Skip to content

chore(deps): bump the all group across 1 directory with 10 updates#6

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/all-4ee7069966
Open

chore(deps): bump the all group across 1 directory with 10 updates#6
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/all-4ee7069966

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 3, 2026

Copy link
Copy Markdown

Updates the requirements on agent-framework, agent-framework-devui, agent-framework-orchestrations, fastapi, jsonschema, openapi-spec-validator, pydantic, pytest, python-dotenv and uvicorn to permit the latest version.
Updates agent-framework from 1.0.0rc5 to 1.10.0

Release notes

Sourced from agent-framework's releases.

python-1.10.0

[1.10.0] - 2026-06-30

Added

  • agent-framework-core: Explicitly emit available_resources and available_scripts in skill content (#6694)
  • agent-framework-core: Autolabelling MCP servers based on hints and GitHub MCP server interface labels (#6171)
  • agent-framework-core: create_harness_agent skills_paths accepts str | Path | Sequence[str | Path] | None (#6717)
  • agent-framework-core: Background agent loop resolves provider automatically and adds feedback message builder (#6735)
  • agent-framework-core: Stop swallowing skill script and resource errors so the model can self-correct (#6755)
  • agent-framework-foundry: Add FoundryAgent conversation session helper (#6623)
  • agent-framework-foundry: Add support for Foundry Adaptive evals (#6267)
  • agent-framework-bedrock, agent-framework-gemini: Surface cache and reasoning token counts (#6640)
  • agent-framework-durabletask: Host MAF workflows on a standalone Durable Task worker (#6418)
  • agent-framework-azure-ai-search: Support stable and preview Azure AI Search (Foundry IQ) API versions (#6603)
  • agent-framework-github-copilot: Align function approval to use SDK on_pre_tool_use hook (#6750)

Changed

  • agent-framework-core: [BREAKING — experimental] Refactor FileSkillsSource for depth-based discovery and predicate filters (#6488)
  • agent-framework-core: [BREAKING — experimental] Require approval for file-access tools with read-only auto-approval (#6599)
  • agent-framework-core: [BREAKING — experimental] Integrate looping into HarnessAgent (#6607)
  • agent-framework-core: [BREAKING — experimental] Port FileMemoryProvider and integrate into harness agent (#6547)
  • agent-framework-core: [BREAKING — experimental] Make all SkillsProvider tools require approval by default (#6754)
  • agent-framework-core: [BREAKING — experimental] Improve FileAccess/FileMemory harness providers (surgical edits, read-only tier, consistent naming) (#6801)
  • agent-framework-core: Align serialized tool format to OTel GenAI tool definition format (#6556)
  • agent-framework-foundry-hosting: [BREAKING] Foundry Hosted Agent V2 protocol upgrade (#6811)
  • agent-framework-foundry-hosting: Add MCP as a hard dependency (#6634)
  • agent-framework-purview: Prefer token principal for user identity (#6693)
  • agent-framework-ollama: Convert Pydantic model class response_format to JSON schema in OllamaChatClient (#6782)

Fixed

  • agent-framework-core: Fix background agent telemetry context error (#6764)
  • agent-framework-core: Fix MCP metadata and tool name handling (#6656)
  • agent-framework-core: Ensure spans created inside sync preparations in streaming call are correctly nested (#6552)
  • agent-framework-openai: Preserve OTel parent context for deferred streams (#6709)
  • agent-framework-openai: Fix FunctionShellTool throw and empty streaming shell command (#6763)
  • agent-framework-ag-ui: Fix tool history replay sanitization (#6581)
  • agent-framework-anthropic: Re-role trailing assistant message to user for Anthropic compatibility (#6207)
  • agent-framework-hyperlight: Fix CodeAct span parenting (#6712)
  • agent-framework-hyperlight: Harden output capture against symlinks (#6601)

python-1.9.0

[1.9.0] - 2026-06-18

Added

  • agent-framework-core: Add AgentLoopMiddleware for re-running agents in a loop (#6174)
  • agent-framework-core: Integrate tool approval into the harness agent (#6522)
  • agent-framework-core: Add tool approval middleware (#6414)
  • agent-framework-core: Integrate the shell tool into the harness agent (#6451)
  • agent-framework-core: Capture context provider instructions in agent telemetry (#6515)
  • agent-framework-core, agent-framework-ag-ui: Add opt-in AG-UI thread snapshot persistence and hydration (#6471)

... (truncated)

Commits
  • dd29f9a .NET: Hosted Agent Sample - Toolbox with various Auth (#5777) (#6018)
  • a5f4e00 .NET: Fix .NET Copilot integration tests for SDK v1.0.0 (#6424)
  • 3c0c12c .NET: Update release version for 2026-06-10 release and switch GH.CP Agent to...
  • 8dde9ef Python: HarnessAgent: Disable compaction when max tokens not provided (#6410)
  • 93cbf6b Python: Parse MCP CallToolResult.structuredContent field to prevent tool resu...
  • 9a56bc9 Python: [BREAKING] Add sampling guardrails to MCP tools (#6413)
  • cea83bd .NET: Bump Microsoft.Extensions.AI packages to 10.6.0, align transitive depen...
  • 7ae73a6 Remove broken Atomic Agents docs link (#6442)
  • 3daed11 Python: bump package versions for 1.8.1 release (#6420)
  • 5e09727 .NET: Add Foundry Deployment docs to HA sample READMEs (#6365)
  • Additional commits viewable in compare view

Updates agent-framework-devui from 1.0.0b260319 to 1.0.0b260630

Release notes

Sourced from agent-framework-devui's releases.

python-devui-1.0.0b260414

[devui-1.0.0b260414] - 2026-04-14

Fixed

  • agent-framework-devui: Fix streaming memory growth in DevUI frontend (#5221)

dotnet-1.0.0-preview.260209.1

What's Changed

Full Changelog: microsoft/agent-framework@dotnet-1.0.0-preview.260205.1...dotnet-1.0.0-preview.260209.1

dotnet-1.0.0-preview.260205.1

What's Changed

Full Changelog: microsoft/agent-framework@dotnet-1.0.0-preview.260128.1...dotnet-1.0.0-preview.260205.1

dotnet-1.0.0-preview.260128.1

What's Changed

Full Changelog: microsoft/agent-framework@dotnet-1.0.0-preview.260127.1...dotnet-1.0.0-preview.260128.1

dotnet-1.0.0-preview.260127.1

What's Changed

... (truncated)

Commits

Updates agent-framework-orchestrations from 1.0.0b260319 to 1.0.0

Release notes

Sourced from agent-framework-orchestrations's releases.

dotnet-1.0.0

Changes:

  • c798cb7a2ecd675c898db84931fb700060bceb77 release: Mark Handoff Orchestrations Experimental (#5065)
  • 524c0216e45a1b6e09b3e2816321c23a4ef57962 .NET: Update release versions (#5059)
  • 281661e4097868f75cef5219353b1ddb3106a081 .NET: Remove timeout from InputWait in OffThread execution (#4996)
  • b0613a8cebdee0e67f81acb1553d9cc1f9318c2b .NET: Bump Azure.AI.Projects to 2.0.0 GA (#5060)
  • 79b38040e8193aa9abf06a7b2f31d69f551af0af fix: Update Google.GenAI to verison compatible with M.E.AI 10.4.0+ (#5061)
  • a356a165681d0ecd3583250aeff2159820269ce8 .NET: Remove OpenAIAssistantClientExtensions class (#5058)
  • 628bb1af48ea264d17147f30190c1e745da309f7 .NET: Rename Microsoft.Agents.AI.AzureAI to Microsoft.Agents.AI.Foundry and consolidate FoundryMemory (#5042)
  • 15e435b47237b2d5f246df1cae28701e2d3780fa Fix telemetry sample bug (#5037)
  • 38de9914815833f7e06644c516dfef53853b3785 .NET: Fix RequestInfoEvent lost when resuming workflow from checkpoint (#4955)
  • 25696a72dca5f1c07917076b5ad2d0520f89b3bb .NET: Replace Azure Foundry/Azure AI Foundry with Microsoft Foundry in .NET samples (#5032)
  • 2cb78ea12e20ffcd102b00c0f42a23f53a32df21 fix and unify devui samples (#5025)
  • acaadc9c45702325b0ffb71009f8a558b114a9c9 .NET: Add a verify-samples tool and skill (#5005)
  • 34329840e1db8bb67c5bc010fedca2426dddacae Add Neo4j GraphRAG samples (#4994)
  • 2a8c3e2dcf4b7c90df844c18c5b8190b63e48b82 fixes to azure ai search init, samples (#5021)
  • 9c9d81d8b6bc2189fbfc6241f0cad81ad04c0848 .NET: Improve README: architecture overview, troubleshooting, and sample links (#5002)
  • 47a8a305d216f17255279d0a51a488addbb2e676 Fix environment variable set statement in py DEV_SETUP (#5006)
  • 6e7254bba7abbee9b89b73df869074492f7d63df .NET: [BREAKING] Rename from ServiceStoredSimulatingChatClient to PerServiceCallChatHistoryPersistingChatClient (#4993)
  • 3d09337446c61fc97dbcf1c52dd7abf021c10669 Update project name from 'Semantic Kernel' to 'Agent Framework' (#5001)
  • 3c727b5b71298a0971a97a22500dac65318bccf1 Improve CONTRIBUTING.md with dev setup links and docs guidance (#5000)
  • 3f964c4cdb00766bfdaed24311d67611302399c5 Removing old code-gen docs from dotnet root (#4997)

This list of changes was auto generated.

python-1.0.0

[1.0.0] - 2026-04-02

[!IMPORTANT] For any breaking changes & updates, please view this migration guide.

Added

  • repo: Add PACKAGE_STATUS.md to track lifecycle status of all Python packages (#5062)

Changed

  • agent-framework, agent-framework-core, agent-framework-openai, agent-framework-foundry: [BREAKING] Promote from 1.0.0rc6 to 1.0.0 (Production/Stable) (#5062)
  • agent-framework-core, agent-framework-openai, agent-framework-foundry: [BREAKING] Dependency floors now require released >=1.0.0,<2 packages, breaking compatibility with older RC installs (#5062)
  • agent-framework-a2a, agent-framework-ag-ui, agent-framework-anthropic, agent-framework-azure-ai-search, agent-framework-azure-cosmos, agent-framework-azurefunctions, agent-framework-bedrock, agent-framework-chatkit, agent-framework-claude, agent-framework-copilotstudio, agent-framework-declarative, agent-framework-devui, agent-framework-durabletask, agent-framework-foundry-local, agent-framework-github-copilot, agent-framework-lab, agent-framework-mem0, agent-framework-ollama, agent-framework-orchestrations, agent-framework-purview, agent-framework-redis: Bump beta versions from 1.0.0b260330 to 1.0.0b260402 (#5062)
  • docs: Update install instructions to drop --pre flag for released packages (#5062)

Removed

  • agent-framework-core: [BREAKING] Remove deprecated BaseContextProvider and BaseHistoryProvider aliases (#5062)
  • agent-framework-core: [BREAKING] Remove deprecated text parameter from Message constructor (#5062)

... (truncated)

Commits

Updates fastapi to 0.139.0

Release notes

Sourced from fastapi's releases.

0.139.0

Features

  • ✨ Support dependencies in app.frontend(), e.g. for automatic cookie authentication for the frontend. PR #15908 by @​tiangolo.

Translations

Internal

Commits
  • cecd96d 🔖 Release version 0.139.0 (#15910)
  • aea6609 📝 Update release notes
  • 319be50 ✨ Support dependencies in app.frontend(), e.g. for automatic cookie authent...
  • 66a90f6 📝 Update release notes
  • d30a3eb 👥 Update FastAPI People - Experts (#15909)
  • 122f1b5 📝 Update release notes
  • fd6ece3 👥 Update FastAPI GitHub topic repositories (#15906)
  • ec2a6ad 📝 Update release notes
  • 9d7d7fe 🌐 Update translations for fr (update-outdated) (#15897)
  • 8dc852d 📝 Update release notes
  • Additional commits viewable in compare view

Updates jsonschema to 4.26.0

Release notes

Sourced from jsonschema's releases.

v4.26.0

What's Changed

New Contributors

Full Changelog: python-jsonschema/jsonschema@v4.25.1...v4.26.0

Changelog

Sourced from jsonschema's changelog.

v4.26.0

  • Decrease import time by delaying importing of urllib.request (#1416).

v4.25.1

  • Fix an incorrect required argument in the Validator protocol's type annotations (#1396).

v4.25.0

  • Add support for the iri and iri-reference formats to the format-nongpl extra via the MIT-licensed rfc3987-syntax. They were alread supported by the format extra. (#1388).

v4.24.1

  • Properly escape segments in ValidationError.json_path (#139).

v4.24.0

  • Fix improper handling of unevaluatedProperties in the presence of additionalProperties (#1351).
  • Support for Python 3.8 has been dropped, as it is end-of-life.

v4.23.0

  • Do not reorder dictionaries (schemas, instances) that are printed as part of validation errors.
  • Declare support for Py3.13

v4.22.0

  • Improve best_match (and thereby error messages from jsonschema.validate) in cases where there are multiple sibling errors from applying anyOf / allOf -- i.e. when multiple elements of a JSON array have errors, we now do prefer showing errors from earlier elements rather than simply showing an error for the full array (#1250).
  • (Micro-)optimize equality checks when comparing for JSON Schema equality by first checking for object identity, as == would.

v4.21.1

  • Slightly speed up the contains keyword by removing some unnecessary validator (re-)creation.

v4.21.0

  • Fix the behavior of enum in the presence of 0 or 1 to properly consider True and False unequal (#1208).
  • Special case the error message for {min,max}{Items,Length,Properties} when they're checking for emptiness rather than true length.

... (truncated)

Commits
  • a727743 Add a changelog entry for 4.26.
  • 6d28c13 Update the lockfile.
  • 739499e Update pre-commit hooks.
  • cb2d779 Merge pull request #1443 from python-jsonschema/pre-commit-ci-update-config
  • e6bbbb7 [pre-commit.ci] pre-commit autoupdate
  • d56037a Merge pull request #1442 from python-jsonschema/dependabot/github_actions/ast...
  • e54ce13 Bump astral-sh/setup-uv from 7.1.4 to 7.1.6
  • 1f7c9fb Partially update docs requirements.
  • 241aec9 Merge pull request #1441 from python-jsonschema/pre-commit-ci-update-config
  • 2818efb Apache-2.0 -> nongpl
  • Additional commits viewable in compare view

Updates openapi-spec-validator to 0.9.0

Release notes

Sourced from openapi-spec-validator's releases.

0.9.0

Upgrades

  • Upgrade schema-validator 0.9 #505
  • Upgrade jsonschema-path 0.5 #506

Backward incompatibilities

  • Validation results may change for specifications that previously relied on discriminator-based narrowing or on discriminator mapping resolution errors during validation. #505
Commits
  • 2121137 Version 0.9.0
  • ee4683b Merge pull request #506 from python-openapi/feature/upgrade-jsonschema-path-0.5
  • 692131c Upgrade jsonschema-path 0.5
  • 27cb341 Merge pull request #505 from python-openapi/feature/upgrade-schema-validator-...
  • 4413a52 Upgrade schema-validator 0.9
  • f407ed7 Merge pull request #484 from python-openapi/dependabot/pip/isort-8.0.1
  • 081f3be Bump isort from 8.0.0 to 8.0.1
  • d931faf Merge pull request #497 from python-openapi/dependabot/pip/mypy-1.20.2
  • f8c6261 Bump mypy from 1.19.1 to 2.1.0
  • 1b5dafd Merge pull request #500 from python-openapi/dependabot/pip/urllib3-2.7.0
  • Additional commits viewable in compare view

Updates pydantic to 2.13.4

Release notes

Sourced from pydantic's releases.

v2.13.4 2026-05-06

v2.13.4 (2026-05-06)

What's Changed

Packaging

Fixes

Full Changelog: pydantic/pydantic@v2.13.3...v2.13.4

Changelog

Sourced from pydantic's changelog.

v2.13.4 (2026-05-06)

GitHub release

What's Changed

Packaging

Fixes

v2.13.3 (2026-04-20)

GitHub release

What's Changed

Fixes

v2.13.2 (2026-04-17)

GitHub release

What's Changed

Fixes

  • Fix ValidationInfo.field_name missing with model_validate_json() by @​Viicos in #13084

v2.13.1 (2026-04-15)

GitHub release

What's Changed

Fixes

v2.13.0 (2026-04-13)

GitHub release

The highlights of the v2.13 release are available in the blog post.

... (truncated)

Commits
  • cf67d4b Fix linting
  • f0d8a21 Prepare release v2.13.4
  • 5e3fe1d Check for pydantic tag pattern in CI
  • 7f9edcc Document tagging conventions
  • b46a0c9 Adapt pydantic-core linker flags on macOS
  • 50629c8 Update to PyPy 7.3.22
  • 8522ebb Preserve RootModel core metadata
  • a37f3af Adapt MISSING sentinel test to work with unreleased typing_extensions ver...
  • 909259a Remove Logfire example in documentation
  • 2c4174c Bump libc from 0.2.155 to 0.2.185
  • Additional commits viewable in compare view

Updates pytest to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

  • #14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.
  • #14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @​pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".
  • #14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.
  • #14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.
Commits
  • cf470ec Prepare release version 9.1.1
  • e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
  • 1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
  • 501c4bc Merge pull request #14596 from bluetech/doc-classmethod
  • b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
  • 9a567e0 [automated] Update plugin list (#14617) (#14618)
  • ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
  • 66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
  • 79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
  • 0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
  • Additional commits viewable in compare view

Updates python-dotenv to 1.2.2

Release notes

Sourced from python-dotenv's releases.

v1.2.2

Added

  • Support for Python 3.14, including the free-threaded (3.14t) build. (#)

Changed

  • The dotenv run command now forwards flags directly to the specified command by @​bbc2 in theskumar/python-dotenv#607
  • Improved documentation clarity regarding ov...

    Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 3, 2026
Updates the requirements on [agent-framework](https://github.com/microsoft/agent-framework), [agent-framework-devui](https://github.com/microsoft/agent-framework), [agent-framework-orchestrations](https://github.com/microsoft/agent-framework), [fastapi](https://github.com/fastapi/fastapi), [jsonschema](https://github.com/python-jsonschema/jsonschema), [openapi-spec-validator](https://github.com/python-openapi/openapi-spec-validator), [pydantic](https://github.com/pydantic/pydantic), [pytest](https://github.com/pytest-dev/pytest), [python-dotenv](https://github.com/theskumar/python-dotenv) and [uvicorn](https://github.com/Kludex/uvicorn) to permit the latest version.

Updates `agent-framework` from 1.0.0rc5 to 1.10.0
- [Release notes](https://github.com/microsoft/agent-framework/releases)
- [Commits](microsoft/agent-framework@python-1.0.0rc5...dotnet-1.10.0)

Updates `agent-framework-devui` from 1.0.0b260319 to 1.0.0b260630
- [Release notes](https://github.com/microsoft/agent-framework/releases)
- [Commits](https://github.com/microsoft/agent-framework/commits)

Updates `agent-framework-orchestrations` from 1.0.0b260319 to 1.0.0
- [Release notes](https://github.com/microsoft/agent-framework/releases)
- [Commits](https://github.com/microsoft/agent-framework/commits/dotnet-1.0.0)

Updates `fastapi` to 0.139.0
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.115.0...0.139.0)

Updates `jsonschema` to 4.26.0
- [Release notes](https://github.com/python-jsonschema/jsonschema/releases)
- [Changelog](https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst)
- [Commits](python-jsonschema/jsonschema@v4.23.0...v4.26.0)

Updates `openapi-spec-validator` to 0.9.0
- [Release notes](https://github.com/python-openapi/openapi-spec-validator/releases)
- [Commits](python-openapi/openapi-spec-validator@0.7.0...0.9.0)

Updates `pydantic` to 2.13.4
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.0...v2.13.4)

Updates `pytest` to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.0.0...9.1.1)

Updates `python-dotenv` to 1.2.2
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.0.0...v1.2.2)

Updates `uvicorn` to 0.49.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.30.0...0.49.0)

---
updated-dependencies:
- dependency-name: agent-framework
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: agent-framework-devui
  dependency-version: 1.0.0b260630
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: agent-framework-orchestrations
  dependency-version: 1.0.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: fastapi
  dependency-version: 0.139.0
  dependency-type: direct:production
  dependency-group: all
- dependency-name: jsonschema
  dependency-version: 4.26.0
  dependency-type: direct:production
  dependency-group: all
- dependency-name: openapi-spec-validator
  dependency-version: 0.9.0
  dependency-type: direct:production
  dependency-group: all
- dependency-name: pydantic
  dependency-version: 2.13.4
  dependency-type: direct:production
  dependency-group: all
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:production
  dependency-group: all
- dependency-name: python-dotenv
  dependency-version: 1.2.2
  dependency-type: direct:production
  dependency-group: all
- dependency-name: uvicorn
  dependency-version: 0.49.0
  dependency-type: direct:production
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/all-4ee7069966 branch from 6d59833 to 7efec45 Compare July 3, 2026 16:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants