Skip to content

Bump the test-dependencies group with 4 updates - #213

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/nuget/src/OKF4net.Agents/dev/test-dependencies-43d8dc090e
Open

dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/nuget/src/OKF4net.Agents/dev/test-dependencies-43d8dc090e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 27, 2026

Copy link
Copy Markdown
Contributor

Updated Microsoft.Agents.AI from 1.24.0 to 1.26.0.

Release notes

Sourced from Microsoft.Agents.AI's releases.

1.26.0

Changes:

  • 9c8a3514a15a702f81bfda456d80c7ccaa4d2712 Update package versions for release (#​9650)
  • c3b9f22d64fd86e8133395555a1fa4aa22f745e0 Add ACGS to the Python community projects (#​9618)
  • 71cf48cb4019bc503c7ceb61420cc3d836250790 Python: Honor allow_multiple_tool_calls in AnthropicClient when tool_choice is unset (#​8980)
  • ea32b6db9e9b4b434a86496bacd9cc6dd0422a69 Python: compose Copilot session hooks correctly (#​9649)
  • 678c6616aa4c73ecfc28cc6fc119a3928ba04024 .NET: Fix AG-UI sample prerequisites and troubleshooting paths (#​9620)
  • 8730cb1974857e2264f874a258623db1303cc2ac .NET: Log a warning when an unsupported declarative action is skipped (#​8056) [ #​8040 ]
  • 9581926deec6a0473a68797153e98d44da74d09a .NET: Correct endpoint override instructions in Responses samples (#​9639)
  • 9c53b5f44658cc7839d0f1aefe580152edaba970 Python: Refresh coding standards and Copilot review guidance (#​9637)
  • 3b725b3b0ffe09ff00d57b31cc179d20d12a1e49 Python: fix(core): define EdgeGroup's builtins.type alias at module scope (#​9614)
  • a8e284ca8ce7c2a6b4a4641ef35e131d75a5cda3 Python: Add #​9472 to 1.23.0 changelog (#​9610)
See More
  • d33c44583992c4f638f50714bbbbfc4d1070356b Python: Bump package versions for 1.23.0 release (#​9602)
  • 07a83a7c369b7d51247630a60e48bebf85429943 Python: Recommend include_detailed_errors only when it is disabled (#​9472)
  • ce214c0b3f69b6d735e90afbdadad8d0a6268067 fix(dotnet): preserve toolbox OAuth consent (#​9565) [ #​8379 ]
  • c3ce250695f71e56c9c3f9bff85fef78934520aa Python: Set the assistant role on streamed Gemini updates (#​9491)
  • fb57ceb6bb0d75520297d93f6cebfbe6eede370e Add Tracekit to the Python community projects (#​9497)
  • 33439bf8bcf3e3a76d7094e8f4cbb584abfc8f42 Python: Pass stream errors to nested streams when closing them (#​9476)
  • d0c3e6acfe4e3fb08887d13b4a1f9ddea0d6509c Python: Add installable Agent Framework builder skill (#​9374)
  • 1263843977f687f24f153d1f9597317e21d55966 Python: Sanitize unexpected streaming response failures (#​9460)
  • 074bc0b17e605e28b5235ed15ad52b977b65db88 test(dotnet): remove legacy persistent tests (#​9588) [ #​9587 ]
  • bba95967e36f8b45f1cb0fcfa67333134f29e7dd Python: Clarify MCP client ownership and add workflow sample (#​9532)
  • 8ff2ec937fe438c4330f9e0b0b5e01b32df079e3 Python: close the RedisContextProvider index connection when the provider owns it (#​9510)
  • 89457c5bcdd7c7b3423f4063f32c604d2fec0a74 docs: fix ChatResponse async aggregation example (#​9518)
  • 74f3447d030c83d747efab617d92573f86c01f52 Python: Make Content base64 documentation examples runnable (#​9467)
  • b7f8ad686b07a5f6b13dd1f471ee1328b24c8a3a Python: Remove span-only tool attributes from invocation metrics (#​9592)
  • 5da17697d62d8c80c899c977e004ea6b8c09e56f docs: update A2A hosting example for SDK v1 (#​9521)
  • 8be57da33007b478ea8dd924bf8ccfa36a8444a6 Python: fix(bedrock): report the requested model on non-streaming responses (#​9399)
  • 06050253e90e235203d65e323cdb096145d37c26 docs: fix ChatKit streaming helper usage (#​9523)
  • b7ce0d616fd027f850178e7a11255dc67070fe7a fix(workflows): support keyword-only RunContext in functional workflows (#​9397)
  • 1ba7425571fdc2c92ac18b6b537ad1c8a6d02b04 Python: Fix stateless shell tools inheriting host stdin (#​9469)
  • a9eff53bdcca76b5b2d60b5ea3c7e9f973667e55 Python: Handle missing reasoning text in DevUI (#​9543)
  • a479349b2a7a246981117efa0659345d5fb0aa14 Python: Correct Purview middleware setup in package guide (#​9553)
  • 597342c2c688c54620a4b00b76866d8e1ef943ea Python: Fix Copilot Studio constructor in package guide (#​9551)
  • 70ba23a3970cc8ab829eed2cc887a25137f3a1e5 fix: bind background completion waits to execution identity (#​9442)
  • 10f7f989fba24087864d1d9e00def83fafb0abd0 .NET: Add AgentSessionStore.DeleteSessionAsync to the Abstraction (#​8801) [ #​7991, #​8586 ]
  • c7394476bffb5cf8b4ba84a2903f234d8f18a5ac Python: drop unsupported instructions from AF Copilot Studio migration samples (#​9577)
  • 621e8e39daffe9204ae0c29f0f9f285fd2cf7298 Python: pass judge model in evaluate_traces sample (#​9576)
  • 6ae0f4086d81b370c9347c4deae1c85fd71781d2 Python: Refresh dependencies and block compromised releases (#​9590)
  • dbca9d8f1fcf0858b439bee3c6aee51b8991e98b Dotnet: DevUI improve local request checks (#​9575)
  • 20f07283ae47413cfc3d760209f62d5e08c2091a Python: fix Foundry Toolbox quickstart commands and setup steps (#​9550)
  • 4c191ff5099d9a9e2f7ad0812d901ee3a222e0bb Python: fix(devui): fallback to empty string when reasoning chunk has no text (#​9546) [ #​9533 ]
  • 1fe5467d13eccac225aca7ae9aec21aed16469ee Python: Make MCP connection-loss recovery ownership-aware (#​9583)
  • 02005995380d5a09167e5c43b5d0f88328979145 Python: Improve settled approval matching (#​9535)
  • 6b48d20288fa43887d794479577fd8b57eee535e Tool name whitespace bugfix (#​9557)
  • 08851e69d722b0e0961c08eecf8575db995f0172 .NET: Add gRPC protocol selection to the A2A sample (#​9563)
    ... (truncated)

1.25.0

Changes:

  • 1ab3430a4b6c8add9f08854c77544b0211a3f13c .NET: Dotnet: Add approval reuse considerations (#​9389)
  • 563eb3a9965f7c144ad697223320411c02fa349a .NET: terminate chat completions SSE stream with data: [DONE] (#​8532) [ #​8526 ]
  • 4964bdd1b2d55b8137cbc1bc85840181af05bda0 .NET: Update version for 1.25.0 release (#​9388)
  • 5abdadf262141b56f84111b89b607b2d6bd6ebaa .NET: Also include citations and error details in purview checks. (#​9375)
  • 74db3c11201f32b919781ebbb3de4f643150510b .NET: Fix reasoning remnants and handoff bounce-back (#​9174)
  • 6b57b5f4cb15ddb87a2ca4f9d958a80dd0fc8455 .NET: Upgrade A2A packages to 1.0.0-preview3 (#​9386)
  • 95feea605dbbe879f678602585c76fdb5a963b63 .NET: Automatically reject tool-approval requests that never receive a response (#​9152)
See More
  • 1b9879c58ac950ef235471209b4c5cb402972bab .NET: feat(dotnet): support closed-list workflow questions (#​9202) [ #​1530 ]
  • dcbbf7967afe877913275f1a445166a7ac301ab0 Bump the agent-memory group with 2 updates (#​9315)
  • b53d25ed1cd2f54ee5e5e5ed548bb2c5515022f3 .NET: fix: preserve agent continuation token when wrapped with UseOpenTelemetry (#​8265) [ #​8243 ]
  • f72bf952415a770a879aa19d8e397c82a765c9d0 .NET: [BREAKING] Decouple Cosmos chat metadata from partition-key strategy (#​9214)
  • 6e630f4796b84c0f72640b9cc914b7325254ad1d .NET: Isolate Foundry toolbox response cache (#​8848)
  • 1e722004da32080df18f66eae3558600333d4c92 Revert ".NET: [BREAKING] Request concise Harness progress without private reasoning (#​9004)" (#​9147)
  • 8254704d57dcc42b8542a0eeef79a25145a89e4d .NET: [BREAKING] Request concise Harness progress without private reasoning (#​9004)

This list of changes was auto generated.

Commits viewable in compare view.

Updated Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.13 to 10.0.14.

Release notes

Sourced from Microsoft.Extensions.DependencyInjection.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Hosting from 10.0.13 to 10.0.14.

Release notes

Sourced from Microsoft.Extensions.Hosting's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated ModelContextProtocol from 2.2.0 to 2.3.0.

Release notes

Sourced from ModelContextProtocol's releases.

2.3.0

This release improves HTTP discovery, OAuth, protocol interoperability, and shutdown reliability, preserves registration order for server primitives, and exposes a TimeProvider for deterministic client timeout tests. It also corrects optional server-identity handling; applications reading McpClient.ServerInfo should adopt nullable handling.

Breaking Changes

Refer to the C# SDK Versioning documentation for details on versioning and breaking change policies.

  1. McpClient.ServerInfo is nullable — #​1903
    • Its return annotation changes from Implementation to Implementation?. Existing non-nullable assignments or dereferences can produce nullable warnings and fail warnings-as-errors builds.
    • On 2026-07-28 connections, ServerInfo is null when the server omits optional identity metadata from server/discover. Legacy initialize still requires serverInfo. Reading the property before connecting still throws InvalidOperationException.
    • Migrate with a null check or a fallback such as client.ServerInfo?.Name ?? "Unknown server". Self-reported identity must not be used for security decisions.
    • This corrective source-compatibility change is intentionally included in 2.3.0.

What's Changed

  • Correct protocol-version telemetry for stateless server spans #​1810 by @​luisangelrod
  • Preserve HTTP errors and correct discovery fallback handling #​1791 by @​PranavSenthilnathan (co-authored by @​Copilot)
  • Make modern Streamable HTTP status mapping deterministic #​1837 by @​jstar0
    • Modern responses wait for the first protocol message before sending headers; long-running silent handlers may need progress output or an appropriate HTTP timeout. Legacy eager-header behavior is preserved.
  • Accept opaque legacy metadata and correct request-scoped capabilities and discovery advertisement #​1852 by @​halter73 (co-authored by @​Copilot)
  • Avoid redundant SSE fallback after discovery is rejected with 400 or 404 #​1855 by @​scottt732
  • Close server stdin before waiting for graceful stdio process exit #​1838 by @​luisangelrod
  • Preserve insertion order when listing server tools, prompts, and resources #​1924 by @​PederHP (co-authored by Claude Opus 5.5)
  • Allow missing optional server identity in discovery and make ServerInfo nullable #​1903 by @​Coding-Professional
  • Include JSON parse details in Streamable HTTP 400 responses #​1844 by @​ump45nose
  • Exclude OAuth from DiscoverProbeTimeout, expose McpClientOptions.TimeProvider for deterministic timeout tests, and default SSE to legacy initialization #​1719 by @​halter73 (co-authored by @​Copilot)
    • OAuth remains subject to the overall InitializationTimeout and caller cancellation; it is excluded only from the short discovery-probe budget.
    • Modern discovery over SSE requires both explicit HttpTransportMode.Sse and ProtocolVersion = "2026-07-28"; pinning the version with AutoDetect is not equivalent.
  • Preserve numeric progress tokens in RequestOptions serialization #​1832 by @​dfedoryshchev
  • Dispose legacy SSE POST responses to release connections deterministically #​1841 by @​yalcinfu22 (co-authored by Claude Fable 5)

Documentation Updates

  • Document standing support for new MCP specification revisions #​1826 by @​halter73 (co-authored by @​Copilot)

Test Improvements

  • Stabilize discovery-capable test connections while retaining initialization deadlines #​1943 by @​tarekgh

Repository Infrastructure Updates

  • Add a source selector for manual documentation publishes #​1828 by @​jeffhandley (co-authored by @​Copilot)
  • Update SourceLink's private build dependency to resolve a vulnerable Git dependency #​1873 by @​halter73 (co-authored by @​Copilot)
  • Correct obsolete McpServerFactory references in Copilot instructions #​1892 by @​Zir0-93
  • Update Microsoft.Extensions.AI and AI.Abstractions to 10.11.0 and align shared System dependencies to 10.0.13 #​1940

Acknowledgements

  • @​scottt732 made their first contribution in #​1855
  • @​Zir0-93 made their first contribution in #​1892
  • @​Coding-Professional made their first contribution in #​1903
    ... (truncated)

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Microsoft.Agents.AI from 1.24.0 to 1.26.0
Bumps Microsoft.Extensions.DependencyInjection.Abstractions from 10.0.13 to 10.0.14
Bumps Microsoft.Extensions.Hosting from 10.0.13 to 10.0.14
Bumps ModelContextProtocol from 2.2.0 to 2.3.0

---
updated-dependencies:
- dependency-name: Microsoft.Agents.AI
  dependency-version: 1.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: test-dependencies
- dependency-name: Microsoft.Extensions.DependencyInjection.Abstractions
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: test-dependencies
- dependency-name: Microsoft.Extensions.Hosting
  dependency-version: 10.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: test-dependencies
- dependency-name: ModelContextProtocol
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: test-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from jchable as a code owner October 27, 2026 10:09
@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Oct 27, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants