[dependabot]

Bumps agent-framework-core from 1.19.0 to 1.20.0.

Release notes

Sourced from agent-framework-core's releases.

python-1.20.0

[1.20.0] - 2026-10-02

Added

• agent-framework-foundry-hosting: Host native workflows over Foundry Responses and Foundry Invocations (#8947, #8966)
• agent-framework-duckdb, agent-framework-sql-server, agent-framework-typesafe: Add DuckDB and SQL Server native vector-store connectors and the TypeSafe AI connector (#8675, #8686, #8592)
• agent-framework, agent-framework-core: Add response-stream gates and buffering, session-scoped file-access isolation, an AgentExecutor checkpoint-state TypedDict, and opt-in FunctionInvocationContext injection for skill scripts (#8829, #8542, #8284, #8749)
• agent-framework-foundry, agent-framework-foundry-hosting, agent-framework-openai: Add native computer-use support to Responses clients and Foundry project embeddings (#8751, #8454)
• agent-framework-azure-ai-search: Support knowledge_source_params in AzureAISearchContextProvider (#8673)
• agent-framework-mongodb, samples: Add a MongoDB agent RAG sample (#8725)

Changed

• agent-framework-foundry-hosting: [BREAKING] Redesign Foundry hosting around request-scoped agent factories, persistent sandbox-isolated sessions, parsed and durable Invocations runs, and configurable Responses history, background execution, and options (#8372, #8593, #8741, #8794, #8894)
• agent-framework-core: Harden approval and MCP runtime context handling, treat matched function results as terminal, require session-backed local approvals, and fail closed when approval bindings or agent-tool approvals cannot be resolved (#8579, #8589, #8750, #8780, #8527)
• agent-framework-declarative: [BREAKING - experimental] Align workflow state attribute lookup, bound PowerFx state construction, normalize workflow HTTP request URLs, and preserve expression results in SendActivity output (#8893, #8511, #8588, #8509)
• agent-framework-gemini, agent-framework-core: [BREAKING] Add Gemini Embedding 2 and vector task options, use the GOOGLE_* settings namespace, and support operation-specific embedding options in shared vector APIs (#8798)
• agent-framework-ag-ui, agent-framework-core: Treat matched tool results as terminal; make disconnected AG-UI runs durable, emit RUN_STARTED before execution when IDs are supplied, and isolate custom approval-state namespaces (#8579, #8672, #8807, #8714)
• agent-framework, agent-framework-core: Bound the all integration set to the current release cohort to avoid pip resolver backtracking, and support msgspec 0.22 for Python 3.15 installations
• agent-framework-a2a, agent-framework-anthropic, agent-framework-azure-contentunderstanding, agent-framework-azure-cosmos-memory, agent-framework-bedrock, agent-framework-claude, agent-framework-copilotstudio, agent-framework-declarative, agent-framework-devui, agent-framework-foundry, agent-framework-foundry-hosting, agent-framework-github-copilot, agent-framework-hosting, agent-framework-hosting-responses, agent-framework-hosting-telegram, agent-framework-mem0, agent-framework-purview, agent-framework-redis: Add missing py.typed markers and enforce their presence in package checks (#8823)
• agent-framework-bedrock: Forward Converse guardrail and additional-model-request options, send user images, and stream through ConverseStream (#8680, #8683, #8685)
• agent-framework-chatkit: Support structured input and generated-image conversion (#8843, #8844)
• agent-framework-orchestrations: Create Magentic managers per workflow, optionally disable return-to-previous handoff routing, gate sequential output on approval, and validate generated handoffs before routing (#8581, #8639, #8595, #8587)
• agent-framework-redis: Allow RedisHistoryProvider to borrow a Redis client, clarify context-retrieval scope, and declare the current Python <3.15 limit imposed by redisvl (#8883, #8584)
• agent-framework-postgres, agent-framework-hyperlight: Restore supported Python 3.15 dependency resolution (#8505)
• agent-framework-foundry: Require Azure Monitor OpenTelemetry 1.8.10 for trace propagation and support Azure AI Projects through 2.7 (#8512, #8751)
• agent-framework-hyperlight, agent-framework-monty: Clarify CodeAct guest-package installation and host-network access (#8781)
• tests: Refresh root and Lab development dependencies, type checkers, transitive security dependencies, and lockfiles; require Python 3.15 checks and add bounded Windows 3.14 meta-package install coverage (#8505, #8612, #8650, #8727, #8942, #8945)
• docs, samples: Cross-reference security patterns, clarify file-search retrieval scope, improve local-shell filtering guidance, and correct README instructions (#8726, #8591, #8766, #8822)

Fixed

• agent-framework-openai: Isolate OpenAI metadata defaults from Azure-routed clients (#8969)
• agent-framework-core: Apply MCP security labels before dynamically discovered and progressively disclosed tools become callable (#8972)
• agent-framework-core: Reduce response-stream hot-path overhead and avoid loading tool-approval middleware for agent runs without middleware (#8971)
• agent-framework-core: Preserve functional-workflow replay identity, scope invocation arguments and activity IDs to workflow runs, deduplicate fan-out targets, propagate nested cancellation arguments, and support orchestration checkpoint deserialization (#8887, #8596, #8549, #8739, #8602, #8723)
• agent-framework-core: Preserve repeated history turns, compaction through middleware rewrites, checkpoint dictionary subclasses, response metadata, annotations, native vector keys, integer precision, and boolean set values (#8800, #8671, #8519, #8464, #8701, #8535, #8637, #8681)
• agent-framework-core: Improve MCP skill archive and resource validation, stop failed MCP lifecycle owners, distinguish missing tool arguments from parse failures, settle fatal unknown calls, and omit absent MCP prompt-argument descriptions (#8937, #8690, #8755, #8609, #8640, #8733)
• agent-framework-core: Run response-stream cleanup hooks after transform failures, report unreadable history records and actionable file-write errors, handle concurrent file-store deletion, and preserve Unicode display paths (#8774, #8778, #8710, #8457, #8630)
• agent-framework-core: Coerce typed environment settings, detect postponed middleware annotations, preserve Any compatibility and structured approval output, and expose validated agent lifecycle methods (#8926, #8648, #8660, #8548, #8709)
• agent-framework-core: Preserve usage-detail copies, skip empty prepended instructions, reject ambiguous media inputs and empty mode sets, surface switch-condition errors, validate tool-evaluation keys, and copy only requested vector-search pages (#8613, #8524, #8557, #8536, #8490, #8560, #8544)
• agent-framework-core: Treat missing streamed text deltas as empty and avoid spurious warnings for staged approvals (#8699, #8895)
• agent-framework-core, agent-framework-openai: Close Chat Completions SDK streams deterministically when consumers stop early or stream transforms fail (#8773)
• agent-framework-ag-ui, agent-framework-openai: Preserve Responses API citations through AG-UI, convert image inputs, read tool-call IDs from result events, and allow text events with dictionary JSON schemas (#8948, #8737, #8734, #8604)
• agent-framework-openai: Accept the registered audio/mpeg media type for MP3 input in both OpenAI chat clients (#8787)
• agent-framework-foundry-hosting: Harden Responses request parsing, sandbox isolation, toolbox context and feature headers, cancellation completion, incomplete finish reasons, and OAuth consent-origin handling (#8899, #8717, #8722, #8565, #8478, #8713)
• agent-framework-foundry, agent-framework-openai: Preserve Foundry background local-tool replay and empty hosted-MCP allowlists (#8670, #8576)
• agent-framework-openai, agent-framework-foundry-hosting, agent-framework-tools: Preserve shell outcome fidelity, route unmarked shell calls to registered local executors, and improve shell and file-access validation (#8934, #8720, #8507)
• agent-framework-anthropic, agent-framework-bedrock, agent-framework-gemini, agent-framework-ollama: Send single stop strings as lists; avoid mutating Anthropic caller metadata and response schemas (#8736, #8816, #8735)
• agent-framework-ollama: Preserve zero embedding keep_alive, include tool names on result messages, and reject non-image data instead of sending it as an image (#8928, #8815, #8917)
• agent-framework-declarative: Evaluate autoSend expressions before output, avoid repeated workflow-reference traversal, and include InvokeAzureAgent input arguments in agent text (#8508, #8510, #8547)
• agent-framework-orchestrations: Parse fenced JSON from group-chat managers and preserve multimodal user content during handoff (#8850, #8551)

... (truncated)

Commits

• 575b408 .NET: Update version for 1.20.0 release (#7972)
• 0822dd7 .NET: add public API analyzers (#7935)
• 9ca9571 ci: upload coverage reports to github (#7937)
• 2955888 .NET: Improve Cosmos DB Emulator startup reliability (#3932)
• 8b0aea1 Bump Azure.Core from 1.61.0 to 1.62.0 (#7954)
• 6a0773b Python: preserve Responses replay metadata across AG-UI continuations (#7906)
• 11d628d Python: migrate Mistral integration to official SDK (#7960)
• 018dea5 .NET: docs(decisions): resolve duplicate ADR sequence numbers (0016, 0021, 00...
• d2a934d Python: Fix compaction persistence, thresholds, and observability (#7912)
• 5996105 Python: send a Pydantic response_format to Gemini as response_schema (#7879)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

[Eduard van Valkenburg (eavanvalkenburg)]

Superseded by #9292, which consolidated this dependency update and has now merged.

[dependabot]

Looks like agent-framework-core is up-to-date now, so this is no longer needed.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.