Semantic Kernel dotnet-1.79.0 リリースSemantic Kernel dotnet-1.79.0

Microsoft has released version 1.79.0 of Semantic Kernel for .NET, a maintenance update to its open-source SDK for building AI agents and weaving large language models into conventional software. The release ships no new user-facing capabilities; instead it collects a version bump, a build-toolchain upgrade, a JavaScript dependency patch in a sample application, and a code-scanning tweak. For teams that pin their projects to specific Semantic Kernel builds, releases like this matter because they keep the framework current with its own dependencies and reproducible across environments.

The headline entry is straightforward: the package version is advanced to 1.79.0. Accompanying that, the .NET SDK used to build the repository moves from 10.0.301 to 10.0.302, a patch-level increment within the .NET 10 tooling line. Such SDK bumps typically fold in bug fixes and security servicing from the .NET team without changing the public API surface, and keeping the build pinned to a current SDK helps ensure the compiled artifacts benefit from those fixes.

Two smaller changes round out the release. The first updates the form-data package from 4.0.5 to 4.0.6 in the React frontend of the ProcessFrameworkWithSignalR sample. form-data is a widely used Node.js library for composing multipart/form-data request bodies, and the bump appears to be a routine dependency refresh of the kind commonly driven by automated tooling such as Dependabot. Because the change is scoped to a demonstration frontend rather than the core libraries, it is unlikely to affect production applications that consume Semantic Kernel's .NET packages directly. The sample itself illustrates the framework's Process Framework paired with SignalR, ASP.NET Core's real-time messaging layer, to stream updates from a running workflow to a browser client.

The second change suppresses a CodeQL false positive in internal HTTP code. CodeQL is GitHub's static-analysis engine used to flag potential security and quality issues; suppressing a false positive means the maintainers reviewed a flagged pattern, judged it not to be an actual vulnerability, and annotated the code so the alert stops recurring. It is a hygiene step that reduces noise in the project's security dashboards rather than a functional fix.

Some background helps explain where this fits. Semantic Kernel is Microsoft's framework for orchestrating LLM prompts, plugins, and increasingly agentic workflows, and it is maint