Changes:

• df1cb33 .Net: Bump package version to 1.82.0 (#14721)
• d08a482 Python: Prepare 1.47.0 release and consolidate dependency updates (#14720) [ #14708, #14596, #14597, #14598, #14599, #14600, #14627 ]
• 28c0d60 .Net: Harden structured data mutation boundaries (#14718)
• 1a3ccd8 .Net: Bind validated HTTP addresses to connections (#14719)
• c36f221 Python: Fix OracleCollection search with multiple filters (#14541) [ #14539 ]
• 530f2e8 Python: Use storage_name for hybrid search fields and vector queries (#14684) (#14688)
• 78f6124 Python: close native generators when stream invocations end (#14701)
• 703eb5f Python: Send the NVIDIA nvext setting in extra_body (#14698)
• e68f977 Python: Build an array schema for variadic tuple parameters (#14692)
• 1ae2a39 Python: docs(python): fix broken sample links in agents READMEs (#14703)

Python compatibility

This release requires Python 3.11 or later. Python 3.10 support has been removed. Supported and tested Python versions are 3.11 through 3.14.

Includes consolidated Python dependency updates and the bug fixes listed below.

What's Changed

• .Net: Remove migrated .NET Milvus connector by Adam Sitnik (@adamsitnik) in #14682
• .Net: Bump Aspire.Azure.Search.Documents from 13.4.6 to 13.5.4 by Dependabot (@dependabot)[bot] in #14499
• .Net: Bump Aspire.Hosting.Azure.CognitiveServices from 13.4.6 to 13.5.4 by Dependabot (@dependabot)[bot] in #14501
• .Net: [BREAKING] Consolidate file access by westey (@westey-m) in #14679
• Python: preserve path case in OpenAPI allowed URLs by Eduard van Valkenburg (@eavanvalkenburg) in #14693
• Python: normalize OpenAPI allowlist paths before prefix match by Mangesh Raut (@mangeshraut712) in #14668
• Python: Batch Google AI embedding requests to the 100-input limit by alexcastgonz (@pcbeingused333) in #14700
• Python: fix Mistral AI chat completion crash on unknown finish reasons (model_length) by alexcastgonz (@pcbeingused333) in #14696
• Python: fix(sql_server): validate collection field types before table creation by 哈基米 (@BlueX888) in #14697
• Python: Fix Mistral AI seed setting being rejected by the SDK by alexcastgonz (@pcbeingused333) in #14677
• Python: keep empty tool results through the prompt round trip by Himansh Raj (@iamthehimansh) in #14686
• Python: fix(sqlserver): handle None and boolean expressions in SqlServerCollection lambda parser by MOHAMMED WASIM KHAN (@wasim-builds) in #14687
• Python: Respect optional MCP prompt arguments by Jae Birdsall (@jaeminbird) in #14676
• Python: count Gemini thinking tokens in the usage of Google AI completions by alexcastgonz (@pcbeingused333) in #14671
• Python: fix(python): preserve non-adjacent tool pairs during history truncation by hylin (@linhongyu510) in #14658
• Python: fix(python): wire ChatHistoryReducer into ChatCompletionAgent invocation (#12303) by SparkyPunk (@sparkysolutions10-pixel) in #14607
• Python: Fix Handlebars messages helper ignoring its argument by PRABHU KIRAN VANDRANKI (@VANDRANKI) in #14537
• Python: fix(python/redis): restore vector search broken by redisvl>=0.5 API change and KeyError on include_vectors=False by Patrick Ribbsaeter (@PatrickRibbsaeter) in #14278
• Python: Handle empty chat message function results by Alperen Manas (@lprnmns) in #14375
• Python: Exclude ClassVar annotations from generated JSON schemas by Pushpak Siva Sai (@Pushpak731) in #14528
• Python: Propagate MCP initialization failures by Xiangyu Li (@lxingy3) in #14095
• Python: Fix VolatileMemoryStore.get_nearest_matches on an empty collection by PRABHU KIRAN VANDRANKI (@VANDRANKI) in #14536
• .Net: docs: fix 20 broken sample links in GettingStartedWithAgents README by leom1919 in #14699
• .Net: docs: fix dead links after planner removal and MEVD code migration by leom1919 in #14715
• Python: Drop 3.10 support and expand CI coverage through 3.14 by Eduard van Valkenburg (@eavanvalkenburg) in #14708
• Python: Build an array schema for variadic tuple parameters by Anish Mehta (@anishmehta24) in #14692
• Python: docs(python): fix broken sample links in agents READMEs by Pratik Gandhi (@pratikgx) in #14703
• Python: Send the NVIDIA nvext setting in extra_body by Ali Zulfiqar (@codewithfourtix) in #14698
• Python: Use storage_name for hybrid search fields and vector queries (#14684) by Abhinav Maurya (@Fire162) in #14688
• Python: close native generators when stream invocations end by DiadkoShmek in #14701
• Python: Fix OracleCollection search with multiple filters by PRABHU KIRAN VANDRANKI (@VANDRANKI) in #14541
• .Net: Bind validated HTTP addresses to connections by Roger Barreto (@rogerbarreto) in #14719
• .Net: Harden structured data mutation boundaries by Roger Barreto (@rogerbarreto) in #14718
• Python: Prepare 1.47.0 release and consolidate dependency updates by Eduard van Valkenburg (@eavanvalkenburg) in #14720

New Contributors

• Mangesh Raut (@mangeshraut712) made their first contribution in #14668
• 哈基米 (@BlueX888) made their first contribution in #14697
• Himansh Raj (@iamthehimansh) made their first contribution in #14686
• Jae Birdsall (@jaeminbird) made their first contribution in #14676
• hylin (@linhongyu510) made their first contribution in #14658
• SparkyPunk (@sparkysolutions10-pixel) made their first contribution in #14607
• Patrick Ribbsaeter (@PatrickRibbsaeter) made their first contribution in #14278
• Alperen Manas (@lprnmns) made their first contribution in #14375
• Pushpak Siva Sai (@Pushpak731) made their first contribution in #14528
• Xiangyu Li (@lxingy3) made their first contribution in #14095
• leom1919 made their first contribution in #14699
• Anish Mehta (@anishmehta24) made their first contribution in #14692
• Pratik Gandhi (@pratikgx) made their first contribution in #14703
• Ali Zulfiqar (@codewithfourtix) made their first contribution in #14698
• DiadkoShmek made their first contribution in #14701

Full Changelog: python-1.46.0...python-1.47.0

What's Changed

• .Net: Bound element nesting depth in XML prompt parsing by Roger Barreto (@rogerbarreto) in #14504
• .Net: Improve OpenAPI HTTP connection handling by SergeyMenshykh in #14570
• Python: Avoid logging function argument values by Eduard van Valkenburg (@eavanvalkenburg) in #14574
• .Net: Remove migrated .NET Chroma connector by Adam Sitnik (@adamsitnik) with @Copilot in #14579
• fix(ci): select integration test events explicitly by Vincent Biret (@baywet) in #14603
• Python: fix(python): reject dot-segment remote paths in SessionsPythonTool.upload_file by Winoren (@Winoren) in #14563
• Python: Validate PostgreSQL collection field types by Jose Alvarez (@jpalvarezl) in #14611
• .Net: Reject dot segments in session upload paths by Eduard van Valkenburg (@eavanvalkenburg) in #14646
• Python: docs(python): clarify prompt template trust boundary by Eduard van Valkenburg (@eavanvalkenburg) in #14648
• Python: Clarify tool invocation authorization boundaries by Eduard van Valkenburg (@eavanvalkenburg) in #14647
• fix(ci): match Python coverage reports to their workflow run by Vincent Biret (@baywet) in #14651
• Python: Fix Cosmos hybrid search field validation by Eduard van Valkenburg (@eavanvalkenburg) in #14650
• Python: Preserve configured search filters for invalid overrides by Eduard van Valkenburg (@eavanvalkenburg) in #14645
• Python: fix(python): Pin HttpPlugin requests to validated DNS addresses by Eduard van Valkenburg (@eavanvalkenburg) in #14649
• Python: Bump mcp from 1.28.1 to 1.30.0 in /python/samples/demos/mcp_with_oauth/server by Dependabot (@dependabot)[bot] in #14628
• Python: Bump aiohttp from 3.14.3 to 3.14.4 in /python/samples/demos/mcp_with_oauth by Dependabot (@dependabot)[bot] in #14630
• Bump pyjwt from 2.13.0 to 2.15.0 in /python/samples/demos/mcp_with_oauth by Dependabot (@dependabot)[bot] in #14555
• Bump werkzeug from 3.1.6 to 3.1.9 in /python/samples/demos/mcp_with_oauth by Dependabot (@dependabot)[bot] in #14556
• Python: keep existing summaries after the system message in the summa… by Safal Gupta (@alphasafal) in #14661
• Python: Preserve already-typed native function arguments by Daniel Peng (@original4422) in #14643
• Python: Account for intercepted messages when stopping the runtime by Kevin Dong (@KevinAndrewDong) in #14656
• Python: Release the AgentChat activity signal when a message is rejected by Michael Y (@Michael-Duck) in #14640
• Python: fix: honor include_in_function_choices in Anthropic, Bedrock, Google AI, and Vertex AI tool formatters by MOHAMMED WASIM KHAN (@wasim-builds) in #14625
• Python: fix a None default being reported as a required parameter by Chen Yufeiyang (@feiiiiii5) in #14626
• Python: fix(bedrock): map guardrail_intervened and model_context_window_exceeded stop reasons by alexcastgonz (@pcbeingused333) in #14631
• Python: fix(python): set Mistral metadata usage to CompletionUsage instead of tuple by Hardik K (@hardikkaurani) in #14629
• Python: fix: decode entities once in ChatHistory.from_rendered_prompt by MOHAMMED WASIM KHAN (@wasim-builds) in #14624
• Python: fix(ollama): preserve streamed parallel tool calls by assigning call index by MOHAMMED WASIM KHAN (@wasim-builds) in #14623
• Python: Fix Cosmos MongoDB vector index kind set to similarity code by zhgao in #14620
• Python: fix(anthropic): report token usage as CompletionUsage by alexcastgonz (@pcbeingused333) in #14618
• Python: fix: TimePlugin timeZoneOffset/timeZoneName return actual values (#14583) by Jeevan Babu Gotru (@jeevan1098) in #14604
• Python: fix: write enum value in annotation XML type attribute by CRYPTONIKAV in #14593
• Python: Initialize key mapping for a custom FAISS index by A Aswanth Raj (@aswanth-07) in #14569
• Python: Stop doubling apostrophes in Chroma and Weaviate filter values by PRABHU KIRAN VANDRANKI (@VANDRANKI) in #14560
• Python: Fix Qdrant vector search on qdrant-client 1.16+ by Ishaan (@guptaishaan) in #14562
• Python: Fix in-memory upserts with key storage names by fhgffy in #14548
• Python: feat: support path item parameters and non-method keys in OpenAPI parser by Aagam Shah (@AAGAM17) in #14588
• Python: add typing.Literal support to KernelJsonSchemaBuilder by PRABHU KIRAN VANDRANKI (@VANDRANKI) in #14514
• Python: Cover callable and mixed Postgres search filters by tgolob in #14313
• Python: fix(google_ai): report more Gemini finish reasons as content_filter by alexcastgonz (@pcbeingused333) in #14632
• Python: Fold negative filter literals before vector-store parsers by Caesar / 谢佳辰 · Jiachen Xie (@er-s-an) in #14572
• Python: derive AggregatorTerminationStrategy from TerminationStrategy by Abhinav Maurya (@Fire162) in #14594
• Python: Fix default result_parser arity on kernel function strategies by Li-john1021 in #14595
• Python: fix(python): Fix VolatileMemoryStore.get_nearest_matches on empty collection by Jeevan Babu Gotru (@jeevan1098) in #14565
• Python: update to files.get_content by Jianguo Ma (@majguo) in #13159
• Python: FIX: honor overwrite=False for default execution settings in PromptTemplateConfig by inchang-ing in #14586
• Python: fix(python): preserve Pydantic field descriptions in schemas by S.J. (@cstolting-collab) in #14454
• Pin GitHub Actions to full-length commit SHAs by Dan Fiedler (@danfiedler-msft) in #14568
• Python: fix(python): preserve Annotated metadata in kernel functions by Anvit D. (@AnvitDevadiga) in #14496
• Python: chroma collection_exists catches too much, ensure_collection_deleted too little by Eric Del Orefice (@ericdelorefice) in #14510
• Python: Cosmos NoSQL collection_exists reports a throttled request as a missing container by Eric Del Orefice (@ericdelorefice) in #14515
• Python: Combine multiple InMemoryCollection filters with AND by PRABHU KIRAN VANDRANKI (@VANDRANKI) in #14540
• Python: fix(python): preserve empty tool results in chat history by Reginald Alfret V (@reginaldalfret) in #14472
• Python: fix(python): keep ChatMessageContent.to_prompt a str when encoding is set by Chen Yufeiyang (@feiiiiii5) in #14464
• Python: fix(anthropic): map every Anthropic stop reason instead of raising KeyError by alexcastgonz (@pcbeingused333) in #14616
• Python: await get_nearest_matches in VolatileMemoryStore.get_nearest_match by lsmlhi_25 (@FOWEPJF255) in #14580
• Python: Reject bytes in prompt template argument encoding by Eduard van Valkenburg (@eavanvalkenburg) in #14669
• Python: Bump Python version to 1.46.0 for a release by Eduard van Valkenburg (@eavanvalkenburg) in #14672

New Contributors

• Winoren (@Winoren) made their first contribution in #14563
• Jose Alvarez (@jpalvarezl) made their first contribution in #14611
• Safal Gupta (@alphasafal) made their first contribution in #14661
• Daniel Peng (@original4422) made their first contribution in #14643
• Kevin Dong (@KevinAndrewDong) made their first contribution in #14656
• Michael Y (@Michael-Duck) made their first contribution in #14640
• MOHAMMED WASIM KHAN (@wasim-builds) made their first contribution in #14625
• Chen Yufeiyang (@feiiiiii5) made their first contribution in #14626
• alexcastgonz (@pcbeingused333) made their first contribution in #14631
• Hardik K (@hardikkaurani) made their first contribution in #14629
• zhgao made their first contribution in #14620
• Jeevan Babu Gotru (@jeevan1098) made their first contribution in #14604
• CRYPTONIKAV made their first contribution in #14593
• A Aswanth Raj (@aswanth-07) made their first contribution in #14569
• PRABHU KIRAN VANDRANKI (@VANDRANKI) made their first contribution in https://git...

What's Changed

• remove migrated .NET MEVD providers, add redirect READMEs by Adam Sitnik (@adamsitnik) with @Copilot in #14193
• .Net: Bump CommunityToolkit.VectorData.InMemory and System.Numerics.Tensors by Dependabot (@dependabot)[bot] in #14283
• .Net: Honor FunctionChoiceBehavior function list in Gemini connector by Giles Odigwe (@giles17) in #14183
• .NET: Bump Testcontainers packages by SergeyMenshykh in #14294
• .NET: [Breaking] Update OpenAPI HTTP client defaults by SergeyMenshykh in #14293
• .NET: Bump package version to 1.80.0 by SergeyMenshykh in #14301
• Python: [Breaking] Remove unsupported service auth mode from Copilot Studio agent by SergeyMenshykh in #14306
• Switch failing test to new model. by westey (@westey-m) in #14332
• Pin GitHub Actions to full-length commit SHAs by Dan Fiedler (@danfiedler-msft) in #14307
• Update CommunityToolkit VectorData package names by Adam Sitnik (@adamsitnik) with @Copilot in #14333
• ci: updates aws credential task to fix node20 retirement for GHA by Vincent Biret (@baywet) in #14345
• chore: fixes typos by Vincent Biret (@baywet) in #14343
• tests: refactors redirection tests to avoid race condition by Vincent Biret (@baywet) in #14342
• chore: bumps the OpenAPI dependencies to the latest versions by Vincent Biret (@baywet) in #14340
• ci: removes extraneous nuget.config file by Vincent Biret (@baywet) in #14341
• Python: update MCP OAuth sample dependencies by SergeyMenshykh in #14352
• .NET: Remove retired OpenAI Assistants integration tests by SergeyMenshykh in #14354
• .NET: update SDK to 10.0.303 by SergeyMenshykh in #14353
• Python: Temporarily disable Bedrock integration tests by SergeyMenshykh in #14363
• Python: update dependencies by SergeyMenshykh in #14360
• .NET: Bump package version to 1.80.1 by SergeyMenshykh in #14370
• Fix magentic ledger bug by westey (@westey-m) in #14372
• Update to use ci yaml by Evan Mattson (@moonbox3) in #14384
• Consolidate Dependabot dependency updates by Evan Mattson (@moonbox3) in #14385
• SessionsPythonPlugin bug fix by westey (@westey-m) in #14374
• Python: Add User-Agent to google-genai by Mark McDonald (@markmcd) in #13703
• Replace workflow PAT usage with GitHub App authentication by Evan Mattson (@moonbox3) in #14411
• .NET: Upgrade Git build dependency by SergeyMenshykh in #14477
• Restrict DevFlow PR reviews to internal contributors by SergeyMenshykh in #14503
• .Net: Temporarily skip direct OpenAI integration tests by SergeyMenshykh in #14507
• .Net: Align plugin path validation by SergeyMenshykh in #14476
• .Net: Improve Milvus filtering by westey (@westey-m) in #14498
• Python: Temporarily skip OpenAI integration tests by SergeyMenshykh in #14517
• Python: Make MCP server tool names consistent by SergeyMenshykh in #14506
• Python: Fix postgres filter bug by westey (@westey-m) in #14497
• .Net: Update file handling for FileIOPlugin by SergeyMenshykh in #14525
• Python: pin the validated address for OpenAPI plugin requests by Anton Dziatkovskii (@tonydzi) in #14371
• Python: Encode and validate session download filenames by Eduard van Valkenburg (@eavanvalkenburg) in #14520
• Python: Clarify HttpPlugin defaults by Eduard van Valkenburg (@eavanvalkenburg) in #14495
• Python: .NET/Python: Share HTTP request validation utilities by SergeyMenshykh in #14546
• Python: .NET/Python: Validate CrewAI task identifiers by SergeyMenshykh in #14551
• .Net: Bump package version to 1.81.0 by SergeyMenshykh in #14553
• Python: Consolidate Dependabot dependency updates by Eduard van Valkenburg (@eavanvalkenburg) in #14552
• Python: Bump Python version to 1.45.0 for a release by Eduard van Valkenburg (@eavanvalkenburg) in #14554

New Contributors

• Dan Fiedler (@danfiedler-msft) made their first contribution in #14307
• Mark McDonald (@markmcd) made their first contribution in #13703
• Anton Dziatkovskii (@tonydzi) made their first contribution in #14371

Full Changelog: python-1.44.1...python-1.45.0

Changes:

• bd3150d .Net: Bump package version to 1.81.0 (#14553)
• a205c42 .Net: Update file handling for FileIOPlugin (#14525)
• 58ad1a3 .Net: Improve Milvus filtering (#14498)
• 082700e .Net: Align plugin path validation (#14476)
• c7ba1af .Net: Temporarily skip direct OpenAI integration tests (#14507)
• bb601cc .NET: Upgrade Git build dependency (#14477)
• 872d29e SessionsPythonPlugin bug fix (#14374)

This list of changes was auto generated.

Changes:

• d8ec449 .NET: Bump package version to 1.80.1 (#14370)
• 3438d88 .NET: update SDK to 10.0.303 (#14353)
• 4373361 .NET: Remove retired OpenAI Assistants integration tests (#14354)
• a64827e ci: removes extraneous nuget.config file (#14341)
• a220003 chore: bumps the OpenAPI dependencies to the latest versions (#14340)
• 60264bb tests: refactors redirection tests to avoid race condition (#14342) [ #14340 ]
• b4b0ae7 chore: fixes typos (#14343)

Changes:

• 5e1f1fb .NET: Bump package version to 1.80.0 (#14301)
• 1b7b020 Update OpenAPI HTTP client defaults (#14293)
• c1afc86 .NET: Bump Testcontainers packages (#14294)
• c028a0c .Net: Honor FunctionChoiceBehavior function list in Gemini connector (#14183)
• 1d336b3 .Net: Bump CommunityToolkit.VectorData.InMemory and System.Numerics.Tensors (#14283)
• 76b5464 remove migrated .NET MEVD providers, add redirect READMEs (#14193)

This list of changes was auto generated.

What's Changed

• Encode OpenAPI server variable values by Eduard van Valkenburg (@eavanvalkenburg) in #14146
• Consolidate Dependabot dependency updates by Evan Mattson (@moonbox3) in #14176
• Suppress CodeQL false positive in internal HTTP utility by SergeyMenshykh in #14223
• Python: [Breaking] Add MCP tool approval callback for Azure AI Agent by SergeyMenshykh in #14210
• Consolidate Python and .NET dependency updates by Evan Mattson (@moonbox3) in #14222
• Python: Skip MCP tools and prompts whose normalized names collide by SergeyMenshykh in #14236
• Bump form-data from 4.0.5 to 4.0.6 in ProcessFrameworkWithSignalR React frontend by Giles Odigwe (@giles17) in #14234
• Python: Document x5t certificate thumbprint hashing in Copilot Studio agent by SergeyMenshykh in #14270
• Python: Bump Python version to 1.44.1 for a release by Evan Mattson (@moonbox3) in #14277

Full Changelog: python-1.44.0...python-1.44.1

Changes:

• fb13781 .NET: Bump package version to 1.79.0 (#14275)
• 383d102 Bump .NET SDK from 10.0.301 to 10.0.302 (#14235)
• 362cc2b Bump form-data from 4.0.5 to 4.0.6 in ProcessFrameworkWithSignalR React frontend (#14234)
• e78a8f5 Suppress CodeQL false positive in internal HTTP utility (#14223)
• 441ac99 Update Microsoft.AspNetCore.OData to 9.5.0 (#14224)
• 01e74b0 .NET: Harden dotnet-format workflow shell handling (#14201)

What's Changed

• Python: Bump tornado from 6.5.5 to 6.5.7 in /python by Dependabot (@dependabot)[bot] in #14090
• Python: Bump pyjwt from 2.11.0 to 2.13.0 in /python by Dependabot (@dependabot)[bot] in #14084
• Python: Bump starlette from 0.52.1 to 1.3.1 in /python by Dependabot (@dependabot)[bot] in #14092
• .Net: Bump Aspire.Azure.Search.Documents from 9.5.1 to 13.3.0 by Dependabot (@dependabot)[bot] in #13994
• .Net: Bump Aspire.Hosting.Azure.CognitiveServices from 13.0.0 to 13.3.0 by Dependabot (@dependabot)[bot] in #13996
• .Net: Bump esbuild, @vitejs/plugin-react, vite, and transitive lockfile deps in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend by Dependabot (@dependabot)[bot] in #14070
• Python: Bump bleach from 6.3.0 to 6.4.0 in /python by Dependabot (@dependabot)[bot] in #14089
• Bump pyarrow from 21.0.0 to 23.0.1 in /python by Dependabot (@dependabot)[bot] in #14058
• Python: Bump torch from 2.8.0 to 2.12.0 in /python by Dependabot (@dependabot)[bot] in #14065
• Python: Bump idna from 3.11 to 3.15 in /python by Dependabot (@dependabot)[bot] in #14024
• Bump urllib3 from 2.6.3 to 2.7.0 in /python by Dependabot (@dependabot)[bot] in #13978
• Python: Bump authlib from 1.6.11 to 1.6.12 in /python by Dependabot (@dependabot)[bot] in #14004
• Bump mistune from 3.2.0 to 3.2.1 in /python by Dependabot (@dependabot)[bot] in #13965
• Python: Add OpenAPI server URL validation by Eduard van Valkenburg (@eavanvalkenburg) in #14097
• Python: Adjust request validation by SergeyMenshykh in #14114
• Python: Enforce excluded_functions on MCP tool invocation path by SergeyMenshykh in #14124
• Python: Default MCP SSE server samples to loopback with host validation by SergeyMenshykh in #14127
• Python: OpenApi: Harden operation path handling for consistent selection and request targeting (.Net & Python) by Roger Barreto (@rogerbarreto) in #14140
• Python: [Breaking] Update runtime handling by SergeyMenshykh in #14135
• Python: Bump Python version to 1.44.0 for a release by Evan Mattson (@moonbox3) in #14141

Full Changelog: python-1.43.1...python-1.44.0