dotnet-$(VersionPrefix)

• 3efb73a Python: add a MongoDB agent RAG sample (#8725) [ #8184, #8421 ]
• 3f1f3b5 .NET: Propagate TextSearchProvider caller cancellation (#8796)
• 238d7e2 .NET: Validate Foundry client headers before transport (#8715)
• c804f32 .NET: [BREAKING] Bump Azure.AI.Projects to 3.0.0-beta.3, OpenAI to 2.14.0, and MEAI to 10.10.1 (#8730) [ dotnet/extensions#7760, dotnet/extensions#7761 ]
• 08eb7d9 Python: stop the MCP lifecycle owner after a failed connect (#8755)
• e9d9962 Python: Keep null fields in negated Azure Cosmos DB eq filters (#8771)
• 20c4045 Python: fail closed when approval binding is unavailable (#8761) (#8780)
• 490e019 Python: fix(foundry_hosting): send Foundry-Features header on toolbox requests (#8722)
• 16aa03b Python: fix(core): allow checkpoint deserialization for orchestrations (#8723)
• c91cf32 Python: docs: cross-reference security patterns from getting-started and provider samples (#8726)
• ce4fcb2 [BREAKING] Python: Isolate Foundry-hosted MAF state by sandbox (#8741)
• 6bb47d4 build(deps): bump the codeql-actions group across 1 directory with 3 updates (#8783)
• 11c45ce Python: Skip slow Windows 3.15 tests and DuckDB source builds (#8792)
• 153aaa1 Python: Isolate Foundry hosting state directories across pytest retries (#8791)
• 789d514 Python: handle concurrent FileSystemAgentFileStore deletion (#8457)
• 529564c Python: Fix middleware type detection with postponed annotations (#8648)
• cc89fe6 Python: return actionable file-access write path errors (#8710)
• fd932dc Python: fix(ag-ui): read tool_call_id on TOOL_CALL_RESULT events (#8734)
• ed745e5 Python: fix(anthropic): copy the response_format schema instead of modifying it (#8735)
• 9acaf82 Python: fix(providers): send a single stop string as a list in Gemini, Bedrock, Anthropic and Ollama (#8736)
• 9bca1ba Python: fix(ag-ui): convert input_image parts to image content (#8737)
• a384143 Python: Deduplicate fan-out selection results so each target runs once (#8739)
• 93cf98a .NET: Update AGUI SDK packages to 1.0.0 (#8769)
• aab2587 Python: fix(core): report unreadable history records on append (#8778) [ #8777 ]
• 2a8daa0 [BREAKING] Python: Persist Foundry invocation sessions (#8593)
• 218700d Python: fix(core): run cleanup hooks when a per-update transform raises in ResponseStream (#8765) (#8774)
• 1092349 Clarify CodeAct guest packages and host network access (#8781)
• 11c0dd7 build(deps-dev): bump the basics group (#8727)
• 7be69fa build(deps): bump huggingface-hub in /python/packages/lab (#8728)
• 273e635 Python: Protect custom AG-UI approval state namespaces (#8714)
• 6f1522a Temporarily skip OpenAI integration tests while the CI API key is invalid (#8767)
• f9310e5 Python: [BREAKING] Modify replayed history treatment for approvals (#8750)
• 2c46deb .NET: Clarify hosting authentication, authorization, and isolation guidance (#8677)
• 024dd99 .NET/Python: Improve MCP skill resource validation (#8690)
• 8ff549d .NET: Correct InvokeAzureAgent response output (#8605)
• 5ee3e87 .NET: Remove redundant NuGet configuration (#8719)
• 7227261 Python: Add DuckDB vector store connector (#8675)
• e2c6df2 Python: Send images in user messages to Bedrock Converse instead of dropping them (#8683)
• 0843a9c Python: Stream Bedrock responses with ConverseStream instead of returning them in one update (#8685)
• f83a892 Python: Add SQL Server native vector store connector (#8686)
• 91fd470 Python: fix(core): keep annotations and metadata when from_dict builds data content (#8701)
• 717557a Python: fix(core): keep booleans distinct from numbers inside sets (#8681)
• 2191c60 Python: Preserve compaction through middleware rewrites (#8671)
• b20927b Python: fix(python): validate settings and expose agent lifecycle methods (#8709)
• 6233788 Python: fix Foundry background local tool replay (#8670)
• 2055e66 Python: settle fatal unknown function calls (#8640)
• 4f4e722 Python: Scope workflow invocation kwargs by executor graph (#8596)
• 7fb41d6 Python: add option to disable return-to-previous handoff routing (#8639)
• 6227372 Set better expecations for contributors (#8706)
• 30b9b8e .NET: Only consume stored approval state when the run succeeds (#8692)
• 834eb7f fix(dotnet): persist function results as user messages (#8655)
• 0bbb724 .NET: [BREAKING] fix: use allow list for configuration keys (#8200)
• a638ce1 .NET: Fix forwarded request-port type validation (#8657)
• 76ccf3c fix(dotnet): forward declarative Azure agent version (#8658)
• f42ff01 fix(python): treat Any as compatible with any target type (#8660)
• 975493a Python: Build(deps-dev): Bump the python-type-checkers group across 1 directory with 2 updates (#8650)
• 23d5d25 Python: Keep null fields out of Azure DocumentDB membership filters (#8654) [ #8653 ]
• e636a72 Python: scope executor activity IDs to workflow runs (#8549)
• 9225e8d Python: Preserve structured output on streaming harness tool-approval path (#7418) (#8548)
• 11b8b80 Use review App permissions for repair reactions (#8669)
• 74e8fe6 Use the workflow token for fix-ci evidence (#8667)
• 736e838 Python: .NET: Keep A2A streaming session state current (#8646)
• 173978e .NET: Add function replace support for function middleware (#8615)
• bf93c53 .NET: [BREAKING] Enforce approval response binding consistently (#8641)
• 646e116 .NET: [BREAKING] Fix DevUI approval continuation (#8423) [ #6006 ]
• 9ad34d9 Python: Support short flags in docker command (#8644)
• 925f4f2 .NET: ci/dotnet vscode configuration (#8537)
• a8781d7 Python: add non-blocking Python 3.15 CI (#8652)
• c760fc6 Python: preserve integer precision in in-memory Hamming search (#8637)
• ec7114f .NET: fix: a bug where invoke function tool could bypass approval (#8403)
• bd379d1 Python: preserve Unicode file store display paths (#8630)
• c5a8c8d fix(core): distinguish absent tool call arguments from parse failures (#8609)
• 13b6ffe Revert "ci: switches to a dedicated solution for dependabot (#8486)" (#8642)
• 334bc31 Python: preserve Redis memory vectorizer data types (#8629)
• 17b349f docs(core): fix positional invocations in detect_media_type_from_base64 docstrings (#8614)
• eb74c8c fix(core): ensure add_usage_details returns copies and filters non-ints consistently (#8613)
• 02bd1ba fix(ag-ui): allow text events when response_format is a json schema dictionary (#8604)
• 7b62670 ci: removes workflow based PR limit to use GitHub native feature (#8603)
• bb53fe1 test(ollama): narrow pytest.raises blocks to wrap only get_response in error tests (#8611)
• 624ae01 Python: skip empty and whitespace-only instructions in prepend (#8524)
• 4f0cc5b Python: [BREAKING] Preserve MCP runtime and approval context (#8589)
• 4583705 Build(deps-dev): Bump prek (#8610)
• 38a5ae2 Build(deps-dev): Bump prek in /python/packages/lab in the basics group (#8612)
• 77a93c8 docs(python): clarify file search retrieval scope (#8591)
• 898f6bf Python: gate sequential output on approval (#8595)
• 9c6fea2 Python: Preserve empty hosted MCP allowlists (#8576)
• 1686dd7 Python: Support Foundry project embeddings (#8454)
• c9d63b5 [BREAKING] Python: Treat matched function results as terminal (#8579)
• 9acc5ab Simplify the DevFlow PR repair deployment (#8626)
• a8acb4e Add the DevFlow PR repair entrypoint (#8622)
• 98a982a ci: switches to a dedicated solution for dependabot (#8486)
• 7d31431 Improve mem0 client encoding (#8600)
• fd31b3e Python: Retain Hyperlight cached tool identities (#8598)
• d91e44e Python: Clarify Redis context retrieval scope (#8584)
• 9dacc49 Python: clarify WorkflowAgent policy configuration (#8585)
• 72d6c2e Python: validate generated handoffs before routing (#8587)
• a192775 Python: [BREAKING] Normalize workflow HTTP request URLs (#8588)
• 3486529 Python: make internal pre-release dependency bounds explicit in release probes (#7927)
• 894b0f6 samples: add McpDocsResearch declarative workflow showcasing agent-level MCP pattern (#6054)
• a1469d1 Python: Don't emit response.completed after a cancelled Foundry hosting run (#8565) [ #8564 ]
• cd27da5 Create Magentic managers per workflow (#8581)
• 70d739d Python: Reject every multi-source combination in detect_media_type_from_base64 (#8557)
• 87d4d0a Python: feat(core): add session-scoped file access isolation (#8542) [ #8539 ]
• 435012e Python: add public TypedDict for AgentExecutor checkpoint state (#8201) (#8284) [ #1 ]
• f80498b Python: mark hosted /responses incomplete on content_filter and length finish reasons (#8478) [ #8475, #7809 ]
• 61d796c Python: accept integer timeouts in A2AAgent (#8516)
• effd4d9 Python: preserve dict subclasses in workflow checkpoints (#8519)
• 09daae8 Python: match User-Agent header case-insensitively (#8521)
• 04efdbf Python: Fail closed on unresolved agent-tool approvals (#8527)
• 08ba0a9 Python: [BREAKING] bound PowerFx state construction (#8511)
• 823e021 Python: preserve native keys in filtered vector delete tools (#8535)
• 2d85a90 Python: preserve AgentResponse metadata in WorkflowAgent streaming (#8464)
• ec69020 Python: Surface switch-case condition errors instead of routing to the default branch (#8490) [ #8489 ]
• 79cf890 Python: Copy only the requested in-memory search page (#8544)
• 669c8b9 Python: fix(orchestrations): preserve user multimodal content during handoff (#8551) [ #7822 ]
• 2565daf Python: Require expected keys in tool argument evaluation (#8560)
• 53e9813 Python: Include InvokeAzureAgent input.arguments in agent text (#7902) (#8547) [ #7907 ]
• 7232569 Python: Reject empty available modes in mode helpers (#8536)
• 0799f6a Python: Improve regex validation for shell and file access (#8507)
• 42c22c0 Bump GitHub.Copilot.SDK to 1.0.1 and forward session config properties (incl. per-session GitHubToken) (#5735) [ #6381 ]

This list of changes was auto generated.