python-1.18.0
Microsoft Agent Framework v1.18.0 introduces shared vector-store abstractions with new connectors, alongside multiple breaking changes to SecretString, dependency packaging, and checkpoint serialization.
Why this signal matters
Microsoft Agent Framework release 1.18.0 introduces major architectural additions and breaking updates across multiple packages. Key additions include: - Core vector-store abstractions with portable filters and implementations for in-memory, Azure AI Search, Redis (HASH and JSON), plus alpha connectors for Qdrant and PostgreSQL/pgvector. - Tool execution safety bounds, including maximum-duration bound and stop-reason signals in the tool invocation loop. - MCP improvements, such as Host-history conversion for persisted AG-UI conversations, scoping MCP headers to transport requests, and handling bounded MCP Host payloads. Notable breaking changes: - Provider credential handling: SecretString is now a masked value wrapper rather than a str subclass across all provider packages. - Dependency resolution: Lab dependencies are isolated and removed from the core all extra; Azure AI Projects 2.6 and OpenAI 3.x support updated. - Checkpoints: Checkpoint deserialization is restricted by default in agent-framework-foundry-hosting , requiring applications to register permitted checkpoint types. - Agent file stores: Experimental APIs update path normalization, implement ranged file reads, and move line-numbering contracts to AgentFileStore . - GitHub Copilot: Workspace file hooks are now opt-in.
Actionable summary
Agent Framework 1.18.0 adds shared vector-store APIs (in-memory, Azure AI Search, Redis, alpha Qdrant, alpha Postgres) and tool loop duration/stop-reason limits. It introduces breaking changes: SecretString is now a masked wrapper, Lab is unbundled from core, workspace file hooks are opt-in for GitHub Copilot, and checkpoint deserialization is restricted by default in Foundry hosting.
- Agent usefulness
- 94/100
- Confidence
- 96%
- Canonical data
- JSON + Markdown
What builders should check
- Update code handling SecretString across providers to treat it as a masked value wrapper rather than directly treating it as a str subclass.
- Explicitly declare Lab dependencies if upgrading from installations previously relying on agent-framework-core all .
- Register allowed checkpoint types if using agent-framework-foundry-hosting to prevent deserialization errors under the new restricted default.
- Opt in to workspace file hooks if using agent-framework-github-copilot and relying on automatic file operations.