Microsoft Release Notes

Changes:

• 245d4284a5018b7f446b5eac4d3add1fa5547229 .NET: Restore source-only release solution filter (#9140) [ #8537 ]
• d0ccaa62761ec36c59c139940797978623fb630a .NET: Preserve explicit null session state across roundtrips (#9012)
• 279d97f75cb2e7eee885dcdc2c741ef7361ee903 .NET: Honor disabled recent search memory (#9013)
• 41e785fb9a3c853272ce0fbd2eb93364e9d1de13 .NET: Preserve lazy request messages through agent invocation (#9017)
• 9251bc9911d30f5035b4a75cd1c61f96c90f38a6 .NET: Update version for 1.24.0 release (#9120)
• 73a96cb1a90213dfc2b1d36e7c7250559fb28d5d .NET: Stabilize Anthropic agent package (#9111) [ #9110 ]
• 0774607d8d3fa8a3f50cd5bda7b4c7ad400403f3 .NET: Reject sensitive declarative identifiers (#9071)
• 41c4f1c9b0242cfc3f2567db9f9c9a462982a4e7 .NET: Harden LocalCodeAct capability validation (#9057)

<details><summary><b>See More</b></summary>

• b9d24c8fb484c8330abe8bb9e7500ca3c3bbf46c .NET: test: add loopback destination regression coverage (#9064)
• bd5ab48cfdebb49b9223de0fc75c7141641927f3 .NET: Validate handoff request lifecycle before routing (#8855)
• 636e8562d1db4e678e0bb88f602e0bbc7318f6a4 .NET: Synchronize background task metadata and defer publication until session creation (#8933)
• 6ef0b73ed8ee5ae9a5cdc709edc5bfc9443d91cb .NET: Isolate GitHub Copilot attachment staging (#8846)
• 52fed574f05aa4c22ae4cc024679d501ec5f327a .NET: Preserve atomic cache creation across factory failures (#8931) …

For more information, see Identity inventory integration.

August 2026

Unified RBAC is enabled by default for new Defender for Cloud Apps customers

Starting in August 2026, Microsoft Defender unified role-based access control (RBAC) is automatically enabled for new Defender for Cloud Apps customers. No manual workload activation is required.

Unified RBAC provides a centralized experience for managing roles and permissions across Microsoft Defender products. For more information, see Microsoft Defender unified role-based access control and Configure admin access in Defender for Cloud Apps.

June 2026

Salesforce connector enhancements (Preview)

Modern Salesforce attacks increasingly abuse OAuth tokens, connected apps, sessions, and APIs, often bypassing MFA and traditional controls. The Salesforce connector for Microsoft Defender for Cloud Apps is now better equipped to detect these attacks. The connector ingests Salesforce Real-Time Event Monitoring data for near real-time detection of identity and OAuth threats with richer investigation context, and adds OAuth app governance for Salesforce Connected Apps and External Client Apps (ECAs).

We recommend that Salesforce administrators enable Real-Time Event Monitoring in the Salesforce console for the best detection coverage. Enabling it gives you better latency and more robust detections.

• Real-time event monitoring: When a Salesforce administrator enables Storing data for the relevant events in Salesforce Event Manager, the Salesforce connector ingests Salesforce Real-Time Event Monitoring data within minutes. This improves detection coverage for OAuth abuse, session hijacking, credential stuffing, and anomalous API activity, and the OAuth apps inventory includes Salesforce Connected Apps and External Client Apps (ECAs). For more information, see Enable Salesforce real-time event monitoring. …

[1.20.0] - 2026-10-02

Added

• agent-framework-foundry-hosting: Host native workflows over Foundry Responses and Foundry Invocations (#8947, #8966)
• agent-framework-duckdb, agent-framework-sql-server, agent-framework-typesafe: Add DuckDB and SQL Server native vector-store connectors and the TypeSafe AI connector (#8675, #8686, #8592)
• agent-framework, agent-framework-core: Add response-stream gates and buffering, session-scoped file-access isolation, an AgentExecutor checkpoint-state TypedDict, and opt-in FunctionInvocationContext injection for skill scripts (#8829, #8542, #8284, #8749)
• agent-framework-foundry, agent-framework-foundry-hosting, agent-framework-openai: Add native computer-use support to Responses clients and Foundry project embeddings (#8751, #8454) …

Changes:

• be01deccaf3dd7b85e03620145bc1a757c857827 .NET: Add origin pinning to Foundry toolbox MCP client (#8721)
• 0d6d2bb6b0b58f3aabdf170320ab90fc300d4c99 .NET: fix: declarative workflow http variables (#8797)
• 2024d4df4c4dd01b904fb9daaf56f5759801654a .NET: Fix workflow topology edge multiplicity comparison (#8656)
• 37ce872a85fed62cedfd7fffa2e0bd43f7d32b92 .NET: Store created external input messages (#8606)
• 1370903bd8e6eb8871781cd1fcc74f674c022e0b .NET: [BREAKING] Better support tool changes between runs (#8754)

<details><summary><b>See More</b></summary>

• 3f1f3b50b57ccabe7725f8a60539622d5f1ca7b4 .NET: Propagate TextSearchProvider caller cancellation (#8796)
• 238d7e2e9bb9b469be172460e612c89840aad1cc .NET: Validate Foundry client headers before transport (#8715)
• c804f32c983df56bacc9a8698fde9d50edc2df3e .NET: [BREAKING] Bump Azure.AI.Projects to 3.0.0-beta.3, OpenAI to 2.14.0, and MEAI to 10.10.1 (#8730) [ dotnet/extensions#7760, dotnet/extensions#7761 ]
• 93cf98a042c0f4eb8e1e180beeab9474bcd96811 .NET: Update AGUI SDK packages to 1.0.0 (#8769)
• 109234952ad417b0e9368beed633e438eb2e389d Clarify CodeAct guest packages and host network access (#8781)
• 6f1522a50b66f117da34cc25ea299ba24a528b15 Temporarily skip OpenAI integration tests while the CI API key is invalid (#8767)
• 2c46deb91e70ea6d7bbc99263147e0f470d52546 .NET: Clarify hosting authentication, authorization, and isolation guidance (#8677) …

Release Summary

Category	Description
Fixes	Fixed various bugs and performance issues.
Security	Stable channel security updates are listed here.

Fixes

• Fixed an issue which caused some users to experience printing failures when attempting to print from Microsoft Edge, including through both the standard print experience (Ctrl+P) and the Windows system print dialog (Ctrl+Shift+P). Symptoms included print dialogs failing to appear, closing unexpectedly, or printing operations failing with error messages, exclusively when using the "Microsoft Print to PDF" printer.

Back to top

Release Summary

Category	Description
Announcements	Announcements about unload event changes and WIP and MDAG retirement in Microsoft Edge.
Feature Updates	Updates to profile setup, third-party sign-in, and password details in Microsoft Edge.
Policy Updates	New and updated policies in Microsoft Edge.
Security	Stable channel security updates are listed here.

Announcements

• Deprecating the unload event. Microsoft Edge is changing the default behavior of the web platform unload event. As the rollout progresses, pages will no longer run unload event handlers unless the site explicitly permits them.

  • In Edge 152 and 153, unload handlers will stop firing by default for 60% of page loads unless the site explicitly enables them through Permissions Policy.
  • In Edge 154, the rollout will increase to 80% of page loads.
  • In Edge 155, the rollout will reach 100% of page loads.

  The unload event is not a dependable way to save data, perform cleanup, or report the end of a session. Browsers and operating systems can suspend or terminate pages without firing it, and this can prevent pages from using the back/forward cache, which may make back and forward navigation slower.

  Web developers should migrate to lifecycle events and APIs designed for these scenarios. The long-term direction of the web platform is to remove support for unload. …

[1.19.0] - 2026-09-18

Added

• agent-framework, agent-framework-core: Add generic vector-store provider protocols, instrumentation message-event controls, and per-tool AgentModeProvider exposure controls (#8421, #8451, #8450)
• agent-framework-mongodb: Add the alpha MongoDB vector-store connector (#8184)
• agent-framework-azure-documentdb: Add the alpha Azure DocumentDB vector-store connector (#8185)
• agent-framework-azure-cosmos, agent-framework-core: Add an Azure Cosmos DB NoSQL implementation of the shared vector-store APIs (#8186)
• agent-framework-orchestrations: Add stable names for built-in orchestration workflows and register their checkpoint types for restoration (#8384, #8258)
• agent-framework-devui: Display Aspire traces in the developer UI (#7874)
• agent-framework-core: Add an option to invoke function calls sequentially (#8453) …

What's Changed

• .NET: fix: race concdition in workflow formula state by @baywet in https://github.com/microsoft/agent-framework/pull/8252
• .NET: update remaining dependencies by @baywet in https://github.com/microsoft/agent-framework/pull/8307
• .NET: fix: inspect for delemiter value before adding headers by @baywet in https://github.com/microsoft/agent-framework/pull/8301
• docs: fix 'availble' typo in ADR 0001 by @mrchatam in https://github.com/microsoft/agent-framework/pull/8325
• .NET: docs: use 'a FunctionApprovalRequestContent' in ADR 0006 by @mrchatam in https://github.com/microsoft/agent-framework/pull/8322
• .NET: docs: fix 'valueable' typo in ADR 0001 by @mrchatam in https://github.com/microsoft/agent-framework/pull/8318
• .NET: docs: remove duplicate 'turns' in ADR 0006 by @mrchatam in https://github.com/microsoft/agent-framework/pull/8317
• .NET: docs: fix 'extention' typo in ADR 0001 by @mrchatam in https://github.com/microsoft/agent-framework/pull/8316
• docs: fix 'allow to' grammar in ADR 0011 by @mrchatam in https://github.com/microsoft/agent-framework/pull/8335
• Improve issue triage by @moonbox3 in https://github.com/microsoft/agent-framework/pull/8362
• .NET: expose OpenTelemetryAgent.DefaultSourceName by @YashvantHange in https://github.com/microsoft/agent-framework/pull/7815
• .NET: Temporarily skip flaky steering harness session reuse test by @rogerbarreto with @Copilot in https://github.com/microsoft/agent-framework/pull/8377 …