diff --git a/Directory.Packages.props b/Directory.Packages.props
index 872288bc..a6e6db65 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -65,7 +65,7 @@
          GHSA-w3q9-fxm7-j8fq and NuGetAudit fails the build on it, correctly. -->
     <PackageVersion Include="Microsoft.Build.Framework" Version="18.9.6" />
     <PackageVersion Include="Microsoft.NET.StringTools" Version="18.9.6" />
-    <PackageVersion Include="Microsoft.Agents.AI" Version="1.17.0" />
+    <PackageVersion Include="Microsoft.Agents.AI" Version="1.19.0" />
     <!-- 10.0.11 is the 2026-08-11 .NET security servicing release (10 CVEs across .NET 8/9/10, of which
          CVE-2026-62897 is CVSS 7.0). Taken immediately because the blast radius is one test project and
          nothing ships it. NOTE, and this is the part that matters: bumping this pin does NOT close that CVE