Skip to content

semantic-kernel

AI Agents & Assistants

Enterprise‑ready SDK for building and orchestrating AI agents and multi‑agent systems

C# Latest python-1.43.0 · 3h ago Security brief →

Features

  • Model‑agnostic connectivity to any LLM (OpenAI, Azure OpenAI, Hugging Face, etc.)
  • Agent framework with tools, memory, and planning capabilities
  • Multi‑agent orchestration for complex workflows
  • Extensible plugin ecosystem via native code, prompt templates, or MCP
  • Vector DB integration (Azure AI Search, Elasticsearch, Chroma)
  • Multimodal input support (text, vision, audio)

Recent releases

View all 24 releases →
python-1.43.0 Breaking risk
Breaking changes
  • Update OpenAPI document parsing options (breaking change)
Full changelog

What's Changed

  • Python: Improve function call invocation parameter consistency by @SergeyMenshykh in https://github.com/microsoft/semantic-kernel/pull/14014
  • Python: [Breaking] Update OpenAPI document parsing options by @SergeyMenshykh in https://github.com/microsoft/semantic-kernel/pull/14009
  • ci: harden Python test coverage workflow by @giles17 in https://github.com/microsoft/semantic-kernel/pull/14026
  • Python: Bump Python package version to 1.43.0 for a release by @moonbox3 in https://github.com/microsoft/semantic-kernel/pull/14052

Full Changelog: https://github.com/microsoft/semantic-kernel/compare/python-1.42.0...python-1.43.0

Review required
dotnet-1.77.0 Maintenance
Auth Breaking upgrade

Routine maintenance and dependency updates.

Review required
python-1.42.0 Maintenance
Dependencies Auth

Routine maintenance and dependency updates.

dotnet-1.76.0 Security relevant
Security fixes
  • NU1903 high‑severity vulnerability fixed by updating Kiota packages (#13966)
  • GHSA-pggp-6c3x-2xmx (high severity) fixed by bumping Snappier to 1.3.1 (#13960)
Notable features
  • Support ImageContent in tool/function results
  • Add ExtraBody to OpenAIPromptExecutionSettings
Full changelog

Changes:

  • f2b3c931d1bc43b5630eb16aea24a4fe93d56699 .Net: Version bump 1.76.0 (#13972)
  • 3dd139b2bd4000dd8efc19edd6d3127e17916550 .Net: Harden CloudDrivePlugin defaults and add path validation (#13958)
  • 446c2eff94bcf4539e1528db692352bbbb3628a5 .Net: Improve input validation in OpenAPI plugin (#13962)
  • b7ae840d65c244b8f72e55ef1a5be8bdb4f31ac7 .Net: feat(connectors): Support ImageContent in tool/function results (#13431) [ #13430, #13419 ]
  • 52d4e5ce857bcdc770eb9ea415e2092aae3fa258 .Net: Harden gRPC plugin address handling (#13961)
  • 73d3c59902914f79d3068a54aaa851d275c91de8 Update Kiota packages to fix NU1903 vulnerability (#13966)
  • fb10d92d8c9c21d1a0122f53781bd1bee5acd25f .Net: Bump Snappier to 1.3.1 to fix NU1903 high-severity vulnerability (GHSA-pggp-6c3x-2xmx) (#13960) [ #13431 ]
  • 1a5065e5cf25536ffe94ff1fba7713f300c7c9b7 .Net: Fix DocumentPlugin path validation order (#13956)
  • 2a719ca3182f547203f54257f69c47a175fbb3fd .Net: Add deny-by-default AllowedUploadDirectories to CloudDrivePlugin (#13953)
  • 006a5d9a9b3eb4ed41f63beb6341bc44e724d9db .Net: fix: fall back to ToString() when logging function results with unregistered types (#13884) [ #13681 ]
See More * 6e1ab9dee5e73131099a85314464287088bbd651 .Net: Fix VertexAI global endpoint URI construction (#13620) (#13621) * a1a701d051d425897518c3f70dc3d835cd949c7b .Net: Fix whitespace formatting in PromptExecutionSettingsExtensions.cs (#13941) * 1369c2e0ce6b9e5e86877b62c14b7311440aed2c .Net: Add ExtraBody to OpenAIPromptExecutionSettings (#12307) (#13934) [ #11852 ] * a68600a73a8153c436bffe5a96c4508cf0c09238 .Net: Update Step04_AzureAIAgent_CodeInterpreter.cs (#13886)
dotnet-1.75.0 Security relevant
Security fixes
  • Hardened AllowedBaseUrls validation in RestApiOperationRunner
  • Added backslash escaping to Redis text search values
  • Fixed single-quote escaping in OBJECT_ID and dynamic SQL string literals
Notable features
  • Support for dimensions in Vertex AI embedding services
  • Updated SQL Server vector search to latest VECTOR_SEARCH() syntax
Full changelog

Changes:

  • 27971e118b344a5bedea6bbd5c514d3409890b54 .Net: Sk release version 2026 04 27 (#13929)
  • c8e3cd0d74924d27f4bb2d347bbc1212e2714358 .Net: Upgrade dependencies (#13927)
  • 9c62d9d19aae68427977f4596234426eeb1a5385 Python: Bump package version to 1.41.3 for a release (#13926)
  • 95b1bf85d8e72f70d457a81d2f179465616914db .Net: Harden AllowedBaseUrls validation in RestApiOperationRunner (#13910)
  • 79ef93b9cf1ed51bd81a8c0d61e960bb83fd4cd4 Python: Extend InMemoryCollection filter attribute blocklist (#13897)
  • 57d9adce816f24c2e8f651614313c80894a1f8d3 Python: Add field and table name escaping for python SqlServer connector (#13893)
  • 84ab8221c714aad82873fea8a0d728af2fcc9176 .Net: Validate step types (#13901)
  • ba37e8e49b0f945c7cedd7733e040287046ec802 .Net: Add backslash escaping to redis text search values (#13902)
  • bf1b19c84c8448fd040cf94adf25fe4914eafc81 .Net: Fix single-quote escaping in OBJECT_ID and dynamic SQL string literals (#13900)
  • 1b2f318a61c4107e376700e7c2f01416e85def57 .Net: Remove MEVD components from SK-release.slnf (#13892)
See More
  • 7e216a0f5c10b7303f19d12eff372110844f54bc .Net: Update SQL Server vector search to latest VECTOR_SEARCH() syntax (#13863) [ dotnet/efcore#38075 ]
  • 20c91a38d1922eb24051579eda538fba35ca9f8b Python: bump py version to 1.41.2 for a release (#13850)
  • 12f14bd91138c8db8eba35463113df812a7cd17b Python: Update ipykernel requirement from ~=6.29 to >=6.29,<8.0 in /python (#13330) [ #1435, #1451, #1458, #1455, #1462, #1434, #1465, #1463, #1453, #1447, #1448, #1444 ]
  • eeeccb4596a09b3983ec1b628e6bf507b9f107d1 Python: Respect FunctionChoiceBehavior filters in OpenAI responses agent tools (#13235)
  • 2435461ea9d989a125c13d2e169b4743c01c6120 Python: Update pydantic requirement from !=2.10.0,!=2.10.1,!=2.10.2,!=2.10.3,<2.12,>=2.0 to >=2.0,!=2.10.0,!=2.10.1,!=2.10.2,!=2.10.3,<2.13 in /python (#13246) [ #12355, #12370, #12367, #12366, #1826, #1829, #1836, #12338, #12233, #12334, #12336, #12147, #12001, #12344 ]
  • e052093b645ca99ff5694d91d4bcb054d91225ca Python: Update pymongo requirement from <4.15,>=4.8.0 to >=4.8.0,<4.16 in /python (#13124) [ #2523, #2522, #2521, #2520, #2518, #2517, #2516, #2513, #2512 ]
  • f1b168dc2c10a7da4a1515707902875099e82a56 Python: Update chromadb requirement from <1.1,>=0.5 to >=0.5,<1.4 in /python (#13331) [ core/chroma#5740, core/chroma#5687, core/chroma#5715, core/chroma#5714, core/chroma#5729, core/chroma#5742, core/chroma#5736, core/chroma#5745, core/chroma#5720, core/chroma#5743, core/chroma#5728, core/chroma#5751, core/chroma#5750, core/chroma#5757, core/chroma#5758, core/chroma#5754, core/chroma#5756, core/chroma#5759, core/chroma#5761, core/chroma#5760, #5760, #5761, #5759, #5756, #5754, #5758, #5757, #5750, #5751, #5 ]
  • fdc2067b62cab02ef94e1a83a63b954b8029b94f Python: Update redis[hiredis] requirement from ~=6.0 to >=6,<8 in /python (#13329) [ #3811, #3807, #3797 ]
  • 0f322bcc48fa3ff0bbcf4b386575668567029cf8 Python: Improve prompt-template msg serialize and sample usage (#13738)
  • 134e52e7540270ca4055bd5eab4d7606f9689ce1 Use newest Npgsql when targeting net8.0 and above (#13724) [ #13706 ]
  • 5f282a912853ebf39ef39398a8f9d48a952f63bb Refactor CollectionModel/builder and introduce read-only property interfaces (#13699)
  • 9d120bcc4ac262512d201e6038b87958c1bbd86e Python: Bump Python version to 1.41.1 for a release (#13705)
  • 41f7b59595ae7de2cf475dc4b18bade0ddc192a3 Python: fix Google AI/Vertex AI crash on anyOf schema (#12442) (#13624)
  • 83ff0a5aaacfb7b1113fa80bf55dda8054317357 Python: fix(google-ai): skip api_key check when use_vertexai is True (#13607) [ #13483 ]
  • e0bd528cd9d55a6e63b18135985a1cb8e71d9673 Python: Default Dapr module allowlist to semantic_kernel prefix (#13596) [ #13499 ]
  • 5069b4186b72b47c7e6d665d81fe6316dd94396b Simplify PR parsing for automated review workflow (#13689)
  • f034ed1d4c94b919208c67a5dd201fcea210e6ca Python: fix: ChatHistoryTruncationReducer orphans TOOL role messages (#13608) [ #12708 ]
  • 6ed2bb26d5a3124ae9b46499ea89d5fe8b30fc3c [MEVD] Fix VectorStoreKeyAttribute.IsAutoGenerated to be usable as a compile-time attribute argument (#13698) [ #13697 ]
  • 082e28e52ec2b45ad8cf287176d844150617e8b5 .Net: Remove legacy filtering from MEVD providers (#13636) [ #10456 ]
  • 0e2e6bd7774a5b82ddb8460fbaf93eda365a6d3b .Net: feat: Add support for dimensions in Vertex AI embedding services (#13612) [ #10489, #12988 ]

This list of changes was auto generated.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
28,027
Forks
4,625
Languages
C# Python Jupyter Notebook

Install & Platforms

Install via
pip
Platforms
linux macos windows

Community & Support

Beta — feedback welcome: [email protected]