## Description

This PR improves the consistency of how the function_behavior parameter
is passed through internal invoke_function_call callsites.

### Changes

- Thread function_behavior parameter through all internal
invoke_function_call callsites for consistent parameter handling:
  - Realtime connector (_open_ai_realtime.py)
  - Responses agent (responses_agent_thread_actions.py)
  - Assistant agent (assistant_thread_actions.py)
  - Azure AI agent (agent_thread_actions.py)
  - Bedrock agent (bedrock_agent.py)
- Add defensive logging in kernel.py when function_behavior is not
provided
- Add unit tests covering parameter handling scenarios

### Testing

- All existing tests pass (678 passed, 0 failed)
- 5 new tests added covering the updated parameter handling

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Update OpenAPI document parsing to gate file and HTTP ref resolution
separately.

### Breaking change

- `RESOLVE_FILES` is no longer enabled by default. Only internal JSON
pointer references are resolved by default.
- Users with multi-file OpenAPI specs must now pass
`enable_file_ref_resolution=True` via
`OpenAPIFunctionExecutionParameters`.
- `enable_external_ref_resolution` has been renamed to
`enable_http_ref_resolution`.

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

…4029)

### Motivation and Context

Strengthen the OpenAPI plugin's server URL handling by making validation
active by default.

### Description

- Introduce `ServerUrlValidator` with host classification and DNS
resolution
- Make `RestApiOperationServerUrlValidationOptions` enforce validation
by default instead of opt-in
- Add `AllowPrivateNetworkAccess` opt-out for scenarios that require it
- Remove experimental `AllowedSchemes` property (SKEXP0040)
- Update `RestApiOperationRunner` to apply validation unconditionally
- Add unit tests

### Contribution Checklist

- [x] The code builds clean without any errors or warnings
- [x] The PR follows the [SK Contribution
Guidelines](https://github.com/microsoft/semantic-kernel/blob/main/CONTRIBUTING.md)
- [x] The code follows the [.NET coding
conventions](https://learn.microsoft.com/dotnet/csharp/fundamentals/coding-style/coding-conventions)
- [x] All unit tests pass
- [x] New unit tests added

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

## Summary

Improves the Python test coverage workflow with better input handling
and token management.

## Changes

- Added validation for the PR number file content before use in
environment setup
- Switched to using the built-in github.token instead of a PAT for
artifact download and PR comments
- Added actions: read permission to support artifact download with the
built-in token

## Notes

The workflow_run trigger provides a github.token scoped to the base
repository with the permissions declared in the workflow file. The
pull-requests: write permission allows posting comments on PRs,
including those opened from forks.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

- Update VersionPrefix from 1.76.0 to 1.77.0
- Update PackageValidationBaselineVersion from 1.75.0 to 1.76.0

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

### Motivation and Context

Bump Python package version to 1.43.0 for a release

<!-- Thank you for your contribution to the semantic-kernel repo!
Please help reviewers and future users, providing the following
information:
  1. Why is this change required?
  2. What problem does it solve?
  3. What scenario does it contribute to?
  4. If it fixes an open issue, please link to the issue here.
-->

### Description

Bump Python package version to 1.43.0 for a release

<!-- Describe your changes, the overall approach, the underlying design.
These notes will help understanding how your code works. Thanks! -->

### Contribution Checklist

<!-- Before submitting this PR, please make sure: -->

- [X] The code builds clean without any errors or warnings
- [X] The PR follows the [SK Contribution
Guidelines](https://github.com/microsoft/semantic-kernel/blob/main/CONTRIBUTING.md)
and the [pre-submission formatting
script](https://github.com/microsoft/semantic-kernel/blob/main/CONTRIBUTING.md#development-scripts)
raises no violations
- [X] All unit tests pass, and I have added new tests where possible
- [ ] I didn't break anyone 😄