.NET: deps/ai extensions

[Vincent Biret (baywet)]

Motivation & Context

Refresh the .NET dependency set to pick up newer AI provider, hosting, Aspire, AGUI, storage, identity, and Microsoft.Extensions package versions. This keeps samples and integration tests aligned with the current package ecosystem, removes now-unnecessary dependency overrides, and updates code that depends on renamed or serializer-sensitive APIs.

Description & Review Guide

• What are the major changes?

  • Updated centrally managed package versions, including Microsoft.Extensions.AI 10.10.0, OpenAI 2.13.0, ModelContextProtocol 2.2.0, AGUI 0.0.6, OllamaSharp 5.4.30, Anthropic 12.45.0, Azure.AI.AgentServer.Core beta.29, Cosmos 3.63.0, Azure.Storage.Blobs 12.29.2, Hyperlight 0.6.0, Microsoft Agents packages 1.9.28-beta, and related Aspire/identity packages.
  • Updated Foundry hosted agent samples to use Agent Framework 1.20.0-preview.260831.1 and matching dependency versions.
  • Removed Dapr sample central package transitive pinning workarounds that are no longer needed with the newer Microsoft.Extensions baseline.
  • Updated AGUI session persistence test helpers to pass serializer options with the AGUI source-generated resolver.
  • Updated the Anthropic skills sample to read LatestVersionID instead of the previous version property.

• What is the impact of these changes?

  • Keeps .NET samples and tests compatible with current dependency versions.
  • Simplifies sample project files by removing obsolete version overrides.
  • Preserves AGUI serialization behavior after the dependency updates by explicitly configuring the required serializer context.
  • Fixes the sample skill version output to use the correct property exposed by the updated package.

• What do you want reviewers to focus on?

  • Whether the dependency version set is internally consistent across central package management and sample-specific package references.
  • Whether the AGUI serializer option changes are the right long-term pattern for tests and host utilities.
  • Whether any sample projects still carry unnecessary direct version pins or warnings after the package refresh.

Related Issue

Fixes #

No open PR currently exists for this branch (deps/ai-extensions). Replace the placeholder above with the linked issue and confirm there is no other open PR for that issue before submitting.

Contribution Checklist

• The code builds clean without any errors or warnings
• All unit tests pass, and I have added new tests where possible
• The PR follows the Contribution Guidelines
• This PR is linked to an issue and there is no other open PR for this issue (see Related Issue above).
• This is not a breaking change. If it is a breaking change, add the breaking change label (or add "[BREAKING]" to the title prefix, before or after any language prefix) — a workflow keeps the label and title prefix in sync automatically.

[github-actions]

MAF Automated Review — Iteration 1

Result: No findings
Scope: full PR (18 commit(s)): fe4372b0b5de, d082cdc19f2f, 88119fdef4af, 70bcec546922, 903d6abd63c3, b15268bf6ee7, 44f4054ca62a, e26eda06670e, 3a644d950b6b, 31ee70e9cc96, 00f8e3ee0415, 21e5a2412825, be1b3338f352, fa722778660e, 792c84a0e5c4, 784c32d93a42, cb9d2d04320d, 363133b5d08e
Model: gpt-5.6-sol-fast

Overview

The PR refreshes the .NET dependency set, keeps the principal package families aligned, and updates the two source-level compatibility points required by the new Anthropic and AGUI APIs. The AGUI serializer options preserve the production resolver ordering and are covered by both in-memory and Azure Storage two-turn persistence paths. The only material candidate was a mixed MCP adapter version in one standalone sample, but its exact package graph restores and builds and the sample's UseMcpSkills provider construction succeeds, so no Critical, High, or Medium defect was established.

Reviewed the supplied pull-request change set across correctness, security/reliability, architecture, and failure behavior.
No publishable findings remained after source verification for this scope.

[github-code-quality]

Code Coverage Overview

Languages: C#

C# / code-coverage/dotnet

The overall line coverage in commit 5b154dc in the deps/ai-extensions branch is 84%. Line coverage data for the main branch is not yet available.

Show a line coverage summary of the most covered files.

File	main	deps/ai-extensions 5b154dc	+/-
/home/runner/wo...valConverter.cs	—	100%	—
/home/runner/wo...entsProvider.cs	—	99%	—
/home/runner/wo...nticAnalyzer.cs	—	94%	—
/home/runner/wo...tClientAgent.cs	—	91%	—
/home/runner/wo...putConverter.cs	—	90%	—
/home/runner/wo...kflowBuilder.cs	—	90%	—
/home/runner/wo...kflowSession.cs	—	87%	—
/home/runner/wo...SkillsSource.cs	—	86%	—
/home/runner/wo...onExtensions.cs	—	81%	—
/home/runner/wo...ctionVisitor.cs	—	70%	—

---

_{Updated September 11, 2026 12:22 UTC}

[github-actions]

MAF Automated Review — Iteration 2

Result: No findings
Scope: 2 net-new commit(s): 6092e8fe1293, c0fe0ffa09f4
Model: gpt-5.6-sol-fast

Overview

This incremental change corrects the self-contained hosted sample's Agent Framework MCP version and explicitly aligns the MCP Tasks extension with the existing MCP 2.2.0 reference. The explicit pins, matching central versions, paired framework dependencies, and task-lifecycle tests support the compatibility of the resulting dependency graph; no publishable defect was established.

Reviewed the supplied incremental change set across correctness, security/reliability, architecture, and failure behavior.
No publishable findings remained after source verification for this scope.