October–November 2026 Changelog
Monthly Cosmos service change summary for October–November 2026
changelogmonthly
Updated 2026-11-03
Verified 2026-11-03
This page combines curated release highlights with a generated documentation-refresh summary. The period runs from 2026-09-28 to 2026-11-03. For each change with its pull request link, see the service changelogs and consumer changelogs.
Highlights
- Revamped dashboard on the primary host. Frontend v4 now serves the main dashboard host. It adds the Cosmos Assistant, chat metrics, dark mode, a revamped Model Garden UI, a voice test console rebuilt on the Pipecat UI, and brings back the app Test button. It also reports browser telemetry to Application Insights. ADK, Chat, Configurator, MCP, Model Garden, Observer, RAGflow, Storage and User Service accept requests from the new dashboard origin.
- Two-step login. User Service adds an emailed one-time code for password and OAuth browser logins, and turns it on for develop and every Azure environment. The dashboard asks for the code at sign-in and locks the account MFA switch when org policy requires it. Observer records the new MFA actions in Recent Activity.
- AI Testing Workspace. ADK keeps agent test state on the server, with snapshots, traces, Evaluate and Dataset actions. Chat relays the
adk.v2.test.v1protocol. Observer adds redacted test-session traces, saved tool details for authorized reviewers and scoped Agent Test session metrics. User Service adds theobserver.session_trace.reviewpermission. Configurator adds arequires_approvalpolicy for tools. - Evaluations. ADK aligns offline and live scoring, sets up evaluations automatically, checks expected skills, logs every evaluation model call to Observer with its cost, and filters the overview by date range and trigger. Configurator adds evaluation catalogue v2 and v3, and Observer reports the cost of each evaluation run.
- Context windows and reasoning. ADK knows the context window of every Configurator model, and agents can set their own context window (
context_window_tokens) with a per-model default. Configurator exposes each model's input and output token limits. Agents can turn on dynamic thinking, which sets the reasoning level per request based on how complex it is. - Prompt caching and cost. A per-agent toggle for caching conversation history is on by default. The model library carries cache read and write prices, ADK records Anthropic cache-write tokens, and Observer prices them. Headroom compression now covers Azure OpenAI and reports per-request savings. The TypeScript SDK adds
getMyCostLimits(). - New models and providers. Azure AI Foundry serverless models (
azure_ai), Claude Sonnet 5.5 and GPT-6 Sol (with pricing), and Azure Speech for speech-to-text and text-to-speech. - Modern voice only. Voice moves to the modern Pipecat pipeline and drops legacy behavior. Configurator makes the modern voice configuration the only option, MCP writes it, ADK requires negotiated modern voice sessions and the dashboard shows only modern voice controls. ADK detects the spoken language in media transcription, and Observer ingests native voice usage metrics. A TURN gateway on TCP port 443 serves networks that block UDP, and now runs two replicas.
- Projects. ADK, Configurator, Observer, Storage and User Service attribute Recent Activity to the active project. User Service adds bulk member role updates, role and search filters, paginated member and enablement listings, and organization overview counts. It no longer creates a Default project automatically and deactivates existing ones. MCP checks knowledge base access against the caller's project, RAGflow supports project-scoped knowledge base search for project-only users, and ADK forwards the project-authorized scope to MCP.
- Observability. ADK, Chat, Configurator, MCP, Observer, PII Redactor, RAGflow, Storage and User Service turn on Azure Monitor auto-instrumentation, including Redis, httpx and asyncpg calls where used. Observer adds a log ingestion API.
- Documents and storage. RAGflow reports collection index metrics, reads GIF images with OCR, parses PDFs more safely with Docling and moves blocking work off the request path. Storage caps async uploads at 6 GiB and accepts
.m4aaudio. The TypeScript SDK addsparseDocument()for files in Storage. - Deployments. Configurator, Storage and User Service run their database migrations automatically on deploy.
- JumpStart. SAP Intelligence adds plan mode with structured question forms, SAP CPI integration styles, the Knowledge Map, audio and video attachments, a file extraction tool for every agent, a Motif-compatible UI and guardrails for the SAP data explorer. AMS adds SLA escalation rules with a baseline seeded at project creation, announcement notifications, an AI governance kill switch, and scheduled reports with rendered charts. The VS Code workbench shares one SAP MCP server across users, each with their own SAP connection.
Removed and Retired
- MCP no longer offers business event tools.
- ADK no longer runs Datasets directly; run them from the AI Testing Workspace.
- Legacy voice configuration and behavior are gone from Voice, Configurator, MCP and the dashboard.
- User Service no longer creates a Default project, and existing Default projects are deactivated.
- The TypeScript SDK drops the ADK context controls that ADK ignored, and DevKit drops its V1 REST fallback.
- JumpStart SAP Intelligence removes its RBAC mirror code and tables and the
@cosmos/devkit-contractsdependency. JumpStart AMS removes the duplicate Ops Dashboard.
Security
- Login MFA, as described above.
- MCP upgrades the MCP SDK to 1.30.0. User Service and PII Redactor fix the oauthlib and urllib3 findings from Aquasec.
- DevKit checks the PTY origin and ticket, opens only http(s) MCP auth URLs and redacts secrets in debug output. The DevKit web app takes a patched
astrorelease, and the VS Code workbench a patched@simplewebauthn/server. - Configurator reads its Django secret key from Key Vault in Azure.
- Authorization fixes in ADK, Configurator, MCP, RAGflow and User Service correct service-token use and project scoping.
Verified Change Summary
Generated by the documentation refresh from registered service and consumer changes since 2026-09-28. Curated release highlights should be written above this generated block when a month needs user-facing notes.
| Type | Changes | Services |
|---|---|---|
| Feature | 147 | ADK, Chat, Configurator, Frontend, JumpStart AMS Backend, JumpStart AMS Frontend, JumpStart SAP Intelligence, JumpStart Workbench, MCP Tools Server, Model Garden, Observer, PII Redactor, RAGflow, Storage, TypeScript SDK, User Service, Voice |
| Bugfix | 153 | ADK, Chat, Configurator, Cosmos Code, Email, Frontend, JumpStart AMS Backend, JumpStart AMS Frontend, JumpStart SAP Intelligence, JumpStart Workbench, MCP Tools Server, Observer, PII Redactor, Python SDK, RAGflow, Storage, TypeScript SDK, User Service, Voice |
| Security | 39 | ADK, Configurator, Cosmos Code, Frontend, JumpStart AMS Backend, JumpStart AMS Frontend, JumpStart SAP Intelligence, JumpStart Workbench, MCP Tools Server, Observer, PII Redactor, RAGflow, User Service, Voice |
| Breaking | 0 | None |
| Ops | 4 | JumpStart AMS Backend, JumpStart AMS Frontend |
| Docs | 4 | Cosmos Code, JumpStart SAP Intelligence, JumpStart Workbench |
| Chore | 134 | ADK, Bridge, Chat, Configurator, Cosmos Code, Email, Frontend, JumpStart AMS Backend, JumpStart AMS Frontend, JumpStart SAP Intelligence, JumpStart Workbench, MCP Tools Server, Model Garden, Observer, PII Redactor, RAGflow, Storage, TypeScript SDK, User Service, Voice |
Service Change Backfill Coverage
| Service | Feature | Bugfix | Security | Breaking | Ops | Docs | Chore | Total |
|---|---|---|---|---|---|---|---|---|
| ADK | 18 | 31 | 5 | 0 | 0 | 0 | 15 | 69 |
| Bridge | 0 | 0 | 0 | 0 | 0 | 0 | 1 | 1 |
| Chat | 5 | 6 | 0 | 0 | 0 | 0 | 6 | 17 |
| Configurator | 21 | 7 | 6 | 0 | 0 | 0 | 6 | 40 |
| Cosmos Code | 0 | 11 | 2 | 0 | 0 | 1 | 5 | 19 |
| 0 | 1 | 0 | 0 | 0 | 0 | 2 | 3 | |
| Frontend | 7 | 7 | 3 | 0 | 0 | 0 | 23 | 40 |
| JumpStart AMS Backend | 11 | 9 | 1 | 0 | 1 | 0 | 17 | 39 |
| JumpStart AMS Frontend | 10 | 5 | 1 | 0 | 3 | 0 | 14 | 33 |
| JumpStart SAP Intelligence | 16 | 25 | 3 | 0 | 0 | 1 | 12 | 57 |
| JumpStart Workbench | 3 | 17 | 1 | 0 | 0 | 2 | 9 | 32 |
| MCP Tools Server | 4 | 7 | 1 | 0 | 0 | 0 | 2 | 14 |
| Model Garden | 3 | 0 | 0 | 0 | 0 | 0 | 1 | 4 |
| Observer | 12 | 3 | 1 | 0 | 0 | 0 | 2 | 18 |
| PII Redactor | 1 | 3 | 1 | 0 | 0 | 0 | 2 | 7 |
| Python SDK | 0 | 1 | 0 | 0 | 0 | 0 | 0 | 1 |
| RAGflow | 9 | 6 | 1 | 0 | 0 | 0 | 4 | 20 |
| Storage | 7 | 3 | 0 | 0 | 0 | 0 | 2 | 12 |
| TypeScript SDK | 3 | 2 | 0 | 0 | 0 | 0 | 1 | 6 |
| User Service | 14 | 6 | 12 | 0 | 0 | 0 | 7 | 39 |
| Voice | 3 | 3 | 1 | 0 | 0 | 0 | 3 | 10 |
- Top feature areas by change count: Frontend And Assistant UX (66), Developer Tooling (66), SAP Workbench (60), Authentication And Authorization (46), General Service Changes (46), Storage And Files (38), Project Access And Onboarding (34), Model Garden Deployment And Inference (24).