Skip to content

SDK GA release — bump version to 1.0.0 and fix NU5104 NuGet packaging errors#243

Merged
sellakumaran merged 7 commits intomainfrom
users/sellak/fix-nu5104-ga
May 1, 2026
Merged

SDK GA release — bump version to 1.0.0 and fix NU5104 NuGet packaging errors#243
sellakumaran merged 7 commits intomainfrom
users/sellak/fix-nu5104-ga

Conversation

@sellakumaran
Copy link
Copy Markdown
Contributor

@sellakumaran sellakumaran commented May 1, 2026

Summary

Prepares the SDK for General Availability (GA) by pinning the version to
1.0.0 and resolving NU5104 NuGet packaging warnings that blocked the
release pipeline.

Changes

1. Version bump to 1.0.0

  • src/version.json: Updated version from 1.01.0.0
  • Fixed 3-part version guarantees every build on main produces exactly
    1.0.0 as the GA NuGet package.
  • After GA ships, bump to 1.1 (2-part) to re-enable commit-height
    auto-increment for subsequent patch releases.

2. OpenTelemetry upgrade (1.11.x → 1.15.x)

Upgraded all OpenTelemetry packages to 1.15.x. This is a stable-to-stable
upgrade and also fixes CVE-2026-42191 / GHSA-4625-4j76-fww9 — a moderate
severity vulnerability in OpenTelemetry.Exporter.OpenTelemetryProtocol
where the disk-retry feature could expose telemetry data or allow blob
injection on multi-user systems when using the default temp directory.

3. Fix NU5104 NuGet packaging warnings

Suppressed via <NoWarn>NU5104</NoWarn> — a stable upgrade either
does not exist or requires untested breaking-API changes; deferring to
post-GA:

Package Version Reason for suppression
ModelContextProtocol.Core 0.2.0-preview.3 Stable 1.2.0 exists but requires MCP 1.x API migration (IMcpClient removed, SseClientTransport replaced); deferring
Microsoft.Extensions.AI.OpenAI 10.0.1-preview.1.25571.5 Stable upgrade requires untested Microsoft.Extensions.AI family realignment; deferring
Azure.AI.OpenAI 2.7.0-beta.2 Stable 2.1.0 is older than the beta in use; downgrading would break APIs
Azure.AI.Agents.Persistent 1.2.0-beta.4 Same as above
Microsoft.Extensions.AI.AzureAIInference 10.0.0-preview.1.25559.3 No stable release exists yet

Behavior After Merge

  • Builds from main1.0.0 (stable, no suffix)
  • Builds from other branches → 1.0.0-beta.N
  • All package versions are identical to pre-GA; only OpenTelemetry is upgraded (CVE fix)

Changed the version number in version.json from "1.0" to "1.0.0" to adopt a more explicit semantic versioning format. This improves clarity and consistency in version tracking.
Copilot AI review requested due to automatic review settings May 1, 2026 02:37
@sellakumaran sellakumaran requested review from a team as code owners May 1, 2026 02:37
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 1, 2026

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Prepares the Agent365 .NET SDK for GA by pinning the build/package version to 1.0.0, updating key dependency versions, and addressing NU5104 packaging warnings (including MCP 1.x API migration changes required by the updated MCP dependency).

Changes:

  • Update NBGV version to 1.0.0 for GA builds.
  • Upgrade centrally-managed package versions (OpenTelemetry, ModelContextProtocol.Core, Microsoft.Extensions.* / AI, OpenAI, System.Text.Json).
  • Suppress NU5104 for projects that must remain on pre-release Azure AI dependencies.

Reviewed changes

Copilot reviewed 7 out of 7 changed files in this pull request and generated 2 comments.

Show a summary per file
File Description
src/version.json Pins SDK version to 1.0.0 for GA.
src/Directory.Packages.props Updates central package versions (OTel, MCP core, AI/OpenAI, etc.).
src/Tooling/Core/Services/McpToolServerConfigurationService.cs Migrates MCP client creation to MCP 1.x APIs (transport + factory changes).
src/Tooling/Extensions/AzureAIFoundry/Microsoft.Agents.A365.Tooling.Extensions.AzureAIFoundry.csproj Adds NU5104 suppression for required beta Azure AI dependency.
src/Tooling/Extensions/AgentFramework/Microsoft.Agents.A365.Tooling.Extensions.AgentFramework.csproj Adds NU5104 suppression for required pre-release dependencies.
src/Observability/Extensions/SemanticKernel/Microsoft.Agents.A365.Observability.Extensions.SemanticKernel.csproj Adds NU5104 suppression due to transitive prerelease Azure AI dependency.
src/Observability/Extensions/OpenAI/Microsoft.Agents.A365.Observability.Extensions.OpenAI.csproj Adds NU5104 suppression for prerelease Azure AI dependency.

Comment thread src/version.json
sellakumaran and others added 2 commits April 30, 2026 19:51
…x csproj formatting

- Bump Microsoft.Extensions.AI from 10.2.0 to 10.5.0 to match
  Microsoft.Extensions.AI.OpenAI 10.5.0; the version mismatch caused
  FunctionInvokingChatClient to reference FunctionApprovalRequestContent
  from an assembly version that did not contain the type.
- Bump Microsoft.Extensions.* core packages from 10.0.5 to 10.0.6,
  required by Microsoft.Extensions.AI 10.5.0.
- Fix indentation in AzureAIFoundry.csproj (spaces → tabs, tags on
  separate lines) per Copilot review comment.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
…ding

Reverts ModelContextProtocol.Core (1.2.0 -> 0.2.0-preview.3),
Microsoft.Extensions.AI.OpenAI (10.5.0 -> 10.0.1-preview.1.25571.5),
Microsoft.Extensions.AI (10.5.0 -> 10.2.0), OpenAI (2.10.0 -> 2.7.0),
and Microsoft.Extensions.* (10.0.6 -> 10.0.5). Also reverts the MCP
1.x API migration in McpToolServerConfigurationService.cs.

Adds NoWarn>NU5104 to Tooling.Core and Tooling.Extensions.SemanticKernel
for ModelContextProtocol.Core 0.2.0-preview.3, matching the same suppress
strategy already used for Azure.AI.OpenAI and Azure.AI.Agents.Persistent.

Upgrading MCP 1.x and the Microsoft.Extensions.AI family introduces
untested runtime changes. Suppressing instead keeps the GA diff minimal
and behaviorally identical to what has been tested.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Copilot AI review requested due to automatic review settings May 1, 2026 03:18
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 8 out of 8 changed files in this pull request and generated 5 comments.

Comment thread src/Directory.Packages.props Outdated
Comment thread src/Directory.Packages.props
Comment thread src/Directory.Packages.props
Comment thread src/Tooling/Core/Microsoft.Agents.A365.Tooling.csproj Outdated
sellakumaran and others added 2 commits April 30, 2026 20:22
These were only required by Microsoft.Extensions.AI.OpenAI 10.5.0 which
was reverted. Reverting to 10.0.4 keeps the GA diff limited to the
OpenTelemetry upgrade and NU5104 suppressions.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
MCP 1.2.0 stable does exist; we are staying on 0.2.0-preview.3 because
upgrading requires an untested MCP 1.x API migration (IMcpClient removed,
SseClientTransport replaced). Deferring to post-GA.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Copilot AI review requested due to automatic review settings May 1, 2026 03:25
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 8 out of 8 changed files in this pull request and generated 4 comments.

Comment thread src/Directory.Packages.props Outdated
Comment thread src/Directory.Packages.props Outdated
Comment thread src/Directory.Packages.props Outdated
A prior sed -i call converted line endings from CRLF to LF, causing the
entire file to appear changed in the diff. Restore from main and reapply
only the OpenTelemetry version bump (7 lines) using the Edit tool so
line endings are preserved.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@sellakumaran sellakumaran enabled auto-merge (squash) May 1, 2026 03:43
@sellakumaran sellakumaran merged commit 6bbbcec into main May 1, 2026
7 checks passed
@sellakumaran sellakumaran deleted the users/sellak/fix-nu5104-ga branch May 1, 2026 04:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants