[dependabot]

Updated Microsoft.Agents.AI from 1.26.0 to 1.27.0.

Release notes

Sourced from Microsoft.Agents.AI's releases.

1.27.0

[1.27.0] - 2026-10-30

Added

• skills: Add a .NET consumer skill for building with Agent Framework (#​9651 by @​westey-m).
• .NET, CI: Add a script to bump the .NET release version (#​9894 by @​baywet).

Changed

• .NET, AgentServer: [BREAKING] Update AgentServer dependencies (#​9721 by @​rogerbarreto).

  Migration: In Foundry hosted applications, replace builder.Services.AddFoundryResponses(...) with builder.AddFoundryResponses(...) so response and task storage use the same configuration-bound identity and endpoint. The IServiceCollection overload remains supported for local or non-hosted use.

  If you pin SDK dependencies directly, align Azure.AI.Projects and Azure.AI.Extensions.OpenAI to 3.0.0-beta.5, and Azure.AI.AgentServer.Core, Azure.AI.AgentServer.Invocations, and Azure.AI.AgentServer.Responses to 1.0.0-beta.30, 1.0.0-beta.7, and 1.0.0-beta.9, respectively. Align Azure.Core to 1.63.0, System.ClientModel to 1.16.0, and Microsoft.Identity.Client.Extensions.Msal to 4.90.0.

  For code using the affected SDK APIs directly, replace string storage ETags with Azure.ETag (ETag ifMatch = default in state-store overrides), stream.InternalMetadata with stream.PersistedMetadata, stream.Checkpoint() with stream.CreateCheckpointEvent(), and SessionFileWriteResponse with SessionFileWriteResult. Where AgentReference becomes ambiguous, qualify or alias Azure.AI.Extensions.OpenAI.AgentReference, not the newly added Azure.AI.Projects.Agents.AgentReference.

  Storage compatibility: Responses beta.9 moves local durable response state to responses/partitions-v1; existing pre-upgrade local response files are not read after upgrading. The PR does not provide a migration procedure for those files.

• .NET: [BREAKING] Reject redirect client changes (#​9711 by @​baywet).

  Migration: Update DefaultHttpRequestHandler client-provider callbacks to return null for allowed redirect destinations, retaining the internally owned client, or throw to reject a destination. Returning a client for a redirect now causes HttpRequestException before the redirected request is sent. Supplying a client for the initial request remains supported, and no public API signatures change.

• .NET, LocalCodeAct: Harden provenance and process capability checks (#​9804 by @​eavanvalkenburg).

• .NET, dependencies: Update the Aspire dependency group and align the Content Understanding dependency floor (#​9822 by @​dependabot[bot], #​9695).

• .NET: Bump the release version to 1.27.0 (#​9893 by @​baywet).

• docs, samples: Clarify optional usage counter handling, pin the RAG Step02 documentation pages to a commit, and point Foundry-migrated sample READMEs at FOUNDRY_* settings (#​9783, #​9648 by @​Laurianti, #​9600 by @​1aifanatic).

• development: Update developer setup and CODEOWNERS maintainer assignments (#​9733, #​9734 by @​dargilco).

Fixed

• .NET, workflows: Handle parse-value and workflow value conversion failures consistently, validate question skip inputs consistently, persist workflow scope aliases, preserve pending Magentic plan review, and release the workflow when a run ends after an executor fails to initialize (#​9845 by @​baywet, #​9826 by @​baywet, #​9830 by @​baywet, #​9749 by @​baywet, #​9797 by @​baywet, #​9585 by @​RachelWanggg).
• .NET, Foundry: Correct citation text offsets across completed text parts (#​9812 by @​rogerbarreto).
• .NET, Harness: Allow the local chat history marker when stored output is disabled (#​8708 by @​rogerbarreto).
• .NET, Mem0: Validate scopes on restored session state (#​9827 by @​kartikmadan11).
• .NET, Toolbox: Apply the configured tool approval policy (#​9662 by @​rogerbarreto).
• docs: Fix dead ADK MCP tools and ADR-0002 Agent Tools links, and correct the documented Ollama embedding truncate default (#​9823 by @​leom1919, #​9766 by @​leom1919, #​9672).

Commits viewable in compare view.

Updated Microsoft.Agents.AI.Abstractions from 1.26.0 to 1.27.0.

Release notes

Sourced from Microsoft.Agents.AI.Abstractions's releases.

1.27.0

[1.27.0] - 2026-10-30

Added

• skills: Add a .NET consumer skill for building with Agent Framework (#​9651 by @​westey-m).
• .NET, CI: Add a script to bump the .NET release version (#​9894 by @​baywet).

Changed

• .NET, AgentServer: [BREAKING] Update AgentServer dependencies (#​9721 by @​rogerbarreto).

  Migration: In Foundry hosted applications, replace builder.Services.AddFoundryResponses(...) with builder.AddFoundryResponses(...) so response and task storage use the same configuration-bound identity and endpoint. The IServiceCollection overload remains supported for local or non-hosted use.

  If you pin SDK dependencies directly, align Azure.AI.Projects and Azure.AI.Extensions.OpenAI to 3.0.0-beta.5, and Azure.AI.AgentServer.Core, Azure.AI.AgentServer.Invocations, and Azure.AI.AgentServer.Responses to 1.0.0-beta.30, 1.0.0-beta.7, and 1.0.0-beta.9, respectively. Align Azure.Core to 1.63.0, System.ClientModel to 1.16.0, and Microsoft.Identity.Client.Extensions.Msal to 4.90.0.

  For code using the affected SDK APIs directly, replace string storage ETags with Azure.ETag (ETag ifMatch = default in state-store overrides), stream.InternalMetadata with stream.PersistedMetadata, stream.Checkpoint() with stream.CreateCheckpointEvent(), and SessionFileWriteResponse with SessionFileWriteResult. Where AgentReference becomes ambiguous, qualify or alias Azure.AI.Extensions.OpenAI.AgentReference, not the newly added Azure.AI.Projects.Agents.AgentReference.

  Storage compatibility: Responses beta.9 moves local durable response state to responses/partitions-v1; existing pre-upgrade local response files are not read after upgrading. The PR does not provide a migration procedure for those files.

• .NET: [BREAKING] Reject redirect client changes (#​9711 by @​baywet).

  Migration: Update DefaultHttpRequestHandler client-provider callbacks to return null for allowed redirect destinations, retaining the internally owned client, or throw to reject a destination. Returning a client for a redirect now causes HttpRequestException before the redirected request is sent. Supplying a client for the initial request remains supported, and no public API signatures change.

• .NET, LocalCodeAct: Harden provenance and process capability checks (#​9804 by @​eavanvalkenburg).

• .NET, dependencies: Update the Aspire dependency group and align the Content Understanding dependency floor (#​9822 by @​dependabot[bot], #​9695).

• .NET: Bump the release version to 1.27.0 (#​9893 by @​baywet).

• docs, samples: Clarify optional usage counter handling, pin the RAG Step02 documentation pages to a commit, and point Foundry-migrated sample READMEs at FOUNDRY_* settings (#​9783, #​9648 by @​Laurianti, #​9600 by @​1aifanatic).

• development: Update developer setup and CODEOWNERS maintainer assignments (#​9733, #​9734 by @​dargilco).

Fixed

• .NET, workflows: Handle parse-value and workflow value conversion failures consistently, validate question skip inputs consistently, persist workflow scope aliases, preserve pending Magentic plan review, and release the workflow when a run ends after an executor fails to initialize (#​9845 by @​baywet, #​9826 by @​baywet, #​9830 by @​baywet, #​9749 by @​baywet, #​9797 by @​baywet, #​9585 by @​RachelWanggg).
• .NET, Foundry: Correct citation text offsets across completed text parts (#​9812 by @​rogerbarreto).
• .NET, Harness: Allow the local chat history marker when stored output is disabled (#​8708 by @​rogerbarreto).
• .NET, Mem0: Validate scopes on restored session state (#​9827 by @​kartikmadan11).
• .NET, Toolbox: Apply the configured tool approval policy (#​9662 by @​rogerbarreto).
• docs: Fix dead ADK MCP tools and ADR-0002 Agent Tools links, and correct the documented Ollama embedding truncate default (#​9823 by @​leom1919, #​9766 by @​leom1919, #​9672).

Commits viewable in compare view.

Pinned Microsoft.Agents.AI.Workflows at 1.27.0.

Release notes

Sourced from Microsoft.Agents.AI.Workflows's releases.

1.27.0

[1.27.0] - 2026-10-30

Added

• skills: Add a .NET consumer skill for building with Agent Framework (#​9651 by @​westey-m).
• .NET, CI: Add a script to bump the .NET release version (#​9894 by @​baywet).

Changed

• .NET, AgentServer: [BREAKING] Update AgentServer dependencies (#​9721 by @​rogerbarreto).

  Migration: In Foundry hosted applications, replace builder.Services.AddFoundryResponses(...) with builder.AddFoundryResponses(...) so response and task storage use the same configuration-bound identity and endpoint. The IServiceCollection overload remains supported for local or non-hosted use.

  If you pin SDK dependencies directly, align Azure.AI.Projects and Azure.AI.Extensions.OpenAI to 3.0.0-beta.5, and Azure.AI.AgentServer.Core, Azure.AI.AgentServer.Invocations, and Azure.AI.AgentServer.Responses to 1.0.0-beta.30, 1.0.0-beta.7, and 1.0.0-beta.9, respectively. Align Azure.Core to 1.63.0, System.ClientModel to 1.16.0, and Microsoft.Identity.Client.Extensions.Msal to 4.90.0.

  For code using the affected SDK APIs directly, replace string storage ETags with Azure.ETag (ETag ifMatch = default in state-store overrides), stream.InternalMetadata with stream.PersistedMetadata, stream.Checkpoint() with stream.CreateCheckpointEvent(), and SessionFileWriteResponse with SessionFileWriteResult. Where AgentReference becomes ambiguous, qualify or alias Azure.AI.Extensions.OpenAI.AgentReference, not the newly added Azure.AI.Projects.Agents.AgentReference.

  Storage compatibility: Responses beta.9 moves local durable response state to responses/partitions-v1; existing pre-upgrade local response files are not read after upgrading. The PR does not provide a migration procedure for those files.

• .NET: [BREAKING] Reject redirect client changes (#​9711 by @​baywet).

  Migration: Update DefaultHttpRequestHandler client-provider callbacks to return null for allowed redirect destinations, retaining the internally owned client, or throw to reject a destination. Returning a client for a redirect now causes HttpRequestException before the redirected request is sent. Supplying a client for the initial request remains supported, and no public API signatures change.

• .NET, LocalCodeAct: Harden provenance and process capability checks (#​9804 by @​eavanvalkenburg).

• .NET, dependencies: Update the Aspire dependency group and align the Content Understanding dependency floor (#​9822 by @​dependabot[bot], #​9695).

• .NET: Bump the release version to 1.27.0 (#​9893 by @​baywet).

• docs, samples: Clarify optional usage counter handling, pin the RAG Step02 documentation pages to a commit, and point Foundry-migrated sample READMEs at FOUNDRY_* settings (#​9783, #​9648 by @​Laurianti, #​9600 by @​1aifanatic).

• development: Update developer setup and CODEOWNERS maintainer assignments (#​9733, #​9734 by @​dargilco).

Fixed

• .NET, workflows: Handle parse-value and workflow value conversion failures consistently, validate question skip inputs consistently, persist workflow scope aliases, preserve pending Magentic plan review, and release the workflow when a run ends after an executor fails to initialize (#​9845 by @​baywet, #​9826 by @​baywet, #​9830 by @​baywet, #​9749 by @​baywet, #​9797 by @​baywet, #​9585 by @​RachelWanggg).
• .NET, Foundry: Correct citation text offsets across completed text parts (#​9812 by @​rogerbarreto).
• .NET, Harness: Allow the local chat history marker when stored output is disabled (#​8708 by @​rogerbarreto).
• .NET, Mem0: Validate scopes on restored session state (#​9827 by @​kartikmadan11).
• .NET, Toolbox: Apply the configured tool approval policy (#​9662 by @​rogerbarreto).
• docs: Fix dead ADK MCP tools and ADR-0002 Agent Tools links, and correct the documented Ollama embedding truncate default (#​9823 by @​leom1919, #​9766 by @​leom1919, #​9672).

Commits viewable in compare view.