Releases: microsoft/semantic-kernel
Releases · microsoft/semantic-kernel
Release list
dotnet-1.80.0
Changes:
- 5e1f1fb .NET: Bump package version to 1.80.0 (#14301)
- 1b7b020 Update OpenAPI HTTP client defaults (#14293)
- c1afc86 .NET: Bump Testcontainers packages (#14294)
- c028a0c .Net: Honor FunctionChoiceBehavior function list in Gemini connector (#14183)
- 1d336b3 .Net: Bump CommunityToolkit.VectorData.InMemory and System.Numerics.Tensors (#14283)
- 76b5464 remove migrated .NET MEVD providers, add redirect READMEs (#14193)
This list of changes was auto generated.
python-1.44.1
What's Changed
- Encode OpenAPI server variable values by Eduard van Valkenburg (@eavanvalkenburg) in #14146
- Consolidate Dependabot dependency updates by Evan Mattson (@moonbox3) in #14176
- Suppress CodeQL false positive in internal HTTP utility by SergeyMenshykh in #14223
- Python: [Breaking] Add MCP tool approval callback for Azure AI Agent by SergeyMenshykh in #14210
- Consolidate Python and .NET dependency updates by Evan Mattson (@moonbox3) in #14222
- Python: Skip MCP tools and prompts whose normalized names collide by SergeyMenshykh in #14236
- Bump form-data from 4.0.5 to 4.0.6 in ProcessFrameworkWithSignalR React frontend by Giles Odigwe (@giles17) in #14234
- Python: Document x5t certificate thumbprint hashing in Copilot Studio agent by SergeyMenshykh in #14270
- Python: Bump Python version to 1.44.1 for a release by Evan Mattson (@moonbox3) in #14277
Full Changelog: python-1.44.0...python-1.44.1
Contributors
eavanvalkenburg, moonbox3, and 2 other contributors
Assets 4
dotnet-1.79.0
Changes:
- fb13781 .NET: Bump package version to 1.79.0 (#14275)
- 383d102 Bump .NET SDK from 10.0.301 to 10.0.302 (#14235)
- 362cc2b Bump form-data from 4.0.5 to 4.0.6 in ProcessFrameworkWithSignalR React frontend (#14234)
- e78a8f5 Suppress CodeQL false positive in internal HTTP utility (#14223)
- 441ac99 Update Microsoft.AspNetCore.OData to 9.5.0 (#14224)
- 01e74b0 .NET: Harden dotnet-format workflow shell handling (#14201)
See More
- 7481cd0 Fix cosmosdb vectorstore bug (#14182)
- 61a6b0c Migrate VectorStoreRAG and Concepts samples to CommunityToolkit.VectorData packages (#14170)
- d003eb2 Consolidate Dependabot dependency updates (#14176)
- acb3e35 .Net: [.NET] Add TimeProvider injection to TimePlugin for deterministic testing (#14112) [ #14111 ]
- e15ae16 .Net: Reject mixed-separator UNC paths in file plugins (#14166) [ #14157 ]
- 33a3e55 .Net: [BREAKING] Upgrade Prompty.Core to 2.0.0-beta.3 to resolve NU1903 vulnerability (#14169)
- c781da1 .Net: fix: address three static analysis issues (audio format, text search, KernelProcess) (#13925) [ #13922 ]
- dd026f3 Encode OpenAPI server variable values (#14146)
- 008d40a .Net: feat(ollama): add Think property to OllamaPromptExecutionSettings (#14122) [ #14078 ]
This list of changes was auto generated.
python-1.44.0
What's Changed
- Python: Bump tornado from 6.5.5 to 6.5.7 in /python by Dependabot (@dependabot)[bot] in #14090
- Python: Bump pyjwt from 2.11.0 to 2.13.0 in /python by Dependabot (@dependabot)[bot] in #14084
- Python: Bump starlette from 0.52.1 to 1.3.1 in /python by Dependabot (@dependabot)[bot] in #14092
- .Net: Bump Aspire.Azure.Search.Documents from 9.5.1 to 13.3.0 by Dependabot (@dependabot)[bot] in #13994
- .Net: Bump Aspire.Hosting.Azure.CognitiveServices from 13.0.0 to 13.3.0 by Dependabot (@dependabot)[bot] in #13996
- .Net: Bump esbuild, @vitejs/plugin-react, vite, and transitive lockfile deps in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend by Dependabot (@dependabot)[bot] in #14070
- Python: Bump bleach from 6.3.0 to 6.4.0 in /python by Dependabot (@dependabot)[bot] in #14089
- Bump pyarrow from 21.0.0 to 23.0.1 in /python by Dependabot (@dependabot)[bot] in #14058
- Python: Bump torch from 2.8.0 to 2.12.0 in /python by Dependabot (@dependabot)[bot] in #14065
- Python: Bump idna from 3.11 to 3.15 in /python by Dependabot (@dependabot)[bot] in #14024
- Bump urllib3 from 2.6.3 to 2.7.0 in /python by Dependabot (@dependabot)[bot] in #13978
- Python: Bump authlib from 1.6.11 to 1.6.12 in /python by Dependabot (@dependabot)[bot] in #14004
- Bump mistune from 3.2.0 to 3.2.1 in /python by Dependabot (@dependabot)[bot] in #13965
- Python: Add OpenAPI server URL validation by Eduard van Valkenburg (@eavanvalkenburg) in #14097
- Python: Adjust request validation by SergeyMenshykh in #14114
- Python: Enforce excluded_functions on MCP tool invocation path by SergeyMenshykh in #14124
- Python: Default MCP SSE server samples to loopback with host validation by SergeyMenshykh in #14127
- Python: OpenApi: Harden operation path handling for consistent selection and request targeting (.Net & Python) by Roger Barreto (@rogerbarreto) in #14140
- Python: [Breaking] Update runtime handling by SergeyMenshykh in #14135
- Python: Bump Python version to 1.44.0 for a release by Evan Mattson (@moonbox3) in #14141
Full Changelog: python-1.43.1...python-1.44.0
Contributors
eavanvalkenburg, rogerbarreto, and 3 other contributors
Assets 4
dotnet-1.78.0
Changes:
- 35ba23e .Net: Update package version to 1.78.0 (#14142)
- e6c9673 .Net: Disable automatic HTTP redirects in HttpPlugin and WebFileDownloadPlugin default clients (#14132)
- f25753b Bump Scriban from 7.2.0 to 7.2.5 to fix NU1902 vulnerability (#14133)
- dfc5227 .Net: Update .NET SDK to 10.0.301 (#14119)
- cf9af8b .Net: Bump axios to 1.16.0 and form-data to 4.0.6 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR (#13858)
See More
- e99c633 .Net: Harden file path validation in Core, Document, and Web plugins (#14118)
- 99d1953 Bump axios from 1.13.2 to 1.16.0 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#14044) [ #10795, #10822, #10825, #10729, #7378, #10745, #10810, #10802, #6485, #10680, #6897, #10794, #10800, #6241, #10708, #10819, #7149, #10772, #10806, #7260, #10787, #10724, #7276, #7414, #6389, #6460, #10833, #10588, #7419, #10820, #10791, #10796, #10821, #10782, #10759, #10804, #10785, #10813, #10814, #10790, #10834 ]
- 82f2442 .Net: Update SK to use MEVD packages and move MEVD projects out of main solution (#14117)
- 8ce2bcc .Net: Bump Aspire.Hosting.Azure.CognitiveServices from 13.0.0 to 13.3.0 (#13996)
- 20be253 .Net: Bump esbuild, @vitejs/plugin-react, vite, and transitive lockfile deps in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#14070)
- 445fd0e .Net: Bump Aspire.Azure.Search.Documents from 9.5.1 to 13.3.0 (#13994)
- 367c75f .Net: Bump minimatch from 3.1.2 to 3.1.5 in /dotnet/samples/Demos/ProcessWithCloudEvents/ProcessWithCloudEvents.Client (#13604)
- 6209c77 .Net: Bump @babel/core from 7.26.10 to 7.29.7 in /dotnet/samples/Demos/ProcessWithCloudEvents/ProcessWithCloudEvents.Client (#14083) [ #18014, #18001, #17998, #17992, #17974, #17923, #17931, #17915, #17788, #17739, #17606, #17592, #17589 ]
- 1ad0b75 Bump Aspire.Hosting.AppHost from 13.0.0 to 13.3.0 (#13995)
- 56422ad .Net: Bump follow-redirects from 1.15.11 to 1.16.0 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#13877)
- a5e8f9b .Net: Bump form-data from 4.0.5 to 4.0.6 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#14082)
- 7fd75c3 .Net: fix: prevent duplicate "null" in JSON Schema type arrays for nullable parameters (#13635) [ #13527 ]
- f8c757b Fix MessagePack high severity vulnerability (#14079)
This list of changes was auto generated.
python-1.43.1
What's Changed
- Python: Add function_choice_behavior support to Azure AI and OpenAI Assistant agents by SergeyMenshykh in #14057
- Fix MessagePack by SergeyMenshykh in #14079
- .Net: fix: prevent duplicate "null" in JSON Schema type arrays for nullable parameters by Roli Bosch (@roli-lpci) in #13635
- Python: Reject encoded dot-segment paths in OpenAPI plugin (.NET and Python) by Roger Barreto (@rogerbarreto) in #14086
- Python: Bump Python version to 1.43.1 for a release. by Evan Mattson (@moonbox3) in #14093
Full Changelog: python-1.43.0...python-1.43.1
Contributors
rogerbarreto, moonbox3, and 2 other contributors
Assets 4
python-1.43.0
What's Changed
- Python: Improve function call invocation parameter consistency by SergeyMenshykh in #14014
- Python: [Breaking] Update OpenAPI document parsing options by SergeyMenshykh in #14009
- ci: harden Python test coverage workflow by Giles Odigwe (@giles17) in #14026
- Python: Bump Python package version to 1.43.0 for a release by Evan Mattson (@moonbox3) in #14052
Full Changelog: python-1.42.0...python-1.43.0
Contributors
moonbox3, SergeyMenshykh, and giles17
Assets 4
dotnet-1.77.0
Changes:
- 32e904c .Net: Bump .NET package version to 1.77.0 (#14040)
- 3e180c1 .Net: Enable default-on server URL validation for OpenAPI plugins (#14029)
- fdc6e68 .Net: Semantic Kernel -> Agent Framework - Migration/Samples Update (AF 1.0 Compatible) (#13852)
- 5900032 .Net: Pin SharpCompress 0.48.0 to fix GHSA-6c8g-7p36-r338 (#13977)
This list of changes was auto generated.
python-1.42.0
What's Changed
- Python: Docs: Add Microsoft Agent Framework successor callout to READMEs by Evan Mattson (@moonbox3) in #13932
- Python: Bump authlib from 1.6.9 to 1.6.11 in /python by Dependabot (@dependabot)[bot] in #13880
- Python: Bump onnxruntime from 1.22.1 to 1.24.3 in /python by Dependabot (@dependabot)[bot] in #13868
- Python: Bump nbconvert from 7.17.0 to 7.17.1 in /python by Dependabot (@dependabot)[bot] in #13906
- Python: Update boto3 requirement from <1.41.0,>=1.36.4 to >=1.36.4,<1.43.0 in /python by Dependabot (@dependabot)[bot] in #13867
- Python: Bump python-multipart from 0.0.22 to 0.0.26 in /python by Dependabot (@dependabot)[bot] in #13878
- Python: Bump google-cloud-aiplatform from 1.114.0 to 1.133.0 in /python by Dependabot (@dependabot)[bot] in #13577
- Update google-genai requirement from ~=1.51.0 to >=1.51,<1.75 in /python by Dependabot (@dependabot)[bot] in #13865
- Python: Update pydantic requirement from !=2.10.0,!=2.10.1,!=2.10.2,!=2.10.3,<2.13,>=2.0 to >=2.0,!=2.10.0,!=2.10.1,!=2.10.2,!=2.10.3,<2.14 in /python by Dependabot (@dependabot)[bot] in #13864
- Update Kiota packages to fix NU1903 vulnerability by SergeyMenshykh in #13966
- Python: Percent-encode OpenAPI path params & pin azure-search-documents by SergeyMenshykh in #13967
- Python: Stop accessing private Azure SDK attributes in Azure AI Search connector by SergeyMenshykh in #13971
- Python: Harden HttpPlugin request validation by SergeyMenshykh in #13969
- Python: Improvements for MCP by Evan Mattson (@moonbox3) in #14003
- Python: Bump Python pkg version to 1.42.0 for a release. by Evan Mattson (@moonbox3) in #14007
Full Changelog: python-1.41.3...python-1.42.0
Contributors
dependabot, moonbox3, and SergeyMenshykh
Assets 4
dotnet-1.76.0
Changes:
- f2b3c93 .Net: Version bump 1.76.0 (#13972)
- 3dd139b .Net: Harden CloudDrivePlugin defaults and add path validation (#13958)
- 446c2ef .Net: Improve input validation in OpenAPI plugin (#13962)
- b7ae840 .Net: feat(connectors): Support ImageContent in tool/function results (#13431) [ #13430, #13419 ]
- 52d4e5c .Net: Harden gRPC plugin address handling (#13961)
- 73d3c59 Update Kiota packages to fix NU1903 vulnerability (#13966)
- fb10d92 .Net: Bump Snappier to 1.3.1 to fix NU1903 high-severity vulnerability (GHSA-pggp-6c3x-2xmx) (#13960) [ #13431 ]
- 1a5065e .Net: Fix DocumentPlugin path validation order (#13956)
- 2a719ca .Net: Add deny-by-default AllowedUploadDirectories to CloudDrivePlugin (#13953)
- 006a5d9 .Net: fix: fall back to ToString() when logging function results with unregistered types (#13884) [ #13681 ]