Merge branch 'main' into fix/kernel-json-schema-forward-refs

Author: Diwak4r

dotnet/nuget/nuget-package.props

@@ -1,15 +1,15 @@
 <Project>
   <PropertyGroup>
     <!-- Central version prefix - applies to all nuget packages. -->
-    <VersionPrefix>1.78.0</VersionPrefix>
+    <VersionPrefix>1.79.0</VersionPrefix>
     <PackageVersion Condition="'$(VersionSuffix)' != ''">$(VersionPrefix)-$(VersionSuffix)</PackageVersion>
     <PackageVersion Condition="'$(VersionSuffix)' == ''">$(VersionPrefix)</PackageVersion>
 
     <Configurations>Debug;Release;Publish</Configurations>
     <IsPackable>true</IsPackable>
 
     <!-- Package validation. Baseline Version should be the latest version available on NuGet. -->
-    <PackageValidationBaselineVersion>1.77.0</PackageValidationBaselineVersion>
+    <PackageValidationBaselineVersion>1.78.0</PackageValidationBaselineVersion>
     <!-- Validate assembly attributes only for Publish builds -->
     <NoWarn Condition="'$(Configuration)' != 'Publish'">$(NoWarn);CP0003</NoWarn>
     <!-- Do not validate reference assemblies -->

python/semantic_kernel/__init__.py

@@ -2,7 +2,7 @@
 
 from semantic_kernel.kernel import Kernel
 
-__version__ = "1.44.0"
+__version__ = "1.44.1"
 
 DEFAULT_RC_VERSION = f"{__version__}-rc9"
 

python/semantic_kernel/agents/copilot_studio/copilot_studio_agent.py

@@ -181,7 +181,10 @@ def _cert_thumbprint(cert_path: Path) -> str:
 
         pem_bytes = Path(cert_path).read_bytes()
         der_bytes = ssl.PEM_cert_to_DER_cert(pem_bytes.decode())
-        return hashlib.sha1(der_bytes, usedforsecurity=False).hexdigest().upper()
+        # SHA-1 is not used here as a security primitive; it is required to compute the X.509 certificate thumbprint
+        # (the `x5t` JWT header value), which MSAL and Microsoft Entra ID mandate to be a SHA-1 digest for the
+        # `thumbprint` client credential. Hence the `usedforsecurity=False` flag.
+        return hashlib.sha1(der_bytes, usedforsecurity=False).hexdigest().upper()  # CodeQL [SM02167] x5t thumbprint
 
 
 # endregion