[dependabot]

Bumps the agent-framework group in /python/packages/lab with 1 update: agent-framework-core.

Updates agent-framework-core from 1.22.0 to 1.23.0

Release notes

Sourced from agent-framework-core's releases.

python-1.23.0

[1.23.0] - 2026-10-22

Added

• agent-framework-a2a: Add allowlisted forwarding of function-invocation and client arguments from A2A request metadata (#9193)
• agent-framework-core, agent-framework-orchestrations: Add an opt-in synthetic trailing user turn for providers that return empty text after assistant-ending prompts (#8779)

Changed

• agent-framework, agent-framework-ag-ui, agent-framework-core, agent-framework-declarative, agent-framework-foundry-hosting, agent-framework-hosting-mcp, agent-framework-lab: [BREAKING] Add the MCP 2.x compatibility foundation and migrate MCP transports, errors, schemas, and lifecycle handling (#9236)
• agent-framework-ag-ui, agent-framework-core: [BREAKING] Require an explicit AG-UI authorization scope or single-user declaration for endpoint registration (#9413)
• agent-framework-tools: [BREAKING] Rename Docker shell extra_run_args to unsafe_extra_run_args and make its trust requirements explicit (#9453)
• agent-framework-tools: Raise the psutil floor to the first release with Windows ABI3 wheels for the supported Python range.
• agent-framework, agent-framework-core: Advance the exact Core pin and standard-install dependency cohort to the package versions released in this cut.
• agent-framework-declarative, agent-framework-devui, agent-framework-foundry-hosting, agent-framework-orchestrations: Raise the Core floor to 1.23 for packages that consume the new MCP lifecycle or executor behavior.
• agent-framework-core, agent-framework-devui: Define caller-owned and framework-owned MCP client lifecycles, remove DevUI's stale-connection workaround, and update lifecycle guidance and workflow samples (#9237, #9532)
• agent-framework, agent-framework-ag-ui, agent-framework-core, agent-framework-duckdb, agent-framework-hyperlight: Add Python 3.15 support for DuckDB, Hyperlight, and the AG-UI A2UI extra by requiring DuckDB 2.0 on Python 3.15, Hyperlight 0.8, and A2UI toolkit 0.0.5, and adapt Hyperlight output-limit handling to the 0.8 size and quota behavior (ag-ui-protocol/ag-ui#3057, duckdb/duckdb-python#659, hyperlight-dev/hyperlight-sandbox#239)
• agent-framework-devui, agent-framework-lab, tests, samples: Refresh Hugging Face Hub, frontend, Agent Framework, Pydantic, OpenTelemetry, orjson, development-tooling, and security-constrained dependencies (#9416, #9420, #9421, #9422, #9423, #9590)
• docs, samples: Refresh Content base64, Message URI, ChatResponse aggregation, and tool-normalization examples; ATR validation; Cosmos memory scoping; community MCP and Tracekit catalog entries; Foundry Toolbox setup; Foundry evals; Copilot Studio migrations; A2A hosting; ChatKit streaming; Purview middleware; and DevUI local-auth guidance (#9332, #9333, #9433, #9443, #9447, #9467, #9497, #9518, #9521, #9523, #9550, #9551, #9553, #9575, #9576, #9577)
• tests: Expand DevUI coverage for reasoning chunks without text (#9543)

Fixed

• agent-framework-core: Rebuild nested content, accept Literal workflow-edge sources, close abandoned inner streams, pass stream errors into nested streams during closure, make Memory and Todo writes atomic, bind background completion waits to execution identity, support keyword-only functional-workflow contexts, isolate MCP task contexts, normalize tool-name whitespace, recommend include_detailed_errors=True in function-execution warnings only when detailed errors are disabled, improve settled approval matching, recover owned MCP connections safely, and omit span-only tool attributes from invocation metrics (#9304, #9355, #9331, #9397, #9412, #9442, #9451, #9472, #9476, #9557, #9535, #9583, #9592)
• agent-framework-ag-ui: Preserve every queued approval result and repeated single-chunk text deltas (#8851, #9339)
• agent-framework-anthropic: Keep bash tool-result files nested inside their shell tool result (#9343)
• agent-framework-azure-cosmos-memory: Reject non-positive result limits and confidence values outside the supported range (#9318)
• agent-framework-bedrock: Merge per-call client arguments into Converse requests, resolve embedding regions consistently, and report the requested model on non-streaming responses (#9345, #9349, #9399)
• agent-framework-declarative: Match custom functions as whole calls and honor the configured variable in SetValue actions (#9176, #9428)
• agent-framework-devui: Emit an empty reasoning delta when a reasoning chunk has no text (#9546)
• agent-framework-foundry-hosting, agent-framework-hosting-responses: Sanitize unexpected streaming response failures before exposing them through Responses-shaped adapters (#9460)
• agent-framework-gemini: Send extracted structured-output schemas through the Gemini JSON Schema request field and set the assistant role on streamed updates (#9491, #9590)
• agent-framework-lab: Prefer the over-budget warning when a Tau2 sliding window exceeds its token limit (#9341)
• agent-framework-ollama: Decode and validate inline image data before passing it to the Ollama SDK (#9459)
• agent-framework-redis: Close the RedisVL search-index connection when the context provider owns it (#9510)
• agent-framework-tools: Prevent stateless shell tools from inheriting host standard input (#9469)

Commits

• 95e711a .NET: Update version for 1.23.0 release (#8806)
• f47c378 Python: Clear stale Foundry toolbox request context (#8717)
• 3b27cd3 Python: Add native computer use to Responses clients (#8751)
• be01dec .NET: Add origin pinning to Foundry toolbox MCP client (#8721)
• 0d6d2bb .NET: fix: declarative workflow http variables (#8797)
• 2024d4d .NET: Fix workflow topology edge multiplicity comparison (#8656)
• 37ce872 .NET: Store created external input messages (#8606)
• 1370903 .NET: [BREAKING] Better support tool changes between runs (#8754)
• 3efb73a Python: add a MongoDB agent RAG sample (#8725)
• 3f1f3b5 .NET: Propagate TextSearchProvider caller cancellation (#8796)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[Copilot]

Copilot wasn't able to review any files in this pull request. Check if the Files changed in this pull request are included in default exclusions.