Skip to content

build(deps): bump google-adk[eval,extensions] from 1.30.0 to 1.31.1 in the python-minor-patch group - #42

Closed
dependabot[bot] wants to merge 8 commits into
mainfrom
dependabot/uv/python-minor-patch-1cb1355179
Closed

dependabot[bot] wants to merge 8 commits into
mainfrom
dependabot/uv/python-minor-patch-1cb1355179

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-minor-patch group with 1 update: google-adk[eval,extensions].

Updates google-adk[eval,extensions] from 1.30.0 to 1.31.1

Release notes

Sourced from google-adk[eval,extensions]'s releases.

v1.31.1

1.32.0 (2026-04-21)

Bug Fixes

  • block RCE vulnerability via nested YAML configurations in ADK (e283ea0)
  • bump Vertex SDK version (21ebe29)
  • Disable bound token for mcp_tool (d0afddd)
  • web oauth flow and trace view (c3dafdb)

v1.31.0

1.31.0 (2026-04-16)

Features

  • New Live UI: Redesigned the real-time chat and testing interface for a cleaner, more responsive user experience.
  • Session Display Names: Added the ability to name and organize debug sessions for easier tracking.
  • New Events and Trace View: Overhauled the execution log into a structured trace for better visibility into agent logic.
  • New Graph View: Introduced a visual canvas to map out and manage agent architectures and node relationships.
  • Event Filtering: Added granular controls to filter the event stream by message type, tools, or errors.
  • New Computer Use View: Implemented a dedicated UI for visualizing screenshots and logs during computer-use tasks.
  • Add "google-adk" user agent to Parameter Manager and Secret Manager clients (b8e8f6b)
  • Add support for memories.ingest_events in VertexAiMemoryBankService (d69477f)
  • Add Vertex AI Agent Engine Sandbox integration for computer use (7686848)
  • Firestore support (1a9df8f)
  • live: Add live_session_id to LlmResponse (bf84e2c)

Bug Fixes

  • Bump minimum mcp version from 1.23.0 to 1.24.0 (494c360)
  • cli: correct console URL path after adk deploy agent_engine (64ed1a6), closes #5336
  • execute on_event_callback before append_event to persist plugin modifications (454188d), closes #3990
  • make _EvalMetricResultWithInvocation.expected_invocation Optional for conversation_scenario support (#5215) (a4c9387)
  • Pass in auth headers with header provider instead of connection params (e12b0af)
  • populate required fields in FunctionDeclaration json_schema fallback (9b9faa4)
  • Resolve BigQuery plugin issues with A2A transfers, spans, and metadata (9ca8c38)
  • upgrade google-genai lower bound (8bc5728)

Code Refactoring

  • live: Use send_client_content to send conversation history (67dc2eb)
  • live: Use send_tool_response for function responses (70c5fc8)

Documentation

... (truncated)

Changelog

Sourced from google-adk[eval,extensions]'s changelog.

1.31.1 (2026-04-21)

Bug Fixes

  • block RCE vulnerability via nested YAML configurations in ADK (e283ea0)
  • bump Vertex SDK version (21ebe29)
  • Disable bound token for mcp_tool (d0afddd)
  • web oauth flow and trace view (c3dafdb)

1.31.0 (2026-04-16)

Features

  • Add "google-adk" user agent to Parameter Manager and Secret Manager clients (b8e8f6b)
  • Add support for memories.ingest_events in VertexAiMemoryBankService (d69477f)
  • Add Vertex AI Agent Engine Sandbox integration for computer use (7686848)
  • Firestore support (1a9df8f)
  • live: Add live_session_id to LlmResponse (bf84e2c)

Bug Fixes

  • Bump minimum mcp version from 1.23.0 to 1.24.0 (494c360)
  • cli: correct console URL path after adk deploy agent_engine (64ed1a6), closes #5336
  • execute on_event_callback before append_event to persist plugin modifications (454188d), closes #3990
  • make _EvalMetricResultWithInvocation.expected_invocation Optional for conversation_scenario support (#5215) (a4c9387)
  • Pass in auth headers with header provider instead of connection params (e12b0af)
  • populate required fields in FunctionDeclaration json_schema fallback (9b9faa4)
  • Resolve BigQuery plugin issues with A2A transfers, spans, and metadata (9ca8c38)
  • upgrade google-genai lower bound (8bc5728)

Code Refactoring

  • live: Use send_client_content to send conversation history (67dc2eb)
  • live: Use send_tool_response for function responses (70c5fc8)

Documentation

  • update MCP Toolbox branding, binary version, and asset references (47fa7b7)
Commits
  • fb77fad chore(release/candidate): release 1.31.1 (#5422)
  • e283ea0 fix: block RCE vulnerability via nested YAML configurations in ADK
  • 21ebe29 fix: bump Vertex SDK version
  • c3dafdb fix: web oauth flow and trace view
  • d0afddd fix: Disable bound token for mcp_tool
  • 61cca7e chore: update last-release-sha for next release
  • b2d81b3 chore(release/candidate): release 1.31.0 (#5360)
  • c486504 chore: default to info tab when graph is not available
  • d69477f feat: Add support for memories.ingest_events in VertexAiMemoryBankService
  • 1af1b4a chore: Remove adk_additional_tools and GetTimezone tool
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

cwest and others added 8 commits April 21, 2026 11:17
Synced from upstream sources fixing two bugs that blocked the OSS

one-shot deploy on a fresh GCP project.

1. infra/modules/iam/main.tf: agent_engine_sa local now references

   google_service_account.agent_engine.email so iam_member resources

   pick up an implicit dep on the SA's CREATE. Removes a

   'Service account ... does not exist' race during tf-apply-base.

2. scripts/deploy/deploy.py: _pin_all_requirements() rewrites every

   AE requirements.txt entry to pkg[extras]==<build-venv version>.

   The AE base image (assembly-service-py313:prod) ships pre-installed

   versions that satisfy our loose '>=' constraints, so pip skipped

   upgrades. Build/runtime version skew (e.g. a2a-sdk 0.3.26 vs 1.0.0)

   broke cloudpickle.loads -- agent stderr surfaced a misleading

   'KeyError: serialized' from protobuf.Message.__setstate__.

Verified: end-to-end deploy on race-condition-deploy-c-177590,

build 8baeb7c2, 14m41s, frontend serves <title>Race Condition</title>.
Synced from upstream sources (backend 1303b221 + code-infra 4d02823).

The OSS deploy was shipping AGENT_URLS='planner=https://...,simulator=...'

which Go's url.Parse rejected with 'first path segment in URL cannot

contain colon'. The gateway's catalog skipped every agent and frontend

spawns failed with DISCOVERY_FAILURE. Drop the 'name=' prefix from each

deploy-ae-* step so cloudbuild collect-ae-urls produces bare comma-

separated URLs (matches the dev/prod .env contract; the gateway parses

AGENT_URLS as URLs and discovers agent names from /a2a/v1/card).

Verified: race-condition-deploy-c-177590 gateway revision 2 logs show

all 5 AE agents discovered after manually patching the live AGENT_URLS

to bare-URL form.
Bumps the python-minor-patch group with 1 update: [google-adk[eval,extensions]](https://github.com/google/adk-python).


Updates `google-adk[eval,extensions]` from 1.30.0 to 1.31.1
- [Release notes](https://github.com/google/adk-python/releases)
- [Changelog](https://github.com/google/adk-python/blob/v1.31.1/CHANGELOG.md)
- [Commits](google/adk-python@v1.30.0...v1.31.1)

---
updated-dependencies:
- dependency-name: google-adk[eval,extensions]
  dependency-version: 1.31.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Apr 22, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner April 22, 2026 03:21
@dependabot dependabot Bot added the python:uv Pull requests that update python:uv code label Apr 22, 2026
@cwest cwest closed this Apr 22, 2026
@dependabot @github

dependabot Bot commented on behalf of github Apr 22, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/uv/python-minor-patch-1cb1355179 branch April 22, 2026 15:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant