Skip to content

deps: Bump the microsoft-packages group with 2 updates - #2427

Merged
bradygaster merged 4 commits into
devfrom
dependabot/nuget/src/Squad.Agents.AI/microsoft-packages-db7f58546a
Nov 9, 2026
Merged

bradygaster merged 4 commits into
devfrom
dependabot/nuget/src/Squad.Agents.AI/microsoft-packages-db7f58546a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor

Updated Microsoft.Agents.AI.GitHub.Copilot from 1.27.0 to 1.28.0.

Release notes

Sourced from Microsoft.Agents.AI.GitHub.Copilot's releases.

1.28.0

Changes:

  • 924a6e50ec0336f3c965ee8b1151c54085888b6e .NET: chore: bumps release version for dotnet (#​10157)
  • c79d6eef1cbfb83d623da76c37b6f609e4a1295c Fix spelling in WorkflowBuilder XML comment (#​10154)
  • 07d07c80715f090b2a99715aa7e281ab6eb12931 Fix initializer spelling in Cosmos test comment (#​10153)
  • 7bca1df23ea97b778dd5cd7a50d9db8d1ef832db Python: Prepare 1.25.0 release (#​10151) [ #​10147, #​9617 ]
  • 25ecd6768ece2ff6ef25f375eeb5621fd08e34d4 Python: Allow concurrent MCP calls with request-owned headers (#​10147)
  • 82f03c81aba5c5e4b1b36589027470bc5d094422 .NET: fix(dotnet): parse declarative workflow formulas and values with InvariantCulture (#​10069)
  • 71e56792f5dbe401a52360141ea138d613cf65b1 Enable automatic issue routing (#​10144)
  • c04fecdfdc2f5e8d75bc3526e22f7a606465a0d7 Python: narrow unscoped URL session approvals (#​10149)
  • 28163f5e23d224b0855771a4a66974cefd0da841 Python: enable Redis integration on Python 3.15 (#​10143)
  • 80d0cbf5bc30d7ab534aa89d694a0ed3a0c8e153 Add manual agentic issue triage workflow (#​10045)
See More
  • 9db7efb0841b3d271c89ebf15bd3a3d7e42c9876 Python: Honor Foundry Toolbox approval metadata (#​10136)
  • 44f5495c0851e9c646b00cbe56ba7af5c137f6e4 chore(deps): bump mypy from 2.4.0 to 2.4.1 in /python (#​10120)
  • d0e191cf4d3dbff53794fa41b8e8118cc9e4d9d4 chore(deps): bump ty from 0.0.92 to 0.0.94 in /python (#​10119)
  • 6e770b95c0337d841564c922474942ed33293f1b chore(deps-dev): bump mypy (#​10118)
  • 082217287cb4be24a3ea332e89288b0caab67d84 chore(deps-dev): bump pytest in /python/packages/lab in the pytest group (#​10117)
  • 4ffc820cd62dc65b471f170889a67e867fe0d838 chore(core): remove unused URI_PATTERN and correct add_chain cycle docstring (#​10105)
  • 83c7190658403f1cc653f34b822bb7ada3a3e2e2 Python: fix(core): keep finished background tasks until cleared or released (#​9387) [ #​8760 ]
  • 0c479365fca969ba2fb11b9c80632eae5668b92a Python: Preserve AG-UI citations through client and agent streaming (#​9094)
  • 2fa7b9ab21bed4cbebf5bb203ba5f0cb90abecf0 Python: Sum streamed GitHubCopilotAgent usage across model calls (#​10088)
  • 18cd5903b902e3673f83f364565c057cad723cb5 Python: fix(core): quarantine an unreadable memory state file instead of failing every turn (#​9547)
  • e9292752c1eac91000d3e6133dce45d3726e82ba Python: fix empty local shell calls leaving orphaned history (#​9803)
  • df7d02bdc99cf03db76715dd6a9eedf6128ad84b [BREAKING] Python: scope declarative MCP sessions to invocations (#​8662)
  • 1c3264b065ef4b2b9b3614b19394bdd49d98334f .NET: Clarify Foundry toolbox startup and readiness XML documentation (#​10124)
  • 4be280d57fb7e640d179b7b1dc78858ef4c557c6 .NET: Use source-generated logging in Foundry Hosting (#​10122)
  • 3af8584d7eb2e57098d5301d8aafd50518b0d274 Ensure enable file hooks defaults to false (#​10121)
  • 07b9b3fc6f896cc4a0ac86e74cb11fc4d894ca19 Python: Replay Anthropic redacted_thinking blocks in tool loops (#​10106) [ #​10104 ]
  • ee7b45e86a46392848eede2b30b496513c97b7f6 Python: fix(ag-ui): start each replayed declaration-only tool call once (#​9770) [ #​9638 ]
  • 89cb64cc3b5c0eb2add8231f07a880f6ae939661 .NET: [BREAKING] Simplify A2A agent creation and payload handling (#​10113)
  • 42ff2abab49ffe59b1c59ce63ac7d3767779c680 docs: fix dont typos in ChatCompletions comments (#​10108)
  • c3cc88ca10cbeef02d32cf2f9523704d748130a1 .NET: remove nonstandard workflow payload telemetry (#​9994)
  • 5d1d841f110897dbc3ee7d717fc5c3fa9c0f5caf Reject unscoped Mem0 memory deletion (#​10109)
  • 2d4cce8d75f74e4ae7e40d53ccb5c141440d874c Python: reject unsupported Copilot provider function middleware (#​10090)
  • 230a3aa0bba19b6bf5a7b4f427bcb25cb16c7105 .NET: Preserve non-ASCII text in hosting tool payloads (#​10065)
  • 462610495018ce87467170f8f50ca5f7b5b9a955 Python: chore(deps): consolidate open Dependabot updates (#​10096)
  • 06ab83bf9356e73eb3263b398fe62e6f91a865ee .NET: [BREAKING] fix(dotnet): require allowed HTTP hosts (#​9841)
  • 0452e0d7705be9baf4b5543a7223b22fbcf447a3 Clarify binary content purview classification (#​10103)
  • d11a30692bff3579024b8492a71985450a29e2b6 Python: strengthen API design and PR review guidance (#​10038)
  • 579e4cff54f00720deed4521feadac844233fd46 fix: renames azure agent to foundry agent (#​10098)
  • 725a0684cad006ad3e941045840311c02862a958 .NET: Fix per message user mapping in purview (#​10099)
  • 708c8f3a59bb139e532b609c344bff2a108672d1 Allow configuring Foundry toolbox token scope (#​10100)
  • faee0dddce41471aba168fc8e4565a033b0d5f96 .NET: [BREAKING] fix: scope workflow MCP clients to invocations (#​9722)
  • ce097d1de3819c4b55e81c90e2d3b85b3d38b650 Python: [BREAKING] Bind AG-UI workflow agent executors to one authorization scope (#​10035)
  • 08705f7451eb5043cb984aa8c38a4ab02a8dd288 Python: Harden FIDES core policy foundation (#​9875)
  • 85d73a9b6944ddcf7a0add9028bc4a71bbb0acc3 Update approval samples to include reason (#​10095)
    ... (truncated)

Commits viewable in compare view.

Updated Microsoft.Extensions.AI from 10.10.0 to 10.11.0.

Release notes

Sourced from Microsoft.Extensions.AI's releases.

10.11.0

.NET Extensions 10.11.0

This release adds optional scope capture for buffered logs and updates experimental HTTP latency enrichment APIs. It also includes fixes for AI streaming and function invocation, evaluation reports, HybridCache invalidation, and logging.

Experimental API Changes

New Experimental APIs

  • Optional logging-scope capture for global and per-request log buffering through GlobalLogBufferingOptions.IncludeScopes and PerRequestLogBufferingOptions.IncludeScopes (EXTEXP0003) #​7813

Breaking Changes to Experimental APIs

  • Incoming HTTP latency log enrichment: AddHttpLatencyTelemetry is renamed to AddHttpServerLatencyTelemetry and moves from HttpLatencyTelemetryServiceCollectionExtensions to HttpLoggingServiceCollectionExtensions. It remains experimental under EXTEXP0013 in this release. #​7730

What's Changed

AI

  • Yield final image when streaming with HostedImageGenerationTool #​7774 by @​iamAdarshh
  • Make the default tool-rejection message state that the decision is final #​7784 by @​manjunathshiva
  • AI: Remove obsolete OpenAI JsonPatch workaround #​7815 by @​jozkee (co-authored by @​Copilot)
  • Ignore empty model IDs in streaming responses #​7816 by @​valkiara
  • Honor FunctionInvocationContext.Terminate when the function throws #​7801 by @​gjz22
  • Fix ChatResponseUpdate.Clone dropping ContinuationToken #​7699 by @​dfedoryshchev
  • Decode non-base64 data URIs in DataContent to the octets they encode #​7798 by @​Laurianti

AI Evaluation

  • [M.E.AI.Evaluation.Reporting] Fix context and metric interpretation visualization #​7738 by @​grafanaKibana
  • Fix tokenizer attaching punctuation to number tokens #​7766 by @​tahakocal
  • Order iteration results numerically #​7769 by @​tahakocal
  • Score GLEU against the best matching reference #​7768 by @​tahakocal

Telemetry and Observability

  • Optionally preserve logging scopes in buffered log records #​7813 by @​evgenyfedorov2 (co-authored by @​Copilot)
  • Fix OOM from unbounded enumeration of ExtendedLogger tag joiners #​7819 by @​evgenyfedorov2 (co-authored by @​Copilot)
  • Fix log buffering race by removing the rule selector cache #​7803 by @​evgenyfedorov2 (co-authored by @​Copilot)

ASP.NET Core Extensions

  • Rename AddHttpLatencyTelemetry to AddHttpServerLatencyTelemetry (API-approved shape) #​7730 by @​EasyL0ver (co-authored by @​Copilot)
  • Fix ArgumentNullException in per-request log buffering at the end of a request #​7811 by @​evgenyfedorov2 (co-authored by @​Copilot)

AI Project Templates

  • Align aichatweb local vector-store keys with Guid record keys #​7804 by @​jongalloway (co-authored by @​adamsitnik @​Copilot)

Caching

... (truncated)

10.10.1

This release fixes two OpenAI integration issues: a TypeLoadException on tool-carrying Responses API calls and a streaming crash against third-party OpenAI-compatible endpoints, by upgrading the OpenAI SDK to 2.14.0.

Packages in this release

Package Version
Microsoft.Extensions.AI.OpenAI 10.10.1
Microsoft.Extensions.AI.Abstractions 10.10.1

What's Changed

AI

  • Upgrade OpenAI SDK to 2.14.0 #​7761 by @​zxyao145

Acknowledgements

  • @​zxyao145 made their first contribution in #​7761
  • @​zxyao145 submitted issue #​7760 (resolved by #​7761)
  • @​jozkee @​wtgodbe reviewed pull requests

Full Changelog: dotnet/extensions@v10.10.0...v10.10.1

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps Microsoft.Agents.AI.GitHub.Copilot from 1.27.0 to 1.28.0
Bumps Microsoft.Extensions.AI from 10.10.0 to 10.11.0

---
updated-dependencies:
- dependency-name: Microsoft.Agents.AI.GitHub.Copilot
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft-packages
- dependency-name: Microsoft.Extensions.AI
  dependency-version: 10.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: microsoft-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from bradygaster as a code owner November 9, 2026 08:13
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 9, 2026
@dependabot
dependabot Bot requested a review from tamirdresher as a code owner November 9, 2026 08:13
Copilot AI auto review requested due to automatic review settings November 9, 2026 08:13

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔵 Needs a closer look

A restore/build across net8.0, net9.0, and net10.0 is still needed to verify compatibility with the updated upstream packages, but the required dependency artifacts are unavailable in this review snapshot.

No open issues 🎉

What changed in this PR

Updates the .NET AI dependencies used by Squad.Agents.AI to newer minor releases.

Changes:

  • Bumps Microsoft.Agents.AI.GitHub.Copilot from 1.27.0 to 1.28.0.
  • Bumps Microsoft.Extensions.AI from 10.10.0 to 10.11.0.
File Description
src/​Squad.Agents.AI/​Squad.Agents.AI.csproj Updates the two Microsoft package references.

Review effort: Lite (auto)

@github-actions

github-actions Bot commented Nov 9, 2026

Copy link
Copy Markdown
Contributor

🟢 Impact Analysis — PR #2427

Risk tier: 🟢 LOW

📊 Summary

Metric Count
Files changed 1
Files added 0
Files modified 1
Files deleted 0
Modules touched 1

🎯 Risk Factors

  • 1 files changed (≤5 → LOW)
  • 1 module(s) touched (≤1 → LOW)

📦 Modules Affected

root (1 file)
  • src/Squad.Agents.AI/Squad.Agents.AI.csproj

This report is generated automatically for every PR. See #733 for details.

@github-actions

github-actions Bot commented Nov 9, 2026 •

Copy link
Copy Markdown
Contributor

🛫 PR Readiness Check

ℹ️ This comment updates on each push. Last checked: commit 9397a0d

PR Scope: 🔧 Infrastructure

⚠️ 3 item(s) to address before review

Status Check Details
❌ Single commit 4 commits — consider squashing before review
✅ Not in draft Ready for review
❌ Branch up to date dev is 1 commit(s) ahead — rebase recommended
❌ Copilot review No Copilot review yet — it may still be processing
✅ Changeset present No source files changed — changeset not required
✅ Scope clean No .squad/ or docs/proposals/ files
✅ No merge conflicts No merge conflicts
✅ Copilot threads resolved No Copilot review threads
✅ CI passing All checks passing

Files Changed (1 file, +2 −2)

File +/−
src/Squad.Agents.AI/Squad.Agents.AI.csproj +2 −2

Total: +2 −2


This check runs automatically on every push. Fix any ❌ items and push again.
See CONTRIBUTING.md and PR Requirements for details.

@bradygaster
bradygaster merged commit 04a4213 into dev Nov 9, 2026
31 checks passed
@dependabot
dependabot Bot deleted the dependabot/nuget/src/Squad.Agents.AI/microsoft-packages-db7f58546a branch November 9, 2026 17:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants