Sign in

October–November 2026 Changelog

Monthly Cosmos service change summary for October–November 2026

changelogmonthly

Updated 2026-11-03

Verified 2026-11-03

This page combines curated release highlights with a generated documentation-refresh summary. The period runs from 2026-09-28 to 2026-11-03. For each change with its pull request link, see the service changelogs and consumer changelogs.

Highlights

  • Revamped dashboard on the primary host. Frontend v4 now serves the main dashboard host. It adds the Cosmos Assistant, chat metrics, dark mode, a revamped Model Garden UI, a voice test console rebuilt on the Pipecat UI, and brings back the app Test button. It also reports browser telemetry to Application Insights. ADK, Chat, Configurator, MCP, Model Garden, Observer, RAGflow, Storage and User Service accept requests from the new dashboard origin.
  • Two-step login. User Service adds an emailed one-time code for password and OAuth browser logins, and turns it on for develop and every Azure environment. The dashboard asks for the code at sign-in and locks the account MFA switch when org policy requires it. Observer records the new MFA actions in Recent Activity.
  • AI Testing Workspace. ADK keeps agent test state on the server, with snapshots, traces, Evaluate and Dataset actions. Chat relays the adk.v2.test.v1 protocol. Observer adds redacted test-session traces, saved tool details for authorized reviewers and scoped Agent Test session metrics. User Service adds the observer.session_trace.review permission. Configurator adds a requires_approval policy for tools.
  • Evaluations. ADK aligns offline and live scoring, sets up evaluations automatically, checks expected skills, logs every evaluation model call to Observer with its cost, and filters the overview by date range and trigger. Configurator adds evaluation catalogue v2 and v3, and Observer reports the cost of each evaluation run.
  • Context windows and reasoning. ADK knows the context window of every Configurator model, and agents can set their own context window (context_window_tokens) with a per-model default. Configurator exposes each model's input and output token limits. Agents can turn on dynamic thinking, which sets the reasoning level per request based on how complex it is.
  • Prompt caching and cost. A per-agent toggle for caching conversation history is on by default. The model library carries cache read and write prices, ADK records Anthropic cache-write tokens, and Observer prices them. Headroom compression now covers Azure OpenAI and reports per-request savings. The TypeScript SDK adds getMyCostLimits().
  • New models and providers. Azure AI Foundry serverless models (azure_ai), Claude Sonnet 5.5 and GPT-6 Sol (with pricing), and Azure Speech for speech-to-text and text-to-speech.
  • Modern voice only. Voice moves to the modern Pipecat pipeline and drops legacy behavior. Configurator makes the modern voice configuration the only option, MCP writes it, ADK requires negotiated modern voice sessions and the dashboard shows only modern voice controls. ADK detects the spoken language in media transcription, and Observer ingests native voice usage metrics. A TURN gateway on TCP port 443 serves networks that block UDP, and now runs two replicas.
  • Projects. ADK, Configurator, Observer, Storage and User Service attribute Recent Activity to the active project. User Service adds bulk member role updates, role and search filters, paginated member and enablement listings, and organization overview counts. It no longer creates a Default project automatically and deactivates existing ones. MCP checks knowledge base access against the caller's project, RAGflow supports project-scoped knowledge base search for project-only users, and ADK forwards the project-authorized scope to MCP.
  • Observability. ADK, Chat, Configurator, MCP, Observer, PII Redactor, RAGflow, Storage and User Service turn on Azure Monitor auto-instrumentation, including Redis, httpx and asyncpg calls where used. Observer adds a log ingestion API.
  • Documents and storage. RAGflow reports collection index metrics, reads GIF images with OCR, parses PDFs more safely with Docling and moves blocking work off the request path. Storage caps async uploads at 6 GiB and accepts .m4a audio. The TypeScript SDK adds parseDocument() for files in Storage.
  • Deployments. Configurator, Storage and User Service run their database migrations automatically on deploy.
  • JumpStart. SAP Intelligence adds plan mode with structured question forms, SAP CPI integration styles, the Knowledge Map, audio and video attachments, a file extraction tool for every agent, a Motif-compatible UI and guardrails for the SAP data explorer. AMS adds SLA escalation rules with a baseline seeded at project creation, announcement notifications, an AI governance kill switch, and scheduled reports with rendered charts. The VS Code workbench shares one SAP MCP server across users, each with their own SAP connection.

Removed and Retired

  • MCP no longer offers business event tools.
  • ADK no longer runs Datasets directly; run them from the AI Testing Workspace.
  • Legacy voice configuration and behavior are gone from Voice, Configurator, MCP and the dashboard.
  • User Service no longer creates a Default project, and existing Default projects are deactivated.
  • The TypeScript SDK drops the ADK context controls that ADK ignored, and DevKit drops its V1 REST fallback.
  • JumpStart SAP Intelligence removes its RBAC mirror code and tables and the @cosmos/devkit-contracts dependency. JumpStart AMS removes the duplicate Ops Dashboard.

Security

  • Login MFA, as described above.
  • MCP upgrades the MCP SDK to 1.30.0. User Service and PII Redactor fix the oauthlib and urllib3 findings from Aquasec.
  • DevKit checks the PTY origin and ticket, opens only http(s) MCP auth URLs and redacts secrets in debug output. The DevKit web app takes a patched astro release, and the VS Code workbench a patched @simplewebauthn/server.
  • Configurator reads its Django secret key from Key Vault in Azure.
  • Authorization fixes in ADK, Configurator, MCP, RAGflow and User Service correct service-token use and project scoping.

Verified Change Summary

Generated by the documentation refresh from registered service and consumer changes since 2026-09-28. Curated release highlights should be written above this generated block when a month needs user-facing notes.

TypeChangesServices
Feature147ADK, Chat, Configurator, Frontend, JumpStart AMS Backend, JumpStart AMS Frontend, JumpStart SAP Intelligence, JumpStart Workbench, MCP Tools Server, Model Garden, Observer, PII Redactor, RAGflow, Storage, TypeScript SDK, User Service, Voice
Bugfix153ADK, Chat, Configurator, Cosmos Code, Email, Frontend, JumpStart AMS Backend, JumpStart AMS Frontend, JumpStart SAP Intelligence, JumpStart Workbench, MCP Tools Server, Observer, PII Redactor, Python SDK, RAGflow, Storage, TypeScript SDK, User Service, Voice
Security39ADK, Configurator, Cosmos Code, Frontend, JumpStart AMS Backend, JumpStart AMS Frontend, JumpStart SAP Intelligence, JumpStart Workbench, MCP Tools Server, Observer, PII Redactor, RAGflow, User Service, Voice
Breaking0None
Ops4JumpStart AMS Backend, JumpStart AMS Frontend
Docs4Cosmos Code, JumpStart SAP Intelligence, JumpStart Workbench
Chore134ADK, Bridge, Chat, Configurator, Cosmos Code, Email, Frontend, JumpStart AMS Backend, JumpStart AMS Frontend, JumpStart SAP Intelligence, JumpStart Workbench, MCP Tools Server, Model Garden, Observer, PII Redactor, RAGflow, Storage, TypeScript SDK, User Service, Voice

Service Change Backfill Coverage

ServiceFeatureBugfixSecurityBreakingOpsDocsChoreTotal
ADK183150001569
Bridge00000011
Chat560000617
Configurator2176000640
Cosmos Code0112001519
Email01000023
Frontend7730002340
JumpStart AMS Backend11910101739
JumpStart AMS Frontend10510301433
JumpStart SAP Intelligence162530011257
JumpStart Workbench3171002932
MCP Tools Server471000214
Model Garden30000014
Observer1231000218
PII Redactor13100027
Python SDK01000001
RAGflow961000420
Storage730000212
TypeScript SDK32000016
User Service14612000739
Voice331000310
  • Top feature areas by change count: Frontend And Assistant UX (66), Developer Tooling (66), SAP Workbench (60), Authentication And Authorization (46), General Service Changes (46), Storage And Files (38), Project Access And Onboarding (34), Model Garden Deployment And Inference (24).