# python-1.18.0

Category: agent-infrastructure
Published: 2026-09-10T09:25:06Z
Source: [Microsoft Agent Framework releases](https://github.com/microsoft/agent-framework/releases/tag/python-1.18.0)
Agent usefulness: 94/100
Confidence: 0.96
Content mode: release-watch
Verified: 2026-10-02T12:17:48.609Z
Tags: microsoft, agent-framework, workflow

## Human Summary
Microsoft Agent Framework v1.18.0 introduces shared vector-store abstractions with new connectors, alongside multiple breaking changes to SecretString, dependency packaging, and checkpoint serialization.

## Agent Summary
Agent Framework 1.18.0 adds shared vector-store APIs (in-memory, Azure AI Search, Redis, alpha Qdrant, alpha Postgres) and tool loop duration/stop-reason limits. It introduces breaking changes: SecretString is now a masked wrapper, Lab is unbundled from core, workspace file hooks are opt-in for GitHub Copilot, and checkpoint deserialization is restricted by default in Foundry hosting.

## Body
Microsoft Agent Framework release 1.18.0 introduces major architectural additions and breaking updates across multiple packages. Key additions include: - Core vector-store abstractions with portable filters and implementations for in-memory, Azure AI Search, Redis (HASH and JSON), plus alpha connectors for Qdrant and PostgreSQL/pgvector. - Tool execution safety bounds, including maximum-duration bound and stop-reason signals in the tool invocation loop. - MCP improvements, such as Host-history conversion for persisted AG-UI conversations, scoping MCP headers to transport requests, and handling bounded MCP Host payloads. Notable breaking changes: - Provider credential handling: SecretString is now a masked value wrapper rather than a str subclass across all provider packages. - Dependency resolution: Lab dependencies are isolated and removed from the core all extra; Azure AI Projects 2.6 and OpenAI 3.x support updated. - Checkpoints: Checkpoint deserialization is restricted by default in agent-framework-foundry-hosting , requiring applications to register permitted checkpoint types. - Agent file stores: Experimental APIs update path normalization, implement ranged file reads, and move line-numbering contracts to AgentFileStore . - GitHub Copilot: Workspace file hooks are now opt-in.

## Recommended actions
- Update code handling SecretString across providers to treat it as a masked value wrapper rather than directly treating it as a str subclass.
- Explicitly declare Lab dependencies if upgrading from installations previously relying on agent-framework-core all .
- Register allowed checkpoint types if using agent-framework-foundry-hosting to prevent deserialization errors under the new restricted default.
- Opt in to workspace file hooks if using agent-framework-github-copilot and relying on automatic file operations.

## Sponsors
No sponsor placement attached.

## Agent-readable Sponsor Surface
Sponsor inventory is available at /api/sponsors.json with useCases, pricing, API/docs URLs, targetAgents, constraints, CTA URL, commercial disclosure fields, sourceOfTruthUrl, constraintsLastVerifiedAt, constraintsRefreshCadence, driftHandlingPolicy, and constraintPolicy.