Microsoft.Graph.Communications.Core 1.2.0-beta.18742

Release History

1.2.0.18742 (2026-10-30)

Features Added

• Added a trailing optional automaticDecompression parameter to GraphHttpClient for opt-in GZip/Deflate response decompression, plus Brotli on .NET 6 and later. It defaults to None; the original constructor signature and caller-supplied HttpClient settings remain supported (with a supplied client, automaticDecompression is ignored and a warning is logged).
• Cloud-aware inbound authentication: new SetAuthentication(appId, tokenProvider, AzureCloudInstance) and SetAuthentication(appId, tokenProvider, GraphAuthenticationOptions) overloads let bots validate notifications in sovereign clouds (US Gov, China) instead of assuming public cloud. They are instance methods on CommunicationsClientBuilder and extension methods on ICommunicationsClientBuilder (CommunicationsClientBuilderExtensions), so existing implementations of the interface are unaffected. Unsupported AzureCloudInstance values (e.g. AzureGermany) throw instead of defaulting to public-cloud trust.
• Added RequestValidationResult.IsAuthorizationFailure. When set on a failed validation, notification processing returns 403 Forbidden without a WWW-Authenticate challenge instead of 401.
• Hardened inbound token validation: signing-algorithm pinning, signing-key issuer validation, iss/tid binding, and an allowlist of trusted calling service app ids.
• Added x-microsoft-bot-auth-type and x-microsoft-bot-sdk-version response headers on authenticated notification responses.
• Microsoft.Graph.Communications.Client now also targets net8.0.
• Microsoft.Graph.Communications.Common now also targets net8.0. net8.0 apps get this build, so GraphHttpClient uses SocketsHttpHandler.

Breaking Changes

• INotificationProcessor.ProcessNotificationAsync(request, RequestValidationResult) now returns 401 Unauthorized instead of 403 Forbidden when the inbound token is missing or invalid, and includes an RFC 6750 WWW-Authenticate challenge. Custom IRequestAuthenticationProvider implementations that reject an authenticated caller for authorization reasons should set IsAuthorizationFailure = true to keep returning 403.
• The ProcessNotificationAsync overloads taking a RequestValidationResult or a validation callback are now [Obsolete]; use ICommunicationsClient.ProcessNotificationAsync(HttpRequestMessage), which authenticates internally. Suppress with CS0618 if you need to defer the migration.
• On net8.0, the obsolete ICommunicationsClientBuilder.SetAuthenticationProvider now reports diagnostic GRAPHCOMM_AUTH_0001 instead of CS0618, so existing CS0618 suppressions no longer silence it. Migrate to SetAuthentication, or suppress GRAPHCOMM_AUTH_0001 to defer the migration.
• The net8.0 build of Microsoft.Graph.Communications.Common omits the CollectionUtils.GetValueOrDefault(this IDictionary<TKey, TValue>, ...) extension methods. On net8.0, calls on a Dictionary<TKey, TValue> or IReadOnlyDictionary<TKey, TValue> bind to the BCL GetValueOrDefault with the same behavior, while calls on an IDictionary<TKey, TValue> no longer compile; use TryGetValue instead. Assemblies already compiled against the netstandard2.0 build that call these methods throw MissingMethodException in a net8.0 app and must be rebuilt without those calls (for example, using TryGetValue).
• DefaultAuthenticationProvider constructors and the SetAuthentication overloads now require a non-null ITokenProvider and throw ArgumentNullException otherwise. Every bot needs outbound tokens, for example to answer a call, so a missing token provider is now reported at startup instead of failing later.
• Inbound bearer tokens (Microsoft Entra and legacy OID) that are bound to a proof-of-possession key (RFC 7800 cnf claim) are rejected: proof-of-possession bound tokens are not accepted as bearer tokens.

Bugs Fixed

• Inbound token validation now uses the authority's OpenID metadata through its configuration manager instead of a key snapshot, so a token signed by a key the cached metadata does not contain yet (for example after a signing key rollover) triggers a metadata refresh, and the last known good metadata is used as a fallback. This also makes the Microsoft Entra signing key issuer validation take effect for v2 tokens.
• Azure China: the Microsoft Entra metadata is read from login.partner.microsoftonline.cn, and the accepted issuers are https://login.partner.microsoftonline.cn/{tenant}/v2.0 (v2) and https://sts.chinacloudapi.cn/{tenant}/ (v1), the issuers Microsoft Entra in Azure China actually uses. login.chinacloudapi.cn is still accepted as an authority URL in GraphAuthenticationOptions.

Other Changes

• ICommunicationsClientBuilder.SetNotificationUrl and SetServiceBaseUrl now report the offending URL's scheme and host and set ArgumentException.ParamName when the scheme is not HTTPS. Only scheme/host/port are included — any user-info, path, query or fragment (which may carry credentials or opaque routing values) is omitted from the message. Code matching the previous literal text "URI must be https." should switch to ParamName.

1.2.0.18736 (2026-09-28)

Other Changes

• Use Microsoft.Skype.Bots.Media 1.31.0.225-preview for net6.0 and 1.33.0.258-preview for net8.0/net472.
• Remove the public dependencies on internal-only packages that were added in 1.2.0.18376.

1.2.0.18725 (2026-09-03)

Other Changes

• No changes beyond 1.2.0.18596 are recorded in this version's package release notes or dependency list.

1.2.0.18596 (2026-08-06)

Breaking Changes

• Upgrade Microsoft.Graph.Beta from 5.120.0-preview to 6.5.0-preview and Microsoft.Graph.Core from 3.2.4 to 4.0.1 (3.2.2 to 4.0.1 in Microsoft.Graph.Communications.Common). Both are major version upgrades: generated Graph model and request builder types changed, so bots that use Graph beta types directly may need source updates.
• Upgrade the Kiota packages (Microsoft.Kiota.Abstractions, Authentication.Azure, Http.HttpClientLibrary, Serialization.Form, Serialization.Json, Serialization.Multipart, Serialization.Text) from 1.22.1 to 2.0.0. Bots that pin Kiota 1.x must move to 2.x.

Other Changes

• Upgrade Microsoft.IdentityModel.Protocols.OpenIdConnect, Microsoft.IdentityModel.Validators and System.IdentityModel.Tokens.Jwt from 8.16.0 to 8.18.0.

1.2.0.18480 (2026-07-29)

Other Changes

• No changes beyond 1.2.0.18470 are recorded in this version's package release notes or dependency list.

1.2.0.18470 (2026-07-29)

Other Changes

• Restored the participant-bound raiseHand action (IParticipant.RaiseHandAsync), which was removed in 1.2.0.18438. It is additive and co-exists with the call-bound ICall.RaiseHandAsync; lowerHand (call + participant) and lowerAllHands (participants collection) are unchanged.

1.2.0.18438 (2026-07-28)

Breaking Changes

• Removed the participant-bound raiseHand action (IParticipant.RaiseHandAsync). Raising a hand is self-only, so it is now a call-bound action only; use ICall.RaiseHandAsync. This mirrors the mute/unmute precedent (you cannot raise another participant's hand). lowerHand (call + participant) and lowerAllHands (participants collection) are unchanged.

Other Changes

• Microsoft.Graph.Communications.Calls and Microsoft.Graph.Communications.Calls.Media target net6.0 again, alongside net472 and net8.0.

1.2.0.18376 (2026-07-24)

Features Added

• Expose self RaiseHand/LowerHand actions on the call (ICall.RaiseHandAsync/LowerHandAsync) to Beta.

Other Changes

• Microsoft.Graph.Communications.Calls and Microsoft.Graph.Communications.Calls.Media target net472 and net8.0. This version does not include a net6.0 build (restored in 1.2.0.18438).
• Microsoft.Graph.Communications.Calls.Media added a dependency on System.Formats.Asn1 8.0.1 and on internal-only packages, which were removed in 1.2.0.18736.

1.2.0.17950 (2026-07-02)

Other Changes

• No changes beyond 1.2.0.17851 are recorded in this version's package release notes or dependency list.

1.2.0.17851 (2026-06-25)

Other Changes

• Microsoft.Graph.Communications.Calls.Media added a dependency on SQLitePCLRaw.bundle_e_sqlite3 3.0.3.

1.2.0.17760 (2026-06-18)

Other Changes

• Microsoft.Graph.Communications.Core and Microsoft.Graph.Communications.Common now list the Kiota packages (Microsoft.Kiota.Abstractions, Authentication.Azure, Http.HttpClientLibrary, Serialization.Form, Serialization.Json, Serialization.Multipart, Serialization.Text) 1.22.1 as direct dependencies.

1.2.0.17526 (2026-05-30)

Other Changes

• No changes beyond 1.2.0.17509 are recorded in this version's package release notes or dependency list.

1.2.0.17509 (2026-05-28)

Features Added

• Added DefaultAuthenticationProvider and ICommunicationsClientBuilder.SetAuthentication(appId, tokenProvider): built-in validation of inbound notifications that accepts both Microsoft Entra tokens and legacy OID tokens, to support the migration to Entra.

Other Changes

• ICommunicationsClientBuilder.SetAuthenticationProvider is now [Obsolete] (CS0618); use SetAuthentication(appId, tokenProvider) instead.
• Upgrade Microsoft.Identity.Client (MSAL) from 4.73.1 to 4.83.1.
• Microsoft.Graph.Communications.Core added dependencies on Microsoft.IdentityModel.Protocols.OpenIdConnect 8.16.0, Microsoft.IdentityModel.Validators 8.16.0 and System.IdentityModel.Tokens.Jwt 8.16.0, used for inbound token validation.
• Upgrade System.Text.Json from 8.0.5 to 10.0.5 in Microsoft.Graph.Communications.Client and Microsoft.Graph.Communications.Calls. net472 bots may need to update binding redirects.
• Upgrade Microsoft.Extensions.Logging.Abstractions from 8.0.2 to 8.0.3 in Microsoft.Graph.Communications.Common.

1.2.0.16019 (2026-02-25)

Bugs Fixed

• Fix a logging compatibility issue that could cause runtime null scope errors when using newer versions of Microsoft.Extensions.Logging.Abstractions.

1.2.0.15690 (2025-10-24)

Features Added

• Expose Opt-in/out for Interactive Delta Roster to Beta.
• Upgrade Graph.Beta to 5.107.0-preview version
• Upgrade Graph.Core to 3.2.4 version

Breaking Changes

Bugs Fixed

Other Changes

1.2.0.15533 (2025-10-13)

Other Changes

• Upgrade Microsoft.Identity.Client (MSAL) from 4.67.2 to 4.73.1.

1.2.0.15382 (2025-10-02)

Features Added

• Expose Opt-in/out for Interactive Delta Roster to Beta.
• Upgrade Graph.Beta to 5.107.0-preview version
• Upgrade Graph.Core to 3.2.4 version

Other Changes

• The published packages depend on Microsoft.Graph.Beta 5.120.0-preview. Microsoft.Graph.Communications.Common depends on Microsoft.Graph.Core 3.2.2.
• Upgrade Microsoft.Identity.Client (MSAL) from 4.66.1 to 4.67.2.
• Upgrade Microsoft.Skype.Bots.Media from 1.29.0.75-preview to 1.31.0.225-preview.
• Upgrade Microsoft.Extensions.Logging.Abstractions from 2.2.0 to 8.0.2 in Microsoft.Graph.Communications.Common, and Newtonsoft.Json from 13.0.2 to 13.0.3 in Microsoft.Graph.Communications.Common and Microsoft.Graph.Communications.Client.
• Microsoft.Graph.Communications.Client and Microsoft.Graph.Communications.Calls added a dependency on System.Text.Json 8.0.5.

1.2.0.12553 (2024-12-11)

Features Added

• Expose Opt-in/out to delta roster notifications to Beta.
• Upgrade Graph.Beta to 5.86.0-preview version
• Upgrade Graph.Core to 3.2.0 version
• Removed direct dependecy of Kiota libraries
• Upgrade Microsoft.OpenApi.Hidi to 1.3.10 version
• Upgrade Microsoft.OpenApi.Kiota to 1.8.2 version
• Upgrade Microsoft.Skype.Bots.Media to 1.29.0.75-preview version

Breaking Changes

Bugs Fixed

• Fixed an issue where the Communications SDK might not capture additional endpoints in participant roster updates when using delta roster notification mode.
• Fixed an issue where the Microsoft Graph AnswerAsync method throws an exception when the bot tries to answer incoming calls, caused by Windows updates

Other Changes

1.2.0.10378 (2024-03-25)

Features Added

Breaking Changes

Bugs Fixed

• Fix CommsNotification AdditionalData dictionary overrided issue in Call update.

Other Changes

1.2.0.9995 (2024-02-22)

Features Added

• Expose Subcode as part of ServiceException model

Breaking Changes

Bugs Fixed

• Fix RemovedResources behavior for Guest/Phone type identities.

Other Changes

• Performance improvement for AdditionalDataExtensions.

1.2.0.9882 (2024-02-09)

Features Added

Breaking Changes

Bugs Fixed

• Participants OnUpdated fix to not return removedParticipants incorrectly.
• Concurrency issue fix for notification queue callbacks.

Other Changes

• Performance improvements for SDK event processing behavior.

1.2.0.9216 (2023-12-07)

Features Added

• Enable Send DTMF Tones API in Beta.

Breaking Changes

Bugs Fixed

Other Changes

1.2.0.9113 (2023-11-30)

Features Added

Breaking Changes

Bugs Fixed

• Fix Compliance Recording Grouping issue caused by Kiota serialization

1.2.0.9097 (2023-11-29)

Features Added

Breaking Changes

Bugs Fixed

• Fix Compliance Recording Grouping issue caused by Kiota serialization

Other Changes

1.2.0.9097 (2023-11-29)

Features Added

Breaking Changes

Bugs Fixed

• Kiota upgrade related deserialization issues

Other Changes

1.2.0.8177 (2023-10-26)

Features Added

• Upgrade SDK to use Kiota generation, Consume Microsoft Graph Beta SDK v5

Breaking Changes

• Model namespace changes
• Model properties that were arrays are now List implementation
• Model property types which were enum are now nullable enums
• Service Exception class structure changes
• Other generated model changes when using kiota generated models

Bugs Fixed

Other Changes

1.2.0.8177 (2023-09-19)

Features Added

• Expose PreferredDisplayName property in Participant object.

Breaking Changes

Bugs Fixed

1.2.0.7993 (2023-09-07)

Features Added

Breaking Changes

Bugs Fixed

• Fix remove participant delta roster behavior.

Other Changes

1.2.0.7362 (2023-07-14)

Features Added

• Added support for .net core.
• Bot Media upgrade to 1.26.0.94-alpha version.

Breaking Changes

Bugs Fixed

Other Changes

1.2.0.6916 (2023-05-16)

Features Added

• Promote delta roster notification changes to beta.
• Bot Media upgrade to 1.24.0.36 version.

Breaking Changes

Bugs Fixed

Other Changes