From 0f2ea4207e84723495cccd1d53e0724348ff4035 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 24 Aug 2026 04:36:46 +0000
Subject: [PATCH] deps: Bump Microsoft.Agents.AI from 1.17.0 to 1.19.0

---
updated-dependencies:
- dependency-name: Microsoft.Agents.AI
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Directory.Packages.props | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Directory.Packages.props b/Directory.Packages.props
index 872288bc..a6e6db65 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -65,7 +65,7 @@
          GHSA-w3q9-fxm7-j8fq and NuGetAudit fails the build on it, correctly. -->
     <PackageVersion Include="Microsoft.Build.Framework" Version="18.9.6" />
     <PackageVersion Include="Microsoft.NET.StringTools" Version="18.9.6" />
-    <PackageVersion Include="Microsoft.Agents.AI" Version="1.17.0" />
+    <PackageVersion Include="Microsoft.Agents.AI" Version="1.19.0" />
     <!-- 10.0.11 is the 2026-08-11 .NET security servicing release (10 CVEs across .NET 8/9/10, of which
          CVE-2026-62897 is CVSS 7.0). Taken immediately because the blast radius is one test project and
          nothing ships it. NOTE, and this is the part that matters: bumping this pin does NOT close that CVE