Skip to content

Version 1.10.1

Latest
Latest

Choose a tag to compare

View all tags
@matthewmeyer matthewmeyer released this 04 Nov 18:57
v1.10
70da788

Version 1.10 expands Teams messaging capabilities, improves Copilot Studio connectivity and WebChat reliability, and strengthens attachment-download validation.

Highlights

  • Teams SDK 2.1 integration — Updated @microsoft/agents-hosting-extensions-msteams to @microsoft/teams.api 2.1.0. Added Activity.withTargetedRecipient(...), quoted-reply helpers, improved targeted-message handling, and automatic prompt-preview metadata for replies to targeted messages. (#1327)
  • Copilot Studio endpoint discovery — Published agents configured with an environment ID and schema name can discover and cache conversation operation URLs through the Power Platform API. Explicit direct-connect URLs and prebuilt agents retain their existing routing behavior. (#1346)
  • Conversation isolation — Copilot Studio startup responses now retain request-specific conversation IDs, including responses without activities. WebChat waits for its own startup ID before sending messages, preventing concurrent starts from borrowing another conversation's ID. (#1344)
  • WebChat reliability — Connection failures now report a failed-to-connect status and propagate errors to subscribers. Fixed stuck and duplicate typing indicators, including empty thought streams arriving after an answer, while preserving visible progress and subsequent responses. (#1298, #1343)
  • Attachment-download hardening — When outbound-host enforcement is enabled, generic and Teams/M365 attachment downloads validate HTTPS destinations, DNS answers, and every redirect. Private, loopback, link-local, and shared-network addresses are blocked by default within that policy, and authorization headers are not forwarded to redirects. (#1358)
  • Documentation and validation — Expanded API documentation, clarified proactive continueConversation error handling, improved Teams samples, and strengthened compatibility checks to fail on outdated API baselines. (#1313, #1334, #1335, #1348)
  • Dependency maintenance — Updated runtime and development dependencies, including fixes for vulnerable Fastify and transitive dependencies. (#1329, #1333, #1350)

Compatibility

This release raises the minimum Node.js version and includes breaking changes in the Teams extension.

When upgrading:

  • Use Node.js 22 or later; @microsoft/agents-hosting-extensions-msteams requires 22.12 or later. (#1310, #1327)
  • Pass an explicit recipient to TeamsTurnContext.sendTargetedActivity(...). Replace removed sendTargetedActivities(...) calls with individually targeted sends or sendActivities(...) using activities prepared with withTargetedRecipient(...).
  • Update meeting participant handlers to use MeetingParticipantJoinValue and MeetingParticipantLeaveValue instead of MeetingParticipantsEventDetails.
  • Set a recipient before calling Activity.makeTargetedActivity(), or use withTargetedRecipient(...) directly.
  • Supply explicit conversation IDs when sharing a CopilotStudioClient across conversations. Legacy implicit routing remains supported but is not suitable for concurrent multi-conversation use.
  • Review attachment destinations if outbound-host enforcement is enabled. Deliberate private-network access requires allowPrivateNetworkAddresses: true and an allowlisted host; authenticated redirect targets must instead provide a directly accessible download URL. Enforcement remains opt-in.

See the complete 1.9-to-1.10 comparison for the full change set.

Assets 2
Loading