Skip to content

agent-framework

vdotnet-1.11.0 scope: dotnet Maintenance

This release keeps dependencies and maintenance posture current for teams operating this tool.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agent-framework agentic-ai agents ai .net multi-agent
+4 more
orchestration python sdk workflows

Affected surfaces

auth rbac breaking_upgrade

Summary

AI summary

Updates deps, Durable, and hosting across a mixed release.

Full changelog

Changes:

  • 1109d0bf64f3d1dd1e1f2bcaf3b38912ec7e833b Get date suffix up to date with release date (#6690)
  • e030fb53ded912d0ce71bd80fe4c0455bc9d5478 .NET: Replace the symlink index entries with regular file entries (#6687)
  • e6ebba1884238134628ad081249b451c0eb15df9 Add ADR 0029: Skills over MCP implementation design options (#6679)
  • 7051a4920d87387587a32ab217a2cf35433bece8 Python: Add MCP as a hard dep in Foundry Hosting (#6634)
  • 15df1152fc8d0617c6e6cfc439a260cfa09fea14 .NET: Add sample for per-run refreshable MCP authentication headers (#6624) [ #1631 ]
  • a2018b40f907c012bc5398e9ff36d69897d35d6f Python: [BREAKING] Require approval for file-access tools with read-only auto-approval (#6599)
  • e4b89373f1cdc2fe6a047fd74d48bf9ab74b951b .NET: Explicitly emit available_resources and available_scripts in skill content (#6672)
  • 88f0b23fb022b0adf33f5772b4b56a41289db748 .NET: Change A2A default session store to NoopAgentSessionStore (#6635)
  • 9ba6b3a94e40dd90765719e44f5807a4aed4209e Remove unnecessary declarative logging (#6677)
  • 2999f7416f7f171e0a8ae78a8d6c747a7174e71c Update package release version (#6673)
See More
  • 09791533cfc5aa4b862c1d2790d91a1881b222a0 .NET: Emit execute_tool spans by placing OpenTelemetry below FunctionInvokingChatClient (#6667)
  • 7f2e19ca2ffd2c11047099f853b7b7a3e46cf0b9 Python: Ensure spans created inside sync preparations in streaming call are correctly nested (#6552)
  • 7b6f582b13436a034ec293d6f663f98dde772076 Python: Agent Harness blog post accompanying samples part 1 (#6605)
  • dc60722cee1b208b7e91482d3ecc661542cbd342 .NET: Project ToolExecution events as FunctionCallContent/FunctionResultContent in GitHubCopilotAgent streaming (#6228) [ #4734, #5897 ]
  • 2f5a76ab1de1bb4f4710f320bc1074240802bfc2 Fix issue with resuming checkpoint after package version upgrade (#6636)
  • a7381d8bef5cdffe4b9417a530989616aad4e760 Python: stabilize dependency maintenance final checks (#6662)
  • d108d4b54937346eb56fa65a7455d1f26fdbd4a7 Python: [BREAKING] Integrate looping into HarnessAgent (#6607)
  • fd160a77824e98a50661109c12eba981c8b0f16a Python: fix dependency maintenance cutoff (#6658)
  • ad3c1535c4cdb4b898161a1e95c4f5bab8c01917 fix: propagate EnableSensitiveData to auto-wired inner OpenTelemetryChatClient (#6096) [ #5873 ]
  • 10b7d08bff96502229e102f5c3f0474940871124 .NET: fix(hosting): emit url_citation annotation events from streamed AI Search responses (#6649) [ #6641 ]
  • fc3111c391afd5451c055a86d5cfd37ffab59617 Python: Add FoundryAgent conversation session helper (#6623)
  • 098e52158655561c18a9e2afadea6b63374c45e3 .NET: Bring Hosted-Toolbox sample to parity with sibling hosting samples (#6633)
  • 7435dd48d0e13811ade0f112f1a1aa2afc4b469d Python: harden Hyperlight output capture against symlinks (#6601)
  • 148f57020aaa9aabf797cdd5f0a42249972cd7ce Python: host MAF workflows on a standalone Durable Task worker (#6418) [ #6608 ]
  • 89d19a23704713b1f214e3e229b800cba9ac84bd .NET: Migrate 01-get-started samples to Foundry as canonical default (#6555)
  • c81590234413c3ece097c486ebdf9e2c6339b41b .NET: InProcessRunnerContext bugfix for workflows (#6551)
  • 074ac68a6c284ec9532f118a6593d3a300ef1693 .NET: Harden fan-in barrier checkpoint state and extend resume coverage (#6574)
  • d049d94b4997782c4aa59ac86eddc8dcdb22dfef Python: consolidate dependency maintenance workflow (#6570)
  • 41995e265de4183eea07ca14a0cb74baf9337442 Build(deps): Bump anthropic from 0.80.0 to 0.107.1 in /python (#6396)
  • 2adacb3034013de1f5bb9ccc35af34705a03a92b Bump aiohttp from 3.13.4 to 3.14.1 in /python (#6395)
  • 6e3836698bcb67db5da4f47cd101ef5868efdcdd Bump Anthropic.Foundry from 0.5.0 to 0.6.0 (#6057)
  • 0d3e3504f0db55b4826f9efb05cd1f4c57009847 Build(deps): Bump mistralai from 2.4.2 to 2.4.9 in /python (#6393)
  • 2ba97ebcca7f62764ccc03f5d82f0bdc00386119 Bump openai from 2.24.0 to 2.43.0 in /python (#6394)
  • 2d0555c5375ba42eb92fb8d783669ffe4bba4b14 Python: re-role trailing assistant message to user for Anthropic compatibility (fixes #5008) (#6207) [ #5934 ]
  • 5145d50be803830e5710592b0e3879a88b264cc7 Python: Fix AG-UI tool history replay sanitization  (#6581)
  • 7f7c88bfa5b45fd9039837e205d79e08917a3b23 Build(deps): Bump python-multipart from 0.0.26 to 0.0.32 in /python (#6406)
  • bcef77af6a5e811380d77db731989256b2940cdb .NET: (Durable): Scope workflow status/respond endpoints to route workflow name (#6608)
  • 54a30571aa62a3c87b1a4ed924796d5d6e553b9c Dotnet - Add support for Foundry Adaptive evals (#6267) [ #6101 ]
  • dc445592ed4f4776b98e0e04cff3712dceb02746 Python: [BREAKING] Port FileMemoryProvider and integrate FileMemoryProvider & FileAccess into the harness agent (#6547)
  • 92823e9e61e6233d049fce925cf4d075f504a0cf .NET: [BREAKING] Require approval for FileAccessProvider tools with auto-approval rules (#6521)
  • 7a491f8e766a508fef37f3189bbc0a79ff4be3aa Python: Add hosting channel ADRs and spec (#6578)
  • 015e3bcd3b05f998b9a6a1fe5eb81ed42c2a4c2e .NET: Enabling sequential orchestration to pass entire conversation or only previous output. (#6554)
  • 6e95517659c34623f6249a52feaf615955a0826b Python: Split type checkers by target (pyright source, 5 checkers on tests/samples) (#6443) [ #6275 ]
  • 97bb1d588a074437e5b264a9e98779220ebbc906 Migrate to using issue type bug instead of label bug. (#6595)
  • 1fc57c45ee0379c71acf3df10f1a9960c37c53b1 .NET: Bump Azure.AI.Projects to 2.1.0-beta.3 (#6542)
  • b3f8aaa9d7e662c2c433b722e63a1b6d10f63b75 Python: adjust coverage report handoff (#6576)
  • c22fc8d653e387e2384de8489d660b7355b4224f Build(deps): Bump esbuild, @tailwindcss/vite, @vitejs/plugin-react and vite (#6503)
  • a3131b813039acb3539567d3ee0e3629b2415ce1 Build(deps): Bump esbuild, @vitejs/plugin-react and vite (#6501)
  • 3d465951117e1c6fe16b6f1b2f28d246164b40c2 Python: Bump prek from 0.4.3 to 0.4.5 in /python (#6527)
  • 205f7bcca8db45e135e3bd70de4f1049968bfb01 Python: Bump pytest from 9.0.3 to 9.1.0 across /python workspace (#6524)
  • 2048289fb0a90e480cc0c51a3410a0b47f21a177 Build(deps): Bump pydantic-monty from 0.0.17 to 0.0.18 in /python (#6392)
  • 699916d639ee63d98ecc45ff53cf3cc9abb62e07 Python: Add WebSearchDisplayObserver to harness console (#6572)
  • 1ba5cd3f44ce40cd1cabaeec27010f30c7792714 .NET: Scope argument-based standing approvals correctly in ToolApprovalAgent (#6486) (#6487)
  • 1519e50f2f54a89499b90ff6ab7f78bc4faa84b4 Harden archive extraction guard so path containment is statically recognized (#6564) (#6565)
  • b55992bb679602a6615d4f1a1c273bcc59751bf4 Bump Python package versions for 1.9.0 release (#6583)
  • e8cec71ed83481c9ba6ea5a463af649f5e56c8a6 Use issue type for triage workflow (#6577)
  • d7e63d7d0e60aea7eff04cae5d35438f518870b4 Fix Foundry aiohttp dependency (#6567)
  • f59d5c67d8dbe63ee41e729bc07af61a73a9b980 Python: Adopt azure-ai-contentunderstanding to_llm_input in CU context provider (#5796)
  • 26a0a7e8befaff737ee90038f12d0d90079ca49d .NET: (Durable): bind MCP threadId to the current agent and guard cross-agent session dispatch (#6531)
  • 616315339eb240d53d6185db2b43c029bbd3f887 .NET: fix fan-in checkpoint edge state (#6491)
  • fcc5576b040aaa964f7d0ffafdf854c46dd107eb .NET: feat(dotnet): Add LocalCodeAct package for local Python execution (#6105)
  • 6cc7ddb73e415c88f1fac5b2682714a9ec1a2ae1 .NET: Integrate LoopAgent into HarnessAgent with TodoCompletionLoopEvaluator (#6544)
  • 39f4b5ec72990dfe59288e875dbb4066ae4ed105 Align function tool names for BackgroundAgent and FileMemory between python and .net (#6550)
  • 02eb9435bf78b70f54a21410cb1b1b531680a343 Bump litellm from 1.83.14 to 1.84.0 in /python (#6559)
  • 4ff952e1000566f3a3daf88b00825fdfd68f842a Python: Capture context provider instructions in agent telemetry (#6515)
  • 7bf2d2a6d015c85652a0b2c0e7ced41e6ce3fde1 Python: Fix harness console rendering one streamed tool call many times (#6549)
  • 1a280ae7c5b91450ac921aeab2fbdec390924070 Bugfix for Declarative Workflow (#6530)
  • 4d492614a97ce90258c46a3cebbcd0da6eb8b194 .NET samples: structural alignment changes (#6485)
  • 8e10c0399a2b5ddcdfafe255902735d7b0db3147 Python: Remove unsupported as_agent function_invocation_configuration (#6520) [ #6313 ]
  • bce27574775bf45533383866712028316c4e3e8f Foundry hosted agent responses emit failed events (#6502)
  • 106e0657749e58db2aa0b6c0faae2f03451c1eaa .NET: Rebuild Hyperlight sandbox after tool registry updates (#6523)
  • 0db9305625cc623bb22a1c961b4a9b3cd98da8d5 Python: Integrate tool approval into the harness (#6522)
  • 571cae426cd8ca915b484a339c92397abf7afda3 Python: Fix Azure AI Search citation URLs (#6453)
  • 9fb16e034fdb51afb9d867e2781707441325eb01 .NET: Allow custom argument marshaling for skill scripts (#6498)
  • e07cfba0f361787221886b3c1b14fc325e6c060d Disable Anthropic tests by not providing environment vars until 404 failure is resolved (#6539)
  • 40a2dd5cd0978896313b0025f8da13240212c230 .NET: Restore ambient client-header scope between non-streaming ClientHeadersAgent runs (#6517) [ #6516 ]
  • 7e9c043c4c6ef0865016d0935edea4f0da735b88 Python: Improve PR template and breaking-change label automation (#6473)
  • d7e8d2206d6902b25d67bc487db4e2cb52509537 Python: Fix Python OTel usage detail attributes (#6493)
  • d7027fc1f9278430734158c3c5e479787a2539f5 Python: [BREAKING] Align FileAccess tools with .NET — directory discovery and recursive search (#6476)
  • df0bd4da824d12eaa6391e3a59cc5310d163f057 Python: Fix ollama_chat_client.py sample: pass tools via options dict (#6480) [ #6411 ]
  • ed4ff188fc0ded5d4094f415f7cb5e586de907a8 Python: [Breaking] Additional bug fix for declarative workflows (#6489)
  • 0f483fa9680107403a8a14176a9b0a60eb5ff293 Set ApplicationName on CosmosClientOptions for UserAgent telemetry (#6481)
  • 5e830f4dc9c16e0bfbb84b45f31b709a47449d5d .NET: Only use the output from the last message for structured output (#6499)
  • 1acd242550f719cca995a43af1fdf12a4984d23b Python: Add AgentLoopMiddleware for re-running agents in a loop (#6174)
  • 3f77c555cf864a18fcf08999ac0fdbe6e32a8b85 .NET: [BREAKING] Align FileAccess tools with Python; add directory discovery and recursive search (#6474)
  • cd512da731c63a664bf278760c5ecb15ac26b6a9 .NET: Updating MessagePack to latest version (#6497)
  • 76b2b1bf39867b9093f9555c48c8fe75cf9cbd1f Python: Add opt-in AG-UI thread snapshot persistence and hydration (#6471) [ #2458 ]
  • 4c1b9efa8c500a0478b483adc0a41d6839aa87b3 .NET: fix: filter filesystem checkpoint index by session (#6132)
  • e7937947d91ffc129d8e885644c8a5f365be075a Python: Bug fix for declarative workflows (#6468)
  • 3d5421edc1415d85159aa936ff8c16437328a783 Python: Integrate shell tool into harness agent (#6451)
  • 8b0405de1bb0f6852ae543a0c46c05c2b7921ccd .NET: Fix CopySessionConfig() and CopyResumeSessionConfig() to preserve SessionConfig.Streaming value (#6463) [ #4732 ]
  • df29af611c5a2c7306f0dea6e68973783ce07cfe Python: Add tool approval middleware (#6414)
  • c79f886dc3f48ae8b3a2c139e704c8389e8a2c15 .NET: Align Foundry sample environment variables and credentials. (#6422)
  • c9e2a490be5cf5f1d44482d54ca826dc6f50d7fd Fix AzureFunctions integration tests — set FUNCTIONS_WORKER_RUNTIME (#6425)
  • 12ce09916512f457c8c4aa84e18d1001010420f3 .NET: Add LoopAgent capability for Harnesses (#6384)
  • 8e1998ddcb46d75cf3cc277bc74d2ea87b0e035a .NET: Adds Valkey to chat message history - issue 5445 (#5542)
  • 4149f24791ca0964622e196e8e4425b3cd69cffb Python: [Generated by SRE Agent] Fix MCP allowed_tools empty list handling (#6296)
  • 3753d938f5c3f2d67f62cb00086e7a6d34681268 .NET: Bug fixes for declarative workflows (#6427)
  • 60cc5ee4e452c9797e10d69572b56754291c88b8 .NET: Make GitHub.Copilot.SDK build targets reach transitive consumers (#6455) (#6457)

This list of changes was auto generated.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track agent-framework

Get notified when new releases ship.

Sign up free

About agent-framework

A framework for building, orchestrating and deploying AI agents and multi-agent workflows with support for Python and .NET.

All releases →

Related context

Earlier breaking changes

  • vpython-1.8.0 [BREAKING — experimental] Refactor Skill API to async resource and script lookup
  • vpython-1.8.0 [BREAKING] Upgrade github-copilot-sdk to v1.0.0 (stable)
  • vdotnet-1.9.0 Removes [Experimental] tag from .NET Orchestrations, marking them stable.
  • vpython-1.7.0 Remove Python-only declarative actions and rename alias kinds to C# canonical names in agent-framework-declarative.
  • vpython-1.6.0 Enable instrumentation by default in agent-framework-core and agent-framework-foundry.

Beta — feedback welcome: [email protected]