Skip to content

deps: Bump GitHub.Copilot.SDK and 2 others - #137

Merged
DeDuva merged 1 commit into
devfrom
dependabot/nuget/src/Squad.Agents.AI/microsoft-packages-f1382321ab
Sep 1, 2026
Merged

deps: Bump GitHub.Copilot.SDK and 2 others#137
DeDuva merged 1 commit into
devfrom
dependabot/nuget/src/Squad.Agents.AI/microsoft-packages-f1382321ab

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Updated GitHub.Copilot.SDK from 1.0.3 to 1.0.5.

Release notes

Sourced from GitHub.Copilot.SDK's releases.

1.0.5

Installation

⚠️ Artifact versioning plan: Releases of this implementation track releases of the reference implementation. For each release of the reference implementation, there may follow a corresponding release of this implementation with the same number as the reference implementation. Release identifiers of the reference implementation are in the form vMaj.Min.Micro. For example v0.1.32. The corresponding maven version for the release will be Maj.Min.Micro-java.N, where Maj, Min and Micro are the corresponding numbers for the reference implementation release, and N is a monotonically increasing sequence number starting with 0 for each release. See the corresponding architectural decision record for more information in the docs/adr directory of the source code.

📦 [View on Maven Central]((central.sonatype.com/redacted)

📖 [Documentation]((github.github.io/redacted) · [Javadoc]((github.github.io/redacted)

Maven

<dependency>
    <groupId>com.github</groupId>
    <artifactId>copilot-sdk-java</artifactId>
    <version>1.0.5</version>
</dependency>

Gradle (Kotlin DSL)

implementation("com.github:copilot-sdk-java:1.0.5")

Gradle (Groovy DSL)

implementation 'com.github:copilot-sdk-java:1.0.5'

Feature: annotation-based tool API (@​CopilotTool)

The Java SDK now includes a high-level, annotation-driven tool API. Annotate methods with @​CopilotTool and parameters with @​CopilotToolParam to define tools — a JSR-269 annotation processor generates metadata at compile time with no runtime reflection. Use ToolDefinition.fromObject() to register tools with minimal boilerplate. (#​1792)

public class WeatherTools {
    `@​CopilotTool`("Get the current weather for a given city")
    public String getWeather(
            `@​CopilotToolParam`(value = "The city to get weather for", required = true) String city,
            `@​CopilotToolParam`(value = "Temperature unit: celsius or fahrenheit", defaultValue = "celsius") String unit) {
        // implementation
    }
}

List<ToolDefinition> tools = ToolDefinition.fromObject(new WeatherTools());
SessionConfig config = new SessionConfig().setTools(tools);

Feature: ToolInvocation injection in @​CopilotTool methods

... (truncated)

1.0.5-preview.1

What's Changed

New Contributors

Full Changelog: github/copilot-sdk@rust/v1.0.5-preview.0...rust/v1.0.5-preview.1

1.0.5-preview.0

What's Changed

New Contributors

Full Changelog: github/copilot-sdk@rust/v1.0.4...rust/v1.0.5-preview.0

1.0.4

Installation

⚠️ Artifact versioning plan: Releases of this implementation track releases of the reference implementation. For each release of the reference implementation, there may follow a corresponding release of this implementation with the same number as the reference implementation. Release identifiers of the reference implementation are in the form vMaj.Min.Micro. For example v0.1.32. The corresponding maven version for the release will be Maj.Min.Micro-java.N, where Maj, Min and Micro are the corresponding numbers for the reference implementation release, and N is a monotonically increasing sequence number starting with 0 for each release. See the corresponding architectural decision record for more information in the docs/adr directory of the source code.

📦 [View on Maven Central]((central.sonatype.com/redacted)

📖 [Documentation]((github.github.io/redacted) · [Javadoc]((github.github.io/redacted)

Maven

<dependency>
    <groupId>com.github</groupId>
    <artifactId>copilot-sdk-java</artifactId>
    <version>1.0.4</version>
</dependency>

Gradle (Kotlin DSL)

implementation("com.github:copilot-sdk-java:1.0.4")

Gradle (Groovy DSL)

implementation 'com.github:copilot-sdk-java:1.0.4'

Feature: HTTP request callback support

Register a CopilotRequestHandler on the client to intercept every outbound LLM inference HTTP or WebSocket request — for both BYOK and CAPI — and mutate, replace, or fully forward it. Useful for logging, header injection, model substitution, or custom routing. (#​1689, #​1775, #​1784)

final class MyHandler extends CopilotRequestHandler {
    `@​Override`
    protected HttpResponse<InputStream> sendRequest(HttpRequest request, CopilotRequestContext ctx) throws Exception {
        HttpRequest mutated = HttpRequest.newBuilder(request, (n, v) -> true)
                .header("X-Debug-Session", ctx.sessionId() == null ? "none" : ctx.sessionId())
                .build();
        return super.sendRequest(mutated, ctx);
    }
}

CopilotClient client = new CopilotClient(
    new CopilotClientOptions().setRequestHandler(new MyHandler()));

Feature: getBearerToken callback for BYOK providers (Managed Identity)

... (truncated)

Commits viewable in compare view.

Updated Microsoft.Agents.AI.GitHub.Copilot from 1.11.0-rc1 to 1.20.0.

Release notes

Sourced from Microsoft.Agents.AI.GitHub.Copilot's releases.

1.20.0

What's Changed

New Contributors

Full Changelog: microsoft/agent-framework@dotnet-1.19.0...dotnet-1.20.0

1.19.0

What's Changed

New Contributors

Full Changelog: microsoft/agent-framework@dotnet-1.18.0...dotnet-1.19.0

1.18.0

What's Changed

New Contributors

Full Changelog: microsoft/agent-framework@dotnet-1.17.0...dotnet-1.18.0

1.17.0

What's Changed

1.16.0

What's Changed

New Contributors

Full Changelog: microsoft/agent-framework@python-github-copilot-1.0.0...dotnet-1.16.0

1.15.0

What's Changed

New Contributors

Full Changelog: microsoft/agent-framework@python-1.12.0...dotnet-1.15.0

1.14.0

What's Changed

Full Changelog: microsoft/agent-framework@python-1.11.0...dotnet-1.14.0

1.13.0

What's Changed

New Contributors

Full Changelog: microsoft/agent-framework@dotnet-1.12.0...dotnet-1.13.0

1.12.1

[1.12.1] - 2026-07-22

Added

  • agent-framework-openai: Add explicit prompt cache breakpoints for GPT-5.6 models and a usage sample (#​7163)

Changed

  • agent-framework-ag-ui: Promote the package from release candidate to stable
  • agent-framework-core: Add security guidance for custom MCP Streamable HTTP clients (#​7245)

Fixed

  • agent-framework-gemini: Preserve Gemini 3 thought signatures across function-call replays (#​7095)
  • agent-framework-core, agent-framework-foundry, agent-framework-foundry-hosting, agent-framework-openai: Fix stateless replay of reasoning-paired tool calls (#​7233)

Full Changelog: microsoft/agent-framework@python-1.12.0...python-1.12.1

1.12.0

What's Changed

New Contributors

Full Changelog: microsoft/agent-framework@dotnet-1.11.1...dotnet-1.12.0

1.11.1

Changes:

  • d9ec5eaab4918612ae0f7ddf11499576bdb510bf update package version (#​6752)
  • e3b64fdc4749256fa2d559be18a41f1a008dd7f6 .NET: [BREAKING] Make all AgentSkillsProvider tools require approval by default (#​6729) [ #​6727 ]
  • 3a5bbb5f8e3991d06fc3fe67fe3b01f2441cab0a .NET: Add DeclarativeWorkflowJsonOptions for AOT-safe declarative workflow checkpointing (#​6745)
  • a7332d69a8ffac3ad6039466d60761c970d7c367 .NET: Fix issue with resuming checkpoint after package version upgrade (#​6670)
  • e57e9455b367b1b83526fdaa21257125baac5d5d Build(deps): Bump hyperlight-sandbox-python-guest in /python (#​6737)
  • d97bc4fe3912cc32b99d654336e543d0ca5ff446 Build(deps): Bump huggingface-hub from 1.20.1 to 1.21.0 in /python (#​6738)
  • 5d57b10b9f2161ed765cbe4b8336604d6db7a6c2 Build(deps): Bump google-genai from 1.75.0 to 2.10.0 in /python (#​6739)
  • 8cd71dd4f62c35d2f868ac1b5d08956e9116f599 Build(deps): Bump fastapi from 0.124.4 to 0.138.0 in /python (#​6740)
  • 5e5dd87c91f0941ad69d247fe00b484644c125f6 Update .NET SDK to 10.0.301 (#​6730)
  • d0be98d649f97ee2b723730ae63ddc1567bb87dc Remove {resource_instructions} and {script_instructions} placeholder mechanism (#​6706)
See More
  • 802fe13053d379d68cb21aed108fa55aaf65ed38 Disable failing durable function integration tests (#​6731)
  • d75f2286f4c234d860919a78bcaf4040b91db0c4 Python: Add Telegram channel for agent-framework-hosting (#​6698) [ #​6588, #​6265 ]
  • ce74c84bdb1f2647fe8a484744ea359bc42e6e0f Python: Preserve OTel parent context for deferred streams (#​6709)
  • 4fb1fb615a1729f5cf1d017427f7fd12ee2ed8d2 Python: Fix Hyperlight CodeAct span parenting (#​6712)
  • 41a9c54bbee3c0724c14d4975b3f0630e0f0d28f Add Foundry project environment variables (#​6721)
  • 9f1ee23a4bcdb92dd9011a1ce778dc25d2dc5f16 Python: [BREAKING] Refactor FileSkillsSource for depth-based discovery and predicate filters (#​6488) [ #​6109 ]
  • 336a19fd326fd3e2d8c580096ca3e5d13a4e1342 .NET: .NET samples: migrate coding samples to Foundry-first AIProjectClient (#​6557)
  • 0283fd00a12af27ad0a7a72b70ce4f2fc8c34629 .NET: Fix hosted agent crash after tool call by rooting session store under $HOME (#​6231) (#​6714)
  • 5627dc0493e525e948e9985adf37baff21574569 docs: Add Python session identity ADR (#​6630)
  • 1df47667eadf0283637cd73b99cda63f13a28df5 Python: surface cache and reasoning token counts for the Bedrock and Gemini connectors (#​6640)
  • 91f639a694f9b70b79328058f284400897b2d0d3 Python: Explicitly emit available_resources and available_scripts in skill content (#​6694) [ #​6348 ]
  • a9e5f6d7985a555d042ff807995da7ca908f86d2 .NET: .NET Foundry: add CreateMcpTool projectConnectionId overload (#​6703)
  • ea7ae1cc00e02918a231cc97e2794b02fcfbb87c .NET: [BREAKING] Support archive-type skills in AgentMcpSkillsSource (#​6631)
  • e049bb569179384f11eb8a1b41d8a987fa416203 .NET: Add IncludeDetailedErrors option for skill script execution (#​6680) [ #​6304 ]
  • dd4b7ff475e467ac4490090eb2436e80b898dd5c .NET: Fix SearchDirectoriesForSkills to stop recursing after finding SKILL.md (#​6686) [ #​6683 ]
  • d5c15f2fe15f00118d818f79b1b532ee4ec52f03 .NET/Python: Purview: prefer token principal for user identity (#​6693)
  • 4cf7ace4463d0b4aa4a320d9671325485433f3a7 Python: track dependency maintenance PR creation (#​6665)
  • 5fff0df2afda58e4898f6cbe1a18ef4f054b11ff Python: Add load_dotenv to get-started samples and fix chat_response_… (#​6691)
  • acb28a63b5b739f5fdba4d8ac46d8c805f30b56a Python: Fix MCP metadata and tool name handling (#​6656)
  • f2d02e58b3b0e7f7d87353e2c9bf36a5834da665 Python: Add hosting core and Responses channel (#​6580)
  • 36420c515eb80015de1a5ff2098db5f6ce041aab Python: Align serialized tool format to OTel GenAI tool def format (#​6556)

This list of changes was auto generated.

1.11.0

Changes:

  • 1109d0bf64f3d1dd1e1f2bcaf3b38912ec7e833b Get date suffix up to date with release date (#​6690)
  • e030fb53ded912d0ce71bd80fe4c0455bc9d5478 .NET: Replace the symlink index entries with regular file entries (#​6687)
  • e6ebba1884238134628ad081249b451c0eb15df9 Add ADR 0029: Skills over MCP implementation design options (#​6679)
  • 7051a4920d87387587a32ab217a2cf35433bece8 Python: Add MCP as a hard dep in Foundry Hosting (#​6634)
  • 15df1152fc8d0617c6e6cfc439a260cfa09fea14 .NET: Add sample for per-run refreshable MCP authentication headers (#​6624) [ #​1631 ]
  • a2018b40f907c012bc5398e9ff36d69897d35d6f Python: [BREAKING] Require approval for file-access tools with read-only auto-approval (#​6599)
  • e4b89373f1cdc2fe6a047fd74d48bf9ab74b951b .NET: Explicitly emit available_resources and available_scripts in skill content (#​6672)
  • 88f0b23fb022b0adf33f5772b4b56a41289db748 .NET: Change A2A default session store to NoopAgentSessionStore (#​6635)
  • 9ba6b3a94e40dd90765719e44f5807a4aed4209e Remove unnecessary declarative logging (#​6677)
  • 2999f7416f7f171e0a8ae78a8d6c747a7174e71c Update package release version (#​6673)
See More
  • 09791533cfc5aa4b862c1d2790d91a1881b222a0 .NET: Emit execute_tool spans by placing OpenTelemetry below FunctionInvokingChatClient (#​6667)
  • 7f2e19ca2ffd2c11047099f853b7b7a3e46cf0b9 Python: Ensure spans created inside sync preparations in streaming call are correctly nested (#​6552)
  • 7b6f582b13436a034ec293d6f663f98dde772076 Python: Agent Harness blog post accompanying samples part 1 (#​6605)
  • dc60722cee1b208b7e91482d3ecc661542cbd342 .NET: Project ToolExecution events as FunctionCallContent/FunctionResultContent in GitHubCopilotAgent streaming (#​6228) [ #​4734, #​5897 ]
  • 2f5a76ab1de1bb4f4710f320bc1074240802bfc2 Fix issue with resuming checkpoint after package version upgrade (#​6636)
  • a7381d8bef5cdffe4b9417a530989616aad4e760 Python: stabilize dependency maintenance final checks (#​6662)
  • d108d4b54937346eb56fa65a7455d1f26fdbd4a7 Python: [BREAKING] Integrate looping into HarnessAgent (#​6607)
  • fd160a77824e98a50661109c12eba981c8b0f16a Python: fix dependency maintenance cutoff (#​6658)
  • ad3c1535c4cdb4b898161a1e95c4f5bab8c01917 fix: propagate EnableSensitiveData to auto-wired inner OpenTelemetryChatClient (#​6096) [ #​5873 ]
  • 10b7d08bff96502229e102f5c3f0474940871124 .NET: fix(hosting): emit url_citation annotation events from streamed AI Search responses (#​6649) [ #​6641 ]
  • fc3111c391afd5451c055a86d5cfd37ffab59617 Python: Add FoundryAgent conversation session helper (#​6623)
  • 098e52158655561c18a9e2afadea6b63374c45e3 .NET: Bring Hosted-Toolbox sample to parity with sibling hosting samples (#​6633)
  • 7435dd48d0e13811ade0f112f1a1aa2afc4b469d Python: harden Hyperlight output capture against symlinks (#​6601)
  • 148f57020aaa9aabf797cdd5f0a42249972cd7ce Python: host MAF workflows on a standalone Durable Task worker (#​6418) [ #​6608 ]
  • 89d19a23704713b1f214e3e229b800cba9ac84bd .NET: Migrate 01-get-started samples to Foundry as canonical default (#​6555)
  • c81590234413c3ece097c486ebdf9e2c6339b41b .NET: InProcessRunnerContext bugfix for workflows (#​6551)
  • 074ac68a6c284ec9532f118a6593d3a300ef1693 .NET: Harden fan-in barrier checkpoint state and extend resume coverage (#​6574)
  • d049d94b4997782c4aa59ac86eddc8dcdb22dfef Python: consolidate dependency maintenance workflow (#​6570)
  • 41995e265de4183eea07ca14a0cb74baf9337442 Build(deps): Bump anthropic from 0.80.0 to 0.107.1 in /python (#​6396)
  • 2adacb3034013de1f5bb9ccc35af34705a03a92b Bump aiohttp from 3.13.4 to 3.14.1 in /python (#​6395)
  • 6e3836698bcb67db5da4f47cd101ef5868efdcdd Bump Anthropic.Foundry from 0.5.0 to 0.6.0 (#​6057)
  • 0d3e3504f0db55b4826f9efb05cd1f4c57009847 Build(deps): Bump mistralai from 2.4.2 to 2.4.9 in /python (#​6393)
  • 2ba97ebcca7f62764ccc03f5d82f0bdc00386119 Bump openai from 2.24.0 to 2.43.0 in /python (#​6394)
  • 2d0555c5375ba42eb92fb8d783669ffe4bba4b14 Python: re-role trailing assistant message to user for Anthropic compatibility (fixes #​5008) (#​6207) [ #​5934 ]
  • 5145d50be803830e5710592b0e3879a88b264cc7 Python: Fix AG-UI tool history replay sanitization  (#​6581)
  • 7f7c88bfa5b45fd9039837e205d79e08917a3b23 Build(deps): Bump python-multipart from 0.0.26 to 0.0.32 in /python (#​6406)
  • bcef77af6a5e811380d77db731989256b2940cdb .NET: (Durable): Scope workflow status/respond endpoints to route workflow name (#​6608)
  • 54a30571aa62a3c87b1a4ed924796d5d6e553b9c Dotnet - Add support for Foundry Adaptive evals (#​6267) [ #​6101 ]
  • dc445592ed4f4776b98e0e04cff3712dceb02746 Python: [BREAKING] Port FileMemoryProvider and integrate FileMemoryProvider & FileAccess into the harness agent (#​6547)
  • 92823e9e61e6233d049fce925cf4d075f504a0cf .NET: [BREAKING] Require approval for FileAccessProvider tools with auto-approval rules (#​6521)
  • 7a491f8e766a508fef37f3189bbc0a79ff4be3aa Python: Add hosting channel ADRs and spec (#​6578)
  • 015e3bcd3b05f998b9a6a1fe5eb81ed42c2a4c2e .NET: Enabling sequential orchestration to pass entire conversation or only previous output. (#​6554)
  • 6e95517659c34623f6249a52feaf615955a0826b Python: Split type checkers by target (pyright source, 5 checkers on tests/samples) (#​6443) [ #​6275 ]
  • 97bb1d588a074437e5b264a9e98779220ebbc906 Migrate to using issue type bug instead of label bug. (#​6595)
    ... (truncated)

Commits viewable in compare view.

Updated Microsoft.Extensions.AI from 10.7.0 to 10.9.0.

Release notes

Sourced from Microsoft.Extensions.AI's releases.

10.9.0

Version 10.9.0 is headlined by changes in these areas:

  • AI: New experimental routing APIs center on the abstract RoutingChatClient base class, with SemanticRoutingChatClient as a concrete semantic-routing implementation. Separately, the abstract FailoverChatClient specialization and its concrete OrderedFailoverChatClient implementation add failover routing.
  • AI Evaluation: The generated report gains redesigned Overview, Cases, History, and Comparison views.
  • ASP.NET Core and HTTP diagnostics: The release adds HTTP request latency log enrichment and fixes configuration binding, response-body logging, request-path redaction, and resilience package version handling.
  • Source-generated logging and service discovery: Fixes cover classification type qualification, thread-local state cleanup, and DNS query suffix handling.

Experimental API Changes

New Experimental APIs

  • New experimental API: HTTP request latency log enrichment (EXTEXP0013) #​7602
  • New experimental API: Chat client routing and failover (MEAI001) #​7662

What's Changed

AI (Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI)

  • Add extensible chat client routing #​7662 by @​joshuajyue (co-authored by @​Copilot)
  • Pass the request's options to the selected client #​7685 by @​joshuajyue (co-authored by @​jozkee @​Copilot)
  • AI.Abstractions: fix ExcludeFromSchema dropped under concurrent AIFunction creation #​7677 by @​jozkee (co-authored by @​Copilot)
  • Cap OpenAI dependency version (b10f9c0) by @​jeffhandley (co-authored by @​Copilot)

Note: Microsoft.Extensions.AI.OpenAI constrains its dependency for OpenAI to 2.12.x, preventing OpenAI updates to 2.13.0+ due to an incompatibility. We expect to release Microsoft.Extensions.AI.OpenAI version 10.9.1 during the week of August 17 to address this issue.

HTTP Resilience and Diagnostics (Microsoft.Extensions.Http.Resilience and Microsoft.Extensions.Http.Diagnostics)

  • Fix Grpc.Net.ClientFactory version range check - Fixes #​7565 #​7566 by @​Ghost93
  • Fix response body logging under debugger #​7678 by @​Rimobul
  • Redact outgoing path when route is unknown #​7687 by @​Rimobul
  • Fix HTTP client logging config binding #​7691 by @​Rimobul

ASP.NET Core Extensions (Microsoft.AspNetCore.Diagnostics.Middleware)

  • Rename HttpLatencyTelemetry extensions class and drop redundant TFM guard #​7645 by @​EasyL0ver (co-authored by @​Copilot)
  • Add HTTP request latency log enricher (experimental) #​7602 by @​EasyL0ver (co-authored by @​Copilot)

Logging Source Generator (Microsoft.Gen.Logging)

  • [Microsoft.Gen.Logging] Clear thread-local state when logging throws #​7682 by @​Rimobul
  • [Microsoft.Gen.Logging] Fully qualify classification types #​7689 by @​Rimobul

AI Evaluation (Microsoft.Extensions.AI.Evaluation.Reporting)

  • [Microsoft.Extensions.AI.Evaluation.Reporting] Evaluation report redesign #​7609 by @​grafanaKibana

Project Templates (Microsoft.McpServer.ProjectTemplates)

  • Remove MCP server project template #​7680 by @​jeffhandley (co-authored by @​Copilot)

... (truncated)

10.8.4

This servicing update refreshes the .NET AI project templates ahead of the July 30, 2026 retirement of GitHub Models — removing the GitHub Models provider option and updating template dependencies.

As a result, both the AI Chat Web (aichatweb) and AI Agent Web API (aiagent-webapi) templates now require the AI service provider to be chosen explicitly via --provider; there is no longer a default. One of the following must be selected:

  • --provider azureopenai — Azure OpenAI
  • --provider ollama — Ollama (for local development)
  • --provider openai — OpenAI Platform

Packages in this release

Package Version
Microsoft.Extensions.AI.Templates 10.8.4-preview.3.26379.3
Microsoft.Agents.AI.ProjectTemplates 1.13.0-preview.1.26379.3

What's Changed

Project templates

  • Removed the GitHub Models provider from the AI Chat Web and AI Agent Web API templates, ahead of GitHub Models being fully retired on July 30, 2026. The --provider option is now required with no default (#​7667).
  • Updated AI template dependencies — bumped Aspire.Hosting.AppHost to 13.4.6 and CommunityToolkit.VectorData.SqliteVec to 1.0.0-preview.4 (aligned System.Linq.AsyncEnumerable to 10.0.9), replacing earlier workaround package pins (#​7639).

Full Changelog

10.8.3

Packages in this release

Package Version
Microsoft.Extensions.AI 10.8.3
Microsoft.Extensions.AI.Abstractions 10.8.3
Microsoft.Extensions.AI.OpenAI 10.8.3

Experimental API Changes

Experimental API behavior updates

  • Updated serialization behavior for experimental ToolApprovalRequestContent.RequiresConfirmation so it no longer leaks into consumer source-generated AIContent JSON metadata unless approval APIs are intentionally used (#​7659).

What's Changed

AI abstractions and serialization

  • Fixed MEAI001 leakage from RequiresConfirmation in source-generated AIContent contexts by using an internal JSON-included backing member while keeping the public experimental member ignored for source-generation metadata (#​7659).

Test Improvements

  • Added stabilization regression coverage to verify consumer source-generated List<AIContent> contexts compile and round-trip without requiring MEAI001 suppression (#​7659).

Full Changelog

10.8.2

This servicing release updates Microsoft.Extensions.VectorData.ConformanceTests to 10.8.2 and includes targeted test framework migration fixes.

Packages in this release

Package Version Note
Microsoft.Extensions.VectorData.Abstractions 10.8.2 Published August 7, 2026
Microsoft.Extensions.VectorData.ConformanceTests 10.8.2

Update: August 7, 2026
The Microsoft.Extensions.VectorData.Abstractions package was initially excluded from this release by mistake. Because Microsoft.Extensions.VectorData.ConformanceTests has a dependency on Microsoft.Extensions.VectorData.Abstractions, that led to failures when updating to Microsoft.Extensions.VectorData.ConformanceTests 10.8.2.

Microsoft.Extensions.VectorData.Abstractions was published August 7, 2026 to resolve that issue.

What's Changed

AI

  • Move Microsoft.Extensions.VectorData.ConformanceTests to xUnit 3 #​7636 by @​adamsitnik (co-authored by @​Copilot)

Acknowledgements

  • @​roji reviewed pull requests

Full Changelog: dotnet/extensions@v10.8.1...v10.8.2

10.8.1

This servicing release updates the Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI packages to 10.8.1 with two targeted fixes: correct tool-call/tool-result ordering when resuming approval-gated functions with service-managed chat history, and preservation of the OpenAI Responses reasoning item id for stateless (store=false) encrypted reasoning.

Packages in this release

Package Version
Microsoft.Extensions.AI 10.8.1
Microsoft.Extensions.AI.Abstractions 10.8.1
Microsoft.Extensions.AI.OpenAI 10.8.1

What's Changed

AI

  • Fix FICC tool_calls/tool ordering with approvals and service-managed chat history #​7617 by @​westey-m
  • Roundtrip OpenAI Responses reasoning item id for stateless (store=false) encrypted reasoning #​7629 by @​rogerbarreto (co-authored by @​tarekgh)

Acknowledgements

  • @​jozkee reviewed pull requests

Full Changelog: dotnet/extensions@v10.8.0...v10.8.1

10.8.0

This release adds new experimental APIs to Microsoft.Extensions.AI.Abstractions and updates the OpenAI dependency to 2.12.0, alongside documentation, test, and repository maintenance.

Experimental API Changes

New Experimental APIs

  • New experimental API: AIFunctionNameAttribute and AIParameterNameAttribute #​7610 by @​jozkee (co-authored by @​jeffhandley @​Copilot)
  • New experimental API: ToolApprovalRequestContent.RequiresConfirmation (MEAI001) #​7549 by @​javiercn (co-authored by @​Copilot)

What's Changed

AI

  • Upgrade OpenAI dependency to 2.12.0 #​7608 by @​jozkee (co-authored by @​Copilot)
  • Auto-detect audio format in OpenAISpeechToTextClient #​7575 by @​jozkee (co-authored by @​Copilot)
  • Fix ImageGeneratingChatClient duplicating preceding content and dropping following content #​7624 by @​jozkee (co-authored by @​Copilot)

Vector Data

  • Make all test methods virtual in VectorData.ConformanceTests #​7606 by @​adamsitnik (co-authored by @​Copilot)

Documentation Updates

  • Remove links to ai-samples repo #​7574 by @​gewarren
  • Fix up docs with Copilot (MEVD) #​7597 by @​gewarren
  • Fix up docs with Copilot (M.E.ServiceDiscovery) #​7598 by @​gewarren (co-authored by @​Copilot)
  • Fix up docs with Copilot (MEAI) #​7600 by @​gewarren
  • Fix up docs with Copilot #​7601 by @​gewarren

Test Improvements

  • Fix flaky StampedeTests and harden related test waits #​7572 by @​jeffhandley (co-authored by @​Copilot)
  • Fix SQLitePCLRaw.lib.e_sqlite3 vulnerability by replacing SemanticKernel connectors with CommunityToolkit #​7579 by @​adamsitnik (co-authored by @​Copilot)
  • Removing SemanticKernel Connectors dependency and replacing it #​7584 by @​adamsitnik (co-authored by @​Copilot)
  • Migrate to xUnit v3 #​7607 by @​adamsitnik (co-authored by @​shyamnamboodiripad @​Copilot)

Repository Infrastructure Updates

  • Update OTel GenAI conventions skill for standalone semconv-genai repo #​7519 by @​jeffhandley (co-authored by @​Copilot)
  • Bump dotnet-coverage from 18.7.0 to 18.8.0 #​7552
  • [main] Update dependencies from dotnet/arcade #​7559
  • Fix transitive MessagePack vulnerability in AI template AppHost projects #​7561 by @​adamsitnik (co-authored by @​Copilot)
  • Bump esbuild, @​vitejs/plugin-react and vite in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7564
  • Bump tmp from 0.2.6 to 0.2.7 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7569
  • Bump js-yaml from 4.1.1 to 4.2.0 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7570
  • Bump PowerShell from 7.6.2 to 7.6.3 #​7576
  • Remove duplicate 'WebAPI' classification from template #​7577 by @​danroth27
  • [main] Update dependencies from dotnet/arcade #​7590
  • Eliminate redundant Correctness CI stage by merging into Build #​7594 by @​adamsitnik (co-authored by @​Copilot)
  • Update Agent Framework to 1.13.0 #​7613 by @​jeffhandley (co-authored by @​Copilot)
    ... (truncated)

Commits viewable in compare view.

@dependabot @github

dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, squad:belanna. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot mentioned this pull request Sep 1, 2026
Closed
@dependabot
deps: Bump GitHub.Copilot.SDK and 2 others
8bc895a 
Bumps GitHub.Copilot.SDK from 1.0.3 to 1.0.5
Bumps Microsoft.Agents.AI.GitHub.Copilot from 1.11.0-rc1 to 1.20.0
Bumps Microsoft.Extensions.AI from 10.7.0 to 10.9.0

---
updated-dependencies:
- dependency-name: GitHub.Copilot.SDK
  dependency-version: 1.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: microsoft-packages
- dependency-name: Microsoft.Agents.AI.GitHub.Copilot
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft-packages
- dependency-name: Microsoft.Extensions.AI
  dependency-version: 10.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title deps: Bump the microsoft-packages group with 3 updates deps: Bump GitHub.Copilot.SDK and 2 others Sep 1, 2026
@dependabot
dependabot Bot force-pushed the dependabot/nuget/src/Squad.Agents.AI/microsoft-packages-f1382321ab branch from c643629 to 8bc895a Compare September 1, 2026 17:57
@DeDuva

DeDuva commented Sep 1, 2026

Copy link
Copy Markdown
Owner

Merging as part of a manual queue cleanup ahead of the weekly automation.

microsoft-packages group, 3 updates, confined to src/Squad.Agents.AI/Squad.Agents.AI.csproj — only <PackageReference Version="..."> attributes change. .NET ubuntu-latest and .NET windows-latest both run dotnet build and dotnet test against this project and both are green.

No local validation — dotnet is not installed on this machine, so this rests on the two CI jobs. Same basis as #131 and #129 earlier today.

Note this group correctly excludes GitHub.Copilot.SDK, which #136 now pins: it is not independently upgradable from Microsoft.Agents.AI.GitHub.Copilot and broke the build on a patch bump in #124.

@DeDuva
DeDuva merged commit 0f3de21 into dev Sep 1, 2026
19 checks passed
@dependabot
dependabot Bot deleted the dependabot/nuget/src/Squad.Agents.AI/microsoft-packages-f1382321ab branch September 1, 2026 17:59
@DeDuva DeDuva mentioned this pull request Sep 1, 2026
Merged
DeDuva added a commit that referenced this pull request Sep 1, 2026
@DeDuva
Pair GitHub.Copilot.SDK with MAF instead of freezing it (#141)
544d208 
#136 ignored GitHub.Copilot.SDK outright, on the reasoning that it was not
independently upgradable while Microsoft.Agents.AI.GitHub.Copilot sat at
1.11.0-rc1. That comment ended with a condition — "lift this together with
MAF, not before: 1.19.0+ declares [1.0.5, )" — and #137 met it about an hour
later, moving MAF to 1.20.0 and the SDK to 1.0.5 in one PR, green on both .NET
jobs across net8.0, net9.0 and net10.0.

Leaving the ignore in place would now freeze the SDK at 1.0.5 indefinitely,
including for security releases, behind a comment telling the next reader to
remove it because a condition that is already true.

So the ignore goes, and the constraint is expressed where it actually belongs:
GitHub.Copilot.SDK joins both Microsoft groups. It is not a Microsoft.* package,
so without that it is proposed alone — and alone is the shape that breaks, since
SquadAgent.cs reaches CopilotClient through MAF's re-export and the two must
compile as a pair.

This is a nudge rather than a guarantee: grouping bundles whatever updates exist
in a run, so a solo SDK bump can still appear. That is an acceptable residual
risk because the failure mode is loud rather than silent — #124 turned both .NET
jobs red on CS0012, which is exactly what a review gate is for. Trading a
permanent freeze for a well-caught failure is the better side of that deal.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@DeDuva