Agent Framework Updates & Release Notes

[1.11.0] - 2026-07-09

Added

• agent-framework-core: Add message injection middleware so tools or host code can enqueue messages into an active run and drain them into the next model call within the same AgentSession (#6998)
• agent-framework-core: Integrate message injection into create_harness_agent and the harness console sample so a running harness agent can be nudged mid-turn (#7027)
• agent-framework-core: Add progressive MCP disclosure so agents can discover, load, and unload MCP tool schemas on demand while keeping the allowed_tools boundary intact (#6850)
• agent-framework-core: Add refresh_interval (TTL) to CachingSkillsSource so cached skill lists expire and re-fetch on a configured interval (#6977)
• agent-framework-core, agent-framework-foundry-hosting: Add SkillsSourceContext (invoking agent plus optional session) threaded through the skills source pipeline, enabling context-aware filtering and per-key cache isolation (#6895)
• agent-framework-core: Allow disabling approval for SkillsProvider tools (#6867)
• agent-framework-core: Allow opting out of FileAccessProvider tool approval (#6879)
• agent-framework-core: Allow custom argument parsing for inline skill scripts so non-conforming tool-call argument shapes (for example, vLLM) can be handled (#6817)
• agent-framework-hosting, agent-framework-hosting-responses: Add a hosting protocol helper surface (AgentState, WorkflowState, SessionStore, AgentRunArgs, WorkflowRunArgs) and Responses helpers (create_response_id, responses_session_id, responses_to_run, responses_from_run, responses_from_streaming_run) (#6891)
• agent-framework-ag-ui: Add FastAPI SSE keepalive support for long, output-silent streams (#6980)
• agent-framework-github-copilot: Forward skill_directories and disabled_skills to the Copilot session (#6937)
• agent-framework-openai: Allow tool_choice: required when allowed_tools is set (#7024)
• agent-framework-anthropic, agent-framework-core, agent-framework-foundry-hosting, agent-framework-gemini, agent-framework-openai: Mark hosted/provider-executed tool calls as informational-only via Content.informational_only so they remain visible in transcripts without local re-invocation (#6997)
• samples: Add a deterministic action-boundary validation middleware sample (#6528)
• samples: Add Agent Harness blog post accompanying samples, part 3 (#6741)
• samples: Add a declarative Foundry Hosted Agent workflow sample (#6897)

Changed

• agent-framework-core: [BREAKING — experimental] Extract caching from SkillsProvider into a CachingSkillsSource decorator (#6847)
• agent-framework-core: [BREAKING — experimental] Treat nested SKILL.md content as part of the parent skill instead of discovering it as a separate skill root (#6849)
• agent-framework-core: [BREAKING — experimental] FileAccess/FileMemory replace_lines now performs literal replacement (including line deletion) instead of always re-adding a line terminator (#6859)
• agent-framework-core: Remove the experimental marker from the Skills API now that its surface is stable (#6974)
• agent-framework-core: Lazy-load root agent_framework exports to reduce import cost for narrow-surface scenarios (#6962)
• agent-framework-a2a, agent-framework-claude, agent-framework-copilotstudio, agent-framework-core, agent-framework-durabletask, agent-framework-github-copilot, agent-framework-purview: Implement ADR-0029 service_session_id lifecycle mapping, separating durable continuation state, per-run identity forwarding, and telemetry conversation-id extraction (#6724)
• agent-framework-azurefunctions, agent-framework-core, agent-framework-durabletask: [BREAKING] Support multi-workflow hosting and sub-workflows on the Durable Task host, including per-workflow durable naming and nested human-in-the-loop request routing (#6696)
• agent-framework-ag-ui: [BREAKING] Canonicalize AG-UI interrupt and resume handling around RUN_FINISHED.outcome.interrupts and canonical ResumeEntry payloads (#6925)
• agent-framework-mem0: Support the mem0ai 2.x OSS search call shape (#7004)
• agent-framework-mistral: Widen the uv_build backend requirement to allow newer uv releases (#7033)
• agent-framework-lab: Raise the agentlightning dependency ceiling for the lightning extra (#6984)
• agent-framework-claude, agent-framework-durabletask, agent-framework-gemini, agent-framework-monty, agent-framework-openai: Raise dependency floors to the first versions that provide the SDK APIs and typing consumed by these packages
• docs: Clarify AgentSession.service_session_id scoping to document backing API key/project boundaries and hosted multi-tenant guidance (#6993)
• docs: Add security guidance for external skill sources and script execution to harness feature docstrings (#6936)
• samples: Bump vite and @vitejs/plugin-react-swc in the ChatKit integration sample frontend (#6613)
• samples: Add a multi-tenant hosting security consideration note to the A2A sample (#6983)
• samples: Update Foundry Hosted Agent samples for the v2 protocol changes (#6841)
• samples: Use a writable runtime directory for the Foundry Skills sample (#6606)
• tests: Add Agent typing smoke tests across chat clients (#6950)
• tests: Skip NumPy stubs during mypy typing to unblock scheduled dependency-maintenance typing runs (#6969)
• tests: Consolidate Dependabot dependency updates for dev tooling (uv, ruff, pytest, mypy, pyright, mcp, opentelemetry-sdk, poethepoet) across the workspace and package dev-dependency groups (#6984, #7033)
• tests: Bump the transitive js-yaml dependency in the DevUI frontend lockfile (#6813)

Fixed

• agent-framework-core: Parse the structured response value from the final message instead of concatenated text, avoiding spurious ValidationError/JSONDecodeError (#6383)
• agent-framework-core: Fix read_skill_resource instruction dropping the .md extension (#7031)
• agent-framework-core: Bind policy-enforcement approvals to a single tool invocation (call id, function, arguments, security label, and session) and consume them on first use (#6966)
• agent-framework-core: Process messages to an executor serially within a superstep to prevent concurrent handler invocations for the same target executor (#6776)
• agent-framework-core: Auto-inject local conversation history on stateless clients even when non-history context providers (for example, SkillsProvider and FileAccessProvider) are registered (#6810)
• agent-framework-core: Improve the error message when a TypeVar is used in handler/executor registration (#4553)
• agent-framework-anthropic, agent-framework-core: Fix Anthropic requests that mix tool calls and tool results in one assistant message, and return a deterministic result when the function-loop limit is reached with a blank final response (#6794)
• agent-framework-anthropic, agent-framework-core, agent-framework-foundry-hosting, agent-framework-openai: Fix Foundry reasoning/MCP compaction so reasoning output keeps its provider id and reasoning plus MCP call pairs stay atomic (#6907)
• agent-framework-anthropic: Normalize a single Anthropic tool value the same as a one-item sequence during request preparation (#6903)
• agent-framework-anthropic: Migrate structured outputs to the stable output_config.format shape to avoid malformed/concatenated JSON when tools are also present (#5884)
• agent-framework-azure-ai-search: Pass include_reference_source_data in agentic search requests so source_data is populated on returned references (#5100)
• agent-framework-bedrock: Fix non-ASCII escaping in JSON content blocks returned by the Converse API (#6628)
• agent-framework-foundry: Strip tools from the Foundry agent request on the preview path (allow_preview=True) to avoid invalid_payload errors (#6644)
• agent-framework-gemini: Fix GeminiChatClient dropping image/file content on multimodal messages (#6751)
• agent-framework-claude, agent-framework-core, agent-framework-github-copilot, agent-framework-ollama: Fix response metadata construction so usage, finish reason, raw response, continuation token, and structured value are propagated consistently across providers (#6955)
• agent-framework-a2a: Accept A2A data URIs whose media type includes parameters before the ;base64 marker (#6818)
• agent-framework-ag-ui: Prefer explicit AG-UI resume payloads over message-derived responses (#6360)
• agent-framework-ag-ui: Clear queued approvals on cancel so cancelled flows do not leave stale prompts for later turns (#6947)
• agent-framework-ag-ui: Preserve the streamed text message id in mixed snapshots with pending tool calls and streamed trailing text (#6269)
• agent-framework-devui: Fix list[Message] input handling for declarative ToolAgent entries (#6534)
• agent-framework-devui: Fix DevUI deployment Dockerfile auth args (#6150)
• agent-framework-hyperlight: Harden workspace staging against symlinks and reparse points that could escape the sandbox workspace/mount root (#6856)
• agent-framework-openai: Fix web_search_options sent to the Azure OpenAI Chat Completions API (#6225)
• docs: Fix stale ChatAgent references in _clients.py docstrings and make tool-support examples copy/paste-safe (#6924)
• samples: Fix an invalid options kwarg in the workflow shared-session sample (#6294)
• docs: Add prerequisite command documentation for Python hosting samples (#5935)

Removed

• agent-framework-hosting-telegram: [BREAKING] Remove the unreleased hosting-telegram package and the earlier host/channel surface from the workspace, superseded by the new hosting protocol helper surface (#6891)

Full Changelog: python-1.10.0...python-1.11.0

What's Changed

• .NET: Harden dotnet-format workflow shell handling by @SergeyMenshykh in #6796
• .NET: Add AgentSkillsSourceContext to AgentSkillsSource.GetSkillsAsync by @SergeyMenshykh in #6797
• .NET: Foundry Hosting per-user session isolation and Responses v2 protocol fast-fail by @rogerbarreto in #6832
• .NET: Pin patched OpenAPI dependencies to unblock NU1903 in sample restores by @rogerbarreto with @Copilot in #6853
• Make skills source classes public with Experimental attribute by @SergeyMenshykh in #6838
• .NET: Consolidate skill-source caching and make skill sources disposable by @SergeyMenshykh in #6827
• .NET: Add skill approval options by @SergeyMenshykh in #6843
• .NET: [BREAKING] Add file editing tools and align FileAccess/FileMemory store API by @westey-m in #6807
• .NET: [BREAKING] Refactor OpenAI Hosting OptionsMapping to disallow passing options by default by @westey-m in #6855
• .NET: Remove Experimental attribute from Skills API in Microsoft.Agents.AI by @SergeyMenshykh in #6861
• .NET: Foundry Hosting gracefully tolerates lacking user identity when run locally by @rogerbarreto in #6870
• .NET: Bump Azure.AI.Projects to 2.1.0-beta.4 by @rogerbarreto in #6795
• .NET: Make default-approval harness features configurable + customizable shell tool by @westey-m in #6880
• .NET: Improving DotNet samples by @alliscode in #6869
• .NET: fix: Require explicit TokenCredential in AddFoundryToolboxes by @SergeyMenshykh in #6877
• .NET: Update .NET version to 1.13.0 by @SergeyMenshykh in #6900

New Contributors

• @VectorPeak made their first contribution in #6818

Full Changelog: dotnet-1.12.0...dotnet-1.13.0

What's Changed

• .NET: Fix typo in XML doc comment for workflow outputs param by @marcominerva in #6326
• .NET: Add BackgroundTaskCompletionLoopEvaluator for harness background agents by @westey-m in #6736
• .NET: Foundry hosted-agent toolbox OAuth consent support by @rogerbarreto in #6718
• .NET: [BREAKING] Align Foundry.Hosting experimental flags to MAAI001 for MAF-specific APIs by @rogerbarreto in #6743
• .NET: Prefer HTTPS Aspire DevUI backends by @tommasodotNET in #6772
• .NET: Disable failing DurableTask and AzureFunctions integration tests by @SergeyMenshykh in #6774
• .NET: Sample fix by @alliscode in #6773
• .NET: [BREAKING] Extract caching from AgentSkillsProvider into CachingAgentSkillsSource by @SergeyMenshykh in #6768
• .NET: Add description attribute to resource and script elements in skill body by @SergeyMenshykh in #6759
• .NET: Enforce ApprovalRequiredAIFunction in GitHub Copilot provider via OnPreToolUse hook by @giles17 in #6674
• .NET: Improve proxy target validation in DevUI aggregator by @SergeyMenshykh in #6771
• .NET: [BREAKING] Bump Azure.AI.AgentServer to 2.0.0 protocol and migrate Foundry.Hosting by @rogerbarreto in #6800
• .NET: fix: resolve CA1873 in GitHubCopilotAgent by using LoggerMessage sour… by @alliscode in #6814
• .NET: fix: resolve CA1873 in GitHubCopilotAgent by using LoggerMessage sour… by @alliscode in #6815
• .NET: Bumping version for dotnet release. by @alliscode in #6816
• Update NuGet package icon to new Microsoft Agent Framework logo by @chetantoshniwal in #6812

New Contributors

• @marcominerva made their first contribution in #6326

Full Changelog: dotnet-1.11.1...dotnet-1.12.0

[1.10.0] - 2026-06-30

Added

• agent-framework-core: Explicitly emit available_resources and available_scripts in skill content (#6694)
• agent-framework-core: Autolabelling MCP servers based on hints and GitHub MCP server interface labels (#6171)
• agent-framework-core: create_harness_agent skills_paths accepts str | Path | Sequence[str | Path] | None (#6717)
• agent-framework-core: Background agent loop resolves provider automatically and adds feedback message builder (#6735)
• agent-framework-core: Stop swallowing skill script and resource errors so the model can self-correct (#6755)
• agent-framework-foundry: Add FoundryAgent conversation session helper (#6623)
• agent-framework-foundry: Add support for Foundry Adaptive evals (#6267)
• agent-framework-bedrock, agent-framework-gemini: Surface cache and reasoning token counts (#6640)
• agent-framework-durabletask: Host MAF workflows on a standalone Durable Task worker (#6418)
• agent-framework-azure-ai-search: Support stable and preview Azure AI Search (Foundry IQ) API versions (#6603)
• agent-framework-github-copilot: Align function approval to use SDK on_pre_tool_use hook (#6750)

Changed

• agent-framework-core: [BREAKING — experimental] Refactor FileSkillsSource for depth-based discovery and predicate filters (#6488)
• agent-framework-core: [BREAKING — experimental] Require approval for file-access tools with read-only auto-approval (#6599)
• agent-framework-core: [BREAKING — experimental] Integrate looping into HarnessAgent (#6607)
• agent-framework-core: [BREAKING — experimental] Port FileMemoryProvider and integrate into harness agent (#6547)
• agent-framework-core: [BREAKING — experimental] Make all SkillsProvider tools require approval by default (#6754)
• agent-framework-core: [BREAKING — experimental] Improve FileAccess/FileMemory harness providers (surgical edits, read-only tier, consistent naming) (#6801)
• agent-framework-core: Align serialized tool format to OTel GenAI tool definition format (#6556)
• agent-framework-foundry-hosting: [BREAKING] Foundry Hosted Agent V2 protocol upgrade (#6811)
• agent-framework-foundry-hosting: Add MCP as a hard dependency (#6634)
• agent-framework-purview: Prefer token principal for user identity (#6693)
• agent-framework-ollama: Convert Pydantic model class response_format to JSON schema in OllamaChatClient (#6782)

Fixed

• agent-framework-core: Fix background agent telemetry context error (#6764)
• agent-framework-core: Fix MCP metadata and tool name handling (#6656)
• agent-framework-core: Ensure spans created inside sync preparations in streaming call are correctly nested (#6552)
• agent-framework-openai: Preserve OTel parent context for deferred streams (#6709)
• agent-framework-openai: Fix FunctionShellTool throw and empty streaming shell command (#6763)
• agent-framework-ag-ui: Fix tool history replay sanitization (#6581)
• agent-framework-anthropic: Re-role trailing assistant message to user for Anthropic compatibility (#6207)
• agent-framework-hyperlight: Fix CodeAct span parenting (#6712)
• agent-framework-hyperlight: Harden output capture against symlinks (#6601)

Changes

d9ec5ea update package version (#6752)

e3b64fd .NET: [BREAKING] Make all AgentSkillsProvider tools require approval by default (#6729) [ #6727 ]

3a5bbb5 .NET: Add DeclarativeWorkflowJsonOptions for AOT-safe declarative workflow checkpointing (#6745)

a7332d6 .NET: Fix issue with resuming checkpoint after package version upgrade (#6670)

e57e945 Build(deps): Bump hyperlight-sandbox-python-guest in /python (#6737)

d97bc4f Build(deps): Bump huggingface-hub from 1.20.1 to 1.21.0 in /python (#6738)

5d57b10 Build(deps): Bump google-genai from 1.75.0 to 2.10.0 in /python (#6739)

8cd71dd Build(deps): Bump fastapi from 0.124.4 to 0.138.0 in /python (#6740)

5e5dd87 Update .NET SDK to 10.0.301 (#6730)

d0be98d Remove {resource_instructions} and {script_instructions} placeholder mechanism (#6706)

See More

802fe13 Disable failing durable function integration tests (#6731)

d75f228 Python: Add Telegram channel for agent-framework-hosting (#6698) [ #6588, #6265 ]

ce74c84 Python: Preserve OTel parent context for deferred streams (#6709)

4fb1fb6 Python: Fix Hyperlight CodeAct span parenting (#6712)

41a9c54 Add Foundry project environment variables (#6721)

9f1ee23 Python: [BREAKING] Refactor FileSkillsSource for depth-based discovery and predicate filters (#6488) [ #6109 ]

336a19f .NET: .NET samples: migrate coding samples to Foundry-first AIProjectClient (#6557)

0283fd0 .NET: Fix hosted agent crash after tool call by rooting session store under $HOME (#6231) (#6714)

5627dc0 docs: Add Python session identity ADR (#6630)

1df4766 Python: surface cache and reasoning token counts for the Bedrock and Gemini connectors (#6640)

91f639a Python: Explicitly emit available_resources and available_scripts in skill content (#6694) [ #6348 ]

a9e5f6d .NET: .NET Foundry: add CreateMcpTool projectConnectionId overload (#6703)

ea7ae1c .NET: [BREAKING] Support archive-type skills in AgentMcpSkillsSource (#6631)

e049bb5 .NET: Add IncludeDetailedErrors option for skill script execution (#6680) [ #6304 ]

dd4b7ff .NET: Fix SearchDirectoriesForSkills to stop recursing after finding SKILL.md (#6686) [ #6683 ]

d5c15f2 .NET/Python: Purview: prefer token principal for user identity (#6693)

4cf7ace Python: track dependency maintenance PR creation (#6665)

5fff0df Python: Add load_dotenv to get-started samples and fix chat_response_…

acb28a6 Python: Fix MCP metadata and tool name handling (#6656)

f2d02e5 Python: Add hosting core and Responses channel (#6580)

36420c5 Python: Align serialized tool format to OTel GenAI tool def format (#6556)

This list of changes was auto generated.

Changes

1109d0b Get date suffix up to date with release date (#6690)
e030fb5 .NET: Replace the symlink index entries with regular file entries (#6687)
e6ebba1 Add ADR 0029: Skills over MCP implementation design options (#6679)
7051a49 Python: Add MCP as a hard dep in Foundry Hosting (#6634)
15df115 .NET: Add sample for per-run refreshable MCP authentication headers (#6624) [ #1631 ]
a2018b4 Python: [BREAKING] Require approval for file-access tools with read-only auto-approval (#6599)
e4b8937 .NET: Explicitly emit available_resources and available_scripts in skill content (#6672)
88f0b23 .NET: Change A2A default session store to NoopAgentSessionStore (#6635)
9ba6b3a Remove unnecessary declarative logging (#6677)
2999f74 Update package release version (#6673)

See More

0979153 .NET: Emit execute_tool spans by placing OpenTelemetry below FunctionInvokingChatClient (#6667)
7f2e19c Python: Ensure spans created inside sync preparations in streaming call are correctly nested (#6552)
7b6f582 Python: Agent Harness blog post accompanying samples part 1 (#6605)
dc60722 .NET: Project ToolExecution events as FunctionCallContent/FunctionResultContent in GitHubCopilotAgent streaming (#6228) [ #4734, #5897 ]
2f5a76a Fix issue with resuming checkpoint after package version upgrade (#6636)
a7381d8 Python: stabilize dependency maintenance final checks (#6662)
d108d4b Python: [BREAKING] Integrate looping into HarnessAgent (#6607)
fd160a7 Python: fix dependency maintenance cutoff (#6658)
ad3c153 fix: propagate EnableSensitiveData to auto-wired inner OpenTelemetryChatClient (#6096) [ #5873 ]
10b7d08 .NET: fix(hosting): emit url_citation annotation events from streamed AI Search responses (#6649) [ #6641 ]
fc3111c Python: Add FoundryAgent conversation session helper (#6623)
098e521 .NET: Bring Hosted-Toolbox sample to parity with sibling hosting samples (#6633)
7435dd4 Python: harden Hyperlight output capture against symlinks (#6601)
148f570 Python: host MAF workflows on a standalone Durable Task worker (#6418) [ #6608 ]
89d19a2 .NET: Migrate 01-get-started samples to Foundry as canonical default (#6555)
c815902 .NET: InProcessRunnerContext bugfix for workflows (#6551)
074ac68 .NET: Harden fan-in barrier checkpoint state and extend resume coverage (#6574)
d049d94 Python: consolidate dependency maintenance workflow (#6570)
41995e2 Build(deps): Bump anthropic from 0.80.0 to 0.107.1 in /python (#6396)
2adacb3 Bump aiohttp from 3.13.4 to 3.14.1 in /python (#6395)
6e38366 Bump Anthropic.Foundry from 0.5.0 to 0.6.0 (#6057)
0d3e350 Build(deps): Bump mistralai from 2.4.2 to 2.4.9 in /python (#6393)
2ba97eb Bump openai from 2.24.0 to 2.43.0 in /python (#6394)
2d0555c Python: re-role trailing assistant message to user for Anthropic compatibility (fixes #5008) (#6207) [ #5934 ]
5145d50 Python: Fix AG-UI tool history replay sanitization (#6581)
7f7c88b Build(deps): Bump python-multipart from 0.0.26 to 0.0.32 in /python (#6406)
bcef77a .NET: (Durable): Scope workflow status/respond endpoints to route workflow name (#6608)
54a3057 Dotnet - Add support for Foundry Adaptive evals (#6267) [ #6101 ]
dc44559 Python: [BREAKING] Port FileMemoryProvider and integrate FileMemoryProvider & FileAccess into the harness agent (#6547)
92823e9 .NET: [BREAKING] Require approval for FileAccessProvider tools with auto-approval rules (#6521)
7a491f8 Python: Add hosting channel ADRs and spec (#6578)
015e3bc .NET: Enabling sequential orchestration to pass entire conversation or only previous output. (#6554)
6e95517 Python: Split type checkers by target (pyright source, 5 checkers on tests/samples) (#6443) [ #6275 ]
97bb1d5 Migrate to using issue type bug instead of label bug. (#6595)
1fc57c4 .NET: Bump Azure.AI.Projects to 2.1.0-beta.3 (#6542)
b3f8aaa Python: adjust coverage report handoff (#6576)
c22fc8d Build(deps): Bump esbuild, @tailwindcss/vite, @vitejs/plugin-react and vite (#6503)
a3131b8 Build(deps): Bump esbuild, @vitejs/plugin-react and vite (#6501)
3d46595 Python: Bump prek from 0.4.3 to 0.4.5 in /python (#6527)
205f7bc Python: Bump pytest from 9.0.3 to 9.1.0 across /python workspace (#6524)
2048289 Build(deps): Bump pydantic-monty from 0.0.17 to 0.0.18 in /python (#6392)
699916d Python: Add WebSearchDisplayObserver to harness console (#6572)
1ba5cd3 .NET: Scope argument-based standing approvals correctly in ToolApprovalAgent (#6486) (#6487)
1519e50 Harden archive extraction guard so path containment is statically recognized (#6564) (#6565)
b55992b Bump Python package versions for 1.9.0 release (#6583)
e8cec71 Use issue type for triage workflow (#6577)
d7e63d7 Fix Foundry aiohttp dependency (#6567)
f59d5c6 Python: Adopt azure-ai-contentunderstanding to_llm_input in CU context provider (#5796)
26a0a7e .NET: (Durable): bind MCP threadId to the current agent and guard cross-agent session dispatch (#6531)
6163153 .NET: fix fan-in checkpoint edge state (#6491)
fcc5576 .NET: feat(dotnet): Add LocalCodeAct package for local Python execution (#6105)
6cc7ddb .NET: Integrate LoopAgent into HarnessAgent with TodoCompletionLoopEvaluator (#6544)
39f4b5e Align function tool names for BackgroundAgent and FileMemory between python and .net (#6550)
02eb943 Bump litellm from 1.83.14 to 1.84.0 in /python (#6559)
4ff952e Python: Capture context provider instructions in agent telemetry (#6515)
7bf2d2a Python: Fix harness console rendering one streamed tool call many times (#6549)
1a280ae Bugfix for Declarative Workflow (#6530)
4d49261 .NET samples: structural alignment changes (#6485)
8e10c03 Python: Remove unsupported as_agent function_invocation_configuration (#6520) [ #6313 ]
bce2757 Foundry hosted agent responses emit failed events (#6502)
106e065 .NET: Rebuild Hyperlight sandbox after tool registry updates (#6523)
0db9305 Python: Integrate tool approval into the harness (#6522)
571cae4 Python: Fix Azure AI Search citation URLs (#6453)
9fb16e0 .NET: Allow custom argument marshaling for skill scripts (#6498)
e07cfba Disable Anthropic tests by not providing environment vars until 404 failure is resolved (#6539)
40a2dd5 .NET: Restore ambient client-header scope between non-streaming ClientHeadersAgent runs (#6517) [ #6516 ]
7e9c043 Python: Improve PR template and breaking-change label automation (#6473)
d7e8d22 Python: Fix Python OTel usage detail attributes (#6493)
d7027fc Python: [BREAKING] Align FileAccess tools with .NET — directory discovery and recursive search (#6476)
df0bd4d Python: Fix ollama_chat_client.py sample: pass tools via options dict (#6480) [ #6411 ]
ed4ff18 Python: [Breaking] Additional bug fix for declarative workflows (#6489)
0f483fa Set ApplicationName on CosmosClientOptions for UserAgent telemetry (#6481)
5e830f4 .NET: Only use the output from the last message for structured output (#6499)
1acd242 Python: Add AgentLoopMiddleware for re-running agents in a loop (#6174)
3f77c55 .NET: [BREAKING] Align FileAccess tools with Python; add directory discovery and recursive search (#6474)
cd512da .NET: Updating MessagePack to latest version (#6497)
76b2b1b Python: Add opt-in AG-UI thread snapshot persistence and hydration (#6471) [ #2458 ]
4c1b9ef .NET: fix: filter filesystem checkpoint index by session (#6132)
e793794 Python: Bug fix for declarative workflows (#6468)
3d5421e Python: Integrate shell tool into harness agent (#6451)
8b0405d .NET: Fix CopySessionConfig() and CopyResumeSessionConfig() to preserve SessionConfig.Streaming value (#6463) [ #4732 ]
df29af6 Python: Add tool approval middleware (#6414)
c79f886 .NET: Align Foundry sample environment variables and credentials. (#6422)
c9e2a49 Fix AzureFunctions integration tests — set FUNCTIONS_WORKER_RUNTIME (#6425)
12ce099 .NET: Add LoopAgent capability for Harnesses (#6384)
8e1998d .NET: Adds Valkey to chat message history - issue 5445 (#5542)
4149f24 Python: [Generated by SRE Agent] Fix MCP allowed_tools empty list handling (#6296)
3753d93 .NET: Bug fixes for declarative workflows (#6427)
60cc5ee .NET: Make GitHub.Copilot.SDK build targets reach transitive consumers (#6455) (#6457)

This list of changes was auto generated.

[1.9.0] - 2026-06-18

Added

• agent-framework-core: Add AgentLoopMiddleware for re-running agents in a loop (#6174)
• agent-framework-core: Integrate tool approval into the harness agent (#6522)
• agent-framework-core: Add tool approval middleware (#6414)
• agent-framework-core: Integrate the shell tool into the harness agent (#6451)
• agent-framework-core: Capture context provider instructions in agent telemetry (#6515)
• agent-framework-core, agent-framework-ag-ui: Add opt-in AG-UI thread snapshot persistence and hydration (#6471)
• agent-framework-foundry-hosting: Emit failed events for hosted agent responses (#6502)

Changed

• agent-framework-core: [BREAKING] Add sampling guardrails to MCP tools — deny server-initiated sampling by default and add sampling_approval_callback, sampling_max_tokens, and sampling_max_requests parameters (#6413)
• agent-framework-core: [BREAKING] Align FileAccess tools with .NET, adding directory discovery and recursive search (#6476)
• agent-framework-declarative: [BREAKING] Additional fixes for declarative workflow execution (#6489)
• agent-framework-azure-contentunderstanding: Adopt azure-ai-contentunderstanding to_llm_input in the CU context provider (#5796)
• agent-framework-orchestrations: Promote to stable (1.0.0)

Fixed

• agent-framework-core: Stop forwarding the unsupported function_invocation_configuration kwarg from as_agent (#6520)
• agent-framework-core: Fix MCP allowed_tools empty-list handling (#6296)
• agent-framework-core: Disable harness compaction when max tokens are not provided (#6410)
• agent-framework-core: Parse MCP CallToolResult.structuredContent to prevent tool results returning None (#6421)
• agent-framework-core: Catch bare ImportError during hosted-environment detection so optional Foundry hosting probing cannot crash user-agent setup
• agent-framework-anthropic, agent-framework-core, agent-framework-openai: Fix OTel usage detail attributes (#6493)
• agent-framework-foundry, agent-framework-openai: Fix Azure AI Search citation URLs (#6453)
• agent-framework-foundry: Fix aiohttp dependency specification (#6567)
• agent-framework-declarative: Fix declarative workflow execution (#6468)
• samples: Fix harness console rendering a single streamed tool call multiple times (#6549)
• samples: Fix ollama_chat_client.py to pass tools via the options dict (#6480)

Full Changelog: python-1.8.1...python-1.9.0

Changes

dd29f9a .NET: Hosted Agent Sample - Toolbox with various Auth (#5777) (#6018)

a5f4e00 .NET: Fix .NET Copilot integration tests for SDK v1.0.0 (#6424)

3c0c12c .NET: Update release version for 2026-06-10 release and switch GH.CP Agent to RC (#6454)

cea83bd .NET: Bump Microsoft.Extensions.AI packages to 10.6.0, align transitive dependency floor, and update Merge Gatekeeper ignores (#6148)

7ae73a6 Remove broken Atomic Agents docs link (#6442)

5e09727 .NET: Add Foundry Deployment docs to HA sample READMEs (#6365)

See More

383d551 Purview: Parallelize PSPC cold-cache scope refresh (#5832)

2a345e5 .NET: Fix Magentic to share agent replies across team (#6222)

5e6eb6f New logo in banner (#6380)

dbfacbf New Microsoft Agent Framework logos (#6378)

96d242f .NET: Remove required token params from HarnessAgent, make compaction opt-in (#6409) [ #6333 ]

9486c76 .NET: Add Reasoning to ChatClientAgent ChatOptions merging (#5463)

d222079 .NET: fix: preserve AG-UI session history (#5904)

af77299 .NET: [BREAKING] Migrate .NET GitHub Copilot SDK to v1.0.0 (#6381) [ #6402, #6404 ]

b343625 .NET: Add approval bypassing to harness as the default (#6387)

9bc7b27 Match AG-UI approval responses to requested arguments (#6376)

6a2efea .NET: [BREAKING] Fix hosting bugs (#6388)

3312012 .NET: Fix single-column value unwrap in declarative workflow (#6367)

fa9e086 fix: preserve foreach record values (#6208)

6bd2cfe .NET: [BREAKING] Add auto-approval rules (heuristics) to ToolApprovalAgent (#6335)

ab8ba8f .NET: Allow storage of auto-approved functions (#4950)

bbccb7f .NET: Bump ModelContextProtocol from 1.1.0 to 1.2.0 (#3956) (#6239)

bb9ed63 .NET: Restructure skill script schemas XML and remove resources from body (#6343)

bc0e65d fix: drop hosted MCP calls when reasoning is stripped (#6210)

c3901a4 Fix Observability/WorkflowAsAnAgent sampl (#6316)

ba617fc Don't count dependabot prs as part of the limit (#6317)

This list of changes was auto generated.

[1.8.1] - 2026-06-09

Added

• agent-framework-core: Add MCP client OTel spans per GenAI semantic conventions (#6349)
• agent-framework-core: Add MCP long-running task support (#6319)

Changed

• agent-framework-claude: Bump claude-agent-sdk to 0.2.87 (#6248)
• agent-framework-core: Document checkpoint storage security model and deserialization trust boundaries (#6295)
• agent-framework-azurefunctions: Document checkpoint storage security model and deserialization trust boundaries (#6295)

Fixed

• agent-framework-core: Filter MCP tool kwargs to declared params via allowlist (#6399)
• agent-framework-core: Fix per-service-call history persistence with server-storing clients (#6310)
• agent-framework-openai: Use getattr for non-OpenAI provider response compatibility (#6270)
• agent-framework-foundry-hosting: Refactor workflow-as-agent pending request handling (#6259)
• agent-framework-gemini: Make Gemini honor declarative outputSchema, not just JSON mode (#5893)
• agent-framework-mem0: Isolate entity retrieval and correct app_id payload (#6242)
• agent-framework-ag-ui: Match AG-UI approval responses to requested arguments (#6376)

[1.8.0] - 2026-06-04

Added

• agent-framework-core: Add MCP-based skills discovery (McpSkillsSource) (#6169)
• agent-framework-core: Progressive tool exposure via FunctionInvocationContext (#6233)
• agent-framework-core: Add background agent support to harness agent (#6155)
• agent-framework-core: Add AgentFileStore and FileAccessProvider for file access operations (#6099)
• agent-framework-core: Coalesce code interpreter history chunks (#5801)
• agent-framework-core: Run sync tools off the event loop (#5773)
• agent-framework-bedrock: Implement native structured output support via Converse API (#6052)
• agent-framework-foundry: Add Foundry Adaptive Evals integration for rubric-generation (#6101)
• agent-framework-foundry: Add timeout parameter to FoundryAgent to fix ConnectTimeout on multi-turn conversations (#6263)
• agent-framework-mistral: Add Mistral AI embedding client package (#5480)
• agent-framework-a2a: Expose supported_protocol_bindings as configurable parameter (#6098)
• agent-framework-a2a: Set message_id on AgentResponseUpdate for message-bearing paths (#6163)
• agent-framework-foundry-hosting: Persist hosted MCP call/results as canonical mcp_call output (#6070)

Changed

• agent-framework-github-copilot: [BREAKING] Upgrade github-copilot-sdk to v1.0.0 (stable) (#6292)
• agent-framework-core: [BREAKING — experimental] Refactor Skill API to async resource and script lookup (#6135)
• agent-framework-github-copilot: Promote to release candidate (1.0.0rc1)
• agent-framework-declarative: Promote to release candidate (1.0.0rc1) (#6256)

Fixed

• agent-framework-core: Fix compaction message-id collisions and tool-loop summary persistence (#6299)
• agent-framework-core: Fix observability unsafe serialization of function-call arguments containing dataclass/framework objects (#6026)
• agent-framework-core: Consolidate MCP reliability fixes (#6145)
• agent-framework-core: Backfill chat span request model if unknown and response model is available (#6160)
• agent-framework-anthropic: Skip orphan anthropic thinking signatures (#5784)
• agent-framework-foundry: Fix FoundryAgent stripping model from PromptAgent requests (#5526)
• agent-framework-foundry-hosting: Fix toolbox consent flow in hosted agent (#6249)
• agent-framework-foundry-hosting: Drop hosted MCP calls when reasoning is stripped (#6210)
• agent-framework-openai: Fix OTLP HTTP base-endpoint losing /v1/{signal} auto-append (#5913)
• agent-framework-openai: Drop hosted MCP calls when reasoning is stripped (#6210)
• agent-framework-orchestrations: Fix spurious Magentic custom manager warning (#6261)
• agent-framework-azurefunctions: Fix integration test worker crashes on Py3.13 (#4260)

Changes

afa7834 Updating dotnet package versions for 1.9 release (#6314)
c6951c2 Python: Add MCP-based skills discovery (McpSkillsSource) (#6169)
a982428 .NET: Bug fixes for AGUI hosting and workflows (#6311)
90a3e5d .NET: Add ILoggerFactory and IServiceProvider to HarnessAgent constructor (#6273) [ #6103 ]
49a6e43 Python: progressive tool exposure via FunctionInvocationContext (#6233) [ #3877 ]
6086a74 Python: Promote agent-framework-declarative package to RC (#6256)
fa8cfb7 Python: Fix FoundryAgent stripping model from PromptAgent requests (#5526) [ #5525 ]
6de4c24 .NET: Promote Workflows.Declarative packages to stable versions (#6254)
a5f355e Python: Fix OTLP HTTP base-endpoint losing /v1/{signal} auto-append (#5913)
0cf4892 .NET: Add Hosted-ToolboxMcpSkills sample (#6175)

See More

cdc4809 ci: harden Python test coverage workflow (#5982)
0432082 Python: Persist hosted MCP call/results as canonical mcp_call output (#6070)
05ebb96 fix: skip orphan anthropic thinking signatures (#5784)
c83a944 Fix open pr count check (#6255)
5d98bed Python: feat(bedrock): implement native structured output support via Converse API (#6052) [ #5966 ]
e0d0ad1 Python: feat(evals): Foundry Adaptive Evals integration (rubric-generation) (#6101)
f36096c Python: Fix core observability unsafe serialization of function-call arguments containing dataclass/framework objects (#6026) [ #5733 ]
03e14ca .NET: Update hosted agents (#6243)
b298113 .NET - Fix missing id on function_call_output in Foundry Hosting (#6246)
8091d05 Python: refresh dev dependencies and validate runtime bounds (#6238)
52a8045 Python: Add background agent support to harness agent (#6155)
78d175a Python: coalesce code interpreter history chunks (#5801)
b59a854 Fix integration test worker crashes in Azure Functions on Py3.13 (#4260)
8b0db48 Add community PR limit workflow (#6229)
5affc9c Python: Reorganize A2A samples and use package A2AExecutor (#6165)
edcc786 .NET: Preserve and propagate CreatedAt through workflows (#3930)
07a1e83 .NET: Forward Magentic participant replies to manager (#6156)
fa2a6af Bump Azure.AI.AgentServer.* packages and align Azure.Core/System.ClientModel (#6178)
11c8d89 .NET: Fix InvokeMcpTool approval path for declarative workflows (#6177)
6510d6e .NET: Quarantine flaky DevUI test (#6159)
dd9a4b6 Python: [A2A] Set message_id on AgentResponseUpdate for message-bearing paths (#6163) [ #5949 ]
e8ff541 Python: consolidate MCP reliability fixes (#6145)
d2d5384 Python: Add Mistral AI embedding client package (#5480)
1fccf16 feat: Remove [Experimental] tag from .NET Orchestrations (#6164)
8ed2159 .NET: Workflow Outputs Overhaul: Support Tagging, Filtering Agent Outputs (#6045)
b000a2c Python: Adding AgentFileStore and FileAccessProvider to support file access operations. (#6099)
0578f4c Backfill chat span request model if it's unknown and response model is avaliable (#6160)
e9a6063 Python A2A: Expose supported_protocol_bindings as configurable parameter (#6098) [ #6057 ]
d2f7993 .NET: feat: Update GroupChatManager semantics to match other Orchestration patterns (#6140)

This list of changes was auto generated.

What's Changed

• .NET: Persist ForeachExecutor iteration state across checkpoints by @peibekwe in #6051
• .NET: Remove responses experimental flag from FoundryAgent et.al. by @westey-m in #6121
• .NET: Add MCP-based skills support (skill-md type) by @semenshi in #6108
• .NET: [BREAKING] Remove Support for Code-Gen in Declarative Workflows by @peibekwe in #6095
• feat(a2a): add A2AAgentSession with reference_task_ids and input-required support by @giles17 in #5980
• .NET: Add Foundry Toolbox MCP skills discovery sample by @semenshi in #6134
• .NET: Fix render dupe and text input clear bugs, and improve guardrail error messaging by @westey-m in #6136
• .NET: Add missing projects to solution for release by @peibekwe in #6157
• .NET: Support ClaimsIdentity-based scoping of agent sessions by @lokitoth in #5696
• .NET: feat: Bring Handoff Orchestration to parity with Python by @lokitoth in #6138
• .NET: [Breaking] Refactor AgentFileSkillsSource for depth-based discovery and predicate filters by @semenshi in #6109
• .NET: Updating version for dotnet release 1.8.0 by @peibekwe in #6161

Full Changelog: dotnet-1.7.0...dotnet-1.8.0

What's Changed

• .NET: fix: populate MessageId from TaskStatusUpdateEvent in A2AAgent by @SergeyMenshykh in #6043
• .NET: Add Magentic Orchestration Sample by @Copilot in #5823
• .NET: Add MCP long-running task support for MCP client tools by @peibekwe in #5994
• .NET: HarnessConsole: Improve rendering perf / reduce flickering by @westey-m in #6014
• .NET: fix parallel tool call rendering in AGUI translation layer by @rogerbarreto in #6009
• .NET: Add Hosted-AgentSkills sample with Foundry Skills integration by @rogerbarreto in #6013
• .NET: [Breaking] Refactor AgentSkill API to async resource and script lookup by @SergeyMenshykh in #6030
• .NET: Adding shell tool project to release solution by @alliscode in #6092
• .NET: Updating version for dotnet release 1.7.0 by @alliscode in #6093

Full Changelog: dotnet-1.6.2...dotnet-1.7.0

What's Changed

• .NET: Add Executor RouteBuilder Unit Tests by @Copilot in #5824
• .NET: Harness console refactoring by @westey-m in #5811
• .NET: Add sample for invoking Foundry Toolbox tools from declarative workflows by @peibekwe in #5829
• .NET: Fix flaky InputWaiter_WaitForInputAsync_BlocksUntilSignaledAsync by @Copilot in #5835
• .NET: Add Workflow Builder Specialized Edge tests by @Copilot in #5826
• .NET: fix: allow naming handoff workflows by @he-yufeng in #5799
• .NET: Re-enable previously-flaky ObservabilityTests and WorkflowRunActivityStopTests by @Copilot in #5837
• .NET: Add Magentic E2E workflow coverage by @Copilot in #5833
• .NET: Add Hosted-MemoryAgent sample with isolation key plumbing (#5692) by @rogerbarreto in #5702
• .NET: add AgentSession StateBag edge case coverage by @challaravinath in #5838
• .NET: Fix bug in store-false helper to ensure addition rather than replacement by @westey-m in #5895
• .NET: Add observer for OpenAIWebSearch by @westey-m in #5894
• .NET: fix: avoid AGUI tool result message id collisions by @he-yufeng in #5800
• .NET: Adding default providers and tools to HarnessAgent by @westey-m in #5896
• .NET: Require TODO finish reason and rename SubAgents to BackgroundAgents by @westey-m in #5902
• .NET: Add otel file logging and switch samples to projects client with store=true by @westey-m in #5924
• .NET: Add ability to export/import sessions in harness console by @westey-m in #5920
• .NET: Bump Azure.AI.Projects to 2.1.0-beta.2 and add agent-endpoint AsAIAgent path by @rogerbarreto in #5899
• .NET: Delegate MCP ContentBlock to AIContent conversion to the MCP SDK by @peibekwe in #5903
• .NET: Harness Console: Add a factory option for creating custom sessions by @westey-m in #5951
• .NET: Harness code act skill sample by @westey-m in #5930
• .NET: Reduce re-rendering in harness console by @westey-m in #5953
• ci(python-setup): drop -U upgrade flag from uv sync by @eavanvalkenburg in #5961
• .NET: Add A2AAgentOptions and align A2AAgent constructors with ChatClientAgent pattern by @SergeyMenshykh in #5954
• CI: Pin third-party GitHub Actions to commit SHAs by @rogerbarreto in #5972
• .NET: Promote FoundryChatClient to public, add file/vector-store helpers and ToPromptAgentAsync converter by @rogerbarreto in #5940
• .NET: Add background agents support to HarnessAgent by @westey-m in #5977
• .NET: Add additional openai specific error observers and move them to openai project by @westey-m in #6004
• .NET: Add shell support to the HarnessAgent by @westey-m in #6005
• .NET: Surface x-ms-served-model header as ChatResponse.ModelId for Foundry agents by @rogerbarreto in #5979
• .NET: Fix declarative workflow regressions for hosted agents by @alliscode in #5905
• .NET: Updating versions for dotnet release 1.6.2 by @alliscode in #6019

Full Changelog: dotnet-1.6.1...dotnet-1.6.2

[1.7.0] - 2026-05-28

Added

• agent-framework-core: Add HarnessAgent and background-agents harness provider (#6041, #6069)
• agent-framework-core, agent-framework-a2a: Add A2AAgentSession with referenced task IDs and input-required support (#5980)
• agent-framework-foundry: Add experimental prompt-agent conversion and deployment APIs (#5959)
• agent-framework-declarative: Add Foundry Toolbox MCP invocation support and sample (#5933)
• samples: Add hosting samples overview README (#5407)

Changed

• agent-framework-core: Align TodoProvider tool names with the C# implementation (#6107)
• agent-framework-core: Align ModeProvider tool names and instructions (#6071)
• agent-framework-chatkit: Raise the openai-chatkit dependency floor to >=1.6.4 to match the current typed API usage.
• agent-framework-declarative: [BREAKING] Remove Python-only declarative actions and rename alias kinds to C# canonical names (#6126)
• tests: Replace deprecated asyncio.iscoroutinefunction usage in DevUI cleanup-hook tests (#4563)

Fixed

• agent-framework-core: Point @experimental warnings at user code (#5996)
• agent-framework-declarative: Fix Foreach body exit wiring (#6050)
• agent-framework-devui: Fix streaming memory growth regression (#6038)
• agent-framework-foundry: Pass default headers to Foundry agents (#6040)
• agent-framework-foundry-hosting: Fix hosted handoff argument serialization (#5861)
• agent-framework-foundry-hosting: Allow hosted checkpoints to restore MessageRole values (#6049)
• agent-framework-openai: Preserve citation get_url metadata (#6037)
• agent-framework-openai: Guard Chat Completions streaming against null deltas (#5734)
• agent-framework-openai: Read response headers defensively for stream wrappers without .headers (#6028, #6029)
• samples: Fix sequential workflow sample output handling (#5976)

Full Changelog: python-1.6.0...python-1.7.0