agent-framework-foundry, agent-framework: Update Microsoft Foundry branding in shipped APIs and package documentation (#6999)
• agent-framework-azure-contentunderstanding, agent-framework-azure-cosmos-memory, agent-framework-chatkit, agent-framework-core, agent-framework-durabletask, agent-framework-foundry, agent-framework-foundry-hosting, agent-framework-gemini, agent-framework-hyperlight, agent-framework-lab, agent-framework-monty, agent-framework-openai, agent-framework-tools, agent-framework: Consolidate dependency updates and compatibility adjustments (#7204)
• agent-framework-azurefunctions, agent-framework-devui, agent-framework-foundry, agent-framework-hosting-responses, agent-framework-lab, agent-framework-mistral, agent-framework: Clean up dependency groups and compatibility handling (#7046)
• agent-framework-azurefunctions, agent-framework-durabletask: Normalize initial durable workflow inputs across hosting paths (#7205)
• agent-framework-core: [BREAKING — experimental] Correct harness before-strategy compaction when state persists per service call (#7055)
• agent-framework-core: [BREAKING] Graduate create_harness_agent from experimental to stable (#7120)
• agent-framework-core: Graduate the mode and todo providers from experimental to stable (#7053)
• agent-framework-core: Graduate ToolApprovalMiddleware from experimental to stable (#7106)
• agent-framework-core: Graduate FileMemoryProvider from experimental to stable (#7113)
• agent-framework-core: Make FileAccessProvider opt-in for harness agents (#7094)
• agent-framework-core: Serialize tool definitions best-effort for observability (#7029)
• agent-framework-declarative: Promote declarative workflows from release candidate to stable (#7065)
• agent-framework-devui: Refine request logging (#7083)
• agent-framework-foundry-hosting: Promote the package to beta and add it to the main installation surface; make the Foundry Toolbox MCP skills sample self-contained (#7099)
• agent-framework-azure-contentunderstanding, agent-framework-gemini, agent-framework-mistral, agent-framework-monty, agent-framework-tools: Promote the packages to beta, add them to the main installation surface, expose lazy-loading namespaces, and move package-local samples into the root sample tree
• agent-framework-github-copilot: Forward GitHubCopilotOptions verbatim when creating sessions (#7155)
• docs: Add self-hosting sample snippets (#7104)
• docs: Add environment-file templates for Durable Task hosting samples (#5948)
• samples: Keep ChatKit attachments close to the sample application that owns them (#7038)

Fixed

• agent-framework-ag-ui: Bind streamed tool arguments to their call ids (#6342)
• agent-framework-ag-ui: Accept state data URIs whose media type includes parameters (#6905)
• agent-framework-ag-ui: Coalesce reasoning deltas without content ids into a single reasoning block (#6804)
• agent-framework-ag-ui: Bridge request state and session continuity (#7084)
• agent-framework-ag-ui: Replay workflow handoff results correctly (#7102)
• agent-framework-ag-ui: Clarify require_confirmation documentation for confirm_changes HITL gating (#6884)
• agent-framework-anthropic: Prevent per-run additional_beta_flags from leaking into request keyword arguments (#7060)
• agent-framework-core: Clear service_session_id in the agent wrapper when session propagation is enabled (#5875)
• agent-framework-core: Preserve tool span context for parallel calls (#6512)
• agent-framework-core: Parse structured values assembled from split text chunks (#6990)
• agent-framework-core: Raise ValueError for malformed data URIs (#6916)
• agent-framework-core: Preserve function-call names when merging streaming deltas (#6809)
• agent-framework-core, agent-framework-durabletask: Handle checkpoint encodings consistently (#6579)
• agent-framework-core: Preserve explicit null arguments during automatic function calling (#7108)
• agent-framework-core: Count non-ASCII text correctly during compaction (#7124)
• agent-framework-core: Forward header_provider headers to streamable HTTP MCP transports (#7218)
• agent-framework-core: Prevent compaction from emitting empty projections (#7219)
• agent-framework-core: Return MCP tool-use sampling results to the requesting server (#7189)
• agent-framework-foundry-hosting: Make FoundryToolbox.as_skills_provider() cache toolbox skill discovery by default so skill://index.json is read once instead of on every agent run, give disable_caching an observable effect, and add a cache_refresh_interval option (#7135)
• agent-framework-hosting, agent-framework-hosting-responses: Isolate stored session snapshots from later mutations (#7141)
• agent-framework-ollama: Generate distinct call ids for parallel tool calls (#6822)
• agent-framework-orchestrations: Prevent the Magentic manager from duplicating conversation history (#6297)
• samples: Correct the concurrent agents sample's handling of workflow output (#6548)

[1.11.0] - 2026-07-09

Added

• agent-framework-core: Add message injection middleware so tools or host code can enqueue messages into an active run and drain them into the next model call within the same AgentSession (#6998)
• agent-framework-core: Integrate message injection into create_harness_agent and the harness console sample so a running harness agent can be nudged mid-turn (#7027)
• agent-framework-core: Add progressive MCP disclosure so agents can discover, load, and unload MCP tool schemas on demand while keeping the allowed_tools boundary intact (#6850)
• agent-framework-core: Add refresh_interval (TTL) to CachingSkillsSource so cached skill lists expire and re-fetch on a configured interval (#6977)
• agent-framework-core, agent-framework-foundry-hosting: Add SkillsSourceContext (invoking agent plus optional session) threaded through the skills source pipeline, enabling context-aware filtering and per-key cache isolation (#6895)
• agent-framework-core: Allow disabling approval for SkillsProvider tools (#6867)
• agent-framework-core: Allow opting out of FileAccessProvider tool approval (#6879)
• agent-framework-core: Allow custom argument parsing for inline skill scripts so non-conforming tool-call argument shapes (for example, vLLM) can be handled (#6817)
• agent-framework-hosting, agent-framework-hosting-responses: Add a hosting protocol helper surface (AgentState, WorkflowState, SessionStore, AgentRunArgs, WorkflowRunArgs) and Responses helpers (create_response_id, responses_session_id, responses_to_run, responses_from_run, responses_from_streaming_run) (#6891)
• agent-framework-ag-ui: Add FastAPI SSE keepalive support for long, output-silent streams (#6980)
• agent-framework-github-copilot: Forward skill_directories and disabled_skills to the Copilot session (#6937)
• agent-framework-openai: Allow tool_choice: required when allowed_tools is set (#7024)
• agent-framework-anthropic, agent-framework-core, agent-framework-foundry-hosting, agent-framework-gemini, agent-framework-openai: Mark hosted/provider-executed tool calls as informational-only via Content.informational_only so they remain visible in transcripts without local re-invocation (#6997)
• samples: Add a deterministic action-boundary validation middleware sample (#6528)
• samples: Add Agent Harness blog post accompanying samples, part 3 (#6741)
• samples: Add a declarative Foundry Hosted Agent workflow sample (#6897)

Changed

• agent-framework-core: [BREAKING — experimental] Extract caching from SkillsProvider into a CachingSkillsSource decorator (#6847)
• agent-framework-core: [BREAKING — experimental] Treat nested SKILL.md content as part of the parent skill instead of discovering it as a separate skill root (#6849)
• agent-framework-core: [BREAKING — experimental] FileAccess/FileMemory replace_lines now performs literal replacement (including line deletion) instead of always re-adding a line terminator (#6859)
• agent-framework-core: Remove the experimental marker from the Skills API now that its surface is stable (#6974)
• agent-framework-core: Lazy-load root agent_framework exports to reduce import cost for narrow-surface scenarios (#6962)
• agent-framework-a2a, agent-framework-claude, agent-framework-copilotstudio, agent-framework-core, agent-framework-durabletask, agent-framework-github-copilot, agent-framework-purview: Implement ADR-0029 service_session_id lifecycle mapping, separating durable continuation state, per-run identity forwarding, and telemetry conversation-id extraction (#6724)
• agent-framework-azurefunctions, agent-framework-core, agent-framework-durabletask: [BREAKING] Support multi-workflow hosting and sub-workflows on the Durable Task host, including per-workflow durable naming and nested human-in-the-loop request routing (#6696)
• agent-framework-ag-ui: [BREAKING] Canonicalize AG-UI interrupt and resume handling around RUN_FINISHED.outcome.interrupts and canonical ResumeEntry payloads (#6925)
• agent-framework-mem0: Support the mem0ai 2.x OSS search call shape (#7004)
• agent-framework-mistral: Widen the uv_build backend requirement to allow newer uv releases (#7033)
• agent-framework-lab: Raise the agentlightning dependency ceiling for the lightning extra (#6984)
• agent-framework-claude, agent-framework-durabletask, agent-framework-gemini, agent-framework-monty, agent-framework-openai: Raise dependency floors to the first versions that provide the SDK APIs and typing consumed by these packages
• docs: Clarify AgentSession.service_session_id scoping to document backing API key/project boundaries and hosted multi-tenant guidance (#6993)
• docs: Add security guidance for external skill sources and script execution to harness feature docstrings (#6936)
• samples: Bump vite and @vitejs/plugin-react-swc in the ChatKit integration sample frontend (#6613)
• samples: Add a multi-tenant hosting security consideration note to the A2A sample (#6983)
• samples: Update Foundry Hosted Agent samples for the v2 protocol changes (#6841)
• samples: Use a writable runtime directory for the Foundry Skills sample (#6606)
• tests: Add Agent typing smoke tests across chat clients (#6950)
• tests: Skip NumPy stubs during mypy typing to unblock scheduled dependency-maintenance typing runs (#6969)
• tests: Consolidate Dependabot dependency updates for dev tooling (uv, ruff, pytest, mypy, pyright, mcp, opentelemetry-sdk, poethepoet) across the workspace and package dev-dependency groups (#6984, #7033)
• tests: Bump the transitive js-yaml dependency in the DevUI frontend lockfile (#6813)

Fixed

• agent-framework-core: Parse the structured response value from the final message instead of concatenated text, avoiding spurious ValidationError/JSONDecodeError (#6383)
• agent-framework-core: Fix read_skill_resource instruction dropping the .md extension (#7031)
• agent-framework-core: Bind policy-enforcement approvals to a single tool invocation (call id, function, arguments, security label, and session) and consume them on first use (#6966)
• agent-framework-core: Process messages to an executor serially within a superstep to prevent concurrent handler invocations for the same target executor (#6776)
• agent-framework-core: Auto-inject local conversation history on stateless clients even when non-history context providers (for example, SkillsProvider and FileAccessProvider) are registered (#6810)
• agent-framework-core: Improve the error message when a TypeVar is used in handler/executor registration (#4553)
• agent-framework-anthropic, agent-framework-core: Fix Anthropic requests that mix tool calls and tool results in one assistant message, and return a deterministic result when the function-loop limit is reached with a blank final response (#6794)
• agent-framework-anthropic, agent-framework-core, agent-framework-foundry-hosting, agent-framework-openai: Fix Foundry reasoning/MCP compaction so reasoning output keeps its provider id and reasoning plus MCP call pairs stay atomic (#6907)
• agent-framework-anthropic: Normalize a single Anthropic tool value the same as a one-item sequence during request preparation (#6903)
• agent-framework-anthropic: Migrate structured outputs to the stable output_config.format shape to avoid malformed/concatenated JSON when tools are also present (#5884)
• agent-framework-azure-ai-search: Pass include_reference_source_data in agentic search requests so source_data is populated on returned references (#5100)
• agent-framework-bedrock: Fix non-ASCII escaping in JSON content blocks returned by the Converse API (#6628)
• agent-framework-foundry: Strip tools from the Foundry agent request on the preview path (allow_preview=True) to avoid invalid_payload errors (#6644)
• agent-framework-gemini: Fix GeminiChatClient dropping image/file content on multimodal messages (#6751)
• agent-framework-claude, agent-framework-core, agent-framework-github-copilot, agent-framework-ollama: Fix response metadata construction so usage, finish reason, raw response, continuation token, and structured value are propagated consistently across providers (#6955)
• agent-framework-a2a: Accept A2A data URIs whose media type includes parameters before the ;base64 marker (#6818)
• agent-framework-ag-ui: Prefer explicit AG-UI resume payloads over message-derived responses (#6360)
• agent-framework-ag-ui: Clear queued approvals on cancel so cancelled flows do not leave stale prompts for later turns (#6947)
• agent-framework-ag-ui: Preserve the streamed text message id in mixed snapshots with pending tool calls and streamed trailing text (#6269)
• agent-framework-devui: Fix list[Message] input handling for declarative ToolAgent entries (#6534)
• agent-framework-devui: Fix DevUI deployment Dockerfile auth args (#6150)
• agent-framework-hyperlight: Harden workspace staging against symlinks and reparse points that could escape the sandbox workspace/mount root (#6856)
• agent-framework-openai: Fix web_search_options sent to the Azure OpenAI Chat Completions API (#6225)
• docs: Fix stale ChatAgent references in _clients.py docstrings and make tool-support examples copy/paste-safe (#6924)
• samples: Fix an invalid options kwarg in the workflow shared-session sample (#6294)
• docs: Add prerequisite command documentation for Python hosting samples (#5935)

Removed

• agent-framework-hosting-telegram: [BREAKING] Remove the unreleased hosting-telegram package and the earlier host/channel surface from the workspace, superseded by the new hosting protocol helper surface (#6891)

Full Changelog: python-1.10.0...python-1.11.0

What's Changed

• .NET: Harden dotnet-format workflow shell handling by @SergeyMenshykh in #6796
• .NET: Add AgentSkillsSourceContext to AgentSkillsSource.GetSkillsAsync by @SergeyMenshykh in #6797
• .NET: Foundry Hosting per-user session isolation and Responses v2 protocol fast-fail by @rogerbarreto in #6832
• .NET: Pin patched OpenAPI dependencies to unblock NU1903 in sample restores by @rogerbarreto with @Copilot in #6853
• Make skills source classes public with Experimental attribute by @SergeyMenshykh in #6838
• .NET: Consolidate skill-source caching and make skill sources disposable by @SergeyMenshykh in #6827
• .NET: Add skill approval options by @SergeyMenshykh in #6843
• .NET: [BREAKING] Add file editing tools and align FileAccess/FileMemory store API by @westey-m in #6807
• .NET: [BREAKING] Refactor OpenAI Hosting OptionsMapping to disallow passing options by default by @westey-m in #6855
• .NET: Remove Experimental attribute from Skills API in Microsoft.Agents.AI by @SergeyMenshykh in #6861
• .NET: Foundry Hosting gracefully tolerates lacking user identity when run locally by @rogerbarreto in #6870
• .NET: Bump Azure.AI.Projects to 2.1.0-beta.4 by @rogerbarreto in #6795
• .NET: Make default-approval harness features configurable + customizable shell tool by @westey-m in #6880
• .NET: Improving DotNet samples by @alliscode in #6869
• .NET: fix: Require explicit TokenCredential in AddFoundryToolboxes by @SergeyMenshykh in #6877
• .NET: Update .NET version to 1.13.0 by @SergeyMenshykh in #6900

New Contributors

• @VectorPeak made their first contribution in #6818

Full Changelog: dotnet-1.12.0...dotnet-1.13.0

What's Changed

• .NET: Fix typo in XML doc comment for workflow outputs param by @marcominerva in #6326
• .NET: Add BackgroundTaskCompletionLoopEvaluator for harness background agents by @westey-m in #6736
• .NET: Foundry hosted-agent toolbox OAuth consent support by @rogerbarreto in #6718
• .NET: [BREAKING] Align Foundry.Hosting experimental flags to MAAI001 for MAF-specific APIs by @rogerbarreto in #6743
• .NET: Prefer HTTPS Aspire DevUI backends by @tommasodotNET in #6772
• .NET: Disable failing DurableTask and AzureFunctions integration tests by @SergeyMenshykh in #6774
• .NET: Sample fix by @alliscode in #6773
• .NET: [BREAKING] Extract caching from AgentSkillsProvider into CachingAgentSkillsSource by @SergeyMenshykh in #6768
• .NET: Add description attribute to resource and script elements in skill body by @SergeyMenshykh in #6759
• .NET: Enforce ApprovalRequiredAIFunction in GitHub Copilot provider via OnPreToolUse hook by @giles17 in #6674
• .NET: Improve proxy target validation in DevUI aggregator by @SergeyMenshykh in #6771
• .NET: [BREAKING] Bump Azure.AI.AgentServer to 2.0.0 protocol and migrate Foundry.Hosting by @rogerbarreto in #6800
• .NET: fix: resolve CA1873 in GitHubCopilotAgent by using LoggerMessage sour… by @alliscode in #6814
• .NET: fix: resolve CA1873 in GitHubCopilotAgent by using LoggerMessage sour… by @alliscode in #6815
• .NET: Bumping version for dotnet release. by @alliscode in #6816
• Update NuGet package icon to new Microsoft Agent Framework logo by @chetantoshniwal in #6812

New Contributors

• @marcominerva made their first contribution in #6326

Full Changelog: dotnet-1.11.1...dotnet-1.12.0

[1.10.0] - 2026-06-30

Added

• agent-framework-core: Explicitly emit available_resources and available_scripts in skill content (#6694)
• agent-framework-core: Autolabelling MCP servers based on hints and GitHub MCP server interface labels (#6171)
• agent-framework-core: create_harness_agent skills_paths accepts str | Path | Sequence[str | Path] | None (#6717)
• agent-framework-core: Background agent loop resolves provider automatically and adds feedback message builder (#6735)
• agent-framework-core: Stop swallowing skill script and resource errors so the model can self-correct (#6755)
• agent-framework-foundry: Add FoundryAgent conversation session helper (#6623)
• agent-framework-foundry: Add support for Foundry Adaptive evals (#6267)
• agent-framework-bedrock, agent-framework-gemini: Surface cache and reasoning token counts (#6640)
• agent-framework-durabletask: Host MAF workflows on a standalone Durable Task worker (#6418)
• agent-framework-azure-ai-search: Support stable and preview Azure AI Search (Foundry IQ) API versions (#6603)
• agent-framework-github-copilot: Align function approval to use SDK on_pre_tool_use hook (#6750)

Changed

• agent-framework-core: [BREAKING — experimental] Refactor FileSkillsSource for depth-based discovery and predicate filters (#6488)
• agent-framework-core: [BREAKING — experimental] Require approval for file-access tools with read-only auto-approval (#6599)
• agent-framework-core: [BREAKING — experimental] Integrate looping into HarnessAgent (#6607)
• agent-framework-core: [BREAKING — experimental] Port FileMemoryProvider and integrate into harness agent (#6547)
• agent-framework-core: [BREAKING — experimental] Make all SkillsProvider tools require approval by default (#6754)
• agent-framework-core: [BREAKING — experimental] Improve FileAccess/FileMemory harness providers (surgical edits, read-only tier, consistent naming) (#6801)
• agent-framework-core: Align serialized tool format to OTel GenAI tool definition format (#6556)
• agent-framework-foundry-hosting: [BREAKING] Foundry Hosted Agent V2 protocol upgrade (#6811)
• agent-framework-foundry-hosting: Add MCP as a hard dependency (#6634)
• agent-framework-purview: Prefer token principal for user identity (#6693)
• agent-framework-ollama: Convert Pydantic model class response_format to JSON schema in OllamaChatClient (#6782)

Fixed

• agent-framework-core: Fix background agent telemetry context error (#6764)
• agent-framework-core: Fix MCP metadata and tool name handling (#6656)
• agent-framework-core: Ensure spans created inside sync preparations in streaming call are correctly nested (#6552)
• agent-framework-openai: Preserve OTel parent context for deferred streams (#6709)
• agent-framework-openai: Fix FunctionShellTool throw and empty streaming shell command (#6763)
• agent-framework-ag-ui: Fix tool history replay sanitization (#6581)
• agent-framework-anthropic: Re-role trailing assistant message to user for Anthropic compatibility (#6207)
• agent-framework-hyperlight: Fix CodeAct span parenting (#6712)
• agent-framework-hyperlight: Harden output capture against symlinks (#6601)

Changes

d9ec5ea update package version (#6752)

e3b64fd .NET: [BREAKING] Make all AgentSkillsProvider tools require approval by default (#6729) [ #6727 ]

3a5bbb5 .NET: Add DeclarativeWorkflowJsonOptions for AOT-safe declarative workflow checkpointing (#6745)

a7332d6 .NET: Fix issue with resuming checkpoint after package version upgrade (#6670)

e57e945 Build(deps): Bump hyperlight-sandbox-python-guest in /python (#6737)

d97bc4f Build(deps): Bump huggingface-hub from 1.20.1 to 1.21.0 in /python (#6738)

5d57b10 Build(deps): Bump google-genai from 1.75.0 to 2.10.0 in /python (#6739)

8cd71dd Build(deps): Bump fastapi from 0.124.4 to 0.138.0 in /python (#6740)

5e5dd87 Update .NET SDK to 10.0.301 (#6730)

d0be98d Remove {resource_instructions} and {script_instructions} placeholder mechanism (#6706)

See More

802fe13 Disable failing durable function integration tests (#6731)

d75f228 Python: Add Telegram channel for agent-framework-hosting (#6698) [ #6588, #6265 ]

ce74c84 Python: Preserve OTel parent context for deferred streams (#6709)

4fb1fb6 Python: Fix Hyperlight CodeAct span parenting (#6712)

41a9c54 Add Foundry project environment variables (#6721)

9f1ee23 Python: [BREAKING] Refactor FileSkillsSource for depth-based discovery and predicate filters (#6488) [ #6109 ]

336a19f .NET: .NET samples: migrate coding samples to Foundry-first AIProjectClient (#6557)

0283fd0 .NET: Fix hosted agent crash after tool call by rooting session store under $HOME (#6231) (#6714)

5627dc0 docs: Add Python session identity ADR (#6630)

1df4766 Python: surface cache and reasoning token counts for the Bedrock and Gemini connectors (#6640)

91f639a Python: Explicitly emit available_resources and available_scripts in skill content (#6694) [ #6348 ]

a9e5f6d .NET: .NET Foundry: add CreateMcpTool projectConnectionId overload (#6703)

ea7ae1c .NET: [BREAKING] Support archive-type skills in AgentMcpSkillsSource (#6631)

e049bb5 .NET: Add IncludeDetailedErrors option for skill script execution (#6680) [ #6304 ]

dd4b7ff .NET: Fix SearchDirectoriesForSkills to stop recursing after finding SKILL.md (#6686) [ #6683 ]

d5c15f2 .NET/Python: Purview: prefer token principal for user identity (#6693)

4cf7ace Python: track dependency maintenance PR creation (#6665)

5fff0df Python: Add load_dotenv to get-started samples and fix chat_response_…

acb28a6 Python: Fix MCP metadata and tool name handling (#6656)

f2d02e5 Python: Add hosting core and Responses channel (#6580)

36420c5 Python: Align serialized tool format to OTel GenAI tool def format (#6556)

This list of changes was auto generated.

Changes

1109d0b Get date suffix up to date with release date (#6690)
e030fb5 .NET: Replace the symlink index entries with regular file entries (#6687)
e6ebba1 Add ADR 0029: Skills over MCP implementation design options (#6679)
7051a49 Python: Add MCP as a hard dep in Foundry Hosting (#6634)
15df115 .NET: Add sample for per-run refreshable MCP authentication headers (#6624) [ #1631 ]
a2018b4 Python: [BREAKING] Require approval for file-access tools with read-only auto-approval (#6599)
e4b8937 .NET: Explicitly emit available_resources and available_scripts in skill content (#6672)
88f0b23 .NET: Change A2A default session store to NoopAgentSessionStore (#6635)
9ba6b3a Remove unnecessary declarative logging (#6677)
2999f74 Update package release version (#6673)

See More

0979153 .NET: Emit execute_tool spans by placing OpenTelemetry below FunctionInvokingChatClient (#6667)
7f2e19c Python: Ensure spans created inside sync preparations in streaming call are correctly nested (#6552)
7b6f582 Python: Agent Harness blog post accompanying samples part 1 (#6605)
dc60722 .NET: Project ToolExecution events as FunctionCallContent/FunctionResultContent in GitHubCopilotAgent streaming (#6228) [ #4734, #5897 ]
2f5a76a Fix issue with resuming checkpoint after package version upgrade (#6636)
a7381d8 Python: stabilize dependency maintenance final checks (#6662)
d108d4b Python: [BREAKING] Integrate looping into HarnessAgent (#6607)
fd160a7 Python: fix dependency maintenance cutoff (#6658)
ad3c153 fix: propagate EnableSensitiveData to auto-wired inner OpenTelemetryChatClient (#6096) [ #5873 ]
10b7d08 .NET: fix(hosting): emit url_citation annotation events from streamed AI Search responses (#6649) [ #6641 ]
fc3111c Python: Add FoundryAgent conversation session helper (#6623)
098e521 .NET: Bring Hosted-Toolbox sample to parity with sibling hosting samples (#6633)
7435dd4 Python: harden Hyperlight output capture against symlinks (#6601)
148f570 Python: host MAF workflows on a standalone Durable Task worker (#6418) [ #6608 ]
89d19a2 .NET: Migrate 01-get-started samples to Foundry as canonical default (#6555)
c815902 .NET: InProcessRunnerContext bugfix for workflows (#6551)
074ac68 .NET: Harden fan-in barrier checkpoint state and extend resume coverage (#6574)
d049d94 Python: consolidate dependency maintenance workflow (#6570)
41995e2 Build(deps): Bump anthropic from 0.80.0 to 0.107.1 in /python (#6396)
2adacb3 Bump aiohttp from 3.13.4 to 3.14.1 in /python (#6395)
6e38366 Bump Anthropic.Foundry from 0.5.0 to 0.6.0 (#6057)
0d3e350 Build(deps): Bump mistralai from 2.4.2 to 2.4.9 in /python (#6393)
2ba97eb Bump openai from 2.24.0 to 2.43.0 in /python (#6394)
2d0555c Python: re-role trailing assistant message to user for Anthropic compatibility (fixes #5008) (#6207) [ #5934 ]
5145d50 Python: Fix AG-UI tool history replay sanitization (#6581)
7f7c88b Build(deps): Bump python-multipart from 0.0.26 to 0.0.32 in /python (#6406)
bcef77a .NET: (Durable): Scope workflow status/respond endpoints to route workflow name (#6608)
54a3057 Dotnet - Add support for Foundry Adaptive evals (#6267) [ #6101 ]
dc44559 Python: [BREAKING] Port FileMemoryProvider and integrate FileMemoryProvider & FileAccess into the harness agent (#6547)
92823e9 .NET: [BREAKING] Require approval for FileAccessProvider tools with auto-approval rules (#6521)
7a491f8 Python: Add hosting channel ADRs and spec (#6578)
015e3bc .NET: Enabling sequential orchestration to pass entire conversation or only previous output. (#6554)
6e95517 Python: Split type checkers by target (pyright source, 5 checkers on tests/samples) (#6443) [ #6275 ]
97bb1d5 Migrate to using issue type bug instead of label bug. (#6595)
1fc57c4 .NET: Bump Azure.AI.Projects to 2.1.0-beta.3 (#6542)
b3f8aaa Python: adjust coverage report handoff (#6576)
c22fc8d Build(deps): Bump esbuild, @tailwindcss/vite, @vitejs/plugin-react and vite (#6503)
a3131b8 Build(deps): Bump esbuild, @vitejs/plugin-react and vite (#6501)
3d46595 Python: Bump prek from 0.4.3 to 0.4.5 in /python (#6527)
205f7bc Python: Bump pytest from 9.0.3 to 9.1.0 across /python workspace (#6524)
2048289 Build(deps): Bump pydantic-monty from 0.0.17 to 0.0.18 in /python (#6392)
699916d Python: Add WebSearchDisplayObserver to harness console (#6572)
1ba5cd3 .NET: Scope argument-based standing approvals correctly in ToolApprovalAgent (#6486) (#6487)
1519e50 Harden archive extraction guard so path containment is statically recognized (#6564) (#6565)
b55992b Bump Python package versions for 1.9.0 release (#6583)
e8cec71 Use issue type for triage workflow (#6577)
d7e63d7 Fix Foundry aiohttp dependency (#6567)
f59d5c6 Python: Adopt azure-ai-contentunderstanding to_llm_input in CU context provider (#5796)
26a0a7e .NET: (Durable): bind MCP threadId to the current agent and guard cross-agent session dispatch (#6531)
6163153 .NET: fix fan-in checkpoint edge state (#6491)
fcc5576 .NET: feat(dotnet): Add LocalCodeAct package for local Python execution (#6105)
6cc7ddb .NET: Integrate LoopAgent into HarnessAgent with TodoCompletionLoopEvaluator (#6544)
39f4b5e Align function tool names for BackgroundAgent and FileMemory between python and .net (#6550)
02eb943 Bump litellm from 1.83.14 to 1.84.0 in /python (#6559)
4ff952e Python: Capture context provider instructions in agent telemetry (#6515)
7bf2d2a Python: Fix harness console rendering one streamed tool call many times (#6549)
1a280ae Bugfix for Declarative Workflow (#6530)
4d49261 .NET samples: structural alignment changes (#6485)
8e10c03 Python: Remove unsupported as_agent function_invocation_configuration (#6520) [ #6313 ]
bce2757 Foundry hosted agent responses emit failed events (#6502)
106e065 .NET: Rebuild Hyperlight sandbox after tool registry updates (#6523)
0db9305 Python: Integrate tool approval into the harness (#6522)
571cae4 Python: Fix Azure AI Search citation URLs (#6453)
9fb16e0 .NET: Allow custom argument marshaling for skill scripts (#6498)
e07cfba Disable Anthropic tests by not providing environment vars until 404 failure is resolved (#6539)
40a2dd5 .NET: Restore ambient client-header scope between non-streaming ClientHeadersAgent runs (#6517) [ #6516 ]
7e9c043 Python: Improve PR template and breaking-change label automation (#6473)
d7e8d22 Python: Fix Python OTel usage detail attributes (#6493)
d7027fc Python: [BREAKING] Align FileAccess tools with .NET — directory discovery and recursive search (#6476)
df0bd4d Python: Fix ollama_chat_client.py sample: pass tools via options dict (#6480) [ #6411 ]
ed4ff18 Python: [Breaking] Additional bug fix for declarative workflows (#6489)
0f483fa Set ApplicationName on CosmosClientOptions for UserAgent telemetry (#6481)
5e830f4 .NET: Only use the output from the last message for structured output (#6499)
1acd242 Python: Add AgentLoopMiddleware for re-running agents in a loop (#6174)
3f77c55 .NET: [BREAKING] Align FileAccess tools with Python; add directory discovery and recursive search (#6474)
cd512da .NET: Updating MessagePack to latest version (#6497)
76b2b1b Python: Add opt-in AG-UI thread snapshot persistence and hydration (#6471) [ #2458 ]
4c1b9ef .NET: fix: filter filesystem checkpoint index by session (#6132)
e793794 Python: Bug fix for declarative workflows (#6468)
3d5421e Python: Integrate shell tool into harness agent (#6451)
8b0405d .NET: Fix CopySessionConfig() and CopyResumeSessionConfig() to preserve SessionConfig.Streaming value (#6463) [ #4732 ]
df29af6 Python: Add tool approval middleware (#6414)
c79f886 .NET: Align Foundry sample environment variables and credentials. (#6422)
c9e2a49 Fix AzureFunctions integration tests — set FUNCTIONS_WORKER_RUNTIME (#6425)
12ce099 .NET: Add LoopAgent capability for Harnesses (#6384)
8e1998d .NET: Adds Valkey to chat message history - issue 5445 (#5542)
4149f24 Python: [Generated by SRE Agent] Fix MCP allowed_tools empty list handling (#6296)
3753d93 .NET: Bug fixes for declarative workflows (#6427)
60cc5ee .NET: Make GitHub.Copilot.SDK build targets reach transitive consumers (#6455) (#6457)

This list of changes was auto generated.