[dependabot]

Updated Microsoft.Agents.AI.GitHub.Copilot from 1.24.0 to 1.27.0.

Release notes

Sourced from Microsoft.Agents.AI.GitHub.Copilot's releases.

1.27.0

[1.27.0] - 2026-10-30

Added

• skills: Add a .NET consumer skill for building with Agent Framework (#​9651 by @​westey-m).
• .NET, CI: Add a script to bump the .NET release version (#​9894 by @​baywet).

Changed

• .NET, AgentServer: [BREAKING] Update AgentServer dependencies (#​9721 by @​rogerbarreto).

  Migration: In Foundry hosted applications, replace builder.Services.AddFoundryResponses(...) with builder.AddFoundryResponses(...) so response and task storage use the same configuration-bound identity and endpoint. The IServiceCollection overload remains supported for local or non-hosted use.

  If you pin SDK dependencies directly, align Azure.AI.Projects and Azure.AI.Extensions.OpenAI to 3.0.0-beta.5, and Azure.AI.AgentServer.Core, Azure.AI.AgentServer.Invocations, and Azure.AI.AgentServer.Responses to 1.0.0-beta.30, 1.0.0-beta.7, and 1.0.0-beta.9, respectively. Align Azure.Core to 1.63.0, System.ClientModel to 1.16.0, and Microsoft.Identity.Client.Extensions.Msal to 4.90.0.

  For code using the affected SDK APIs directly, replace string storage ETags with Azure.ETag (ETag ifMatch = default in state-store overrides), stream.InternalMetadata with stream.PersistedMetadata, stream.Checkpoint() with stream.CreateCheckpointEvent(), and SessionFileWriteResponse with SessionFileWriteResult. Where AgentReference becomes ambiguous, qualify or alias Azure.AI.Extensions.OpenAI.AgentReference, not the newly added Azure.AI.Projects.Agents.AgentReference.

  Storage compatibility: Responses beta.9 moves local durable response state to responses/partitions-v1; existing pre-upgrade local response files are not read after upgrading. The PR does not provide a migration procedure for those files.

• .NET: [BREAKING] Reject redirect client changes (#​9711 by @​baywet).

  Migration: Update DefaultHttpRequestHandler client-provider callbacks to return null for allowed redirect destinations, retaining the internally owned client, or throw to reject a destination. Returning a client for a redirect now causes HttpRequestException before the redirected request is sent. Supplying a client for the initial request remains supported, and no public API signatures change.

• .NET, LocalCodeAct: Harden provenance and process capability checks (#​9804 by @​eavanvalkenburg).

• .NET, dependencies: Update the Aspire dependency group and align the Content Understanding dependency floor (#​9822 by @​dependabot[bot], #​9695).

• .NET: Bump the release version to 1.27.0 (#​9893 by @​baywet).

• docs, samples: Clarify optional usage counter handling, pin the RAG Step02 documentation pages to a commit, and point Foundry-migrated sample READMEs at FOUNDRY_* settings (#​9783, #​9648 by @​Laurianti, #​9600 by @​1aifanatic).

• development: Update developer setup and CODEOWNERS maintainer assignments (#​9733, #​9734 by @​dargilco).

Fixed

• .NET, workflows: Handle parse-value and workflow value conversion failures consistently, validate question skip inputs consistently, persist workflow scope aliases, preserve pending Magentic plan review, and release the workflow when a run ends after an executor fails to initialize (#​9845 by @​baywet, #​9826 by @​baywet, #​9830 by @​baywet, #​9749 by @​baywet, #​9797 by @​baywet, #​9585 by @​RachelWanggg).
• .NET, Foundry: Correct citation text offsets across completed text parts (#​9812 by @​rogerbarreto).
• .NET, Harness: Allow the local chat history marker when stored output is disabled (#​8708 by @​rogerbarreto).
• .NET, Mem0: Validate scopes on restored session state (#​9827 by @​kartikmadan11).
• .NET, Toolbox: Apply the configured tool approval policy (#​9662 by @​rogerbarreto).
• docs: Fix dead ADK MCP tools and ADR-0002 Agent Tools links, and correct the documented Ollama embedding truncate default (#​9823 by @​leom1919, #​9766 by @​leom1919, #​9672).

1.26.0

Changes:

• 9c8a3514a15a702f81bfda456d80c7ccaa4d2712 Update package versions for release (#​9650)
• c3b9f22d64fd86e8133395555a1fa4aa22f745e0 Add ACGS to the Python community projects (#​9618)
• 71cf48cb4019bc503c7ceb61420cc3d836250790 Python: Honor allow_multiple_tool_calls in AnthropicClient when tool_choice is unset (#​8980)
• ea32b6db9e9b4b434a86496bacd9cc6dd0422a69 Python: compose Copilot session hooks correctly (#​9649)
• 678c6616aa4c73ecfc28cc6fc119a3928ba04024 .NET: Fix AG-UI sample prerequisites and troubleshooting paths (#​9620)
• 8730cb1974857e2264f874a258623db1303cc2ac .NET: Log a warning when an unsupported declarative action is skipped (#​8056) [ #​8040 ]
• 9581926deec6a0473a68797153e98d44da74d09a .NET: Correct endpoint override instructions in Responses samples (#​9639)
• 9c53b5f44658cc7839d0f1aefe580152edaba970 Python: Refresh coding standards and Copilot review guidance (#​9637)
• 3b725b3b0ffe09ff00d57b31cc179d20d12a1e49 Python: fix(core): define EdgeGroup's builtins.type alias at module scope (#​9614)
• a8e284ca8ce7c2a6b4a4641ef35e131d75a5cda3 Python: Add #​9472 to 1.23.0 changelog (#​9610)

See More

• d33c44583992c4f638f50714bbbbfc4d1070356b Python: Bump package versions for 1.23.0 release (#​9602)
• 07a83a7c369b7d51247630a60e48bebf85429943 Python: Recommend include_detailed_errors only when it is disabled (#​9472)
• ce214c0b3f69b6d735e90afbdadad8d0a6268067 fix(dotnet): preserve toolbox OAuth consent (#​9565) [ #​8379 ]
• c3ce250695f71e56c9c3f9bff85fef78934520aa Python: Set the assistant role on streamed Gemini updates (#​9491)
• fb57ceb6bb0d75520297d93f6cebfbe6eede370e Add Tracekit to the Python community projects (#​9497)
• 33439bf8bcf3e3a76d7094e8f4cbb584abfc8f42 Python: Pass stream errors to nested streams when closing them (#​9476)
• d0c3e6acfe4e3fb08887d13b4a1f9ddea0d6509c Python: Add installable Agent Framework builder skill (#​9374)
• 1263843977f687f24f153d1f9597317e21d55966 Python: Sanitize unexpected streaming response failures (#​9460)
• 074bc0b17e605e28b5235ed15ad52b977b65db88 test(dotnet): remove legacy persistent tests (#​9588) [ #​9587 ]
• bba95967e36f8b45f1cb0fcfa67333134f29e7dd Python: Clarify MCP client ownership and add workflow sample (#​9532)
• 8ff2ec937fe438c4330f9e0b0b5e01b32df079e3 Python: close the RedisContextProvider index connection when the provider owns it (#​9510)
• 89457c5bcdd7c7b3423f4063f32c604d2fec0a74 docs: fix ChatResponse async aggregation example (#​9518)
• 74f3447d030c83d747efab617d92573f86c01f52 Python: Make Content base64 documentation examples runnable (#​9467)
• b7f8ad686b07a5f6b13dd1f471ee1328b24c8a3a Python: Remove span-only tool attributes from invocation metrics (#​9592)
• 5da17697d62d8c80c899c977e004ea6b8c09e56f docs: update A2A hosting example for SDK v1 (#​9521)
• 8be57da33007b478ea8dd924bf8ccfa36a8444a6 Python: fix(bedrock): report the requested model on non-streaming responses (#​9399)
• 06050253e90e235203d65e323cdb096145d37c26 docs: fix ChatKit streaming helper usage (#​9523)
• b7ce0d616fd027f850178e7a11255dc67070fe7a fix(workflows): support keyword-only RunContext in functional workflows (#​9397)
• 1ba7425571fdc2c92ac18b6b537ad1c8a6d02b04 Python: Fix stateless shell tools inheriting host stdin (#​9469)
• a9eff53bdcca76b5b2d60b5ea3c7e9f973667e55 Python: Handle missing reasoning text in DevUI (#​9543)
• a479349b2a7a246981117efa0659345d5fb0aa14 Python: Correct Purview middleware setup in package guide (#​9553)
• 597342c2c688c54620a4b00b76866d8e1ef943ea Python: Fix Copilot Studio constructor in package guide (#​9551)
• 70ba23a3970cc8ab829eed2cc887a25137f3a1e5 fix: bind background completion waits to execution identity (#​9442)
• 10f7f989fba24087864d1d9e00def83fafb0abd0 .NET: Add AgentSessionStore.DeleteSessionAsync to the Abstraction (#​8801) [ #​7991, #​8586 ]
• c7394476bffb5cf8b4ba84a2903f234d8f18a5ac Python: drop unsupported instructions from AF Copilot Studio migration samples (#​9577)
• 621e8e39daffe9204ae0c29f0f9f285fd2cf7298 Python: pass judge model in evaluate_traces sample (#​9576)
• 6ae0f4086d81b370c9347c4deae1c85fd71781d2 Python: Refresh dependencies and block compromised releases (#​9590)
• dbca9d8f1fcf0858b439bee3c6aee51b8991e98b Dotnet: DevUI improve local request checks (#​9575)
• 20f07283ae47413cfc3d760209f62d5e08c2091a Python: fix Foundry Toolbox quickstart commands and setup steps (#​9550)
• 4c191ff5099d9a9e2f7ad0812d901ee3a222e0bb Python: fix(devui): fallback to empty string when reasoning chunk has no text (#​9546) [ #​9533 ]
• 1fe5467d13eccac225aca7ae9aec21aed16469ee Python: Make MCP connection-loss recovery ownership-aware (#​9583)
• 02005995380d5a09167e5c43b5d0f88328979145 Python: Improve settled approval matching (#​9535)
• 6b48d20288fa43887d794479577fd8b57eee535e Tool name whitespace bugfix (#​9557)
• 08851e69d722b0e0961c08eecf8575db995f0172 .NET: Add gRPC protocol selection to the A2A sample (#​9563)
  ... (truncated)

1.25.0

Changes:

• 1ab3430a4b6c8add9f08854c77544b0211a3f13c .NET: Dotnet: Add approval reuse considerations (#​9389)
• 563eb3a9965f7c144ad697223320411c02fa349a .NET: terminate chat completions SSE stream with data: [DONE] (#​8532) [ #​8526 ]
• 4964bdd1b2d55b8137cbc1bc85840181af05bda0 .NET: Update version for 1.25.0 release (#​9388)
• 5abdadf262141b56f84111b89b607b2d6bd6ebaa .NET: Also include citations and error details in purview checks. (#​9375)
• 74db3c11201f32b919781ebbb3de4f643150510b .NET: Fix reasoning remnants and handoff bounce-back (#​9174)
• 6b57b5f4cb15ddb87a2ca4f9d958a80dd0fc8455 .NET: Upgrade A2A packages to 1.0.0-preview3 (#​9386)
• 95feea605dbbe879f678602585c76fdb5a963b63 .NET: Automatically reject tool-approval requests that never receive a response (#​9152)

See More

• 1b9879c58ac950ef235471209b4c5cb402972bab .NET: feat(dotnet): support closed-list workflow questions (#​9202) [ #​1530 ]
• dcbbf7967afe877913275f1a445166a7ac301ab0 Bump the agent-memory group with 2 updates (#​9315)
• b53d25ed1cd2f54ee5e5e5ed548bb2c5515022f3 .NET: fix: preserve agent continuation token when wrapped with UseOpenTelemetry (#​8265) [ #​8243 ]
• f72bf952415a770a879aa19d8e397c82a765c9d0 .NET: [BREAKING] Decouple Cosmos chat metadata from partition-key strategy (#​9214)
• 6e630f4796b84c0f72640b9cc914b7325254ad1d .NET: Isolate Foundry toolbox response cache (#​8848)
• 1e722004da32080df18f66eae3558600333d4c92 Revert ".NET: [BREAKING] Request concise Harness progress without private reasoning (#​9004)" (#​9147)
• 8254704d57dcc42b8542a0eeef79a25145a89e4d .NET: [BREAKING] Request concise Harness progress without private reasoning (#​9004)

This list of changes was auto generated.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.12 to 10.0.14.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Hosting.Abstractions from 10.0.12 to 10.0.14.

Release notes

Sourced from Microsoft.Extensions.Hosting.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Abstractions from 10.0.12 to 10.0.14.

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Options from 10.0.12 to 10.0.14.

Release notes

Sourced from Microsoft.Extensions.Options's releases.

No release notes found for this version range.

Commits viewable in compare view.

[dependabot]

Looks like these dependencies are no longer updatable, so this is no longer needed.