[dependabot]

Bumps the python-deps group in /src/python with 3 updates: agent-framework-core, agent-framework-openai and agent-framework-foundry.

Updates agent-framework-core from 1.9.0 to 1.21.0

Release notes

Sourced from agent-framework-core's releases.

python-1.21.0

[1.21.0] - 2026-10-08

Added

• agent-framework, agent-framework-core, agent-framework-purview: Add tool-result standing guidance, expose rewritten variable-expansion arguments, and support full-buffer Purview policy evaluation for streamed responses (#8784, #8506, #8702)
• agent-framework-openai: Add the maximum reasoning-effort option (#8857)
• agent-framework-oracle: Add the alpha Oracle native vector-store connector (#8676)
• samples: Demonstrate group-chat response filtering and expand the get-started sample progression (#9005, #9133)

Changed

• agent-framework-core, agent-framework-foundry, agent-framework-github-copilot: Isolate provider-owned service session state when agents are invoked as tools (#8853)
• agent-framework-anthropic: Update the Anthropic SDK to 1.11 and adapt Anthropic and Bedrock client behavior (#9119)
• agent-framework-github-copilot: Update the GitHub Copilot SDK to 1.0.16 (#9135)
• agent-framework-devui: Update source-map-js, Radix UI Scroll Area, tailwind-merge, Tailwind CSS and its Vite plugin, and patch brace-expansion 1.x (#9104, #9154, #9155, #9156, #8888)
• agent-framework-azure-contentunderstanding, agent-framework-azure-cosmos-memory, samples: Normalize Foundry project endpoint configuration and examples (#9070)
• agent-framework-foundry: Clarify Foundry agent-tool ownership and lifecycle behavior (#8852)
• agent-framework-foundry-hosting: Warn against hosting a WorkflowAgent through the agent= shortcut (#9146)
• agent-framework-hyperlight, agent-framework-monty: Warn when CodeAct tools cannot support FIDES security enforcement (#9175)
• agent-framework-hosting: Persist the session in the hosting quickstart (#9030)
• docs: Add the AI-assisted contribution policy and issue-first contribution workflow (#9134)
• samples: Update multidict and source-map-js lockfiles and make file-access samples type-check on Windows (#9105, #9145, #9161)
• tests: Update Python GitHub Actions dependencies (#9038, #9039, #9158)
• tests: Isolate the mixed-middleware warning assertion (#9001)
• tests, samples: Refresh Python development dependencies and type-checker compatibility (#9190)

Fixed

• agent-framework-core: Run local sibling tools in declaration-only mixed batches, serialize shared file edits, correct data URI validation and media detection, warn when streamed result gates lack buffering, and handle flat function mappings in progressive tool-name checks (#9050, #9032, #8918, #9029, #9117)
• agent-framework-ag-ui, agent-framework-core: Close delegated provider streams when public streams are released while preserving primary failures during cleanup (#9100)
• agent-framework-declarative: Preserve falsy values returned by Power Fx Search() (#8974)
• agent-framework-devui: Page checkpoint item listings and scope function approvals to their conversations (#9126, #9180)
• agent-framework-gemini, agent-framework-ollama: Close SDK streams when consumers stop early (#9144)
• agent-framework-hosting: Avoid retaining per-session locks after runs complete (#9172)
• agent-framework-hosting-responses: Parse input messages that omit the optional type field (#9124)
• agent-framework-openai: Preserve streamed log probabilities across empty chunks (#8997)
• agent-framework-orchestrations: Reject unknown group-chat participants and sanitize generated handoff tool names (#9026, #9035)
• agent-framework-foundry-hosting: Preserve Foundry Toolbox container-file citations and refresh stale Toolbox call IDs (#9055, #9059)
• agent-framework-typesafe: Honor proxy environment variables in connector-owned clients (#8984)
• agent-framework-bedrock: Preserve extended-thinking reasoning content across tool calls (#8936)
• agent-framework-tools: Preserve table-formatted output in persistent PowerShell sessions (#9043)

Full Changelog: microsoft/agent-framework@python-1.20.0...python-1.21.0

python-1.20.0

[1.20.0] - 2026-10-02

Added

• agent-framework-foundry-hosting: Host native workflows over Foundry Responses and Foundry Invocations (#8947, #8966)
• agent-framework-duckdb, agent-framework-sql-server, agent-framework-typesafe: Add DuckDB and SQL Server native vector-store connectors and the TypeSafe AI connector (#8675, #8686, #8592)
• agent-framework, agent-framework-core: Add response-stream gates and buffering, session-scoped file-access isolation, an AgentExecutor checkpoint-state TypedDict, and opt-in FunctionInvocationContext injection for skill scripts (#8829, #8542, #8284, #8749)

... (truncated)

Commits

• c47da07 Python: scope Secure MCP URL headers to origin (#8285)
• e0162ab .NET: Canonicalize Hyperlight sandbox fingerprints (#8295)
• 119c795 Python: [BREAKING] Scope Redis history storage keys (#8236)
• 2497597 test(python): validate local shell approval binding (#8233)
• 595aa8a Python: Isolate Anthropic request parsing state (#8237)
• c1f33df Simplify CODEOWNERS rules (#8296)
• 4e02083 .NET: Update version for 1.21.0 release (#8297)
• c744b16 .Net + Python: [BREAKING] Limit MCP skill archives to the ZIP format (#8290)
• e1c849c .NET: deps/ai extensions (#8270)
• e4309e5 .NET: Add Foundry hosted session client samples (#8227)
• Additional commits viewable in compare view

Updates agent-framework-openai from 1.8.2 to 1.16.0

Release notes

Sourced from agent-framework-openai's releases.

python-1.16.0

[1.16.0] - 2026-08-27

Added

• agent-framework-core: Add configurable timeouts for waiting on the first background-agent task completion (#7908)
• agent-framework-core: Allow programmatic OpenTelemetry service metadata, resource attributes, and OTLP exporter configuration (#7703)

Changed

• agent-framework-foundry-hosting: Update Agent Server dependencies and expose parent FoundryToolbox constructor options (#7921)
• samples: Apply ChatKit attachment lifecycle checks consistently in the end-to-end sample (#7846)

Fixed

• agent-framework-ag-ui, agent-framework-foundry-hosting: Preserve backend-owned service-session snapshots and validate incremental provider continuation input (#7770)
• agent-framework-anthropic, agent-framework-mistral: Preserve unmapped provider finish reasons (#7850)
• agent-framework-azure-ai-search: Preserve the kinds of heterogeneous knowledge sources (#7875)
• agent-framework-core: Prevent workflow checkpoints from being mutated outside storage implementations (#7847)
• agent-framework-core: Discard unsafe Content fields during deep copy (#7903)
• agent-framework-core: Avoid mutating caller input in SerializationMixin.from_dict() (#7901)
• agent-framework-core: Keep the private agent-loop iteration marker out of provider SDK requests (#7860)
• agent-framework-gemini: Preserve unmapped finish reasons and attach usage details to the correct response (#7837)
• agent-framework-openai: Preserve streaming when GenAI instrumentation replaces the raw SDK response (#7705)

python-1.15.0

[1.15.0] - 2026-08-21

Added

• agent-framework-ag-ui, agent-framework-openai: Add optional A2UI support for agent-generated interfaces and preserve streaming tool-call indices for A2UI consumers (#7423)
• agent-framework-core: Add MiddlewareFailure as a first-class fatal signal for function middleware (#7562)
• agent-framework-core, agent-framework-azure-cosmos: Add a process-wide workflow checkpoint type registry, register Cosmos checkpoint state types, and declare the compatibility dependency required by the supported Cosmos SDK floor (#7636)
• agent-framework-core, agent-framework-foundry-hosting: Add steering, retry, and recovery support for resilient Foundry Hosted Agents, with long-running workflow samples (#7670)
• samples: Add the production-ready installment of the build-your-own-claw harness sample (#7698)

Changed

• agent-framework-ag-ui, agent-framework-core: [BREAKING] Consolidate OpenTelemetry GenAI semantic-convention support around stable and experimental modes with explicit message-event controls (#7673)
• agent-framework-ag-ui: Align run continuity and avoid emitting unchanged predictive state snapshots (#7662, #7766)
• agent-framework-core: Defer turn-scoped after_run context providers to the agent-loop boundary (#7289)
• agent-framework-ag-ui, agent-framework-core, agent-framework-declarative: Persist approval state and distinguish absent values from falsey approval data (#7631)
• agent-framework-devui: Forward function_invocation_kwargs through DevUI agent runs (#7779)
• agent-framework-core, samples: Clarify skill script arguments and MCP tool argument-filtering behavior (#7695, #7801)
• tests: Update uv, Ruff, mypy, ty, Flit, and the root build-system dependency range (#7644, #7645, #7780, #7781, #7782, #7783, #7784)
• docs: Clarify PR review resolution and pin the Agent Lightning installation documentation link (#7746, #7693)

Fixed

• agent-framework-a2a, agent-framework-core, agent-framework-orchestrations: Preserve and normalize A2A inputs when used through orchestrations (#7761)
• agent-framework-ag-ui: Preserve tool-message IDs, URL-source attachments, and JSON workflow resume payloads (#7510, #7655, #7684)
• agent-framework-anthropic, agent-framework-core: Preserve structured instructions when merging chat options (#7730)
• agent-framework-core: Preserve all fan-in trace contexts and restrict workflow type deserialization (#7557, #7500)
• agent-framework-core: Avoid remote MCP tool-name shadowing while retaining the documented argument allowlist (#7799)
• agent-framework-core: Always emit an arguments field for zero-argument tool calls in Foundry evaluations (#7734)
• agent-framework-core, agent-framework-github-copilot: Forward telemetry configuration to the GitHub Copilot client (#7625)

... (truncated)

Commits

• See full diff in compare view

Updates agent-framework-foundry from 1.8.2 to 1.14.1

Release notes

Sourced from agent-framework-foundry's releases.

python-1.14.0

[1.14.0] - 2026-08-13

Added

• agent-framework-core, agent-framework-mistral: Add a Mistral chat client with native chat, streaming, tools, structured output, and embeddings support (#7392)
• agent-framework-core: Add experimental AGENT-HOOKS-0.1 enforcement middleware behind the opt-in agent-hooks extra (#7515)
• agent-framework-openai: Add request preparation and response parsing hooks to OpenAIChatCompletionClient (#7028)
• agent-framework-ag-ui: Add workflow checkpoint creation and resume support to AgentFrameworkWorkflow (#6646)
• agent-framework-core: Add BackgroundAgentsProvider.release_session() for safely cancelling work and releasing per-session runtime state (#7450)
• agent-framework-foundry-hosting: Add provider-based Foundry state stores for agent sessions, checkpoints, and function approvals (#7533)
• agent-framework-foundry: Export the Foundry hosted-agent session-state key used for service session continuity (#7608)
• agent-framework-orchestrations: Expose the Magentic orchestrator manager name as MagenticOrchestrator.MANAGER_NAME (#7350)
• agent-framework-gemini: Surface Gemini thought summaries as reasoning content (#7488)
• samples: Add a locally hosted Responses sample for the agent harness (#7010)

Changed

• agent-framework, agent-framework-core, agent-framework-azurefunctions, agent-framework-durabletask: Move the Durable Task and Azure Functions integrations to the Durable Agent Framework extension repository; core continues to re-export their public symbols and install their independently published packages through the all extra (#7465)
• agent-framework-core: [BREAKING — experimental] Require functional workflow definitions to be built into stateful workflow instances before running or adapting them as agents (#7521)
• agent-framework-foundry-hosting: [BREAKING — beta] Migrate Foundry Hosted Agents to the Agent Server Responses 2.x storage model (#7533)
• agent-framework-foundry-hosting, agent-framework-azure-contentunderstanding: Update Azure Agent Server dependencies to the 2.1 beta line and adapt request and storage handling (#7621)
• agent-framework-foundry: Make encrypted reasoning opt-in for Foundry chat requests (#7536)
• agent-framework-mem0: Separate Mem0 storage and search scopes (#7531)
• agent-framework-ag-ui: Consolidate thread-snapshot ownership and remove unused internal orchestration helpers (#7426, #7479)
• agent-framework-devui: Update frontend transitive dependencies (#7493, #7554)
• agent-framework-mistral, agent-framework-ollama: Expand the supported uv_build version range (#7445)
• tests: Update Python development tools and improve sample validation with deterministic replay (#7350, #7445, #7541, #7545)
• samples: Update frontend dependencies and add a Foundry Hosted Agents custom-storage sample (#7529, #7621)

Fixed

• agent-framework-core: Ignore excluded tool results during compaction (#7391)
• agent-framework-core: Bound tool-result compaction summaries before provider calls (#7396)
• agent-framework-core: Report evaluator results with zero checks correctly (#7399)
• agent-framework-core: Reject Windows junctions while discovering and accessing skills (#7507)
• agent-framework-core: Warn when advertised MCP archives are rejected (#7622)
• agent-framework-core: Prevent streaming transcript duplication with message injection and per-service-call persistence (#7605)
• agent-framework-ag-ui, agent-framework-core: Preserve conversation correlation across AG-UI runs (#7430)
• agent-framework-ag-ui: Preserve approval resume semantics at the protocol boundary (#7480)
• agent-framework-ag-ui: Make approval lifecycle, interruption recovery, and replay behavior occurrence-safe (#7594)
• agent-framework-azure-ai-search: Forward query-source identity to Azure AI Search (#7278)
• agent-framework-azure-cosmos-memory: Call the renamed Cosmos toolkit registration API (#7635)
• agent-framework-claude: Avoid reusing one Claude SDK client across distinct fresh sessions (#7404)
• agent-framework-copilotstudio: Handle large activities without line-length failures, update the Copilot Studio client dependency, and declare its required HTTP and authentication runtime dependencies (#7417)
• agent-framework-declarative: Preserve falsey EditTableV2 items and robustly extract JSON from declarative workflow responses (#7380, #7550)
• agent-framework-foundry: Preserve Foundry hosted-agent session IDs independently from conversation continuation IDs (#7608)
• agent-framework-gemini: Restore thought_signature values during approval replay (#7546)
• agent-framework-github-copilot: Scope under-specified approve-for-session decisions to the current tool and align package metadata with the SDK's Python 3.11 minimum (#7607)
• agent-framework-mistral: Preserve prompt-cache usage details (#7597)
• agent-framework-openai: Prevent orphaned local approval responses and safely ignore non-string Chat Completions content (#7462, #7028)
• agent-framework-redis: Honor a max_messages retention limit of zero (#7470)

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions