Skip to content

build(deps): bump the backend-dependencies group in /backend with 2 updates#96

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/backend-dependencies-00de8f025b
Open

build(deps): bump the backend-dependencies group in /backend with 2 updates#96
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/backend-dependencies-00de8f025b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 10, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on google-adk and a2a-sdk to permit the latest version.
Updates google-adk to 2.4.0

Release notes

Sourced from google-adk's releases.

v2.4.0

2.4.0 (2026-07-07)

Features

  • Add mTLS support for DiscoveryEngineSearchTool (8ba0e6a)
  • Add mTLS support to Google API tools (3466586)
  • add OpenAI Responses API support in labs (6b831d5), closes #3209
  • Add support for reusing an existing SQLAlchemy AsyncEngine in DatabaseSessionService (f4c7e4c)
  • add support for session TTL and expiration in Vertex AI session service (49d4441)
  • adk: add Anthropic effort config handling, thinking parameter propagation, and conflict mitigation (4c862b9)
  • agents: add ManagedAgent backed by the Managed Agents API (cf91b84)
  • bigquery: expose thinking and tool-use token columns in analytics views (c14258d)
  • bigtable: Support parameterized views with secure parameter inj… (14a24f2)
  • HTTP traces for MCP server requests/errors (4c4f77a)
  • Implement Workflow as Tool core feature (1263ed6)
  • integrations: Add DaytonaEnvironment for remote sandbox workspaces (df6baf4)
  • interactions: stream thought, media, code-exec and function-result deltas (b2dda6e)
  • interactions: surface streamed grounding and final usage metadata (6a50b8d)
  • memory: add Vertex AI load_profiles tool (fb2b3af)
  • models: Add configuration options to Gemini class (037ec12), closes #3813
  • models: surface and recover environment_id from interactions (81f9f2e)
  • plugins: add otel correlation, custom_metadata allowlist, and column projection to BigQuery analytics (38d715c)
  • scripts: add check for private-by-default new Python files (63561ce)
  • support file_data URI references in GcsArtifactService (43115b2)
  • support mTLS and GOOGLE_API_USE_MTLS_ENDPOINT for GDA client (e85a7b2)
  • Support passing dynamic custom headers to LiteLLM via RunConfig (000d74d)
  • Support provider-prefixed Gemini model IDs (816a87f)
  • tools: add response_scheduling to control Live function response behavior (7443bfa)
  • tools: exposed configurable parameter as property in McpToolset (cca8c56)
  • tools: resolve built-in tools for managed-agent requests (f11d19d)
  • tools: Support tuple tool parameters (a57c3e4)
  • utils: Add support for nested state access in template injection (94c43a2)
  • workflow: Allow ToolNode to accept JSON string or Content inputs (4e44632)

Bug Fixes

  • adapt interactions conversion to google-genai 2.9 SDK changes (9f3aeef)
  • Add credential_key to ApplicationIntegrationToolset and IntegrationConnectorTool (c6a94b8), closes #4553
  • Add debug level logging to mcp sse agent sample (3962d0b)
  • add DNS-rebinding protection to _OriginCheckMiddleware (9a4f479)
  • add module blocklist for YAML agent config code references (6a5be34)
  • add parameter validation for sync tools in ADK functions.py (9b9d27d)
  • add trailing newline to check_new_py_files.sh (21512ea)
  • Address mypy failures in google_api_tool/ (5301ffa)
  • agents: persist output_key when before_agent_callback short-circuits LlmAgent (0e263f1)
  • agents: preserve text streamed before tool calls in output_key (5a0b4af)
  • agents: prevent path traversal in AgentTool config_path resolution (171ae9e)

... (truncated)

Changelog

Sourced from google-adk's changelog.

2.4.0 (2026-07-07)

Features

  • Add mTLS support for DiscoveryEngineSearchTool (8ba0e6a)
  • Add mTLS support to Google API tools (3466586)
  • add OpenAI Responses API support in labs (6b831d5), closes #3209
  • Add support for reusing an existing SQLAlchemy AsyncEngine in DatabaseSessionService (f4c7e4c)
  • add support for session TTL and expiration in Vertex AI session service (49d4441)
  • add Anthropic effort config handling, thinking parameter propagation, and conflict mitigation (4c862b9)
  • agents: add ManagedAgent backed by the Managed Agents API (cf91b84)
  • bigquery: expose thinking and tool-use token columns in analytics views (c14258d)
  • bigtable: Support parameterized views with secure parameter inj… (14a24f2)
  • HTTP traces for MCP server requests/errors (4c4f77a)
  • Implement Workflow as Tool core feature (1263ed6)
  • integrations: Add DaytonaEnvironment for remote sandbox workspaces (df6baf4)
  • interactions: stream thought, media, code-exec and function-result deltas (b2dda6e)
  • interactions: surface streamed grounding and final usage metadata (6a50b8d)
  • memory: add Vertex AI load_profiles tool (fb2b3af)
  • models: Add configuration options to Gemini class (037ec12), closes #3813
  • models: surface and recover environment_id from interactions (81f9f2e)
  • plugins: add otel correlation, custom_metadata allowlist, and column projection to BigQuery analytics (38d715c)
  • scripts: add check for private-by-default new Python files (63561ce)
  • support file_data URI references in GcsArtifactService (43115b2)
  • support mTLS and GOOGLE_API_USE_MTLS_ENDPOINT for GDA client (e85a7b2)
  • Support passing dynamic custom headers to LiteLLM via RunConfig (000d74d)
  • Support provider-prefixed Gemini model IDs (816a87f)
  • tools: add response_scheduling to control Live function response behavior (7443bfa)
  • tools: exposed configurable parameter as property in McpToolset (cca8c56)
  • tools: resolve built-in tools for managed-agent requests (f11d19d)
  • tools: Support tuple tool parameters (a57c3e4)
  • utils: Add support for nested state access in template injection (94c43a2)
  • workflow: Allow ToolNode to accept JSON string or Content inputs (4e44632)

Bug Fixes

  • adapt interactions conversion to google-genai 2.9 SDK changes (9f3aeef)
  • Add credential_key to ApplicationIntegrationToolset and IntegrationConnectorTool (c6a94b8), closes #4553
  • Add debug level logging to mcp sse agent sample (3962d0b)
  • add DNS-rebinding protection to _OriginCheckMiddleware (9a4f479)
  • add module blocklist for YAML agent config code references (6a5be34)
  • add parameter validation for sync tools in ADK functions.py (9b9d27d)
  • add trailing newline to check_new_py_files.sh (21512ea)
  • Address mypy failures in google_api_tool/ (5301ffa)
  • agents: persist output_key when before_agent_callback short-circuits LlmAgent (0e263f1)
  • agents: preserve text streamed before tool calls in output_key (5a0b4af)
  • agents: prevent path traversal in AgentTool config_path resolution (171ae9e)
  • ApplicationIntegrationTool: implement dynamic mTLS endpoint resolution (37ca6fb)

... (truncated)

Commits
  • 3f79243 chore: update last-release-sha for next main release
  • 26a4ef2 chore(release/candidate): release 2.4.0 (#6325)
  • 44d747e chore: update compiled adk web assets
  • 34b953e refactor: Clean up redundant self-transfer checks in LlmAgentWrapper
  • ac99770 fix(auth): allow configuring OAuth prompt parameter
  • a721c1e fix(security): enable Jinja2 autoescape to prevent XSS in gepa sample
  • 527e3c1 docs(samples): Add ManagedAgent code-execution sample
  • 9a4f479 fix: add DNS-rebinding protection to _OriginCheckMiddleware
  • 79b8923 fix: Set persist-credentials to false in release-update-adk-web workflow
  • 28b7721 fix: Use RELEASE_PAT for checkout in release-update-adk-web workflow
  • Additional commits viewable in compare view

Updates a2a-sdk to 1.1.0

Release notes

Sourced from a2a-sdk's releases.

v1.1.0

1.1.0 (2026-05-29)

Features

  • server: restore FastAPI /docs visibility for A2A routes (#1024) (1122d4e)

Bug Fixes

  • compat: remove ListTasks from v0.3 REST adapter (#1043) (#1068) (5c88793)
  • properly convert metadata to dict in RequestContext.metadata (#1081) (d2f2e18)
  • raise on append=True for unknown artifact_id (#1038) (#1077) (fe1f24b)
  • release reference count on non-terminal exit to prevent stale registry entries (#1079) (501255c)
  • server: preserve non-ASCII characters in streaming JSON responses (#1080) (d46c6f9)
  • telemetry: don't mark QueueShutDown as an error span (#1075) (54a485c)

Documentation

Miscellaneous Chores

Changelog

Sourced from a2a-sdk's changelog.

1.1.0 (2026-05-29)

Features

  • server: restore FastAPI /docs visibility for A2A routes (#1024) (1122d4e)

Bug Fixes

  • compat: remove ListTasks from v0.3 REST adapter (#1043) (#1068) (5c88793)
  • properly convert metadata to dict in RequestContext.metadata (#1081) (d2f2e18)
  • raise on append=True for unknown artifact_id (#1038) (#1077) (fe1f24b)
  • release reference count on non-terminal exit to prevent stale registry entries (#1079) (501255c)
  • server: preserve non-ASCII characters in streaming JSON responses (#1080) (d46c6f9)
  • telemetry: don't mark QueueShutDown as an error span (#1075) (54a485c)

Documentation

Miscellaneous Chores

1.0.3 (2026-05-13)

Features

  • helpers: add non-text Part extractors and artifact update events (745d998)

Bug Fixes

  • deps: cap protobuf below 7 (#1019) (7af6050)
  • errors: align error mappings with A2A spec (#1055) (4e01a91)
  • errors: emit JSON-RPC error.data as typed-details array per A2A 1.0 spec hot-fix (#1058) (3ce65c5)
  • Improve task_push_notification_config presence check. (#1047) (94ad594)

Documentation

  • high level active task architecture documentation (#1056) (09a2221)

1.0.2 (2026-04-24)

... (truncated)

Commits
  • 96c14b7 chore(main): release 1.1.0 (#1073)
  • 3058a33 chore: release 1.1.0 (#1088)
  • 629717a refactor: add fastapi extra for #1024 (#1087)
  • 6f3aadc ci: add question label to stale.yaml (#1083)
  • 54a485c fix(telemetry): don't mark QueueShutDown as an error span (#1075)
  • fe1f24b fix: raise on append=True for unknown artifact_id (#1038) (#1077)
  • d2f2e18 fix: properly convert metadata to dict in RequestContext.metadata (#1081)
  • 501255c fix: release reference count on non-terminal exit to prevent stale registry e...
  • c0d64ef chore(deps): bump softprops/action-gh-release from 2 to 3 in the github-actio...
  • d46c6f9 fix(server): preserve non-ASCII characters in streaming JSON responses (#1080)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Updates the requirements on [google-adk](https://github.com/google/adk-python) and [a2a-sdk](https://github.com/a2aproject/a2a-python) to permit the latest version.

Updates `google-adk` to 2.4.0
- [Release notes](https://github.com/google/adk-python/releases)
- [Changelog](https://github.com/google/adk-python/blob/main/CHANGELOG.md)
- [Commits](google/adk-python@v1.0.0...v2.4.0)

Updates `a2a-sdk` to 1.1.0
- [Release notes](https://github.com/a2aproject/a2a-python/releases)
- [Changelog](https://github.com/a2aproject/a2a-python/blob/main/CHANGELOG.md)
- [Commits](a2aproject/a2a-python@v1.0.0...v1.1.0)

---
updated-dependencies:
- dependency-name: google-adk
  dependency-version: 2.4.0
  dependency-type: direct:production
  dependency-group: backend-dependencies
- dependency-name: a2a-sdk
  dependency-version: 1.1.0
  dependency-type: direct:production
  dependency-group: backend-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants