.NET: update remaining dependencies

[Vincent Biret (baywet)]

Motivation & Context

Keep the .NET dependency set current with recent Agent Framework, provider SDK, hosting, command-line, analyzer, testing, and sample dependency releases. This reduces version drift across the .NET tree and keeps sample projects aligned with the package versions they demonstrate.

Description & Review Guide

• What are the major changes?

• Updates centrally managed package versions in Directory.Packages.props, including Aspire Azure OpenAI, Google GenAI, Mscc Generative AI, System.CommandLine, Copilot Studio client/auth/hosting packages, OnnxRuntime GenAI, MSAL extensions, code coverage tooling, and Roslyn analyzer/compiler packages.

• Updates sample-specific package references for Microsoft.Agents.AI, Microsoft.Extensions.Hosting, Microsoft.Agents.AI.Foundry, and Foundry hosted agent invocation packages.

• Moves Foundry hosted agent samples to the latest applicable AgentFrameworkVersion values used by this branch.

• What is the impact of these changes?

• Consumers and samples build against newer dependency versions without changing framework behavior or public API surface.

• Sample projects stay compatible with the latest provider and hosting package versions covered by this dependency refresh.

• What do you want reviewers to focus on?

• Confirm the selected versions are the intended dependency targets for this update batch.

• Pay particular attention to the larger version jumps for Roslyn packages, Neo4j.Driver, System.CommandLine, and the Microsoft.Agents package family.

Related Issue Fixes #

Contribution Checklist

• The code builds clean without any errors or warnings
• All unit tests pass, and I have added new tests where possible
• The PR follows the Contribution Guidelines
• This PR is linked to an issue and there is no other open PR for this issue (see Related Issue above).
• This is not a breaking change. If it is a breaking change, add the breaking change label (or add "[BREAKING]" to the title prefix, before or after any language prefix)
  — a workflow keeps the label and title prefix in sync automatically

[github-actions]

MAF Automated Review — Iteration 2

Result: No findings
Scope: 2 net-new commit(s): b016dee02817, e9ad61a08c67
Model: gpt-5.6-sol-fast

Overview

This incremental revision restores documented package compatibility pins in two standalone .NET samples. The AgentMemory pin matches both the project and README packaging contract, while the GraphRAG pin is explicitly held with its provider version pending the linked upstream release. Both projects opt out of Central Package Management and remain covered by the pull-request solution build, and no Critical, High, or Medium defect was established.

Reviewed the supplied incremental change set across correctness, security/reliability, architecture, and failure behavior.
No publishable findings remained after source verification for this scope.

[Copilot]

🔵 Needs a closer look

The dependency refresh spans multiple package families and sample compatibility surfaces, warranting final human review.

Review details

• Files reviewed: 5/5 changed files
• Comments generated: 0 new
• Review effort level: Lite (auto)

Note

Copilot is running an experiment and ran this review at Lite.