This release keeps dependencies and maintenance posture current for teams operating this tool.
✓ No known CVEs patched in this version
Topics
+4 more
Affected surfaces
ReleasePort's take
Light signalThe .NET Orchestrations API is now stable; the [Experimental] tag has been removed.
Why it matters: Stable orchestrations enable production deployment without experimental caveats, affecting all users of the .NET agent framework.
Summary
AI summaryUpdates McpSkillsSource, bedrock, and evals across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Breaking | High |
Removes [Experimental] tag from .NET Orchestrations, marking them stable. Removes [Experimental] tag from .NET Orchestrations, marking them stable. Source: llm_adapter@2026-06-04 Confidence: low |
— |
| Feature | Medium |
Adds ILoggerFactory and IServiceProvider to HarnessAgent constructor. Adds ILoggerFactory and IServiceProvider to HarnessAgent constructor. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Feature | Medium |
Adds background agent support to harness agent. Adds background agent support to harness agent. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Feature | Medium |
Adds MCP-based skills discovery (McpSkillsSource). Adds MCP-based skills discovery (McpSkillsSource). Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Feature | Medium |
Adds native structured output support via Converse API for Bedrock. Adds native structured output support via Converse API for Bedrock. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Feature | Medium |
Adds Foundry Adaptive Evaluations integration (rubric-generation). Adds Foundry Adaptive Evaluations integration (rubric-generation). Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Feature | Medium |
Adds Mistral AI embedding client package. Adds Mistral AI embedding client package. Source: llm_adapter@2026-06-04 Confidence: low |
— |
| Feature | Low |
Progressive tool exposure via FunctionInvocationContext. Progressive tool exposure via FunctionInvocationContext. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Feature | Low |
Promote agent-framework-declarative package to RC. Promote agent-framework-declarative package to RC. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Feature | Low |
Promote Workflows.Declarative packages to stable versions. Promote Workflows.Declarative packages to stable versions. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Feature | Low |
Add Hosted-ToolboxMcpSkills sample. Add Hosted-ToolboxMcpSkills sample. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Feature | Low |
Persist hosted MCP call/results as canonical mcp_call output. Persist hosted MCP call/results as canonical mcp_call output. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Feature | Low |
Update hosted agents. Update hosted agents. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Feature | Low |
Reorganize A2A samples and use package A2AExecutor. Reorganize A2A samples and use package A2AExecutor. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Feature | Low |
Preserve and propagate CreatedAt through workflows. Preserve and propagate CreatedAt through workflows. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Feature | Low |
Forward Magentic participant replies to manager. Forward Magentic participant replies to manager. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Feature | Low |
Set message_id on AgentResponseUpdate for message-bearing paths. Set message_id on AgentResponseUpdate for message-bearing paths. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Dependency | Low |
Updating dotnet package versions for 1.9 release. Updating dotnet package versions for 1.9 release. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Dependency | Low |
Refresh dev dependencies and validate runtime bounds. Refresh dev dependencies and validate runtime bounds. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Dependency | Low |
Bump Azure.AI.AgentServer.* packages and align Azure.Core/System.ClientModel. Bump Azure.AI.AgentServer.* packages and align Azure.Core/System.ClientModel. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Medium |
Fixes OTLP HTTP base-endpoint losing /v1/{signal} auto-append. Fixes OTLP HTTP base-endpoint losing /v1/{signal} auto-append. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Bugfix | Medium |
Fixes FoundryAgent stripping model from PromptAgent requests. Fixes FoundryAgent stripping model from PromptAgent requests. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Bugfix | Medium |
Fixes core observability unsafe serialization of function-call arguments containing dataclass/framework objects. Fixes core observability unsafe serialization of function-call arguments containing dataclass/framework objects. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Bugfix | Low |
Bug fixes for AGUI hosting and workflows. Bug fixes for AGUI hosting and workflows. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Low |
Skip orphan anthropic thinking signatures. Skip orphan anthropic thinking signatures. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Low |
Fix missing id on function_call_output in Foundry Hosting. Fix missing id on function_call_output in Foundry Hosting. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Low |
Coalesce code interpreter history chunks. Coalesce code interpreter history chunks. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Low |
Fix integration test worker crashes in Azure Functions on Py3.13. Fix integration test worker crashes in Azure Functions on Py3.13. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Low |
Fix InvokeMcpTool approval path for declarative workflows. Fix InvokeMcpTool approval path for declarative workflows. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Low |
Consolidate MCP reliability fixes. Consolidate MCP reliability fixes. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Refactor | Low |
Quarantine flaky DevUI test. Quarantine flaky DevUI test. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
Full changelog
Changes:
- afa7834e2ec8a93b2224fe7ab184b97fbcaa8c9a Updating dotnet package versions for 1.9 release (#6314)
- c6951c21f69af4c9a5d5cbe107b36fca9f648907 Python: Add MCP-based skills discovery (McpSkillsSource) (#6169)
- a9824289168c5af4acc5bfc7bd227206eb942fdc .NET: Bug fixes for AGUI hosting and workflows (#6311)
- 90a3e5de47cf48dfdef25c00c49cf56e0c80df8e .NET: Add ILoggerFactory and IServiceProvider to HarnessAgent constructor (#6273) [ #6103 ]
- 49a6e433a332f5952cad275998fa954572810c11 Python: progressive tool exposure via FunctionInvocationContext (#6233) [ #3877 ]
- 6086a743023c7b8a0e8ec8dde92316e42d634c09 Python: Promote agent-framework-declarative package to RC (#6256)
- fa8cfb75673eb2f8f3a9870b2d95e1a435ac3dc3 Python: Fix FoundryAgent stripping model from PromptAgent requests (#5526) [ #5525 ]
- 6de4c24fdda68bb991bf76c017618b89c6197d87 .NET: Promote Workflows.Declarative packages to stable versions (#6254)
- a5f355e04a4cc13da8ce8ddc13430d343decfa8d Python: Fix OTLP HTTP base-endpoint losing /v1/{signal} auto-append (#5913)
- 0cf48923cd6793f9da042c6b8b819f632a65957e .NET: Add Hosted-ToolboxMcpSkills sample (#6175)
- cdc4809b8a503ec86d78a90051e5cc5d053ebf21 ci: harden Python test coverage workflow (#5982)
- 043208241a4f54769cfe499b1b24e0c3ea720fcb Python: Persist hosted MCP call/results as canonical mcp_call output (#6070)
- 05ebb966cf7555aa3690a9fae11188b83f68daf1 fix: skip orphan anthropic thinking signatures (#5784)
- c83a944e85e7615d5c12adc772310e649667f637 Fix open pr count check (#6255)
- 5d98beddf52dd8e3d3323d2108c9fe3461ab0c04 Python: feat(bedrock): implement native structured output support via Converse API (#6052) [ #5966 ]
- e0d0ad16a06b404ef7da38e31b2bcaecf2ac6efe Python: feat(evals): Foundry Adaptive Evals integration (rubric-generation) (#6101)
- f36096ce1a0258d62810561df5aeedd22e2448c0 Python: Fix core observability unsafe serialization of function-call arguments containing dataclass/framework objects (#6026) [ #5733 ]
- 03e14ca18703a822f8d1b209a031d65aa882d9be .NET: Update hosted agents (#6243)
- b298113d15cf5c7e8a7299991cea98ef0400dbbf .NET - Fix missing id on function_call_output in Foundry Hosting (#6246)
- 8091d052d8175e1726a2ef238affa80a381a9b8a Python: refresh dev dependencies and validate runtime bounds (#6238)
- 52a8045bb670918ef8c1f970dad051092893ceee Python: Add background agent support to harness agent (#6155)
- 78d175a1e20eb65c2b80517fa1cc911a9272cee3 Python: coalesce code interpreter history chunks (#5801)
- b59a854fcdb4b5588615e22bea788572db6da6df Fix integration test worker crashes in Azure Functions on Py3.13 (#4260)
- 8b0db48d331354867c1066c32e05e822b17b6e45 Add community PR limit workflow (#6229)
- 5affc9c33392b2636e5a7b860a3d9628f4cd6e1e Python: Reorganize A2A samples and use package A2AExecutor (#6165)
- edcc786651ca3741ba005d7e5aef971ad24602cc .NET: Preserve and propagate CreatedAt through workflows (#3930)
- 07a1e834926b496b1d48eaed6e824740e1a9037a .NET: Forward Magentic participant replies to manager (#6156)
- fa2a6af4434fdfc310168d1b1f65cef2561b8eae Bump Azure.AI.AgentServer.* packages and align Azure.Core/System.ClientModel (#6178)
- 11c8d89ab2853ce3c71f9f0b730ee73c8df4bf22 .NET: Fix InvokeMcpTool approval path for declarative workflows (#6177)
- 6510d6e3c89fc9dcf4c45596f24517b73196ff08 .NET: Quarantine flaky DevUI test (#6159)
- dd9a4b6321f8922cb4505f84ed5c3e206dfbddb7 Python: [A2A] Set message_id on AgentResponseUpdate for message-bearing paths (#6163) [ #5949 ]
- e8ff541ebf07339b12585a3d4984d78a13e7e1aa Python: consolidate MCP reliability fixes (#6145)
- d2d5384f28b60a91771e7e70c7452da89d3c7e02 Python: Add Mistral AI embedding client package (#5480)
- 1fccf16f1103107186c12fb5f4ad58b8a6ba7f62 feat: Remove [Experimental] tag from .NET Orchestrations (#6164)
- 8ed2159c4b0b6663dc92b3469c24648a37e8e289 .NET: Workflow Outputs Overhaul: Support Tagging, Filtering Agent Outputs (#6045)
- b000a2cf514a025b3cb7873c05c9a282a2c287c5 Python: Adding AgentFileStore and FileAccessProvider to support file access operations. (#6099)
- 0578f4c9107159346756d80d0650fa0a21c315a0 Backfill chat span request model if it's unknown and response model is avaliable (#6160)
- e9a606344adbe5e41d9376b1f8508da593ea6c3b Python A2A: Expose
supported_protocol_bindingsas configurable parameter (#6098) [ #6057 ] - d2f79930d5554e39add177f46f8bc61092c0ad34 .NET: feat: Update GroupChatManager semantics to match other Orchestration patterns (#6140)
This list of changes was auto generated.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About agent-framework
A framework for building, orchestrating and deploying AI agents and multi-agent workflows with support for Python and .NET.
Related context
Related tools
Earlier breaking changes
- vpython-1.7.0 Remove Python-only declarative actions and rename alias kinds to C# canonical names in agent-framework-declarative.
- vpython-1.6.0 Enable instrumentation by default in agent-framework-core and agent-framework-foundry.
- vpython-1.4.0 Migrate to a2a-sdk v1.0 in agent-framework-a2a
- vpython-1.4.0 Tighten default access controls and CORS posture in agent-framework-devui
- vpython-1.4.0 Extract skill spec metadata into SkillFrontmatter in agent-framework-core
Beta — feedback welcome: [email protected]