Releases: microsoft/semantic-kernel
Releases · microsoft/semantic-kernel
Release list
python-1.44.0
What's Changed
- Python: Bump tornado from 6.5.5 to 6.5.7 in /python by @dependabot[bot] in #14090
- Python: Bump pyjwt from 2.11.0 to 2.13.0 in /python by @dependabot[bot] in #14084
- Python: Bump starlette from 0.52.1 to 1.3.1 in /python by @dependabot[bot] in #14092
- .Net: Bump Aspire.Azure.Search.Documents from 9.5.1 to 13.3.0 by @dependabot[bot] in #13994
- .Net: Bump Aspire.Hosting.Azure.CognitiveServices from 13.0.0 to 13.3.0 by @dependabot[bot] in #13996
- .Net: Bump esbuild, @vitejs/plugin-react, vite, and transitive lockfile deps in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend by @dependabot[bot] in #14070
- Python: Bump bleach from 6.3.0 to 6.4.0 in /python by @dependabot[bot] in #14089
- Bump pyarrow from 21.0.0 to 23.0.1 in /python by @dependabot[bot] in #14058
- Python: Bump torch from 2.8.0 to 2.12.0 in /python by @dependabot[bot] in #14065
- Python: Bump idna from 3.11 to 3.15 in /python by @dependabot[bot] in #14024
- Bump urllib3 from 2.6.3 to 2.7.0 in /python by @dependabot[bot] in #13978
- Python: Bump authlib from 1.6.11 to 1.6.12 in /python by @dependabot[bot] in #14004
- Bump mistune from 3.2.0 to 3.2.1 in /python by @dependabot[bot] in #13965
- Python: Add OpenAPI server URL validation by @eavanvalkenburg in #14097
- Python: Adjust request validation by @SergeyMenshykh in #14114
- Python: Enforce excluded_functions on MCP tool invocation path by @SergeyMenshykh in #14124
- Python: Default MCP SSE server samples to loopback with host validation by @SergeyMenshykh in #14127
- Python: OpenApi: Harden operation path handling for consistent selection and request targeting (.Net & Python) by @rogerbarreto in #14140
- Python: [Breaking] Update runtime handling by @SergeyMenshykh in #14135
- Python: Bump Python version to 1.44.0 for a release by @moonbox3 in #14141
Full Changelog: python-1.43.1...python-1.44.0
Contributors
eavanvalkenburg, rogerbarreto, and 3 other contributors
Assets 4
dotnet-1.78.0
Changes:
- 35ba23e .Net: Update package version to 1.78.0 (#14142)
- e6c9673 .Net: Disable automatic HTTP redirects in HttpPlugin and WebFileDownloadPlugin default clients (#14132)
- f25753b Bump Scriban from 7.2.0 to 7.2.5 to fix NU1902 vulnerability (#14133)
- dfc5227 .Net: Update .NET SDK to 10.0.301 (#14119)
- cf9af8b .Net: Bump axios to 1.16.0 and form-data to 4.0.6 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR (#13858)
See More
- e99c633 .Net: Harden file path validation in Core, Document, and Web plugins (#14118)
- 99d1953 Bump axios from 1.13.2 to 1.16.0 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#14044) [ #10795, #10822, #10825, #10729, #7378, #10745, #10810, #10802, #6485, #10680, #6897, #10794, #10800, #6241, #10708, #10819, #7149, #10772, #10806, #7260, #10787, #10724, #7276, #7414, #6389, #6460, #10833, #10588, #7419, #10820, #10791, #10796, #10821, #10782, #10759, #10804, #10785, #10813, #10814, #10790, #10834 ]
- 82f2442 .Net: Update SK to use MEVD packages and move MEVD projects out of main solution (#14117)
- 8ce2bcc .Net: Bump Aspire.Hosting.Azure.CognitiveServices from 13.0.0 to 13.3.0 (#13996)
- 20be253 .Net: Bump esbuild, @vitejs/plugin-react, vite, and transitive lockfile deps in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#14070)
- 445fd0e .Net: Bump Aspire.Azure.Search.Documents from 9.5.1 to 13.3.0 (#13994)
- 367c75f .Net: Bump minimatch from 3.1.2 to 3.1.5 in /dotnet/samples/Demos/ProcessWithCloudEvents/ProcessWithCloudEvents.Client (#13604)
- 6209c77 .Net: Bump @babel/core from 7.26.10 to 7.29.7 in /dotnet/samples/Demos/ProcessWithCloudEvents/ProcessWithCloudEvents.Client (#14083) [ #18014, #18001, #17998, #17992, #17974, #17923, #17931, #17915, #17788, #17739, #17606, #17592, #17589 ]
- 1ad0b75 Bump Aspire.Hosting.AppHost from 13.0.0 to 13.3.0 (#13995)
- 56422ad .Net: Bump follow-redirects from 1.15.11 to 1.16.0 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#13877)
- a5e8f9b .Net: Bump form-data from 4.0.5 to 4.0.6 in /dotnet/samples/Demos/ProcessFrameworkWithSignalR/src/ProcessFramework.Aspire.SignalR.ReactFrontend (#14082)
- 7fd75c3 .Net: fix: prevent duplicate "null" in JSON Schema type arrays for nullable parameters (#13635) [ #13527 ]
- f8c757b Fix MessagePack high severity vulnerability (#14079)
This list of changes was auto generated.
python-1.43.1
What's Changed
- Python: Add function_choice_behavior support to Azure AI and OpenAI Assistant agents by @SergeyMenshykh in #14057
- Fix MessagePack by @SergeyMenshykh in #14079
- .Net: fix: prevent duplicate "null" in JSON Schema type arrays for nullable parameters by @roli-lpci in #13635
- Python: Reject encoded dot-segment paths in OpenAPI plugin (.NET and Python) by @rogerbarreto in #14086
- Python: Bump Python version to 1.43.1 for a release. by @moonbox3 in #14093
Full Changelog: python-1.43.0...python-1.43.1
Contributors
rogerbarreto, moonbox3, and 2 other contributors
Assets 4
python-1.43.0
What's Changed
- Python: Improve function call invocation parameter consistency by @SergeyMenshykh in #14014
- Python: [Breaking] Update OpenAPI document parsing options by @SergeyMenshykh in #14009
- ci: harden Python test coverage workflow by @giles17 in #14026
- Python: Bump Python package version to 1.43.0 for a release by @moonbox3 in #14052
Full Changelog: python-1.42.0...python-1.43.0
Contributors
moonbox3, SergeyMenshykh, and giles17
Assets 4
dotnet-1.77.0
Changes:
- 32e904c .Net: Bump .NET package version to 1.77.0 (#14040)
- 3e180c1 .Net: Enable default-on server URL validation for OpenAPI plugins (#14029)
- fdc6e68 .Net: Semantic Kernel -> Agent Framework - Migration/Samples Update (AF 1.0 Compatible) (#13852)
- 5900032 .Net: Pin SharpCompress 0.48.0 to fix GHSA-6c8g-7p36-r338 (#13977)
This list of changes was auto generated.
python-1.42.0
What's Changed
- Python: Docs: Add Microsoft Agent Framework successor callout to READMEs by @moonbox3 in #13932
- Python: Bump authlib from 1.6.9 to 1.6.11 in /python by @dependabot[bot] in #13880
- Python: Bump onnxruntime from 1.22.1 to 1.24.3 in /python by @dependabot[bot] in #13868
- Python: Bump nbconvert from 7.17.0 to 7.17.1 in /python by @dependabot[bot] in #13906
- Python: Update boto3 requirement from <1.41.0,>=1.36.4 to >=1.36.4,<1.43.0 in /python by @dependabot[bot] in #13867
- Python: Bump python-multipart from 0.0.22 to 0.0.26 in /python by @dependabot[bot] in #13878
- Python: Bump google-cloud-aiplatform from 1.114.0 to 1.133.0 in /python by @dependabot[bot] in #13577
- Update google-genai requirement from ~=1.51.0 to >=1.51,<1.75 in /python by @dependabot[bot] in #13865
- Python: Update pydantic requirement from !=2.10.0,!=2.10.1,!=2.10.2,!=2.10.3,<2.13,>=2.0 to >=2.0,!=2.10.0,!=2.10.1,!=2.10.2,!=2.10.3,<2.14 in /python by @dependabot[bot] in #13864
- Update Kiota packages to fix NU1903 vulnerability by @SergeyMenshykh in #13966
- Python: Percent-encode OpenAPI path params & pin azure-search-documents by @SergeyMenshykh in #13967
- Python: Stop accessing private Azure SDK attributes in Azure AI Search connector by @SergeyMenshykh in #13971
- Python: Harden HttpPlugin request validation by @SergeyMenshykh in #13969
- Python: Improvements for MCP by @moonbox3 in #14003
- Python: Bump Python pkg version to 1.42.0 for a release. by @moonbox3 in #14007
Full Changelog: python-1.41.3...python-1.42.0
Contributors
dependabot, moonbox3, and SergeyMenshykh
Assets 4
dotnet-1.76.0
Changes:
- f2b3c93 .Net: Version bump 1.76.0 (#13972)
- 3dd139b .Net: Harden CloudDrivePlugin defaults and add path validation (#13958)
- 446c2ef .Net: Improve input validation in OpenAPI plugin (#13962)
- b7ae840 .Net: feat(connectors): Support ImageContent in tool/function results (#13431) [ #13430, #13419 ]
- 52d4e5c .Net: Harden gRPC plugin address handling (#13961)
- 73d3c59 Update Kiota packages to fix NU1903 vulnerability (#13966)
- fb10d92 .Net: Bump Snappier to 1.3.1 to fix NU1903 high-severity vulnerability (GHSA-pggp-6c3x-2xmx) (#13960) [ #13431 ]
- 1a5065e .Net: Fix DocumentPlugin path validation order (#13956)
- 2a719ca .Net: Add deny-by-default AllowedUploadDirectories to CloudDrivePlugin (#13953)
- 006a5d9 .Net: fix: fall back to ToString() when logging function results with unregistered types (#13884) [ #13681 ]
See More
* 6e1ab9d .Net: Fix VertexAI global endpoint URI construction (#13620) (#13621) * a1a701d .Net: Fix whitespace formatting in PromptExecutionSettingsExtensions.cs (#13941) * 1369c2e .Net: Add ExtraBody to OpenAIPromptExecutionSettings (#12307) (#13934) [ #11852 ] * a68600a .Net: Update Step04_AzureAIAgent_CodeInterpreter.cs (#13886)dotnet-1.75.0
Changes:
- 27971e1 .Net: Sk release version 2026 04 27 (#13929)
- c8e3cd0 .Net: Upgrade dependencies (#13927)
- 9c62d9d Python: Bump package version to 1.41.3 for a release (#13926)
- 95b1bf8 .Net: Harden AllowedBaseUrls validation in RestApiOperationRunner (#13910)
- 79ef93b Python: Extend InMemoryCollection filter attribute blocklist (#13897)
- 57d9adc Python: Add field and table name escaping for python SqlServer connector (#13893)
- 84ab822 .Net: Validate step types (#13901)
- ba37e8e .Net: Add backslash escaping to redis text search values (#13902)
- bf1b19c .Net: Fix single-quote escaping in OBJECT_ID and dynamic SQL string literals (#13900)
- 1b2f318 .Net: Remove MEVD components from SK-release.slnf (#13892)
See More
- 7e216a0 .Net: Update SQL Server vector search to latest VECTOR_SEARCH() syntax (#13863) [ dotnet/efcore#38075 ]
- 20c91a3 Python: bump py version to 1.41.2 for a release (#13850)
- 12f14bd Python: Update ipykernel requirement from ~=6.29 to >=6.29,<8.0 in /python (#13330) [ #1435, #1451, #1458, #1455, #1462, #1434, #1465, #1463, #1453, #1447, #1448, #1444 ]
- eeeccb4 Python: Respect FunctionChoiceBehavior filters in OpenAI responses agent tools (#13235)
- 2435461 Python: Update pydantic requirement from !=2.10.0,!=2.10.1,!=2.10.2,!=2.10.3,<2.12,>=2.0 to >=2.0,!=2.10.0,!=2.10.1,!=2.10.2,!=2.10.3,<2.13 in /python (#13246) [ #12355, #12370, #12367, #12366, #1826, #1829, #1836, #12338, #12233, #12334, #12336, #12147, #12001, #12344 ]
- e052093 Python: Update pymongo requirement from <4.15,>=4.8.0 to >=4.8.0,<4.16 in /python (#13124) [ #2523, #2522, #2521, #2520, #2518, #2517, #2516, #2513, #2512 ]
- f1b168d Python: Update chromadb requirement from <1.1,>=0.5 to >=0.5,<1.4 in /python (#13331) [ core/chroma#5740, core/chroma#5687, core/chroma#5715, core/chroma#5714, core/chroma#5729, core/chroma#5742, core/chroma#5736, core/chroma#5745, core/chroma#5720, core/chroma#5743, core/chroma#5728, core/chroma#5751, core/chroma#5750, core/chroma#5757, core/chroma#5758, core/chroma#5754, core/chroma#5756, core/chroma#5759, core/chroma#5761, core/chroma#5760, #5760, #5761, #5759, #5756, #5754, #5758, #5757, #5750, #5751, #5 ]
- fdc2067 Python: Update redis[hiredis] requirement from ~=6.0 to >=6,<8 in /python (#13329) [ #3811, #3807, #3797 ]
- 0f322bc Python: Improve prompt-template msg serialize and sample usage (#13738)
- 134e52e Use newest Npgsql when targeting net8.0 and above (#13724) [ #13706 ]
- 5f282a9 Refactor CollectionModel/builder and introduce read-only property interfaces (#13699)
- 9d120bc Python: Bump Python version to 1.41.1 for a release (#13705)
- 41f7b59 Python: fix Google AI/Vertex AI crash on anyOf schema (#12442) (#13624)
- 83ff0a5 Python: fix(google-ai): skip api_key check when use_vertexai is True (#13607) [ #13483 ]
- e0bd528 Python: Default Dapr module allowlist to semantic_kernel prefix (#13596) [ #13499 ]
- 5069b41 Simplify PR parsing for automated review workflow (#13689)
- f034ed1 Python: fix: ChatHistoryTruncationReducer orphans TOOL role messages (#13608) [ #12708 ]
- 6ed2bb2 [MEVD] Fix VectorStoreKeyAttribute.IsAutoGenerated to be usable as a compile-time attribute argument (#13698) [ #13697 ]
- 082e28e .Net: Remove legacy filtering from MEVD providers (#13636) [ #10456 ]
- 0e2e6bd .Net: feat: Add support for dimensions in Vertex AI embedding services (#13612) [ #10489, #12988 ]
This list of changes was auto generated.
dotnet-1.74.1
Changes:
This list of changes was auto generated.
python-1.41.3
What's Changed
- Python: Add field and table name escaping for python SqlServer connector by @westey-m in #13893
- Python: Extend InMemoryCollection filter attribute blocklist by @moonbox3 in #13897
- Python: Bump package version to 1.41.3 for a release by @moonbox3 in #13926
Full Changelog: python-1.41.2...python-1.41.3
Contributors
moonbox3 and westey-m