[qinezh]

Pull Request Checklist

• I have read and followed the CONTRIBUTING.md guidelines.
• I have read and followed the Guidance for submissions involving paid services.
• N/A - This contribution updates an existing external plugin listing rather than adding a new instruction, prompt, agent, skill, workflow, or canvas extension file.
• N/A - No new resource file is introduced, so the file naming convention does not apply.
• The content is clearly structured and follows the example format.
• I have tested the plugin with GitHub Copilot through the automated external-plugin install smoke test and quality gates.
• I have run npm run build and verified that README.md is up to date.
• I am targeting the main branch for this pull request.

---

Description

Upgrades the external microsoft-foundry plugin from version 1.0.16 to 1.0.17 using source commit c47adf137bc54d1814630f1454e3055d92834381.

Regenerates .github/plugin/marketplace.json from the updated external plugin catalog.

---

Type of Contribution

• New instruction file.
• New prompt file.
• New agent file.
• New plugin.
• New skill file.
• New agentic workflow.
• New canvas extension.
• Update to existing instruction, prompt, agent, plugin, skill, workflow, or canvas extension.
• Other (please specify):

---

Validation

• Verified the source root manifest at the pinned commit declares version 1.0.17 and uses the Agent Plugins v1.0.0 schema.
• Verified the canvas entry point is under com.github.copilot/extensions/microsoft-foundry/extension.mjs.
• npm run build
• npm run plugin:validate
• npm run skill:validate
• bash eng/fix-line-endings.sh
• git diff --check
• Automated external-plugin quality gates passed for manifest compliance, skills, installation, version parity, and canvas structure.

---

Additional Notes

This updates a previously approved external plugin listing. The source repository remains microsoft/foundry-dev-tools, and the plugin path remains microsoft-foundry.

---

By submitting this pull request, I confirm that my contribution abides by the Code of Conduct and will be licensed under the MIT License.

[github-actions]

🔒 PR Risk Scan Results

Scanned 2 changed file(s).

Severity	Count
🔴 High	0
🟠 Medium	0
ℹ️ Info	0

✅ No matching risk patterns were detected in changed files.

This is an automated soft-gate report. Findings indicate review targets and do not block merge by themselves.

[github-actions]

🚦 Submission status: 👀 Ready for review

Risk tier: merge-risk:high — Privileged execution, automation, or review-policy change
Required to merge: passing submission-gate checks plus 1 approval from reviewers with write access, including a maintainer with admin or maintain permission.

Why this tier

• plugins/external.json is a high-risk path (automation, scripts, MCP config, hooks, or review policy)

Automated checks

Check	Status	Details
Line endings	✅ Passed	Passed · logs
Spelling	✅ Passed	Passed · logs
Generated README consistency	✅ Passed	Passed · logs
Plugin and extension validation	✅ Passed	Passed · logs
Plugin structure	✅ Passed	Passed · logs
Risk scan	✅ Passed	Passed · logs
Contributor reputation	✅ Passed	Passed · logs
Duplicate resource scan	✅ Passed	Passed · logs
PR quality signal	⏭️ Skipped	Skipped by its workflow · logs
Canvas/plugin smoke test	✅ Passed	Passed · logs

Review

• Approvals: 0/1
• Assigned reviewer: not assigned yet — comment /request-review to ask for one
• Review target date: not set
• Still needed: 1 more approval(s); an approval from a maintainer with admin or maintain permission
• The core-maintainers pool is not staffed yet; an approver with admin or maintain permission is required instead.

Commands

Command	Who	What it does
/rerun-checks	PR author, maintainers	Re-runs failed or incomplete checks and re-evaluates this gate
/request-review	PR author, maintainers	Asks the review rotation to assign a reviewer (adds needs-reviewer)

_{Updated for 37761f4 · gate run · This comment is maintained automatically — see submission gate docs.}

[github-actions]

✅ External plugin PR checks passed

• Changed entries detected: 1
• Workflow state label: ready-for-review
• Full logs: Download quality gate artifact
• Status legend: ✅ pass · ⚠️ warning · 🛑 fail

Per-plugin quality summary

Plugin	spec compliance	vally lint	install smoke test	version match	ref/sha consistency	canvas structure	overall	source tree
microsoft-foundry	✅ pass	✅ pass	✅ pass	✅ pass	⚪ not_run	✅ pass	✅ pass	c47adf137bc54d1814630f1454e3055d92834381

Gate output details

microsoft-foundry - spec compliance (✅ pass)

Agent Plugins v1.0.0 manifest checks passed for plugin.json.

microsoft-foundry - vally lint (✅ pass)

✅ validate-microsoft-foundry-hosted-agent (2/2 checks passed)
    ✓ [spec-compliance] All 1 skill(s) are spec-compliant.
        ✓ spec-compliance: All spec checks passed.
    ✓ [valid-refs] All file references across 1 skill(s) are valid.
        ✓ valid-refs: All file references resolve to existing files within the skill directory.

1 skill(s) linted, 1 passed

microsoft-foundry - install smoke test (✅ pass)

Install smoke test succeeded. Verified /tmp/external-plugin-quality-vgfW3i/copilot-home/.copilot/installed-plugins/external-plugin-intake/microsoft-foundry/plugin.json.

microsoft-foundry - version match (pass)

- c47adf137bc54d1814630f1454e3055d92834381: matched version "1.0.17" at "microsoft-foundry/plugin.json".

microsoft-foundry - ref/sha consistency (not_run)

Ref/SHA consistency gate skipped because one of source.ref or source.sha was not provided.

microsoft-foundry - canvas structure (pass)

- c47adf137bc54d1814630f1454e3055d92834381: found "microsoft-foundry/com.github.copilot/extensions" with entry point "microsoft-foundry/com.github.copilot/extensions/microsoft-foundry/extension.mjs".

- microsoft-foundry: spec=pass, vally-lint=pass, install-smoke=pass, version-match=pass, ref-sha-consistency=not_run, canvas-structure=pass, overall=pass

[Copilot]

🟢 Approval recommended

No active review issues were identified in the plugin version and marketplace metadata updates.

No open issues 🎉

What changed in this PR

Updates the external microsoft-foundry plugin from version 1.0.16 to 1.0.17, pinned to commit c47adf137bc54d1814630f1454e3055d92834381, and synchronizes the generated marketplace catalog.

Changes:

• Updates the plugin version and immutable source SHA.
• Regenerates the marketplace entry with matching metadata.
• No actionable findings were identified.

File	Description
plugins/​external.json	Updates the Microsoft Foundry plugin version and pinned source commit.
.github/​plugin/​marketplace.json	Synchronizes the generated marketplace listing with the updated plugin metadata.

_{Review effort: Lite (auto)}

[aaronpowell]

I verified that commit c47adf137bc54d1814630f1454e3055d92834381 declares microsoft-foundry version 1.0.17 with the Agent Plugins v1.0.0 schema, and the generated marketplace entry matches the pinned SHA and version. The relevant plugin and canvas checks pass; I found no technical issue.