[dependabot]

Updated Azure.AI.AgentServer.Core from 1.0.0-beta.29 to 1.0.0-beta.30.

Release notes

Sourced from Azure.AI.AgentServer.Core's releases.

1.0.0-beta.30

1.0.0-beta.30 (2026-10-15)

Features Added

• Added the private POST /_agent/before-snapshot and POST /_agent/after-restore
  lifecycle endpoints for memory snapshot capture and restoration, with
  POST /_before_snapshot and POST /_after_restore as aliases. Applications can register
  an IAgentSnapshotLifecycle singleton to release and rebuild process state; Core applies
  session environment overrides first and provides serialized, idempotent retry handling.
  Consumers acknowledge this experimental contract with the AAAS002 diagnostic.
• Added FoundryEnvironment.SessionInstanceId, sourced from FOUNDRY_AGENT_SESSION_GUID, and
  validation of the hosted platform's 32-character lowercase hexadecimal session-incarnation ID.
• Added TaskDefinition<TInput, TOutput>.GetStatusAsync() for task-ID migration and compatibility
  probes without activating or reclaiming the task.
• Added the hidden TaskDefinition<TInput, TOutput>.TryStartExistingAsync() compatibility
  primitive, which starts a multi-turn task only if its record still exists and never enters the
  create path.
• Added host-scoped resilient-task opt-in through SetResilientTasksEnabled() and
  ResilientTaskOptions.Enabled. Task registration alone no longer initializes task storage or
  recovery; enabled hosts run startup recovery and the periodic recovery loop.
• Added constructor-injected resilient task handlers through
  IResilientTaskHandler<TInput, TOutput> registration overloads. The task engine creates
  and asynchronously disposes a fresh dependency-injection scope for every execution
  attempt, including retries, steered turns, and recovered attempts.
• Added deterministic event-stream backing composition and
  IHostApplicationBuilder.AddAgentEventStreams(sectionName). Explicit application
  configuration now overrides protocol defaults regardless of registration order,
  identical selections are idempotent, and conflicting same-precedence selections fail
  with source diagnostics instead of silently discarding durability settings.
• Added lazy task-bound stream capabilities: handlers emit through
  TaskContext<TInput>.Stream, and callers subscribe through TaskRun<TOutput>.Stream.
  Streams use the per-turn InputId, remain open across retry and recovery deferral, and
  close only after the existing terminal task-store transition succeeds.
• Added ResilientTaskSettings : ClientSettings and configuration-bound
  IHostApplicationBuilder.AddResilientTasks(sectionName) overloads. Hosted task storage
  now accepts its credential and project endpoint from one settings object.

Breaking Changes

• Resilient tasks now default to disabled. Applications that start Core tasks directly must call
  SetResilientTasksEnabled() before host startup. Starting a registered task while disabled
  throws ResilientTaskException with ResilientTaskErrorCode.NotEnabled.
• UseInMemoryReplay() now defaults to a bounded 10-minute retention window instead of
  retaining closed streams indefinitely.
• State-store optimistic-concurrency values now use the standard Azure.ETag type.
  This includes StateStoreItem.Etag, StateStoreItemRef.Etag,
  StateStoreItemKey.Etag, FoundryStoragePreconditionException.CurrentETag, the
  corresponding model-factory parameters, and FoundryStateStore.SetItemAsync /
  DeleteItemAsync ifMatch parameters.

Bugs Fixed

... (truncated)

Commits viewable in compare view.

Updated Azure.AI.AgentServer.Invocations from 1.0.0-beta.7 to 1.0.0-beta.8.

Release notes

Sourced from Azure.AI.AgentServer.Invocations's releases.

1.0.0-beta.8

1.0.0-beta.8 (2026-10-28)

Features Added

• Added VoiceInputDataPart, ordered VoiceUserMessageEvent.ContentParts, and VoiceResponseOutputDataDoneMessage for application data in Bridge protocol 1.0. The existing text-only Content projection and explicit silent completion remain available.
• Added a standalone /voice_conversation_engine WebSocket route for typed Voice
  handlers registered with AddVoice<THandler>(). It reuses the existing Bridge
  Protocol 1.0 relay alongside /invocations_ws, without new registration options
  or changes to generic Invocations handlers.
• Aligned the experimental Voice caller-interruption contract with user.barge_in, VoiceUserBargeInEvent, and OnUserBargeInAsync, preserving playback snapshots and application-owned cancellation/history. Voice Live senders must use the same event contract. Generic raw WebSocket handlers are unchanged.

Other Changes

• Reference the published Azure.AI.AgentServer.Core 1.0.0-beta.30 package instead of the current Core project, so this release does not require publishing Core 1.0.0-beta.31.
• Updated resilient task samples to call SetResilientTasksEnabled() explicitly; task
  registration alone no longer activates storage or recovery.
• Updated the resilient research sample to use constructor-injected task handlers and
  task-bound producer/consumer streams, while retaining registry lookup for later GET
  replay by invocation id.

Commits viewable in compare view.

Updated Azure.AI.AgentServer.Responses from 1.0.0-beta.8 to 1.0.0-beta.9.

Release notes

Sourced from Azure.AI.AgentServer.Responses's releases.

1.0.0-beta.9

1.0.0-beta.9 (2026-10-15)

Features Added

• Hosted durable multi-turn task IDs are now scoped by FOUNDRY_AGENT_SESSION_GUID, preventing
  recreated sessions from reusing name-derived IDs that refer to tombstoned tasks from an earlier
  incarnation and can cause a service precondition failure (HTTP 412).
  Public ResponseContext.ConversationChainId values and one-shot task IDs are unchanged, and
  pending, in-progress, or suspended pre-rollout chains continue under their legacy task IDs.
• Added AddResponsesServer(IHostApplicationBuilder host, string sectionName) and
  AddResponsesServer(IHostApplicationBuilder host, string sectionName, Action<ResponsesServerSettings>),
  which bind a new ResponsesServerSettings : ClientSettings (the Foundry credential, Endpoint,
  and option flags) from a single configuration section. Because response storage and
  resilient-task storage bind the same identity and endpoint from one section, the two cannot
  diverge. This is the required entry point in hosted Foundry environments. In a hosted
  container, values the section does not provide default to the platform: Endpoint to
  FOUNDRY_PROJECT_ENDPOINT, and an absent Credential section to a DefaultAzureCredential
  limited by default to the production credentials (environment, workload identity and managed
  identity; AZURE_TOKEN_CREDENTIALS overrides the selection), so
  ResponsesServer.Run<THandler>() needs no configuration. A Credential section that does not
  resolve still fails startup.
• Added ResponseContext.ClientCancellation (a CancellationToken) alongside
  ResponseContext.Shutdown, so an explicit client cancel is composable as a token.

Breaking Changes

• Stored responses use Core durable tasks only when the resilient-task runtime is enabled.
  ResilientBackground=true enables it automatically; otherwise store=true requests execute
  in-process and are not recovered after an ungraceful crash.
• The local file-backed response provider now uses a new responses/partitions-v1 namespace.
  Previously persisted responses and their history are not visible after upgrade, including
  for anonymous requests and crash recovery. Legacy files remain unchanged; there is no
  automatic migration or legacy read fallback. Restoring old data requires an explicit,
  operator-controlled migration with independently verified ownership. Newly persisted
  partitioned data continues to survive restarts.
• Hosted registration now uses the ClientSettings pattern. The
  AddResponsesServer(IServiceCollection, Action<ResponsesServerOptions>) overload remains for
  local / non-hosted scenarios and now throws in a hosted Foundry environment (use the
  IHostApplicationBuilder overload there). The internal DEFAULT_FETCH_HISTORY_ITEM_COUNT
  environment-variable read and the ambient TokenCredential registration were removed
  (FOUNDRY_PROJECT_ENDPOINT is now only the fallback for an unconfigured
  ResponsesServer:Endpoint); the HTTPS-in-non-development check now honors
  IHostEnvironment.IsDevelopment() rather than reading ASPNETCORE_ENVIRONMENT /
  DOTNET_ENVIRONMENT directly.
• ResponseEventStream.Checkpoint() was renamed to the virtual CreateCheckpointEvent(), and
  ResponseEventStream.InternalMetadata was renamed to PersistedMetadata.
• ResponseContext.ClientCancelled was renamed to IsClientCancelled. IsShutdownRequested and
  IsClientCancelled are now get-only virtual passthroughs over the Shutdown /
  ClientCancellation tokens; the settable IsShutdownRequested was removed.

Bugs Fixed

... (truncated)

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: .NET, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.