python-1.45.0

What's Changed

• remove migrated .NET MEVD providers, add redirect READMEs by Adam Sitnik (@adamsitnik) with @Copilot in #14193
• .Net: Bump CommunityToolkit.VectorData.InMemory and System.Numerics.Tensors by Dependabot (@dependabot)[bot] in #14283
• .Net: Honor FunctionChoiceBehavior function list in Gemini connector by Giles Odigwe (@giles17) in #14183
• .NET: Bump Testcontainers packages by SergeyMenshykh in #14294
• .NET: [Breaking] Update OpenAPI HTTP client defaults by SergeyMenshykh in #14293
• .NET: Bump package version to 1.80.0 by SergeyMenshykh in #14301
• Python: [Breaking] Remove unsupported service auth mode from Copilot Studio agent by SergeyMenshykh in #14306
• Switch failing test to new model. by westey (@westey-m) in #14332
• Pin GitHub Actions to full-length commit SHAs by Dan Fiedler (@danfiedler-msft) in #14307
• Update CommunityToolkit VectorData package names by Adam Sitnik (@adamsitnik) with @Copilot in #14333
• ci: updates aws credential task to fix node20 retirement for GHA by Vincent Biret (@baywet) in #14345
• chore: fixes typos by Vincent Biret (@baywet) in #14343
• tests: refactors redirection tests to avoid race condition by Vincent Biret (@baywet) in #14342
• chore: bumps the OpenAPI dependencies to the latest versions by Vincent Biret (@baywet) in #14340
• ci: removes extraneous nuget.config file by Vincent Biret (@baywet) in #14341
• Python: update MCP OAuth sample dependencies by SergeyMenshykh in #14352
• .NET: Remove retired OpenAI Assistants integration tests by SergeyMenshykh in #14354
• .NET: update SDK to 10.0.303 by SergeyMenshykh in #14353
• Python: Temporarily disable Bedrock integration tests by SergeyMenshykh in #14363
• Python: update dependencies by SergeyMenshykh in #14360
• .NET: Bump package version to 1.80.1 by SergeyMenshykh in #14370
• Fix magentic ledger bug by westey (@westey-m) in #14372
• Update to use ci yaml by Evan Mattson (@moonbox3) in #14384
• Consolidate Dependabot dependency updates by Evan Mattson (@moonbox3) in #14385
• SessionsPythonPlugin bug fix by westey (@westey-m) in #14374
• Python: Add User-Agent to google-genai by Mark McDonald (@markmcd) in #13703
• Replace workflow PAT usage with GitHub App authentication by Evan Mattson (@moonbox3) in #14411
• .NET: Upgrade Git build dependency by SergeyMenshykh in #14477
• Restrict DevFlow PR reviews to internal contributors by SergeyMenshykh in #14503
• .Net: Temporarily skip direct OpenAI integration tests by SergeyMenshykh in #14507
• .Net: Align plugin path validation by SergeyMenshykh in #14476
• .Net: Improve Milvus filtering by westey (@westey-m) in #14498
• Python: Temporarily skip OpenAI integration tests by SergeyMenshykh in #14517
• Python: Make MCP server tool names consistent by SergeyMenshykh in #14506
• Python: Fix postgres filter bug by westey (@westey-m) in #14497
• .Net: Update file handling for FileIOPlugin by SergeyMenshykh in #14525
• Python: pin the validated address for OpenAPI plugin requests by Anton Dziatkovskii (@tonydzi) in #14371
• Python: Encode and validate session download filenames by Eduard van Valkenburg (@eavanvalkenburg) in #14520
• Python: Clarify HttpPlugin defaults by Eduard van Valkenburg (@eavanvalkenburg) in #14495
• Python: .NET/Python: Share HTTP request validation utilities by SergeyMenshykh in #14546
• Python: .NET/Python: Validate CrewAI task identifiers by SergeyMenshykh in #14551
• .Net: Bump package version to 1.81.0 by SergeyMenshykh in #14553
• Python: Consolidate Dependabot dependency updates by Eduard van Valkenburg (@eavanvalkenburg) in #14552
• Python: Bump Python version to 1.45.0 for a release by Eduard van Valkenburg (@eavanvalkenburg) in #14554

New Contributors

• Dan Fiedler (@danfiedler-msft) made their first contribution in #14307
• Mark McDonald (@markmcd) made their first contribution in #13703
• Anton Dziatkovskii (@tonydzi) made their first contribution in #14371

Full Changelog: python-1.44.1...python-1.45.0

dotnet-1.81.0

Changes:

• bd3150d .Net: Bump package version to 1.81.0 (#14553)
• a205c42 .Net: Update file handling for FileIOPlugin (#14525)
• 58ad1a3 .Net: Improve Milvus filtering (#14498)
• 082700e .Net: Align plugin path validation (#14476)
• c7ba1af .Net: Temporarily skip direct OpenAI integration tests (#14507)
• bb601cc .NET: Upgrade Git build dependency (#14477)
• 872d29e SessionsPythonPlugin bug fix (#14374)

This list of changes was auto generated.

dotnet-1.80.1

Changes:

• d8ec449 .NET: Bump package version to 1.80.1 (#14370)
• 3438d88 .NET: update SDK to 10.0.303 (#14353)
• 4373361 .NET: Remove retired OpenAI Assistants integration tests (#14354)
• a64827e ci: removes extraneous nuget.config file (#14341)
• a220003 chore: bumps the OpenAPI dependencies to the latest versions (#14340)
• 60264bb tests: refactors redirection tests to avoid race condition (#14342) [ #14340 ]
• b4b0ae7 chore: fixes typos (#14343)

See More

• a256f1a ci: updates aws credential task to fix node20 retirement for GHA (#14345)
• abf10dd Update CommunityToolkit VectorData package names (#14333)
• 6eab62d Pin GitHub Actions to full-length commit SHAs (#14307)
• cd7b533 Switch failing test to new model. (#14332)

This list of changes was auto generated.

dotnet-1.80.0

Changes:

• 5e1f1fb .NET: Bump package version to 1.80.0 (#14301)
• 1b7b020 Update OpenAPI HTTP client defaults (#14293)
• c1afc86 .NET: Bump Testcontainers packages (#14294)
• c028a0c .Net: Honor FunctionChoiceBehavior function list in Gemini connector (#14183)
• 1d336b3 .Net: Bump CommunityToolkit.VectorData.InMemory and System.Numerics.Tensors (#14283)
• 76b5464 remove migrated .NET MEVD providers, add redirect READMEs (#14193)

This list of changes was auto generated.

python-1.44.1

What's Changed

• Encode OpenAPI server variable values by Eduard van Valkenburg (@eavanvalkenburg) in #14146
• Consolidate Dependabot dependency updates by Evan Mattson (@moonbox3) in #14176
• Suppress CodeQL false positive in internal HTTP utility by SergeyMenshykh in #14223
• Python: [Breaking] Add MCP tool approval callback for Azure AI Agent by SergeyMenshykh in #14210
• Consolidate Python and .NET dependency updates by Evan Mattson (@moonbox3) in #14222
• Python: Skip MCP tools and prompts whose normalized names collide by SergeyMenshykh in #14236
• Bump form-data from 4.0.5 to 4.0.6 in ProcessFrameworkWithSignalR React frontend by Giles Odigwe (@giles17) in #14234
• Python: Document x5t certificate thumbprint hashing in Copilot Studio agent by SergeyMenshykh in #14270
• Python: Bump Python version to 1.44.1 for a release by Evan Mattson (@moonbox3) in #14277

Full Changelog: python-1.44.0...python-1.44.1

dotnet-1.79.0

Changes:

• fb13781 .NET: Bump package version to 1.79.0 (#14275)
• 383d102 Bump .NET SDK from 10.0.301 to 10.0.302 (#14235)
• 362cc2b Bump form-data from 4.0.5 to 4.0.6 in ProcessFrameworkWithSignalR React frontend (#14234)
• e78a8f5 Suppress CodeQL false positive in internal HTTP utility (#14223)
• 441ac99 Update Microsoft.AspNetCore.OData to 9.5.0 (#14224)
• 01e74b0 .NET: Harden dotnet-format workflow shell handling (#14201)

See More

• 7481cd0 Fix cosmosdb vectorstore bug (#14182)
• 61a6b0c Migrate VectorStoreRAG and Concepts samples to CommunityToolkit.VectorData packages (#14170)
• d003eb2 Consolidate Dependabot dependency updates (#14176)
• acb3e35 .Net: [.NET] Add TimeProvider injection to TimePlugin for deterministic testing (#14112) [ #14111 ]
• e15ae16 .Net: Reject mixed-separator UNC paths in file plugins (#14166) [ #14157 ]
• 33a3e55 .Net: [BREAKING] Upgrade Prompty.Core to 2.0.0-beta.3 to resolve NU1903 vulnerability (#14169)
• c781da1 .Net: fix: address three static analysis issues (audio format, text search, KernelProcess) (#13925) [ #13922 ]
• dd026f3 Encode OpenAPI server variable values (#14146)
• 008d40a .Net: feat(ollama): add Think property to OllamaPromptExecutionSettings (#14122) [ #14078 ]

This list of changes was auto generated.

python-1.44.0

What's Changed

• Python: Bump tornado from 6.5.5 to 6.5.7 in /python by Dependabot (@dependabot)[bot] in #14090
• Python: Bump pyjwt from 2.11.0 to 2.13.0 in /python by Dependabot (@dependabot)[bot] in #14084
• Python: Bump starlette from 0.52.1 to 1.3.1 in /python by Dependabot (@dependabot)[bot] in #14092
• .Net: Bump Aspire.Azure.Search.Documents from 9.5.1 to 13.3.0 by Dependabot (@dependabot)[bot] in #13994
• .Net: Bump Aspire.Hosting.Azure.CognitiveServices from 13.0.0 to 13.3.0 by Dependabot (@dependabot)[bot] in #13996
• .Net: Bump esbuild, @vitejs/plugin-react, vite, and transitive lockfile deps in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend by Dependabot (@dependabot)[bot] in #14070
• Python: Bump bleach from 6.3.0 to 6.4.0 in /python by Dependabot (@dependabot)[bot] in #14089
• Bump pyarrow from 21.0.0 to 23.0.1 in /python by Dependabot (@dependabot)[bot] in #14058
• Python: Bump torch from 2.8.0 to 2.12.0 in /python by Dependabot (@dependabot)[bot] in #14065
• Python: Bump idna from 3.11 to 3.15 in /python by Dependabot (@dependabot)[bot] in #14024
• Bump urllib3 from 2.6.3 to 2.7.0 in /python by Dependabot (@dependabot)[bot] in #13978
• Python: Bump authlib from 1.6.11 to 1.6.12 in /python by Dependabot (@dependabot)[bot] in #14004
• Bump mistune from 3.2.0 to 3.2.1 in /python by Dependabot (@dependabot)[bot] in #13965
• Python: Add OpenAPI server URL validation by Eduard van Valkenburg (@eavanvalkenburg) in #14097
• Python: Adjust request validation by SergeyMenshykh in #14114
• Python: Enforce excluded_functions on MCP tool invocation path by SergeyMenshykh in #14124
• Python: Default MCP SSE server samples to loopback with host validation by SergeyMenshykh in #14127
• Python: OpenApi: Harden operation path handling for consistent selection and request targeting (.Net & Python) by Roger Barreto (@rogerbarreto) in #14140
• Python: [Breaking] Update runtime handling by SergeyMenshykh in #14135
• Python: Bump Python version to 1.44.0 for a release by Evan Mattson (@moonbox3) in #14141

Full Changelog: python-1.43.1...python-1.44.0

dotnet-1.78.0

Changes:

• 35ba23e .Net: Update package version to 1.78.0 (#14142)
• e6c9673 .Net: Disable automatic HTTP redirects in HttpPlugin and WebFileDownloadPlugin default clients (#14132)
• f25753b Bump Scriban from 7.2.0 to 7.2.5 to fix NU1902 vulnerability (#14133)
• dfc5227 .Net: Update .NET SDK to 10.0.301 (#14119)
• cf9af8b .Net: Bump axios to 1.16.0 and form-data to 4.0.6 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR (#13858)

See More

• e99c633 .Net: Harden file path validation in Core, Document, and Web plugins (#14118)
• 99d1953 Bump axios from 1.13.2 to 1.16.0 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#14044) [ #10795, #10822, #10825, #10729, #7378, #10745, #10810, #10802, #6485, #10680, #6897, #10794, #10800, #6241, #10708, #10819, #7149, #10772, #10806, #7260, #10787, #10724, #7276, #7414, #6389, #6460, #10833, #10588, #7419, #10820, #10791, #10796, #10821, #10782, #10759, #10804, #10785, #10813, #10814, #10790, #10834 ]
• 82f2442 .Net: Update SK to use MEVD packages and move MEVD projects out of main solution (#14117)
• 8ce2bcc .Net: Bump Aspire.Hosting.Azure.CognitiveServices from 13.0.0 to 13.3.0 (#13996)
• 20be253 .Net: Bump esbuild, @vitejs/plugin-react, vite, and transitive lockfile deps in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#14070)
• 445fd0e .Net: Bump Aspire.Azure.Search.Documents from 9.5.1 to 13.3.0 (#13994)
• 367c75f .Net: Bump minimatch from 3.1.2 to 3.1.5 in /dotnet/samples/Demos/ProcessWithCloudEvents/ProcessWithCloudEvents.Client (#13604)
• 6209c77 .Net: Bump @babel/core from 7.26.10 to 7.29.7 in /dotnet/samples/Demos/ProcessWithCloudEvents/ProcessWithCloudEvents.Client (#14083) [ #18014, #18001, #17998, #17992, #17974, #17923, #17931, #17915, #17788, #17739, #17606, #17592, #17589 ]
• 1ad0b75 Bump Aspire.Hosting.AppHost from 13.0.0 to 13.3.0 (#13995)
• 56422ad .Net: Bump follow-redirects from 1.15.11 to 1.16.0 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#13877)
• a5e8f9b .Net: Bump form-data from 4.0.5 to 4.0.6 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#14082)
• 7fd75c3 .Net: fix: prevent duplicate "null" in JSON Schema type arrays for nullable parameters (#13635) [ #13527 ]
• f8c757b Fix MessagePack high severity vulnerability (#14079)

This list of changes was auto generated.

python-1.43.1

What's Changed

• Python: Add function_choice_behavior support to Azure AI and OpenAI Assistant agents by SergeyMenshykh in #14057
• Fix MessagePack by SergeyMenshykh in #14079
• .Net: fix: prevent duplicate "null" in JSON Schema type arrays for nullable parameters by Roli Bosch (@roli-lpci) in #13635
• Python: Reject encoded dot-segment paths in OpenAPI plugin (.NET and Python) by Roger Barreto (@rogerbarreto) in #14086
• Python: Bump Python version to 1.43.1 for a release. by Evan Mattson (@moonbox3) in #14093

Full Changelog: python-1.43.0...python-1.43.1

python-1.43.0

What's Changed

• Python: Improve function call invocation parameter consistency by SergeyMenshykh in #14014
• Python: [Breaking] Update OpenAPI document parsing options by SergeyMenshykh in #14009
• ci: harden Python test coverage workflow by Giles Odigwe (@giles17) in #14026
• Python: Bump Python package version to 1.43.0 for a release by Evan Mattson (@moonbox3) in #14052

Full Changelog: python-1.42.0...python-1.43.0