Bump the all-dependencies group with 11 updates by dependabot[bot] · Pull Request #2299 · OfficeDev/Microsoft-Teams-Samples

Bot Framework DotNet SDK has reached end-of-life. This is the last planned release. This project will no longer be updated or maintained. Customers using this SDK will not be disrupted. However, the SDK will no longer be supported through service tickets in the Azure portal and will not receive product updates.

To build agents with your choice of AI services, orchestration, and knowledge, consider using the Microsoft 365 Agents SDK. The Agents SDK is GA and has support for C#, JavaScript or Python. You can learn more about the Agents SDK at aka.ms/agents. If you're looking for a SaaS-based agent platform, consider Microsoft Copilot Studio. If you have an existing bot built with the Bot Framework SDK, you can update your bot to the Agents SDK. You can review the core changes and updates at Bot Framework SDK to Agents SDK migration guidance here. Support tickets for the Bot Framework SDK will no longer be serviced as of December 31, 2025.

4.23.0 What's Changed

[#6768] CosmosDBKeyEscape.TruncateKeyIfNeeded return different value after compiled by @ceciliaavila in [#6768] CosmosDBKeyEscape.TruncateKeyIfNeeded return different value after compiled microsoft/botbuilder-dotnet#6860
fix: [#6861]TeamsSSOTokenExchangeMiddleware.DeduplicatedTokenExchangeIdAsync fails on BlobStorage ETag validation by @JhontSouth in fix: [#6861]TeamsSSOTokenExchangeMiddleware.DeduplicatedTokenExchangeIdAsync fails on BlobStorage ETag validation microsoft/botbuilder-dotnet#6867
Bump the nuget group across 9 directories with 1 update by @dependabot in Bump the nuget group across 9 directories with 1 update microsoft/botbuilder-dotnet#6859
fix: Disable telemetry adaptive sampling by @JhontSouth in fix: Disable telemetry adaptive sampling microsoft/botbuilder-dotnet#6849
Suppressed general exception warning by @tracyboehrer in Suppressed general exception warning microsoft/botbuilder-dotnet#6851
Bumped dependencies for System.Text.Json alert by @tracyboehrer in Bumped dependencies for System.Text.Json alert microsoft/botbuilder-dotnet#6864
Add obsolete tag to MsalServiceClientCredentialsFactory class by @ceciliaavila in Add obsolete tag to MsalServiceClientCredentialsFactory class microsoft/botbuilder-dotnet#6866
fix:[#6877] Bot is not accepting v2 tokens from Bot Framework Emulator - Single Tenant Bots by @JhontSouth in fix:[#6877] Bot is not accepting v2 tokens from Bot Framework Emulator - Single Tenant Bots microsoft/botbuilder-dotnet#6879
Port PVA unit tests by @ceciliaavila in Port PVA unit tests microsoft/botbuilder-dotnet#6868
Disable manual component injection since it is injected by @tracyboehrer in Disable manual component injection since it is injected microsoft/botbuilder-dotnet#6880
Fix create parity issue github action by @sw-joelmut in Fix create parity issue github action microsoft/botbuilder-dotnet#6881

Full Changelog: microsoft/botbuilder-dotnet@4.22.9...4.23.0

4.22.9 What's Changed

Fix Attachment issue when it has a MemoryStream instance in [#6771] Fix Attachment issue when it has a MemoryStream instance microsoft/botbuilder-dotnet#6850
Disable telemetry adaptive sampling in fix: Disable telemetry adaptive sampling microsoft/botbuilder-dotnet#6849
SkillDialog.InterceptOAuthCardsAsync doesn't support CloudAdapter in [#6841] SkillDialog.InterceptOAuthCardsAsync doesn't support CloudAdapter microsoft/botbuilder-dotnet#6848

4.22.8

This is the September 2024 release of the DotNet Bot Framework SDK.

What's Changed

Fix for Skills endorsement check in Fix for Skills endorsement check microsoft/botbuilder-dotnet#6846
Federated Credentials (Microsoft tenant only) in Federated Credentials microsoft/botbuilder-dotnet#6838
Remove .Net Core 3.1 from projects in [#6741] Remove .Net Core 3.1 from projects microsoft/botbuilder-dotnet#6819
Update packages to latest version that support .NET 6 in [#6825] Update packages to latest version that support .NET 6 microsoft/botbuilder-dotnet#6840
SM02211 issue alert in fix: Avoid SM02211 issue alert microsoft/botbuilder-dotnet#6843

This release also adds the correct PublicKeyToken back to the assemblies. This does not appear as a PR since it was a build pipeline issue.

4.22.7

This is the June 2024 release of the Bot Framework DotNet SDK. This release contains security and authorization fixes.

What's Changed

Microsoft.Identity.Client bump by @tracyboehrer in Microsoft.Identity.Client bump microsoft/botbuilder-dotnet#6800
Corrected Authority in MsalServiceClientCredentialsFactory by @tracyboehrer in Corrected Authority in MsalServiceClientCredentialsFactory microsoft/botbuilder-dotnet#6802
CertificateServiceClientCredentialsFactory handles public, Gov, and private clouds by @tracyboehrer in CertificateServiceClientCredentialsFactory handles public, Gov, and private clouds microsoft/botbuilder-dotnet#6806
fix: [#6758] Update to version 3 of the Azure Cosmos DB .NET SDK by @JhontSouth in fix: [#6758] Update to version 3 of the Azure Cosmos DB .NET SDK microsoft/botbuilder-dotnet#6796
Add Microsoft.AdaptiveExpressions.Core, fork of AdaptiveExpressions on System.Text.Json (and AOT compatible) by @jevansaks in Add Microsoft.AdaptiveExpressions.Core, fork of AdaptiveExpressions on System.Text.Json (and AOT compatible) microsoft/botbuilder-dotnet#6783
AdaptiveExpression.Core package rename by @tracyboehrer in AdaptiveExpression.Core package rename microsoft/botbuilder-dotnet#6807
AdaptiveExpression.Core framework by @tracyboehrer in AdaptiveExpression.Core framework microsoft/botbuilder-dotnet#6808
AdaptiveExpression.Core duplicated icon.png by @tracyboehrer in AdaptiveExpression.Core duplicated icon.png microsoft/botbuilder-dotnet#6809

4.22.4

This is the May 2024 Bot Framework DotNet SDK patch release. This release contains security fixes, .Net 8, and authentication improvements.

What's Changed

Microsoft.Identity.Client bump by @tracyboehrer in Microsoft.Identity.Client bump microsoft/botbuilder-dotnet#6779
[#6741] Update projects to .Net 8 by @ceciliaavila in [#6741] Update projects to .Net 8 microsoft/botbuilder-dotnet#6760
[#6741] Update functional test pipelines to .NET8 by @ceciliaavila in [#6741] Update functional test pipelines to .NET8 microsoft/botbuilder-dotnet#6761
[#6741] Update generators templates and VSIX to .Net 8 by @sw-joelmut in [#6741] Update generators templates and VSIX to .Net 8 microsoft/botbuilder-dotnet#6762
fix: Add Audience for Certificate auth to work with Skills by @sw-joelmut in fix: Add Audience for Certificate auth to work with Skills microsoft/botbuilder-dotnet#6794
Fix error when building activity with non-string text by @ceciliaavila in Fix error when building activity with non-string text microsoft/botbuilder-dotnet#6753
feat: Support Single Tenant authentication through BotFramework-Emulator by @JhontSouth in feat: Support Single Tenant authentication through BotFramework-Emulator microsoft/botbuilder-dotnet#6769
New LGTM suppression syntax - BlobsStorage by @tracyboehrer in New LGTM suppression syntax - BlobsStorage microsoft/botbuilder-dotnet#6782
Logging UnauthorizedAccessException in BotFrameworkHttpAdapter by @tracyboehrer in Logging UnauthorizedAccessException in BotFrameworkHttpAdapter microsoft/botbuilder-dotnet#6784
Added messages for all UnauthorizedAccessException by @tracyboehrer in Added messages for all UnauthorizedAccessException microsoft/botbuilder-dotnet#6786
Converting to new CodeQL suppression syntax by @gandiddi in Converting to new CodeQL suppression syntax microsoft/botbuilder-dotnet#6787
fix: [#6792] Composer Bot with QnA Intent recognized triggers duplicate QnA queries by @sw-joelmut in fix: [#6792] Composer Bot with QnA Intent recognized triggers duplicate QnA queries microsoft/botbuilder-dotnet#6793

Full Changelog: microsoft/botbuilder-dotnet@4.22.3...4.22.4

4.22.3

This is the April 2024 DotNet SDK patch release. This version contains minor bug fixes and security updates.

What's Changed

Microsoft.IdentityModel.Protocols.OpenIdConnect bump in Microsoft.IdentityModel.Protocols.OpenIdConnect bump microsoft/botbuilder-dotnet#6756
Update TimeoutException message in Update TimeoutException message microsoft/botbuilder-dotnet#6773
The ShowTypingMiddleware throws System.ObjectDisposedException when an exception occurs in the bot in fix: [#6752] The ShowTypingMiddleware throws System.ObjectDisposedException when an exception occurs in the bot microsoft/botbuilder-dotnet#6772
Move SaveAllChanges method from SetProperty to OAuthInput in fix: [#6746] Move SaveAllChanges method from SetProperty to OAuthInput microsoft/botbuilder-dotnet#6757
Fix error when building activity with non-string text in Fix error when building activity with non-string text microsoft/botbuilder-dotnet#6753

4.22.2

This is the second February 2024 patch release to correct LU parsing issues and a security fix.

What's Changed

Fix LU parser rules to support all comments in a file by @sw-joelmut in Fix LU parser rules to support all comments in a file microsoft/botbuilder-dotnet#6744
Updated NuGet.Packaging by @tracyboehrer in Updated NuGet.Packaging microsoft/botbuilder-dotnet#6749

4.22.1

This is the February 2024 4.22.1 release for the DotNet SDK. This contains bug fixes.

What's Changed

Manually adding zh-CN and zh-TW to LanguagePolicy in Manually adding zh-CN and zh-TW to LanguagePolicy microsoft/botbuilder-dotnet#6745
Typing middleware not working as expected in teams as well as web chat channel in fix: [#6697] Typing middleware not working as expected in teams as well as web chat channel microsoft/botbuilder-dotnet#6743

4.22.0

This is the January 2024 4.22.0 release for the DotNet SDK. This contains a security fixes Sharepoint support, and ASE improvements.

What's Changed

feat: Add ASE channel validation in feat: Add Ase channel validation. microsoft/botbuilder-dotnet#6718
feat: Include HEAD method to http requests in feat: Include HEAD method to http requests microsoft/botbuilder-dotnet#6713
feat: Support for SharePoint (Viva) Adaptive Card Extension in feat: Support for SharePoint (Viva) Adaptive Card Extension microsoft/botbuilder-dotnet#6695
feat: Add isVisible property to AceData in feat: Add IsVisible property to AceData microsoft/botbuilder-dotnet#6730
fix: USGovSingleTenant OAuthEndpoint in fix: USGovSingleTenant OAuthEndpoint microsoft/botbuilder-dotnet#6714
bump: System.IdentityModel.Tokens.Jwt in System.IdentityModel.Tokens.Jwt bump microsoft/botbuilder-dotnet#6731
Fix a json serializer bug in Fix a json serializer bug. microsoft/botbuilder-dotnet#6722
Add obsolete warning to Orchestrator classes in Add obsolete warning to Orchestrator classes microsoft/botbuilder-dotnet#6711

4.21.1

This is the October 2023 patch release for the Bot Framework DotNet SDK.

What's Changed

fix: [#6683] Timeout issue when using DLASE by @sw-joelmut in fix: [#6683] Timeout issue when using DLASE microsoft/botbuilder-dotnet#6696
Support SN+I authentication with AAD by @mikeus-hanzlik in Support SN+I authentication with AAD microsoft/botbuilder-dotnet#6694
Add sendx5c parameter to Certificate factory class by @ceciliaavila in Add sendx5c parameter to Certificate factory class microsoft/botbuilder-dotnet#6699
[#6643] WithManagedIdentity is experimental and not exist in Microsoft.Identity.Client 4.51.0 by @sw-joelmut in [#6643] WithManagedIdentity is experimental and not exist in Microsoft.Identity.Client 4.51.0 microsoft/botbuilder-dotnet#6686
[#6651] Replace TestFramework package to remove ADAL dependencies by @ceciliaavila in [#6651] Replace TestFramework package to remove ADAL dependencies microsoft/botbuilder-dotnet#6690

Full Changelog: microsoft/botbuilder-dotnet@4.21.0...4.21.1

4.21.0

Welcome to the September 2023 minor release of the Bot Framework SDK.

What's Changed

Teams

Support Bot new invoke type: config by @yingduyingdu in Support Bot new invoke type: config microsoft/botbuilder-dotnet#6632
[Teams] Add support for meeting participants added/removed events by @ceciliaavila in [Teams] Add support for meeting participants added/removed events microsoft/botbuilder-dotnet#6677
Implementation of Teams batch APIs by @ceciliaavila in Implementation of Teams batch APIs microsoft/botbuilder-dotnet#6655

Other

Add WithAuthority to MSAL client application builder by @sw-joelmut in Add WithAuthority to MSAL client application builder microsoft/botbuilder-dotnet#6671
Drop ADAL to unblock pipeline by @Danieladu in Drop ADAL to unblock pipeline microsoft/botbuilder-dotnet#6687
Resolve concurrency issues in InterfaceConverter's ReadJson method by @ramfattah in Resolve concurrency issues in InterfaceConverter's ReadJson method microsoft/botbuilder-dotnet#6681
Use LRUCache in ExpressionParser for efficient memory usage by @ramfattah in Use LRUCache in ExpressionParser for efficient memory usage microsoft/botbuilder-dotnet#6667
Upgrade ANTLR to version 4.11.1 in Microsoft.Bot.Builder.Parsers.LU project by @ceciliaavila in Upgrade ANTLR to version 4.11.1 in Microsoft.Bot.Builder.Parsers.LU project microsoft/botbuilder-dotnet#6670
Updated stray Microsoft.Rest.ClientRuntime dependency by @tracyboehrer in Updated stray Microsoft.Rest.ClientRuntime dependency microsoft/botbuilder-dotnet#6675
#6673 - Fix of SNI auth not working in Cert based authentication by @mikeus-hanzlik in #6673 - Fix of SNI auth not working in Cert based authentication microsoft/botbuilder-dotnet#6676
Update JwtTokenExtractor.cs by @xieofxie in Update JwtTokenExtractor.cs microsoft/botbuilder-dotnet#6685
Updated NuGet.Packaging by @tracyboehrer in Updated NuGet.Packaging microsoft/botbuilder-dotnet#6652
fix: cleanup streaming high-perf logs by @stevengum in fix: cleanup streaming high-perf logs microsoft/botbuilder-dotnet#6650
Explicitly adding 3.1 to test steps. by @tracyboehrer in Explicitly adding 3.1 to test steps. microsoft/botbuilder-dotnet#6666
Microsoft.Rest.ClientRuntime from 2.3.21 to 2.3.24 by @tracyboehrer in Microsoft.Rest.ClientRuntime from 2.3.21 to 2.3.24 microsoft/botbuilder-dotnet#6662
[#6642] Handle null content by @ceciliaavila in [#6642] Handle null content microsoft/botbuilder-dotnet#6654
[#6644] Remove BotFrameworkAdapter Obsolete annotation by @ceciliaavila in [#6644] Remove BotFrameworkAdapter Obsolete annotation microsoft/botbuilder-dotnet#6648
Adding Microsoft SECURITY.MD by @microsoft-github-policy-service in Adding Microsoft SECURITY.MD microsoft/botbuilder-dotnet#6639

New Contributors

@microsoft-github-policy-service made their first contribution in Adding Microsoft SECURITY.MD microsoft/botbuilder-dotnet#6639
@mikeus-hanzlik made their first contribution in #6673 - Fix of SNI auth not working in Cert based authentication microsoft/botbuilder-dotnet#6676

Full Changelog: microsoft/botbuilder-dotnet@4.20.0...4.21.0

4.20.1

Welcome to the July 2023 patch release of the Bot Framework SDK.

What's Changed

Add WithAuthority to MSAL client application builder in Add WithAuthority to MSAL client application builder microsoft/botbuilder-dotnet#6671
Upgrade ANTLR to version 4.11.1 in Microsoft.Bot.Builder.Parsers.LU project in Upgrade ANTLR to version 4.11.1 in Microsoft.Bot.Builder.Parsers.LU project microsoft/botbuilder-dotnet#6670
Use LRUCache in ExpressionParser for efficient memory usage in Use LRUCache in ExpressionParser for efficient memory usage microsoft/botbuilder-dotnet#6667
Updated NuGet.Packaging in Updated NuGet.Packaging microsoft/botbuilder-dotnet#6652
Microsoft.Rest.ClientRuntime from 2.3.21 to 2.3.24 in Microsoft.Rest.ClientRuntime from 2.3.21 to 2.3.24 microsoft/botbuilder-dotnet#6662

4.20.0

This is the June 2023 release of the DotNet SDK. This release contains Teams features and bug/security fixes.

What's Changed

Teams

Support MeetingTabIconSurface in Meeting Notification API by @yingduyingdu in Support MeetingTabIconSurface in Meeting Notification API microsoft/botbuilder-dotnet#6621
Add support for Teams Adaptive cards in QnA Dialog by @anishprasad01 in Add support for Teams Adaptive cards in QnA Dialog microsoft/botbuilder-dotnet#6625
[#6086] Teams is adding support for suggested actions in 1-1 chats by @ceciliaavila in [#6086] Teams is adding support for suggested actions in 1-1 chats microsoft/botbuilder-dotnet#6607
Fix class structure for meeting notification feature extensibility by @yingduyingdu in Fix class structure for meeting notification feature extensibility microsoft/botbuilder-dotnet#6579
[#6596] TeamsChannelData need OnBehalfOf by @ceciliaavila in [#6596] TeamsChannelData need OnBehalfOf microsoft/botbuilder-dotnet#6609

Other

[#6589] Default to MSAL and eliminate ADAL without breaking changes by @sw-joelmut in [#6589] Default to MSAL and eliminate ADAL without breaking changes microsoft/botbuilder-dotnet#6605
Fix cast issue in SendHandoffActivity action by @ceciliaavila in Fix cast issue in SendHandoffActivity action microsoft/botbuilder-dotnet#6575
[#6563] Expired JWT token exception not being handled by @erquirogasw in [#6563] Expired JWT token exception not being handled microsoft/botbuilder-dotnet#6572
Added log to ProcessAsync method in CloudAdapter.cs. by @erquirogasw in Added log to ProcessAsync method in CloudAdapter.cs. microsoft/botbuilder-dotnet#6587
[#6582, #6584] Incorrect serialization of state when using Blob or CosmosDB storage in v4.19.x by @sw-joelmut in [#6582, #6584] Incorrect serialization of state when using Blob or CosmosDB storage in v4.19.x microsoft/botbuilder-dotnet#6585
Removed MyGet instructions by @tracyboehrer in Removed MyGet instructions microsoft/botbuilder-dotnet#6588
[#6591] Concurrency issue with TimeZoneConverter by @ceciliaavila in [#6591] Concurrency issue with TimeZoneConverter microsoft/botbuilder-dotnet#6593
Disabled warning CA1507 in Parsers.LU by @tracyboehrer in Disabled warning CA1507 in Parsers.LU microsoft/botbuilder-dotnet#6600
[#6590] Error while saving bot state to azure blob storage by @sw-joelmut in [#6590] Error while saving bot state to azure blob storage microsoft/botbuilder-dotnet#6595
[#6558] Update to ANTLR 4.11 to compensate for breaking changes between versions by @sw-joelmut in [#6558] Update to ANTLR 4.11 to compensate for breaking changes between versions microsoft/botbuilder-dotnet#6586
Bump minimatch and replace in /libraries/Swagger by @dependabot in Bump minimatch and replace in /libraries/Swagger microsoft/botbuilder-dotnet#6601
fix: Custom Question Answering in MS Teams by @anishprasad01 in fix: Custom Question Answering in MS Teams microsoft/botbuilder-dotnet#6603
[#6616] Telemetry not logging ActivityID and ConversationID by @erquirogasw in [#6616] Telemetry not logging ActivityID and ConversationID microsoft/botbuilder-dotnet#6620
USER scope variable values do not transfer to skill when SSO is configured by @ceciliaavila in USER scope variable values do not transfer to skill when SSO is configured microsoft/botbuilder-dotnet#6612
[#6560] Allow TokenCredential authentication in CosmosDbPartitionedStorage by @ceciliaavila in [#6560] Allow TokenCredential authentication in CosmosDbPartitionedStorage microsoft/botbuilder-dotnet#6614
[#5820] Outgoing Activity Locale being Overwritten by @ceciliaavila in [#5820] Outgoing Activity Locale being Overwritten microsoft/botbuilder-dotnet#6629
[#6624] port: [#4452][#4456][#4460][botframework-streaming] Should reject pending requests on disconnection by @ceciliaavila in [#6624] port: [#4452][#4456][#4460][botframework-streaming] Should reject pending requests on disconnection microsoft/botbuilder-dotnet#6627
[#5577] BotFrameworkClientImpl.PostActivityAsync() doesn't support null fromBotId and toBotId values by @ceciliaavila in [#5577] BotFrameworkClientImpl.PostActivityAsync() doesn't support null fromBotId and toBotId values microsoft/botbuilder-dotnet#6626
[#6588] UserId not being passed to AzureDiagnostics by @sw-joelmut in [#6588] UserId not being passed to AzureDiagnostics microsoft/botbuilder-dotnet#6623
[#6628] port [#4449] CloudAdapter always builds Connector with MicrosoftAppCredentials (never CertificateAppCredentials) -- certificate auth flow broken by @sw-joelmut in [#6628] port [#4449] CloudAdapter always builds Connector with MicrosoftAppCredentials (never CertificateAppCredentials) -- certificate auth flow broken microsoft/botbuilder-dotnet#6631
[#6346] Add Azure Storage (BlobStorage.cs) using a managed identity by @ceciliaavila in [#6346] Add Azure Storage (BlobStorage.cs) using a managed identity microsoft/botbuilder-dotnet#6636
Allow sending GET requests with a body by @ceciliaavila in Allow sending GET requests with a body microsoft/botbuilder-dotnet#6633

New Contributors

@erquirogasw made their first contribution in [#6563] Expired JWT token exception not being handled microsoft/botbuilder-dotnet#6572

Full Changelog: microsoft/botbuilder-dotnet@4.19.0...4.20.0

4.19.3

Welcome to the February 2023 patch release of the Bot Framework SDK.

What's Changed

Concurrency issue with TimeZoneConverter #6593

4.19.2

Welcome to the February 2023 patch release of the Bot Framework SDK.

What's Changed

Teams

Fix class structure for meeting notification feature extensibility #6579

Other

Incorrect serialization of state when using Blob or CosmosDB storage #6585
Added log to ProcessAsync method in CloudAdapter #6587

4.19.1

Welcome to the January 2023 patch release of the Bot Framework SDK. This release has been focused on bug fixes.

What's Changed

Fix cast issue in SendHandoffActivity action #6575
Expired JWT token exception not being handled #6572

Full Changelog: microsoft/botbuilder-dotnet@4.19.0...4.19.1

4.19.0

Welcome to the January 2023 release of the Bot Framework SDK. This release has been focused on bug fixes and general improvements.

What's Changed

Teams

Support Teams message edit, message soft delete, message undelete activities by @yingduyingdu in Support Teams message edit, message soft delete, message undelete activities microsoft/botbuilder-dotnet#6564
Support bot sdk dot net for targeted meeting notification by @yingduyingdu in Support bot sdk dot net for targeted meeting notification microsoft/botbuilder-dotnet#6570

Other

Fix CodeQL alert SM01507: Client-side URL redirect by @ceciliaavila in Fix CodeQL alert SM01507: Client-side URL redirect microsoft/botbuilder-dotnet#6538
Added tsaoptions.json by @tracyboehrer in Added tsaoptions.json microsoft/botbuilder-dotnet#6539
Corrected TSAEnabled key case by @tracyboehrer in Corrected TSAEnabled key case microsoft/botbuilder-dotnet#6541
[#6511] CodeQL alert SM02200: Weak hmacs - Suppress alert for WebexClientWrapper by @ceciliaavila in [#6511] CodeQL alert SM02200: Weak hmacs - Suppress alert for WebexClientWrapper microsoft/botbuilder-dotnet#6540
[#6542] Applying BotMessageSerializerSettings.MaxDepth doesn't seem to work by @ceciliaavila in [#6542] Applying BotMessageSerializerSettings.MaxDepth doesn't seem to work microsoft/botbuilder-dotnet#6546
Fix CodeQL SM02211 alert by @sw-joelmut in Fix CodeQL SM02211 alert microsoft/botbuilder-dotnet#6548
[#6512] CodeQL alert SM00431: Information exposure through an exception by @sw-joelmut in [#6512] CodeQL alert SM00431: Information exposure through an exception microsoft/botbuilder-dotnet#6544
Fix CodeQL alert SM03926: Security sensitive JsonWebTokenHandler validations are disabled by @ceciliaavila in Fix CodeQL alert SM03926: Security sensitive JsonWebTokenHandler validations are disabled microsoft/botbuilder-dotnet#6550
Fix CodeQL SM02211 alert - SerializationBinder by @sw-joelmut in Fix CodeQL SM02211 alert - SerializationBinder microsoft/botbuilder-dotnet#6549
Removed some lingering NewtonSoft <13 references by @tracyboehrer in Removed some lingering NewtonSoft <13 references microsoft/botbuilder-dotnet#6556
[#6510] Suppress CodeQL SM03926 alerts by @ceciliaavila in [#6510] Suppress CodeQL SM03926 alerts microsoft/botbuilder-dotnet#6555
[#6531] Prompt validation of confirm prompt in chatbot is not working for newly added language by @ceciliaavila in [#6531] Prompt validation of confirm prompt in chatbot is not working for newly added language microsoft/botbuilder-dotnet#6554
[CodeQL] Fix remaining SM00431 alerts by @ceciliaavila in [CodeQL] Fix remaining SM00431 alerts microsoft/botbuilder-dotnet#6561
Update ESRP signing task to v2 by @BruceHaley in Update ESRP signing task to v2 microsoft/botbuilder-dotnet#6566

New Contributors

@yingduyingdu made their first contribution in Support Teams message edit, message soft delete, message undelete activities microsoft/botbuilder-dotnet#6564

Full Changelog: microsoft/botbuilder-dotnet@4.18.1...4.19.0

Commits viewable in compare view.

Updated Microsoft.Bot.Builder.Integration.AspNet.Core from 4.18.1 to 4.23.1.

Release notes

Sourced from Microsoft.Bot.Builder.Integration.AspNet.Core's releases.

4.23.1 Final Release of Bot Framework DotNet SDK

Bot Framework DotNet SDK has reached end-of-life. This is the last planned release. This project will no longer be updated or maintained. Customers using this SDK will not be disrupted. However, the SDK will no longer be supported through service tickets in the Azure portal and will not receive product updates.

To build agents with your choice of AI services, orchestration, and knowledge, consider using the Microsoft 365 Agents SDK. The Agents SDK is GA and has support for C#, JavaScript or Python. You can learn more about the Agents SDK at aka.ms/agents. If you're looking for a SaaS-based agent platform, consider Microsoft Copilot Studio. If you have an existing bot built with the Bot Framework SDK, you can update your bot to the Agents SDK. You can review the core changes and updates at Bot Framework SDK to Agents SDK migration guidance here. Support tickets for the Bot Framework SDK will no longer be serviced as of December 31, 2025.

4.23.0 What's Changed

[#6768] CosmosDBKeyEscape.TruncateKeyIfNeeded return different value after compiled by @ceciliaavila in [#6768] CosmosDBKeyEscape.TruncateKeyIfNeeded return different value after compiled microsoft/botbuilder-dotnet#6860
fix: [#6861]TeamsSSOTokenExchangeMiddleware.DeduplicatedTokenExchangeIdAsync fails on BlobStorage ETag validation by @JhontSouth in fix: [#6861]TeamsSSOTokenExchangeMiddleware.DeduplicatedTokenExchangeIdAsync fails on BlobStorage ETag validation microsoft/botbuilder-dotnet#6867
Bump the nuget group across 9 directories with 1 update by @dependabot in Bump the nuget group across 9 directories with 1 update microsoft/botbuilder-dotnet#6859
fix: Disable telemetry adaptive sampling by @JhontSouth in fix: Disable telemetry adaptive sampling microsoft/botbuilder-dotnet#6849
Suppressed general exception warning by @tracyboehrer in Suppressed general exception warning microsoft/botbuilder-dotnet#6851
Bumped dependencies for System.Text.Json alert by @tracyboehrer in Bumped dependencies for System.Text.Json alert microsoft/botbuilder-dotnet#6864
Add obsolete tag to MsalServiceClientCredentialsFactory class by @ceciliaavila in Add obsolete tag to MsalServiceClientCredentialsFactory class microsoft/botbuilder-dotnet#6866
fix:[#6877] Bot is not accepting v2 tokens from Bot Framework Emulator - Single Tenant Bots by @JhontSouth in fix:[#6877] Bot is not accepting v2 tokens from Bot Framework Emulator - Single Tenant Bots microsoft/botbuilder-dotnet#6879
Port PVA unit tests by @ceciliaavila in Port PVA unit tests microsoft/botbuilder-dotnet#6868
Disable manual component injection since it is injected by @tracyboehrer in Disable manual component injection since it is injected microsoft/botbuilder-dotnet#6880
Fix create parity issue github action by @sw-joelmut in Fix create parity issue github action microsoft/botbuilder-dotnet#6881

Full Changelog: microsoft/botbuilder-dotnet@4.22.9...4.23.0

4.22.9 What's Changed

Fix Attachment issue when it has a MemoryStream instance in [#6771] Fix Attachment issue when it has a MemoryStream instance microsoft/botbuilder-dotnet#6850
Disable telemetry adaptive sampling in fix: Disable telemetry adaptive sampling microsoft/botbuilder-dotnet#6849
SkillDialog.InterceptOAuthCardsAsync doesn't support CloudAdapter in [#6841] SkillDialog.InterceptOAuthCardsAsync doesn't support CloudAdapter microsoft/botbuilder-dotnet#6848

4.22.8

This is the September 2024 release of the DotNet Bot Framework SDK.

What's Changed

Fix for Skills endorsement check in Fix for Skills endorsement check microsoft/botbuilder-dotnet#6846
Federated Credentials (Microsoft tenant only) in Federated Credentials microsoft/botbuilder-dotnet#6838
Remove .Net Core 3.1 from projects in [#6741] Remove .Net Core 3.1 from projects microsoft/botbuilder-dotnet#6819
Update packages to latest version that support .NET 6 in [#6825] Update packages to latest version that support .NET 6 microsoft/botbuilder-dotnet#6840
SM02211 issue alert in fix: Avoid SM02211 issue alert microsoft/botbuilder-dotnet#6843

This release also adds the correct PublicKeyToken back to the assemblies. This does not appear as a PR since it was a build pipeline issue.

4.22.7

This is the June 2024 release of the Bot Framework DotNet SDK. This release contains security and authorization fixes.

What's Changed

Microsoft.Identity.Client bump by @tracyboehrer in Microsoft.Identity.Client bump microsoft/botbuilder-dotnet#6800
Corrected Authority in MsalServiceClientCredentialsFactory by @tracyboehrer in Corrected Authority in MsalServiceClientCredentialsFactory microsoft/botbuilder-dotnet#6802
CertificateServiceClientCredentialsFactory handles public, Gov, and private clouds by @tracyboehrer in CertificateServiceClientCredentialsFactory handles public, Gov, and private clouds microsoft/botbuilder-dotnet#6806
fix: [#6758] Update to version 3 of the Azure Cosmos DB .NET SDK by @JhontSouth in fix: [#6758] Update to version 3 of the Azure Cosmos DB .NET SDK microsoft/botbuilder-dotnet#6796
Add Microsoft.AdaptiveExpressions.Core, fork of AdaptiveExpressions on System.Text.Json (and AOT compatible) by @jevansaks in Add Microsoft.AdaptiveExpressions.Core, fork of AdaptiveExpressions on System.Text.Json (and AOT compatible) microsoft/botbuilder-dotnet#6783
AdaptiveExpression.Core package rename by @tracyboehrer in AdaptiveExpression.Core package rename microsoft/botbuilder-dotnet#6807
AdaptiveExpression.Core framework by @tracyboehrer in AdaptiveExpression.Core framework microsoft/botbuilder-dotnet#6808
AdaptiveExpression.Core duplicated icon.png by @tracyboehrer in AdaptiveExpression.Core duplicated icon.png microsoft/botbuilder-dotnet#6809

4.22.4

This is the May 2024 Bot Framework DotNet SDK patch release. This release contains security fixes, .Net 8, and authentication improvements.

What's Changed

Microsoft.Identity.Client bump by @tracyboehrer in Microsoft.Identity.Client bump microsoft/botbuilder-dotnet#6779
[#6741] Update projects to .Net 8 by @ceciliaavila in [#6741] Update projects to .Net 8 microsoft/botbuilder-dotnet#6760
[#6741] Update functional test pipelines to .NET8 by @ceciliaavila in [#6741] Update functional test pipelines to .NET8 microsoft/botbuilder-dotnet#6761
[#6741] Update generators templates and VSIX to .Net 8 by @sw-joelmut in [#6741] Update generators templates and VSIX to .Net 8 microsoft/botbuilder-dotnet#6762
fix: Add Audience for Certificate auth to work with Skills by @sw-joelmut in fix: Add Audience for Certificate auth to work with Skills microsoft/botbuilder-dotnet#6794
Fix error when building activity with non-string text by @ceciliaavila in Fix error when building activity with non-string text microsoft/botbuilder-dotnet#6753
feat: Support Single Tenant authentication through BotFramework-Emulator by @JhontSouth in feat: Support Single Tenant authentication through BotFramework-Emulator microsoft/botbuilder-dotnet#6769
New LGTM suppression syntax - BlobsStorage by @tracyboehrer in New LGTM suppression syntax - BlobsStorage microsoft/botbuilder-dotnet#6782
Logging UnauthorizedAccessException in BotFrameworkHttpAdapter by @tracyboehrer in Logging UnauthorizedAccessException in BotFrameworkHttpAdapter microsoft/botbuilder-dotnet#6784
Added messages for all UnauthorizedAccessException by @tracyboehrer in Added messages for all UnauthorizedAccessException microsoft/botbuilder-dotnet#6786
Converting to new CodeQL suppression syntax by @gandiddi in Converting to new CodeQL suppression syntax microsoft/botbuilder-dotnet#6787
fix: [#6792] Composer Bot with QnA Intent recognized triggers duplicate QnA queries by @sw-joelmut in fix: [#6792] Composer Bot with QnA Intent recognized triggers duplicate QnA queries microsoft/botbuilder-dotnet#6793

Full Changelog: microsoft/botbuilder-dotnet@4.22.3...4.22.4

4.22.3

This is the April 2024 DotNet SDK patch release. This version contains minor bug fixes and security updates.

What's Changed

Microsoft.IdentityModel.Protocols.OpenIdConnect bump in Microsoft.IdentityModel.Protocols.OpenIdConnect bump microsoft/botbuilder-dotnet#6756
Update TimeoutException message in Update TimeoutException message microsoft/botbuilder-dotnet#6773
The ShowTypingMiddleware throws System.ObjectDisposedException when an exception occurs in the bot in fix: [#6752] The ShowTypingMiddleware throws System.ObjectDisposedException when an exception occurs in the bot microsoft/botbuilder-dotnet#6772
Move SaveAllChanges method from SetProperty to OAuthInput in fix: [#6746] Move SaveAllChanges method from SetProperty to OAuthInput microsoft/botbuilder-dotnet#6757
Fix error when building activity with non-string text in Fix error when building activity with non-string text microsoft/botbuilder-dotnet#6753

4.22.2

This is the second February 2024 patch release to correct LU parsing issues and a security fix.

What's Changed

Fix LU parser rules to support all comments in a file by @sw-joelmut in Fix LU parser rules to support all comments in a file microsoft/botbuilder-dotnet#6744
Updated NuGet.Packaging by @tracyboehrer in Updated NuGet.Packaging microsoft/botbuilder-dotnet#6749

4.22.1

This is the February 2024 4.22.1 release for the DotNet SDK. This contains bug fixes.

What's Changed

Manually adding zh-CN and zh-TW to LanguagePolicy in Manually adding zh-CN and zh-TW to LanguagePolicy microsoft/botbuilder-dotnet#6745
Typing middleware not working as expected in teams as well as web chat channel in fix: [#6697] Typing middleware not working as expected in teams as well as web chat channel microsoft/botbuilder-dotnet#6743

4.22.0

This is the January 2024 4.22.0 release for the DotNet SDK. This contains a security fixes Sharepoint support, and ASE improvements.

What's Changed

feat: Add ASE channel validation in feat: Add Ase channel validation. microsoft/botbuilder-dotnet#6718
feat: Include HEAD method to http requests in feat: Include HEAD method to http requests microsoft/botbuilder-dotnet#6713
feat: Support for SharePoint (Viva) Adaptive Card Extension in feat: Support for SharePoint (Viva) Adaptive Card Extension microsoft/botbuilder-dotnet#6695
feat: Add isVisible property to AceData in feat: Add IsVisible property to AceData microsoft/botbuilder-dotnet#6730
fix: USGovSingleTenant OAuthEndpoint in fix: USGovSingleTenant OAuthEndpoint microsoft/botbuilder-dotnet#6714
bump: System.IdentityModel.Tokens.Jwt in System.IdentityModel.Tokens.Jwt bump microsoft/botbuilder-dotnet#6731
Fix a json serializer bug in Fix a json serializer bug. microsoft/botbuilder-dotnet#6722
Add obsolete warning to Orchestrator classes in Add obsolete warning to Orchestrator classes microsoft/botbuilder-dotnet#6711

4.21.1

This is the October 2023 patch release for the Bot Framework DotNet SDK.

What's Changed

fix: [#6683] Timeout issue when using DLASE by @sw-joelmut in fix: [#6683] Timeout issue when using DLASE microsoft/botbuilder-dotnet#6696
Support SN+I authentication with AAD by @mikeus-hanzlik in Support SN+I authentication with AAD microsoft/botbuilder-dotnet#6694
Add sendx5c parameter to Certificate factory class by @ceciliaavila in Add sendx5c parameter to Certificate factory class microsoft/botbuilder-dotnet#6699
[#6643] WithManagedIdentity is experimental and not exist in Microsoft.Identity.Client 4.51.0 by @sw-joelmut in [#6643] WithManagedIdentity is experimental and not exist in Microsoft.Identity.Client 4.51.0 microsoft/botbuilder-dotnet#6686
[#6651] Replace TestFramework package to remove ADAL dependencies by @ceciliaavila in [#6651] Replace TestFramework package to remove ADAL dependencies microsoft/botbuilder-dotnet#6690

Full Changelog: microsoft/botbuilder-dotnet@4.21.0...4.21.1

4.21.0

Welcome to the September 2023 minor release of the Bot Framework SDK.

What's Changed

Teams

Support Bot new invoke type: config by @yingduyingdu in Support Bot new invoke type: config microsoft/botbuilder-dotnet#6632
[Teams] Add support for meeting participants added/removed events by @ceciliaavila in [Teams] Add support for meeting participants added/removed events microsoft/botbuilder-dotnet#6677
Implementation of Teams batch APIs by @ceciliaavila in Implementation of Teams batch APIs microsoft/botbuilder-dotnet#6655

Other

Add WithAuthority to MSAL client application builder by @sw-joelmut in Add WithAuthority to MSAL client application builder microsoft/botbuilder-dotnet#6671
Drop ADAL to unblock pipeline by @Danieladu in Drop ADAL to unblock pipeline microsoft/botbuilder-dotnet#6687
Resolve concurrency issues in InterfaceConverter's ReadJson method by @ramfattah in Resolve concurrency issues in InterfaceConverter's ReadJson method microsoft/botbuilder-dotnet#6681
Use LRUCache in ExpressionParser for efficient memory usage by @ramfattah in Use LRUCache in ExpressionParser for efficient memory usage microsoft/botbuilder-dotnet#6667
Upgrade ANTLR to version 4.11.1 in Microsoft.Bot.Builder.Parsers.LU project by @ceciliaavila in Upgrade ANTLR to version 4.11.1 in Microsoft.Bot.Builder.Parsers.LU project microsoft/botbuilder-dotnet#6670
Updated stray Microsoft.Rest.ClientRuntime dependency by @tracyboehrer in Updated stray Microsoft.Rest.ClientRuntime dependency microsoft/botbuilder-dotnet#6675
#6673 - Fix of SNI auth not working in Cert based authentication by @mikeus-hanzlik in #6673 - Fix of SNI auth not working in Cert based authentication microsoft/botbuilder-dotnet#6676
Update JwtTokenExtractor.cs by @xieofxie in Update JwtTokenExtractor.cs microsoft/botbuilder-dotnet#6685
Updated NuGet.Packaging by @tracyboehrer in Updated NuGet.Packaging microsoft/botbuilder-dotnet#6652
fix: cleanup streaming high-perf logs by @stevengum in fix: cleanup streaming high-perf logs microsoft/botbuilder-dotnet#6650
Explicitly adding 3.1 to test steps. by @tracyboehrer in Explicitly adding 3.1 to test steps. microsoft/botbuilder-dotnet#6666
Microsoft.Rest.ClientRuntime from 2.3.21 to 2.3.24 by @tracyboehrer in Microsoft.Rest.ClientRuntime from 2.3.21 to 2.3.24 microsoft/botbuilder-dotnet#6662
[#6642] Handle null content by @ceciliaavila in [#6642] Handle null content microsoft/botbuilder-dotnet#6654
[#6644] Remove BotFrameworkAdapter Obsolete annotation by @ceciliaavila in [#6644] Remove BotFrameworkAdapter Obsolete annotation microsoft/botbuilder-dotnet#6648
Adding Microsoft SECURITY.MD by @microsoft-github-policy-service in Adding Microsoft SECURITY.MD microsoft/botbuilder-dotnet#6639

New Contributors

@microsoft-github-policy-service made their first contribution in Adding Microsoft SECURITY.MD microsoft/botbuilder-dotnet#6639
@mikeus-hanzlik made their first contribution in #6673 - Fix of SNI auth not working in Cert based authentication microsoft/botbuilder-dotnet#6676

Full Changelog: microsoft/botbuilder-dotnet@4.20.0...4.21.0

4.20.1

Welcome to the July 2023 patch release of the Bot Framework SDK.

What's Changed

Add WithAuthority to MSAL client application builder in Add WithAuthority to MSAL client application builder microsoft/botbuilder-dotnet#6671
Upgrade ANTLR to version 4.11.1 in Microsoft.Bot.Builder.Parsers.LU project in Upgrade ANTLR to version 4.11.1 in Microsoft.Bot.Builder.Parsers.LU project microsoft/botbuilder-dotnet#6670
Use LRUCache in ExpressionParser for efficient memory usage in Use LRUCache in ExpressionParser for efficient memory usage microsoft/botbuilder-dotnet#6667
Updated NuGet.Packaging in Updated NuGet.Packaging microsoft/botbuilder-dotnet#6652
Microsoft.Rest.ClientRuntime from 2.3.21 to 2.3.24 in Microsoft.Rest.ClientRuntime from 2.3.21 to 2.3.24 microsoft/botbuilder-dotnet#6662

4.20.0

This is the June 2023 release of the DotNet SDK. This release contains Teams features and bug/security fixes.

What's Changed

Teams

Support MeetingTabIconSurface in Meeting Notification API by @yingduyingdu in Support MeetingTabIconSurface in Meeting Notification API microsoft/botbuilder-dotnet#6621
Add support for Teams Adaptive cards in QnA Dialog by @anishprasad01 in Add support for Teams Adaptive cards in QnA Dialog microsoft/botbuilder-dotnet#6625
[#6086] Teams is adding support for suggested actions in 1-1 chats by @ceciliaavila in [#6086] Teams is adding support for suggested actions in 1-1 chats microsoft/botbuilder-dotnet#6607
Fix class structure for meeting notification feature extensibility by @yingduyingdu in Fix class structure for meeting notification feature extensibility microsoft/botbuilder-dotnet#6579
[#6596] TeamsChannelData need OnBehalfOf by @ceciliaavila in [#6596] TeamsChannelData need OnBehalfOf microsoft/botbuilder-dotnet#6609

Other

[#6589] Default to MSAL and eliminate ADAL without breaking changes by @sw-joelmut in [#6589] Default to MSAL and eliminate ADAL without breaking changes microsoft/botbuilder-dotnet#6605
Fix cast issue in SendHandoffActivity action by @ceciliaavila in Fix cast issue in SendHandoffActivity action microsoft/botbuilder-dotnet#6575
[#6563] Expired JWT token exception not being handled by @erquirogasw in [#6563] Expired JWT token exception not being handled microsoft/botbuilder-dotnet#6572
Added log to ProcessAsync method in CloudAdapter.cs. by @erquirogasw in Added log to ProcessAsync method in CloudAdapter.cs. microsoft/botbuilder-dotnet#6587
[#6582, #6584] Incorrect serialization of state when using Blob or CosmosDB storage in v4.19.x by @sw-joelmut in [#6582, #6584] Incorrect serialization of state when using Blob or CosmosDB storage in v4.19.x microsoft/botbuilder-dotnet#6585
Removed MyGet instructions by @tracyboehrer in Removed MyGet instructions microsoft/botbuilder-dotnet#6588
[#6591] Concurrency issue with TimeZoneConverter by @ceciliaavila in [#6591] Concurrency issue with TimeZoneConverter microsoft/botbuilder-dotnet#6593
Disabled warning CA1507 in Parsers.LU by @tracyboehrer in Disabled warning CA1507 in Parsers.LU microsoft/botbuilder-dotnet#6600
[#6590] Error while saving bot state to azure blob storage by @sw-joelmut in [#6590] Error while saving bot state to azure blob storage microsoft/botbuilder-dotnet#6595
[#6558] Update to ANTLR 4.11 to compensate for breaking changes between versions by @sw-joelmut in [#6558] Update to ANTLR 4.11 to compensate for breaking changes between versions microsoft/botbuilder-dotnet#6586
Bump minimatch and replace in /libraries/Swagger by @dependabot in Bump minimatch and replace in /libraries/Swagger microsoft/botbuilder-dotnet#6601
fix: Custom Question Answering in MS Teams by @anishprasad01 in fix: Custom Question Answering in MS Teams microsoft/botbuilder-dotnet#6603
[#6616] Telemetry not logging ActivityID and ConversationID by @erquirogasw in [#6616] Telemetry not logging ActivityID and ConversationID microsoft/botbuilder-dotnet#6620
USER scope variable values do not transfer to skill when SSO is configured by @ceciliaavila in USER scope variable values do not transfer to skill when SSO is configured microsoft/botbuilder-dotnet#6612
[#6560] Allow TokenCredential authentication in CosmosDbPartitionedStorage by @ceciliaavila in [#6560] Allow TokenCredential authentication in CosmosDbPartitionedStorage microsoft/botbuilder-dotnet#6614
[#5820] Outgoing Activity Locale being Overwritten by @ceciliaavila in [#5820] Outgoing Activity Locale being Overwritten microsoft/botbuilder-dotnet#6629
[#6624] port: [#4452][#4456][#4460][botframework-streaming] Should reject pending requests on disconnection by @ceciliaavila in [#6624] port: [#4452][#4456][#4460][botframework-streaming] Should reject pending requests on disconnection microsoft/botbuilder-dotnet#6627
[#5577] BotFrameworkClientImpl.PostActivityAsync() doesn't support null fromBotId and toBotId values by @ceciliaavila in [#5577] BotFrameworkClientImpl.PostActivityAsync() doesn't support null fromBotId and toBotId values microsoft/botbuilder-dotnet#6626
[#6588] UserId not being passed to AzureDiagnostics by @sw-joelmut in [#6588] UserId not being passed to AzureDiagnostics microsoft/botbuilder-dotnet#6623
[#6628] port [#4449] CloudAdapter always builds Connector with MicrosoftAppCredentials (never CertificateAppCredentials) -- certificate auth flow broken by @sw-joelmut in [#6628] port [#4449] CloudAdapter always builds Connector with MicrosoftAppCredentials (never CertificateAppCredentials) -- certificate auth flow broken microsoft/botbuilder-dotnet#6631
[#6346] Add Azure Storage (BlobStorage.cs) using a managed identity by @ceciliaavila in [#6346] Add Azure Storage (BlobStorage.cs) using a managed identity microsoft/botbuilder-dotnet#6636
Allow sending GET requests with a body by @ceciliaavila in Allow sending GET requests with a body microsoft/botbuilder-dotnet#6633

New Contributors

@erquirogasw made their first contribution in [#6563] Expired JWT token exception not being handled microsoft/botbuilder-dotnet#6572

Full Changelog: microsoft/botbuilder-dotnet@4.19.0...4.20.0

4.19.3

Welcome to the February 2023 patch release of the Bot Framework SDK.

What's Changed

Concurrency issue with TimeZoneConverter #6593

4.19.2

Welcome to the February 2023 patch release of the Bot Framework SDK.

What's Changed

Teams

Fix class structure for meeting notification feature extensibility #6579

Other

Incorrect serialization of state when using Blob or CosmosDB storage #6585
Added log to ProcessAsync method in CloudAdapter #6587

4.19.1

Welcome to the January 2023 patch release of the Bot Framework SDK. This release has been focused on bug fixes.

What's Changed

Fix cast issue in SendHandoffActivity action #6575
Expired JWT token exception not being handled #6572

Full Changelog: microsoft/botbuilder-dotnet@4.19.0...4.19.1

4.19.0

Welcome to the January 2023 release of the Bot Framework SDK. This release has been focused on bug fixes and general improvements.

What's Changed

Teams

Support Teams message edit, message soft delete, message undelete activities by @yingduyingdu in Support Teams message edit, message soft delete, message undelete activities microsoft/botbuilder-dotnet#6564
Support bot sdk dot net for targeted meeting notification by @yingduyingdu in Support bot sdk dot net for targeted meeting notification microsoft/botbuilder-dotnet#6570

Other

Fix CodeQL alert SM01507: Client-side URL redirect by @ceciliaavila in Fix CodeQL alert SM01507: Client-side URL redirect microsoft/botbuilder-dotnet#6538
Added tsaoptions.json by @tracyboehrer in Added tsaoptions.json microsoft/botbuilder-dotnet#6539
Corrected TSAEnabled key case by @tracyboehrer in Corrected TSAEnabled key case microsoft/botbuilder-dotnet#6541
[#6511] CodeQL alert SM02200: Weak hmacs - Suppress alert for WebexClientWrapper by @ceciliaavila in [#6511] CodeQL alert SM02200: Weak hmacs - Suppress alert for WebexClientWrapper microsoft/botbuilder-dotnet#6540
[#6542] Applying BotMessageSerializerSettings.MaxDepth doesn't seem to work by @ceciliaavila in [#6542] Applying BotMessageSerializerSettings.MaxDepth doesn't seem to work microsoft/botbuilder-dotnet#6546
Fix CodeQL SM02211 alert by @sw-joelmut in Fix CodeQL SM02211 alert microsoft/botbuilder-dotnet#6548
[#6512] CodeQL alert SM00431: Information exposure through an exception by @sw-joelmut in [#6512] CodeQL alert SM00431: Information exposure through an exception microsoft/botbuilder-dotnet#6544
Fix CodeQL alert SM03926: Security sensitive JsonWebTokenHandler validations are disabled by @ceciliaavila in Fix CodeQL alert SM03926: Security sensitive JsonWebTokenHandler validations are disabled microsoft/botbuilder-dotnet#6550
Fix CodeQL SM02211 alert - SerializationBinder by @sw-joelmut in Fix CodeQL SM02211 alert - SerializationBinder microsoft/botbuilder-dotnet#6549
Removed some lingering NewtonSoft <13 references by @tracyboehrer in Removed some lingering NewtonSoft <13 references microsoft/botbuilder-dotnet#6556
[#6510] Suppress CodeQL SM03926 alerts by @ceciliaavila in [#6510] Suppress CodeQL SM03926 alerts microsoft/botbuilder-dotnet#6555
[#6531] Prompt validation of confirm prompt in chatbot is not working for newly added language by @ceciliaavila in [#6531] Prompt validation of confirm prompt in chatbot is not working for newly added language microsoft/botbuilder-dotnet#6554
[CodeQL] Fix remaining SM00431 alerts by @ceciliaavila in [CodeQL] Fix remaining SM00431 alerts microsoft/botbuilder-dotnet#6561
Update ESRP signing task to v2 by @BruceHaley in Update ESRP signing task to v2 microsoft/botbuilder-dotnet#6566

New Contributors

@yingduyingdu made their first contribution in Support Teams message edit, message soft delete, message undelete activities microsoft/botbuilder-dotnet#6564

Full Changelog: microsoft/botbuilder-dotnet@4.18.1...4.19.0

Commits viewable in compare view.

Updated Microsoft.Graph from 5.76.0 to 6.1.0.

Release notes

Sourced from Microsoft.Graph's releases.

6.1.0 6.1.0 (2026-05-20)

Features

generation: update request builders and models (#3128) (11bd3af)

Bug Fixes

ItemWithPath now throws instead of generating malformed URLs with nullish path values (#3072) (a22256b)

6.0.3 6.0.3 (2026-05-14)

Build System

pool with larger mem sku (#3124) (a9881e4)

6.0.2 6.0.2 (2026-05-14)

Build System

TFM sequentially (#3119) (52e30a4)

6.0.1 6.0.1 (2026-05-13)

Build System

update azure pipeline (#3117) (d388a63)

6.0.0 6.0.0 (2026-05-12)

⚠ BREAKING CHANGES

deps: update microsoft-graph-core to 4.x
Dropped net5.0 target framework. The SDK now targets netstandard2.0, netstandard2.1, net8.0, and net10.0. Consumers targeting net5.0 must upgrade to net8.0 or later.

Features

generation: update request builders and models (295bde7)
update target frameworks to net8.0 and net10.0, drop net5.0 (#3096) (a383774)

Miscellaneous Chores

deps: update microsoft-graph-core to 4.x (f05de16)

5.105.0 5.105.0 (2026-04-24)

Features

generation: update request builders and models (143504b)

5.104.0 5.104.0 (2026-04-16)

Features

generation: update request builders and models (bacd780)

5.103.0 5.103.0 (2026-02-19)

Features

generation: update request builders and models (bf1a051)

5.102.0 5.102.0 (2026-02-05)

Features

generation: update request builders and models (#3061) (77fcc69)

5.101.0 5.101.0 (2026-01-22)

Features

generation: update request builders and models (#3058) (89a25f1)

5.100.0 5.100.0 (2026-01-06)

Features

generation: update request builders and models (35267bd)

5.99.0 5.99.0 (2025-12-17)

Features

generation: update request builders and models (b2cf8ee)

5.98.0 5.98.0 (2025-12-03)

Features

generation: update request builders and models (#3038) (3099dbf)

5.97.0 5.97.0 (2025-11-18)

Features

generation: update request builders and models (c7d3d3d)

5.96.0 5.96.0 (2025-11-06)

Features

generation: update request builders and models (#3026) (10a5d6a)

5.95.0 5.95.0 (2025-10-21)

Features

generation: update request builders and models (bd116ee)
generation: update request builders and models (5e39ec0)

5.94.0 5.94.0 (2025-10-03)

Features

generation: update request builders and models (dc5ef6e)

5.93.0 5.93.0 (2025-09-16)

Features

generation: update request builders and models (fc94f58)

5.92.0 5.92.0 (2025-09-10)

Features

generation: update request builders and models (#2990) (8591b7f)

5.91.0 5.91.0 (2025-08-20)

Features

generation: update request builders and models (e7d67e4)

Bug Fixes

build trigger (#2976) (4658040)

5.90.0 5.90.0 (2025-08-12)

Features

generation: update request builders and models (4abd52c)

5.89.0 5.89.0 (2025-08-05)

Features

generation: update request builders and models (929e730)

5.88.0 5.88.0 (2025-07-30)

Features

generation: update request builders and models ([419e244](...

Description has been truncated

Bumps AdaptiveCards from 2.7.3 to 3.1.0 Bumps Microsoft.AspNetCore.Authentication.AzureAD.UI from 6.0.11 to 6.0.36 Bumps Microsoft.AspNetCore.Authentication.JwtBearer from 6.0.11 to 6.0.36 Bumps Microsoft.AspNetCore.Mvc.Core from 2.2.5 to 2.3.10 Bumps Microsoft.AspNetCore.Mvc.NewtonsoftJson from 6.0.11 to 6.0.36 Bumps Microsoft.Bot.Builder.Dialogs from 4.18.1 to 4.23.1 Bumps Microsoft.Bot.Builder.Integration.AspNet.Core from 4.18.1 to 4.23.1 Bumps Microsoft.Graph from 5.76.0 to 6.1.0 Bumps Microsoft.Graph.Auth from 1.0.0-preview.6 to 1.0.0-preview.7 Bumps Microsoft.Identity.Client from 4.48.0 to 4.84.1 Bumps Microsoft.VisualStudio.Web.CodeGeneration.Design from 6.0.10 to 6.0.18 --- updated-dependencies: - dependency-name: AdaptiveCards dependency-version: 3.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: Microsoft.AspNetCore.Authentication.AzureAD.UI dependency-version: 6.0.36 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: Microsoft.AspNetCore.Authentication.JwtBearer dependency-version: 6.0.36 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: Microsoft.AspNetCore.Mvc.Core dependency-version: 2.3.10 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: Microsoft.AspNetCore.Mvc.NewtonsoftJson dependency-version: 6.0.36 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: Microsoft.Bot.Builder.Dialogs dependency-version: 4.23.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: Microsoft.Bot.Builder.Integration.AspNet.Core dependency-version: 4.23.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: Microsoft.Graph dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: Microsoft.Graph.Auth dependency-version: 1.0.0-preview.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: Microsoft.Identity.Client dependency-version: 4.84.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: Microsoft.VisualStudio.Web.CodeGeneration.Design dependency-version: 6.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · May 22, 2026

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels May 20, 2026

dependabot Bot mentioned this pull request May 20, 2026

Bump the all-dependencies group with 5 updates #2292

Closed

Harikrishnan-MSFT closed this May 22, 2026

dependabot Bot deleted the dependabot/nuget/samples/TeamsJS/tab-request-approval/csharp/TabRequestApproval/all-dependencies-1e7b86eff9 branch May 22, 2026 05:02

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the all-dependencies group with 11 updates - #2299

dependabot Bot commented on behalf of github May 20, 2026

Uh oh!

dependabot Bot commented on behalf of github May 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Search code, repositories, users, issues, pull requests...

Uh oh!

Conversation

dependabot Bot commented on behalf of github May 20, 2026

6.0.36

What's Changed

6.0.35

6.0.33

6.0.32

6.0.31

6.0.30

6.0.29

6.0.28

6.0.26

6.0.25

What's Changed

6.0.24

6.0.23

6.0.22

6.0.21

6.0.36

What's Changed

6.0.35

6.0.33

6.0.32

6.0.31

6.0.30

6.0.29

6.0.28

6.0.26

6.0.25

What's Changed

6.0.24

6.0.23

6.0.22

6.0.21

6.0.36

What's Changed

6.0.35

6.0.33

6.0.32

6.0.31

6.0.30

6.0.29

6.0.28

6.0.26

6.0.25

What's Changed

6.0.24

6.0.23

6.0.22

6.0.21

4.23.1

Final Release of Bot Framework DotNet SDK

4.23.0

What's Changed

4.22.9

What's Changed

4.22.8

What's Changed

4.22.7

What's Changed

4.22.4

What's Changed

4.22.3

What's Changed

4.22.2

What's Changed

4.22.1

What's Changed

4.22.0

What's Changed

4.21.1

What's Changed

4.21.0

What's Changed

Teams

Other

New Contributors

4.20.1