deps: bump Microsoft.Agents.AI 1.3 → 1.4

[ANcpLua]

Summary

• Stable: 1.3.0 → 1.4.0 (core, Abstractions, Workflows, OpenAI).
• Preview: 1.3.0-preview.260423.1 → 1.4.0-preview.260505.1 (Hosting, Hosting.AGUI.AspNetCore, Anthropic, DevUI).
• RC: 1.3.0-rc1 → 1.4.0-rc1 (Workflows.Declarative).

Why

ANcpLua.Agents 1.4.1 transitively pins Microsoft.Agents.AI ≥ 1.4.0, so any consumer (e.g. qyl) that picks up the new ANcpLua.Agents major against the 1.3.0 SDK truth fails restore with NU1109 Detected package downgrade: Microsoft.Agents.AI from 1.4.0 to centrally defined 1.3.0. Mirroring the upstream lockstep cut on 2026-05-05 unblocks consumers.

Test plan

• CI green
• qyl restore + build green once both PRs merge (companion: Alexander-Nachtmann/qyl#240)

🤖 Generated with Claude Code

Summary by CodeRabbit

• Chores
  • Updated Microsoft.Agents framework dependencies to version 1.4.0, including support for newer component versions.

[github-actions]

@coderabbitai autofix

[coderabbitai]

📝 Walkthrough

Walkthrough

Nine Microsoft.Agents package version properties in src/Build/Common/Version.props were updated from 1.3.0-era releases to 1.4.0-era releases. AIVersion, AbstractionsVersion, WorkflowsVersion, and AIOpenAIVersion transition to stable 1.4.0. Hosting, HostingAGUIAspNetCore, Anthropic, and DevUI move to 1.4.0-preview.260505.1. WorkflowsDeclarativeVersion shifts to 1.4.0-rc1. The PropertyGroup structure remains intact with no syntax violations.

🚥 Pre-merge checks | ✅ 8

✅ Passed checks (8 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	Title follows conventional commits format (deps prefix), is under 72 characters (40 chars), contains no trailing period, and directly reflects the changeset: bumping Microsoft.Agents.AI from 1.3 to 1.4.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
No Datetime.Now/Utcnow	✅ Passed	PR modifies only src/Build/Common/Version.props (MSBuild XML file, not C#). No C# files changed; check not applicable.
No .Result/.Wait() Blocking Async	✅ Passed	PR modifies only src/Build/Common/Version.props (MSBuild XML). No C# files changed. Check for blocking async patterns in C# is not applicable.
No Null-Forgiving Operator Without Justification	✅ Passed	No null-forgiving operators found in 18 modified C# files. All ! occurrences are logical NOT operators, not nullability suppressions. PR complies with rewrite-over-suppress policy.
No Suppression Of Fixable Diagnostics	✅ Passed	PR modifies only src/Build/Common/Version.props (MSBuild XML configuration). No C# files added or modified. Check requires scanning C# files for suppressions—not applicable here.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Note

Autofix is a beta feature. Expect some limitations and changes as we gather feedback and continue to improve it.

Autofix skipped. No unresolved CodeRabbit review comments with fix instructions found.

[claude]

Claude encountered an error —— View job

---

I'll analyze this and get back to you.

[coderabbitai]

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (1)

src/Build/Common/Version.props (1)

90-109: ⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Update the Microsoft.Agents banner text to match the new version set.

Line 91 still says MAF 1.3.0, but this block now pins 1.4.0 family versions. Please update the comment to avoid future drift/confusion.

Suggested patch

-    Microsoft.Agents.AI (MAF 1.3.0). Numeric base ships in lockstep from upstream;
+    Microsoft.Agents.AI (MAF 1.4.0). Numeric base ships in lockstep from upstream;

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@src/Build/Common/Version.props` around lines 90 - 109, Update the XML comment
header that currently reads "Microsoft.Agents.AI (MAF 1.3.0)" to reflect the new
pinned family versions (e.g., change to "MAF 1.4.0") so the banner matches the
version properties such as MicrosoftAgentsAIVersion,
MicrosoftAgentsAIAbstractionsVersion, MicrosoftAgentsAIWorkflowsVersion,
MicrosoftAgentsAIOpenAIVersion, MicrosoftAgentsAIHostingVersion,
MicrosoftAgentsAIHostingAGUIAspNetCoreVersion,
MicrosoftAgentsAIAnthropicVersion, MicrosoftAgentsAIDevUIVersion, and
MicrosoftAgentsAIWorkflowsDeclarativeVersion in this PropertyGroup.

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Outside diff comments:
In `@src/Build/Common/Version.props`:
- Around line 90-109: Update the XML comment header that currently reads
"Microsoft.Agents.AI (MAF 1.3.0)" to reflect the new pinned family versions
(e.g., change to "MAF 1.4.0") so the banner matches the version properties such
as MicrosoftAgentsAIVersion, MicrosoftAgentsAIAbstractionsVersion,
MicrosoftAgentsAIWorkflowsVersion, MicrosoftAgentsAIOpenAIVersion,
MicrosoftAgentsAIHostingVersion, MicrosoftAgentsAIHostingAGUIAspNetCoreVersion,
MicrosoftAgentsAIAnthropicVersion, MicrosoftAgentsAIDevUIVersion, and
MicrosoftAgentsAIWorkflowsDeclarativeVersion in this PropertyGroup.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro

Run ID: 2bfd3192-aa3d-440e-96ef-0960ed3e15f2

📥 Commits

Reviewing files that changed from the base of the PR and between 3fcaf9b and 2c3d400.

📒 Files selected for processing (1)

• src/Build/Common/Version.props

📜 Review details

⏰ Context from checks skipped due to timeout of 180000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (3)

• GitHub Check: test (windows-latest)
• GitHub Check: test (ubuntu-latest)
• GitHub Check: test (macos-latest)

🧰 Additional context used

📓 Path-based instructions (2)

src/Build/**

⚙️ CodeRabbit configuration file

src/Build/**: Build targets shared across .NET.Sdk, .Test, .Web variants. Review for:
target-name collisions with consumer csproj (use unique prefixes), correct
BeforeTargets/AfterTargets ordering, and idempotent execution (target
should be safe to run twice).

Files:

• src/Build/Common/Version.props

**/*.props

⚙️ CodeRabbit configuration file

**/*.props: MSBuild property files. Review for: condition guards on every override
(consumer must be able to opt out), no <RemoveAttributes> on items
that consumers may have set, and that defaults are sensible without
forcing a downstream cascade.

Files:

• src/Build/Common/Version.props

🔇 Additional comments (1)

src/Build/Common/Version.props (1)

101-109: Version matrix is coherent and correctly lockstepped.

Stable/preview/RC tracks are consistently aligned on numeric base 1.4.0, which is the right shape to avoid downgrade/binding skew.