Microsoft.Graph.Communications.Common 1.2.0.18742

Release History

1.2.0.18742 (2026-10-30)

Features Added

• Added a trailing optional automaticDecompression parameter to GraphHttpClient for opt-in GZip/Deflate response decompression, plus Brotli on .NET 6 and later. It defaults to None; the original constructor signature and caller-supplied HttpClient settings remain supported (with a supplied client, automaticDecompression is ignored and a warning is logged).
• Cloud-aware inbound authentication: new SetAuthentication(appId, tokenProvider, AzureCloudInstance) and SetAuthentication(appId, tokenProvider, GraphAuthenticationOptions) overloads let bots validate notifications in sovereign clouds (US Gov, China) instead of assuming public cloud. They are instance methods on CommunicationsClientBuilder and extension methods on ICommunicationsClientBuilder (CommunicationsClientBuilderExtensions), so existing implementations of the interface are unaffected. Unsupported AzureCloudInstance values (e.g. AzureGermany) throw instead of defaulting to public-cloud trust.
• Added RequestValidationResult.IsAuthorizationFailure. When set on a failed validation, notification processing returns 403 Forbidden without a WWW-Authenticate challenge instead of 401.
• Hardened inbound token validation: signing-algorithm pinning, signing-key issuer validation, iss/tid binding, and an allowlist of trusted calling service app ids.
• Added x-microsoft-bot-auth-type and x-microsoft-bot-sdk-version response headers on authenticated notification responses.
• Microsoft.Graph.Communications.Client now also targets net8.0.
• Microsoft.Graph.Communications.Common now also targets net8.0. net8.0 apps get this build, so GraphHttpClient uses SocketsHttpHandler.

Breaking Changes

• INotificationProcessor.ProcessNotificationAsync(request, RequestValidationResult) now returns 401 Unauthorized instead of 403 Forbidden when the inbound token is missing or invalid, and includes an RFC 6750 WWW-Authenticate challenge. Custom IRequestAuthenticationProvider implementations that reject an authenticated caller for authorization reasons should set IsAuthorizationFailure = true to keep returning 403.
• The ProcessNotificationAsync overloads taking a RequestValidationResult or a validation callback are now [Obsolete]; use ICommunicationsClient.ProcessNotificationAsync(HttpRequestMessage), which authenticates internally. Suppress with CS0618 if you need to defer the migration.
• On net8.0, the obsolete ICommunicationsClientBuilder.SetAuthenticationProvider now reports diagnostic GRAPHCOMM_AUTH_0001 instead of CS0618, so existing CS0618 suppressions no longer silence it. Migrate to SetAuthentication, or suppress GRAPHCOMM_AUTH_0001 to defer the migration.
• The net8.0 build of Microsoft.Graph.Communications.Common omits the CollectionUtils.GetValueOrDefault(this IDictionary<TKey, TValue>, ...) extension methods. On net8.0, calls on a Dictionary<TKey, TValue> or IReadOnlyDictionary<TKey, TValue> bind to the BCL GetValueOrDefault with the same behavior, while calls on an IDictionary<TKey, TValue> no longer compile; use TryGetValue instead. Assemblies already compiled against the netstandard2.0 build that call these methods throw MissingMethodException in a net8.0 app and must be rebuilt without those calls (for example, using TryGetValue).
• DefaultAuthenticationProvider constructors and the SetAuthentication overloads now require a non-null ITokenProvider and throw ArgumentNullException otherwise. Every bot needs outbound tokens, for example to answer a call, so a missing token provider is now reported at startup instead of failing later.
• Inbound bearer tokens (Microsoft Entra and legacy OID) that are bound to a proof-of-possession key (RFC 7800 cnf claim) are rejected: proof-of-possession bound tokens are not accepted as bearer tokens.

Bugs Fixed

• Inbound token validation now uses the authority's OpenID metadata through its configuration manager instead of a key snapshot, so a token signed by a key the cached metadata does not contain yet (for example after a signing key rollover) triggers a metadata refresh, and the last known good metadata is used as a fallback. This also makes the Microsoft Entra signing key issuer validation take effect for v2 tokens.
• Azure China: the Microsoft Entra metadata is read from login.partner.microsoftonline.cn, and the accepted issuers are https://login.partner.microsoftonline.cn/{tenant}/v2.0 (v2) and https://sts.chinacloudapi.cn/{tenant}/ (v1), the issuers Microsoft Entra in Azure China actually uses. login.chinacloudapi.cn is still accepted as an authority URL in GraphAuthenticationOptions.

Other Changes

• ICommunicationsClientBuilder.SetNotificationUrl and SetServiceBaseUrl now report the offending URL's scheme and host and set ArgumentException.ParamName when the scheme is not HTTPS. Only scheme/host/port are included — any user-info, path, query or fragment (which may carry credentials or opaque routing values) is omitted from the message. Code matching the previous literal text "URI must be https." should switch to ParamName.

1.2.0.18736 (2026-09-28)

Features Added

• Use Microsoft.Skype.Bots.Media 1.31.0.225-preview for net6.0 and 1.33.0.258-preview for net8.0/net472.
• Remove the public dependencies on internal-only packages that were added in 1.2.0.18725.

1.2.0.18725 (2026-09-02)

Features Added

• Add CVI lobby management APIs for admitting or removing a participant from the lobby and admitting all lobby participants.
• Add v1 SDK support for raising and lowering hands in calls and meetings.

Other Changes

• Microsoft.Graph.Communications.Calls and Microsoft.Graph.Communications.Calls.Media now also target net8.0 (in addition to net472 and net6.0).
• Microsoft.Graph.Communications.Calls.Media added a dependency on System.Formats.Asn1 8.0.1 and on internal-only packages, which were removed in 1.2.0.18736.

1.2.0.17950 (2026-07-02)

Features Added

• Added DefaultAuthenticationProvider and ICommunicationsClientBuilder.SetAuthentication(appId, tokenProvider): built-in validation of inbound notifications that accepts both Microsoft Entra tokens and legacy OID tokens, to support the migration to Entra.

Other Changes

• ICommunicationsClientBuilder.SetAuthenticationProvider is now [Obsolete] (CS0618); use SetAuthentication(appId, tokenProvider) instead.
• Upgrade Microsoft.Identity.Client (MSAL) from 4.73.1 to 4.83.1.
• Microsoft.Graph.Communications.Core added dependencies on Microsoft.IdentityModel.Protocols.OpenIdConnect 8.16.0, Microsoft.IdentityModel.Validators 8.16.0 and System.IdentityModel.Tokens.Jwt 8.16.0, used for inbound token validation.
• Upgrade System.Text.Json from 8.0.5 to 10.0.5 in Microsoft.Graph.Communications.Client and Microsoft.Graph.Communications.Calls. net472 bots may need to update binding redirects.
• Microsoft.Graph.Communications.Core and Microsoft.Graph.Communications.Common now list the Kiota packages (Microsoft.Kiota.Abstractions, Authentication.Azure, Http.HttpClientLibrary, Serialization.Form, Serialization.Json, Serialization.Multipart, Serialization.Text) 1.22.1 as direct dependencies.
• Upgrade Microsoft.Extensions.Logging.Abstractions from 8.0.2 to 8.0.3 in Microsoft.Graph.Communications.Common.
• Microsoft.Graph.Communications.Calls.Media added a dependency on SQLitePCLRaw.bundle_e_sqlite3 3.0.3.

1.2.0.15690 (2025-10-24)

Other Changes

• No changes beyond 1.2.0.15533 are recorded in this version's package release notes or dependency list.

1.2.0.15533 (2025-10-13)

Other Changes

• Upgrade Microsoft.Identity.Client (MSAL) from 4.67.2 to 4.73.1.

1.2.0.15382 (2025-10-02)

Other Changes

• No changes beyond 1.2.0.15235 are recorded in this version's package release notes or dependency list.

1.2.0.15235 (2025-09-12)

Features Added

• Expose Opt-in/Opt-out for Interactive Delta Roster.
• Upgrade Microsoft.Graph to 5.92.0 version
• Upgrade Graph.Core to 3.2.4 version
• Removed direct dependency of Kiota libraries
• Upgrade Microsoft.OpenApi.Hidi to 1.3.10 version
• Upgrade Microsoft.OpenApi.Kiota to 1.8.2 version
• Upgrade Microsoft.Skype.Bots.Media to 1.31.0.225-preview version

Bugs Fixed

• Fixed an issue where the Communications SDK might not capture additional endpoints in participant roster updates when using delta roster notification mode.
• Fixed an issue where the Microsoft Graph AnswerAsync method throws an exception when the bot tries to answer incoming calls, caused by Windows updates

1.2.0.10563 (2024-04-16)

Features Added

Breaking Changes

Bugs Fixed

• Fix CommsNotification AdditionalData dictionary overrided issue in Call update.

Other Changes

1.2.0.10115 (2024-03-04)

Features Added

• Expose Subcode as part of ServiceException model

Breaking Changes

Bugs Fixed

• Fix RemovedResources behavior for Guest/Phone type identities.

Other Changes

• Performance improvement for AdditionalDataExtensions.

1.2.0.9895 (2024-02-12)

Features Added

Breaking Changes

Bugs Fixed

• Participants OnUpdated fix to not return removedParticipants incorrectly.
• Concurrency issue fix for notification queue callbacks.

Other Changes

• Performance improvements for SDK event processing behavior.

1.2.0.9486 (2024-01-09)

Features Added

• Enable Send DTMF Tones API in V1.
• Expose PreferredDisplayName property in Participant object.
• Expose OnlineMeetingRestricted property in Participant object.

Breaking Changes

Bugs Fixed

Other Changes

1.2.0.9212 (2023-12-07)

Features Added

• Upgrade SDK to use Kiota generation, Consume Microsoft Graph SDK v5.
• Delta roster notification changes to V1.

Breaking Changes

• Model namespace changes.
• Model properties that were arrays are now List implementation.
• Model property types which were enum are now nullable enums.
• Service Exception class structure changes.
• Other generated model changes when using kiota generated models.

Bugs Fixed

Other Changes

1.2.0.7270 (2023-06-30)

Features Added

• Added support for .net core.
• Bot Media upgrade to 1.26.0.94-alpha version.

Breaking Changes

Bugs Fixed

1.2.0.5304 (2022-10-06)

Features Added

• Promote start/end content sharing notifications to v1.
• Promote AddLargeGalleryView api endpoint to v1.

Breaking Changes

Bugs Fixed

Other Changes

1.2.0.4161 (2022-02-22)

(Customer reported exceptions occur after updating Graph Microsoft.Graph dependency to 4.18.0, please use the default version Microsoft.Graph 4.14.0)

Features Added

• Cancel a pending call invitation to a participant.
• Supporting FIPS enabled environment.

Breaking Changes

Bugs Fixed

Other Changes