{"id":59468,"date":"2026-10-29T17:02:07","date_gmt":"2026-10-29T07:02:07","guid":{"rendered":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/29\/microsoft-agent-framework-1-x-october-2026-changes-explained\/"},"modified":"2026-10-29T17:03:59","modified_gmt":"2026-10-29T07:03:59","slug":"microsoft-agent-framework-1-x-october-2026-changes-explained","status":"publish","type":"post","link":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/29\/microsoft-agent-framework-1-x-october-2026-changes-explained\/","title":{"rendered":"Microsoft Agent Framework 1.x October 2026 Changes Explained"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">In this blog post Microsoft Agent Framework 1.x October 2026 Changes Explained we will examine why a routine AI framework update can unexpectedly interrupt workflows, invalidate stored sessions or weaken controls around sensitive business tools.<\/p>\n\n\n\n<!--more-->\n\n\n\n<p class=\"wp-block-paragraph\">Microsoft Agent Framework is the software layer used to build AI agents that can remember conversations, call business systems and complete multi-step tasks. Rather than simply answering questions, these agents might review a document, check a customer record, request approval and update another system.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That capability is useful, but it also creates risk. Once an agent can access files, execute tools or retain business data, framework changes affect more than the development team. They can influence operational continuity, security, compliance and the cost of supporting the system.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What was released during October 2026<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">October was not defined by one large release. Microsoft delivered four Python releases and four .NET releases in just over three weeks.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Python 1.20<\/strong> on 2 October<\/li>\n<li><strong>Python 1.21<\/strong> on 8 October<\/li>\n<li><strong>Python 1.22<\/strong> on 15 October<\/li>\n<li><strong>Python 1.23<\/strong> on 22 October<\/li>\n<li><strong>.NET 1.23<\/strong> on 1 October<\/li>\n<li><strong>.NET 1.24<\/strong> on 7 October<\/li>\n<li><strong>.NET 1.25<\/strong> on 14 October<\/li>\n<li><strong>.NET 1.26<\/strong> on 23 October<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">As at 29 October 2026, Python 1.23 and .NET 1.26 are the latest October releases. However, \u201clatest\u201d does not automatically mean \u201cready for your production environment\u201d.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We previously covered the detailed readiness questions around Python 1.21 and .NET 1.24. The more important month-end question is what the full October release sequence means for your operating model.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Security boundaries became more explicit<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The clearest direction across the October releases is that Microsoft is making developers state where trust begins and ends. This matters because many early AI projects assumed that anyone reaching an agent was already authorised to use every tool connected to it.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Python 1.23 now requires AG-UI endpoints to declare an authorisation scope or confirm that they are for a single user. AG-UI is the connection between an agent and its user-facing application. Making that trust model explicit reduces the chance of one user accessing another user\u2019s agent session or tools.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The same release renamed a Docker shell setting to make its unsafe nature clearer. In plain English, Docker shell tools allow an agent to run commands inside an isolated software container. They can be powerful, but they should never be treated as harmless simply because they run inside a container.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For Australian organisations, these changes support the broader control environment expected under Essential 8, the Australian Government\u2019s cybersecurity framework. They can strengthen access control, application control and audit practices, but installing a new framework version does not make an AI system Essential 8 compliant by itself.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Stored agent data needs an upgrade plan<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Python 1.22 introduced an important warning about persisted state. Persisted state is the information an agent saves so it can resume later, including conversation histories, workflow checkpoints and session snapshots.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Some serialised data created by different framework versions may not be interchangeable. This becomes dangerous during a rolling deployment, where half your servers run the old version while the other half run the new one.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Imagine a 180-person professional services firm using an agent to prepare client onboarding packs. The agent pauses while a manager approves a risk classification, then resumes later. If the upgraded server cannot correctly read the saved checkpoint, the process may restart, fail or repeat an action.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The business impact is not merely an error message. Staff may need to reconstruct work manually, clients may receive duplicate requests, and the organisation may lose a reliable record of who approved what.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Before upgrading, decide whether active sessions will be completed, migrated or deliberately discarded. Our version governance guide explains how version pinning and staged testing protect production state.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">MCP 2.x changes how Python agents manage connections<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Python 1.23 moved its Model Context Protocol support to the MCP 2.x client lifecycle. MCP is a standard way for AI agents to connect to tools and data sources without creating a completely different integration for every system.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The newer lifecycle gives the MCP software more responsibility for connection negotiation, repeated requests, caching and subscriptions. That should improve reliability over time, particularly for agents connected to several tools.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It is also a breaking change for some applications. If your code creates and manages its own MCP connection, that connection now needs to remain open for the complete agent or workflow run. Older connection patterns may continue temporarily as compatibility paths, but they do not receive all the newer behaviour.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is why MCP upgrades require end-to-end testing. A connection may start successfully yet fail when an agent performs a second tool call, waits for approval or resumes a long-running task. Teams using agent-to-agent communication should also review our A2A and MCP governance guide.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Operations and cleanup received useful improvements<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The October .NET releases included several smaller changes with meaningful operational value. .NET 1.26 added a standard way to delete stored agent sessions, improved warnings when declarative actions are unsupported and fixed OAuth consent handling for connected tools.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A declarative action is an agent step described through configuration rather than custom code. Logging a warning when such an action cannot run helps support teams find configuration problems before they become unexplained business failures.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Session deletion is equally important. Organisations need a defined way to remove expired, incorrect or privacy-sensitive agent records. This is relevant to retention policies and Australian Privacy Act obligations, particularly where prompts contain employee, customer or financial information.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Do not allow automatic production upgrades<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">With eight releases during October, leaving package versions open can cause a tested application to behave differently after a routine rebuild. Production systems should use approved, fixed versions.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code># Python production dependency\nagent-framework==1.23.0\n\n&amp;lt;!-- Central .NET package version --&amp;gt;\n&amp;lt;PackageVersion Include=&quot;Microsoft.Agents.AI&quot; Version=&quot;1.26.0&quot; \/&amp;gt;<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Pinning does not mean staying on an old version forever. It means choosing when an upgrade happens instead of allowing the build system to choose for you.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For teams managing frequent releases, the practical approach in our Australian release cadence guide is to separate evaluation, pre-production and production environments.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What technology leaders should do now<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Confirm every deployed version.<\/strong> Record the Python and .NET framework versions, hosting packages, connectors and MCP dependencies currently in use.<\/li>\n<li><strong>Identify saved state.<\/strong> Locate conversation histories, sessions, workflow checkpoints and snapshots before approving an upgrade.<\/li>\n<li><strong>Test real business journeys.<\/strong> Include approvals, failed tool calls, restarts, session deletion and long-running work rather than testing only a simple question.<\/li>\n<li><strong>Review agent permissions.<\/strong> Confirm which users can access each agent and which files, commands and business systems it can reach.<\/li>\n<li><strong>Keep a rollback path.<\/strong> Retain the previous application build and a protected copy of stored state until the new version is proven stable.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">The business takeaway<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">October\u2019s releases make Microsoft Agent Framework more capable and more suitable for controlled business use. They also reinforce a simple lesson: production AI agents must be operated like business applications, not treated like experiments.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">CloudProInc combines more than 20 years of enterprise IT experience with hands-on expertise across Azure, Microsoft 365, OpenAI, Claude, Microsoft Defender and Wiz. As a Melbourne-based Microsoft Partner and Wiz Security Integrator, we help organisations test the whole agent environment, including identity, data access, cloud security and recovery.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you are unsure whether an October Agent Framework upgrade could affect your production agents or stored data, we are happy to review the setup and give you a practical view of the risks, with no strings attached.<\/p>\n\n\n","protected":false},"excerpt":{"rendered":"<p>October brought rapid Agent Framework updates across Python and .NET. Here is what technology leaders need to know about security, stored data, integrations and production upgrades.<\/p>\n","protected":false},"author":1,"featured_media":59470,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":true,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[80,121,13,113],"tags":[],"class_list":["post-59468","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai-agents","category-ai-governance-risk-management","category-blog","category-microsoft-agent-framework"],"jetpack-related-posts":[{"id":59429,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/26\/what-microsoft-agent-framework-1-x-means-for-your-ai-roadmap\/","url_meta":{"origin":59468,"position":0},"title":"What Microsoft Agent Framework 1.x Means for Your AI Roadmap","author":"CPI Staff","date":"October 26, 2026","format":false,"excerpt":"Microsoft Agent Framework is moving quickly. Learn how to plan upgrades, protect production agents and adopt useful improvements without letting the release schedule control your AI roadmap.","rel":"","context":"In &quot;AI Agents&quot;","block_context":{"text":"AI Agents","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/ai-agents\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/10\/what-microsoft-agent-framework-1-x-means-for-your-ai-roadmap.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/10\/what-microsoft-agent-framework-1-x-means-for-your-ai-roadmap.png 1x, \/wp-content\/uploads\/2026\/10\/what-microsoft-agent-framework-1-x-means-for-your-ai-roadmap.png 1.5x, \/wp-content\/uploads\/2026\/10\/what-microsoft-agent-framework-1-x-means-for-your-ai-roadmap.png 2x, \/wp-content\/uploads\/2026\/10\/what-microsoft-agent-framework-1-x-means-for-your-ai-roadmap.png 3x, \/wp-content\/uploads\/2026\/10\/what-microsoft-agent-framework-1-x-means-for-your-ai-roadmap.png 4x"},"classes":[]},{"id":59189,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/19\/microsoft-agent-framework-release-cadence-and-version-governance\/","url_meta":{"origin":59468,"position":1},"title":"Microsoft Agent Framework Release Cadence and Version Governance","author":"CPI Staff","date":"October 19, 2026","format":false,"excerpt":"Frequent Agent Framework updates can improve security and reliability. Learn how to pin versions, test changes, protect stored state and upgrade production AI agents safely.","rel":"","context":"In &quot;AI Agents&quot;","block_context":{"text":"AI Agents","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/ai-agents\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/10\/microsoft-agent-framework-release-cadence-and-version-governance.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/10\/microsoft-agent-framework-release-cadence-and-version-governance.png 1x, \/wp-content\/uploads\/2026\/10\/microsoft-agent-framework-release-cadence-and-version-governance.png 1.5x, \/wp-content\/uploads\/2026\/10\/microsoft-agent-framework-release-cadence-and-version-governance.png 2x, \/wp-content\/uploads\/2026\/10\/microsoft-agent-framework-release-cadence-and-version-governance.png 3x, \/wp-content\/uploads\/2026\/10\/microsoft-agent-framework-release-cadence-and-version-governance.png 4x"},"classes":[]},{"id":59271,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/20\/microsoft-agent-framework-production-release-and-pinning-guide\/","url_meta":{"origin":59468,"position":2},"title":"Microsoft Agent Framework Production Release and Pinning Guide","author":"CPI Staff","date":"October 20, 2026","format":false,"excerpt":"Learn what to pin, how often to upgrade and which governance controls keep Microsoft Agent Framework production systems stable, secure and recoverable.","rel":"","context":"In &quot;AI Agents&quot;","block_context":{"text":"AI Agents","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/ai-agents\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/10\/microsoft-agent-framework-production-release-and-pinning-guide.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/10\/microsoft-agent-framework-production-release-and-pinning-guide.png 1x, \/wp-content\/uploads\/2026\/10\/microsoft-agent-framework-production-release-and-pinning-guide.png 1.5x, \/wp-content\/uploads\/2026\/10\/microsoft-agent-framework-production-release-and-pinning-guide.png 2x, \/wp-content\/uploads\/2026\/10\/microsoft-agent-framework-production-release-and-pinning-guide.png 3x, \/wp-content\/uploads\/2026\/10\/microsoft-agent-framework-production-release-and-pinning-guide.png 4x"},"classes":[]},{"id":59123,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/15\/microsoft-agent-framework-python-1-21-and-net-1-24-readiness\/","url_meta":{"origin":59468,"position":3},"title":"Microsoft Agent Framework Python 1.21 and .NET 1.24 Readiness","author":"CPI Staff","date":"October 15, 2026","format":false,"excerpt":"The October releases improve control, isolation and compliance handling. But production readiness still depends on how your organisation tests, governs and operates each AI agent.","rel":"","context":"In &quot;AI Agents&quot;","block_context":{"text":"AI Agents","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/ai-agents\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/10\/microsoft-agent-framework-python-1-21-and-net-1-24-readiness.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/10\/microsoft-agent-framework-python-1-21-and-net-1-24-readiness.png 1x, \/wp-content\/uploads\/2026\/10\/microsoft-agent-framework-python-1-21-and-net-1-24-readiness.png 1.5x, \/wp-content\/uploads\/2026\/10\/microsoft-agent-framework-python-1-21-and-net-1-24-readiness.png 2x, \/wp-content\/uploads\/2026\/10\/microsoft-agent-framework-python-1-21-and-net-1-24-readiness.png 3x, \/wp-content\/uploads\/2026\/10\/microsoft-agent-framework-python-1-21-and-net-1-24-readiness.png 4x"},"classes":[]},{"id":59393,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/25\/microsoft-agent-framework-python-1-23-and-net-1-26-production-guide\/","url_meta":{"origin":59468,"position":4},"title":"Microsoft Agent Framework Python 1.23 and .NET 1.26 Production Guide","author":"CPI Staff","date":"October 25, 2026","format":false,"excerpt":"Python 1.23 and .NET 1.26 improve agent security, isolation and reliability. Here is what technology leaders should test before approving a production upgrade.","rel":"","context":"In &quot;AI Agents&quot;","block_context":{"text":"AI Agents","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/ai-agents\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/10\/microsoft-agent-framework-python-1-23-and-net-1-26-production-guide.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/10\/microsoft-agent-framework-python-1-23-and-net-1-26-production-guide.png 1x, \/wp-content\/uploads\/2026\/10\/microsoft-agent-framework-python-1-23-and-net-1-26-production-guide.png 1.5x, \/wp-content\/uploads\/2026\/10\/microsoft-agent-framework-python-1-23-and-net-1-26-production-guide.png 2x, \/wp-content\/uploads\/2026\/10\/microsoft-agent-framework-python-1-23-and-net-1-26-production-guide.png 3x, \/wp-content\/uploads\/2026\/10\/microsoft-agent-framework-python-1-23-and-net-1-26-production-guide.png 4x"},"classes":[]},{"id":58048,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/building-microsoft-foundry-agents-with-microsoft-agent-framework\/","url_meta":{"origin":59468,"position":5},"title":"Building Microsoft Foundry Agents with Microsoft Agent Framework","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"Learn how to turn an AI agent prototype into a secure, controlled business tool using Microsoft Foundry and Microsoft Agent Framework.","rel":"","context":"In &quot;AI Agents&quot;","block_context":{"text":"AI Agents","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/ai-agents\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/07\/building-microsoft-foundry-agents-with-microsoft-agent-framework.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/07\/building-microsoft-foundry-agents-with-microsoft-agent-framework.png 1x, \/wp-content\/uploads\/2026\/07\/building-microsoft-foundry-agents-with-microsoft-agent-framework.png 1.5x, \/wp-content\/uploads\/2026\/07\/building-microsoft-foundry-agents-with-microsoft-agent-framework.png 2x, \/wp-content\/uploads\/2026\/07\/building-microsoft-foundry-agents-with-microsoft-agent-framework.png 3x, \/wp-content\/uploads\/2026\/07\/building-microsoft-foundry-agents-with-microsoft-agent-framework.png 4x"},"classes":[]}],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"\/wp-content\/uploads\/2026\/10\/microsoft-agent-framework-1-x-october-2026-changes-explained.png","_links":{"self":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/59468","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/comments?post=59468"}],"version-history":[{"count":1,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/59468\/revisions"}],"predecessor-version":[{"id":59469,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/59468\/revisions\/59469"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/media\/59470"}],"wp:attachment":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/media?parent=59468"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/categories?post=59468"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/tags?post=59468"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}