npm / @microsoft/agents-hosting
@microsoft/agents-hosting
What changed in @microsoft/agents-hosting 1, from its official release notes, upgrade guides and advisories. Also covers @microsoft/agents-activity. Sources checked 2026-10-18.
12 breaking1 deprecations9 new APIs and options5 behavior and defaults18 fixes and other
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli init@microsoft/agents-hosting 145 changes
Breaking changes 12
M365AttachmentDownloader replaces TeamsAttachmentDownloader.
The ready state is not signaled until the first conversation ID is received.
Removed from AgentApplication authorization.
Removed from AgentApplication authorization.
Now requires botAppIdOrIdentity as its first argument: the agent app ID or a JwtPayload from the incoming request.
Removed as a CloudAdapter member; retrieve it from turncontext.turnstate using adapter.ConnectorClientKey.
Now requires botAppIdOrIdentity as its first argument: the agent app ID or a JwtPayload from the incoming request.
Now requires a TurnContext as its first argument.
Now requires a TurnContext as its first argument.
Now requires a TurnContext as its first argument.
Removed as a CloudAdapter member; retrieve it from turncontext.turnstate using adapter.UserTokenClientKey.
The oAuthFlow class was removed.
Deprecations 1
The legacy Teams extension package is deprecated but remains available for backward compatibility; existing applications can migrate when convenient.
New APIs and options 9
Updated APIs cover Teams activities, meetings, messaging extensions, task modules, file consent, and proactive messaging.
Activity.toJsonString() accepts a custom replacer.
TeamsAttachmentDownloader was added to Core.
Initial support for Microsoft Agent ID was added.
Configure multiple parallel application identities and map connections to service URLs; existing settings automatically create a default Connection when configuration is unchanged.
Now accepts a JwtPayload.
Copilot Studio client can stream returned Activities as they arrive using an AsyncGenerator.
Adds a streaming version of startConversationAsync that returns Activities as they arrive using an AsyncGenerator.
Overrides the UserTokenClient API endpoint through an environment variable.
Behavior and default changes 5
UserTokenService requests now include a CorrelationID header.
TurnContext methods now validate activities with Zod.
Scopes are included in the agentic token cache key.
StreamingResponse now supports non-streaming channels.
Token acquisition logic for agentic scenarios was updated.
Fixes and other changes 18
Error reporting is improved.
Recipient routing for targeted activities is fixed.
Teams client setup is improved.
For M365 Copilot Web, OAuth token exchange uses the base channel instead of the composite channelId, fixing sign-in behavior.
Resolves an issue where background token exchanges could sometimes cause a timeout.
Fixes Choice Prompt index recognition, which did not work.
CosmosDB storage error messages now provide actionable context.
Fixes a consent error when using MS Teams with Copilot.
Addresses differences in returned value types between Botbuilder v3/v4 and the Microsoft 365 Agents SDK.
Corrects x5c certificate loading.
Fixes the consent flow for Copilot in Teams.
Fixes the TeamsInfo class, which had been broken since 1.1.
Fixed prompt appendChoices support for the heroCard style.
Backwards compatibility was added for the Copilot Studio Client.
Fixed FIC authentication for agentic scenarios.
MsalTokenProvider was updated to match the AuthProvider interface.
Fixed onTurn so its handler is called for every activity.
A behavior change in streaming was fixed.