Skip to content

agent-framework

vpython-1.3.0 scope: python Breaking

This release includes 2 breaking changes for platform teams planning a safe upgrade.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agent-framework agentic-ai agents ai .net multi-agent
+4 more
orchestration python sdk workflows

Summary

AI summary

[BREAKING] Restructure agent skills to use multi-source architecture and remove Foundry toolbox helpers

Full changelog

[1.3.0] - 2026-05-07

Added

  • agent-framework-core: Add ClassSkill for class-based skill definitions with declarative metadata and automatic method discovery (#5678)
  • agent-framework-core: Add experimental session-mode harness context provider (#5611)
  • agent-framework-core: Add experimental todo-list harness context provider (#5612)
  • agent-framework-core: Add experimental memory harness context provider (#5613)
  • agent-framework-core: Notify agent of external AgentModeProvider mode changes (#5650)
  • agent-framework-core: Information-flow control prompt injection defense (#5331)
  • agent-framework-openai: Support OpenAI and Gemini allowed_tools tool choice (#5322)
  • agent-framework-openai: Support GPT-5 verbosity option and restore Foundry agent_reference (#5619)
  • agent-framework-anthropic: Add base_url parameter to AnthropicClient and RawAnthropicClient (#5685)
  • agent-framework-foundry-hosting: Add support for function approval flow in Foundry hosted agent (#5666)
  • agent-framework-declarative: Add Python parity for InvokeMcpTool in declarative workflow (#5630)
  • agent-framework-declarative: Add Python parity for HttpRequestAction in declarative workflow (#5599)
  • agent-framework-claude, agent-framework-github-copilot: Enforce approval_mode in Claude and GitHub Copilot agents (#5562)
  • agent-framework-github-copilot: Upgrade github-copilot-sdk to v1.0.0b2 with instruction_directories, copilot_home, and runtime options forwarding on session resume (#5665)
  • samples: Add hosted agent sample with observability (#5608)
  • samples: Add sample for hosted agent with files (#5596)

Changed

  • agent-framework-core: [BREAKING — experimental skills API] Restructure agent skills to use multi-source architecture (#5584)
  • agent-framework-foundry: Remove bespoke Foundry toolbox helpers; standardize on MCP for toolbox consumption (#5671)

Fixed

  • agent-framework-core: Fix MCPStreamableHTTPTool leaking asyncio.CancelledError when MCP server is unreachable (#5687)
  • agent-framework-openai: Drop completed continuation_token from shared options in tool loop (#5462)
  • agent-framework-bedrock: Don't send toolChoice when no tools are configured (#5172)
  • agent-framework-hyperlight: Fix WasmSandbox cross-thread Drop and harden hosted-agent sample (#5603)
  • agent-framework-devui: Fix incorrect workflow timings by adding created_at to executor events (#5615)
  • agent-framework-foundry-hosting: Fix hosted MCP replay producing orphan function_call_output (#5581)

Breaking Changes

  • [BREAKING] Restructure agent skills to use multi-source architecture (experimental)
  • Remove bespoke Foundry toolbox helpers; standardize on MCP for toolbox consumption

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track agent-framework

Get notified when new releases ship.

Sign up free

About agent-framework

A framework for building, orchestrating and deploying AI agents and multi-agent workflows with support for Python and .NET.

All releases →

Related context

Earlier breaking changes

  • vdotnet-1.9.0 Removes [Experimental] tag from .NET Orchestrations, marking them stable.
  • vpython-1.7.0 Remove Python-only declarative actions and rename alias kinds to C# canonical names in agent-framework-declarative.
  • vpython-1.6.0 Enable instrumentation by default in agent-framework-core and agent-framework-foundry.
  • vpython-1.4.0 Migrate to a2a-sdk v1.0 in agent-framework-a2a
  • vpython-1.4.0 Tighten default access controls and CORS posture in agent-framework-devui

Beta — feedback welcome: [email protected]