chore(deps): update dependency google-adk to v2

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
google-adk (changelog)	>=1.20.0,<2.0.0 → >=2.8.0,<2.9.0

---

Release Notes

google/adk-python (google-adk)

v2.8.0

Compare Source

Features

• a2a: add native task mode support to RemoteA2aAgent (72f3ff5)
• add ADK_MAX_LLM_CALLS environment variable to configure max LLM calls limit (75679db)
• add create_data_agent tool to data_agent toolset (5cd38a0)
• add delete_data_agent tool to data_agent toolset (9b451fc)
• add location parameter to list_accessible_data_agents in data_agent toolset (393ec08)
• add Model Armor guardrail plugin (11efc3f)
• add nvidia nim integration sample (c6bba8d)
• add sample for skill state injection via adk_inject_state (9384127)
• add spreadsheet mime types to load_artifact_tool (370027a)
• add update_data_agent tool to data_agent toolset (92d00aa)
• allow configuring Vertex AI API version (ede87c2), closes #​3246
• allow streaming tools to set response scheduling per yield (bf2efd7)
• antigravity: capture client-side tool outcomes for a function_response (4599a52)
• cli: Support Cloud Build worker pools for Agent Engine deploy (e577c30)
• eval: support custom metrics in AgentEvaluator (babb11c)
• guard against SQL injection vulnerabilities in BigQuery tools (d6290a0)
• live: Add VIDEO to the allowed modalities in the ADK API server (dd998a7)
• live: let a live streaming tool send messages to the user directly (98896eb)
• live: run before and after model callbacks in live mode (ef2d680)
• live: surface live interaction_status on LlmResponse and Event (b858904)
• live: use RunConfig.session_resumption.handle when opening a live session (eac32c3)
• mcp: report MCP HTTP exchanges as OpenTelemetry log records (85a6fa1)
• parallelize LLM-as-judge evaluation using asyncio.gather() (0dbb88c)
• preserve field descriptions in set_model_response schema (a30858b), closes #​6707
• record context cache state on the LLM call span (c0614d6)
• resolve auth for RemoteA2aAgent in AgentRegistry (d695494)
• support auth_scheme and auth_credential in RemoteA2aAgent (d42c634)
• support injecting custom LLM clients into Gemini and AnthropicLlm (a01d516), closes #​5027
• support memory_id and allowed_topics in Vertex Memory Bank (bf73360)
• support opt-in session retention in MultimodalToolResultsPlugin (775c1bd), closes #​6695
• support sub-agent escalation event in ParallelAgent (0fd681e), closes #​5104
• telemetry: add per-invocation token spend metrics for invoke_agent (dc00db5)
• telemetry: add per-workflow inference and tool call counts (6e6c4a5)
• telemetry: add per-workflow token spend metrics (dd8797e)
• telemetry: Expand telemetry for load_skill_resource span (6e0facf)
• telemetry: honor RunConfig.telemetry at the runner's invocation span (00fc6eb)

Bug Fixes

• a2a: keep file payloads out of the debug log line (ef158d3)
• agents: report which toolset an agent lost when one fails to load (66930e6)
• artifacts: Publish file artifact versions atomically (94475c9)
• auth: take the auth scheme from the request, not the client's response (8989aea)
• avoid O(n^2) deep event comparison during rehydration (b8dd086), closes #​6657
• block yaml and ruamel deserialization in agent-config code references (924d802)
• cache read write token counts in LiteLLM and Anthropic models (d0b33a0), closes #​5835
• check every function response, not just the first, when inferring which invocation to resume (5449314)
• cli: clean up pytest subprocesses on test-client disconnect (a84a4b5)
• cli: Preserve non-ASCII text in adk test --rebuild, Web UI test saving, and CLI JSONL (dc735bd)
• cli: report env var names instead of values when overriding env_vars (b0c599f)
• count tool call and response chars in compaction (66908e4)
• declare a2a-sdk[http-server] so the a2a extra can serve (65234e7)
• deduplicate events in InMemorySessionService.append_event (4d74774), closes #​5723
• deliver parallel sub-agent failures to the caller (ece924c), closes #​5455
• detect MCP tool errors under either field spelling (d18df2f)
• disable Windows glob expansion for CLI args (2638155), closes #​6248
• emit Anthropic prompt cache breakpoints for ContextCacheConfig (811d379), closes #​5395
• fence relayed agent output so it cannot pose as instructions (9ffe8be)
• filter thought parts from A2A client user-facing response (8963a04), closes #​4676
• Fix built-in search tools in agent hierarchy when transfer_to_agent is present (f3250bd)
• Fix crashes and cross-invocation leaks from copying RunConfig.http_options (67ca98c)
• flows: pair a function response with the call it answers (deee6d2), closes #​6761
• flows: sort function_call.args when rendering cross-agent context (735402d)
• Guard invocation_context.branch assignment against mock SessionService instances (9917922)
• guard against Content with no parts in _content_to_message_param (1ed8d48)
• handle read-only .git files in deploy cleanup on Windows (c93fcc0)
• honor before_run_callback early-exit for Workflow runs (dac1869), closes #​6013
• honor ContextCacheConfig on the LiteLLM path (b1c984b)
• improve clarity and actionable context in error messages (7c2af5f)
• include grounding metadata in rubric judge prompt (b0cdecf), closes #​5831
• integrations: send api registry credentials only to google api endpoints (cc275f0)
• keep non-text static_instruction as a stable request prefix (deda5b3), closes #​6652
• keep session identity across single-turn node contexts (c602065), closes #​6691
• keep tool calls at most once (5bcf5cd)
• live: stop background tool tasks when a live agent run ends (0088abb)
• live: stop live runs from writing back into the caller's RunConfig (0b39e72)
• make SqliteSessionService state merges use dict.update() semantics (e4ba704), closes #​6728
• mcp: evict idle sessions from the MCP session pool (69a3ca5)
• only attach default credentials to https endpoints (5d3d152)
• only emit --gemini_enterprise_app_name for adk_version >= 2.2.0 (00932e6)
• pass file metadata tuple to Azure for PDF uploads (ff4567d), closes #​6539
• percent-encode path parameter values in RestApiTool (25f53bd)
• point to Gemini Enterprise registration docs after agent_engine deploy (1d2d1ed), closes #​6633
• populate developer_instructions when invocation_events is empty (69c9090), closes #​5593
• prefer the function response's own invocation over a caller-supplied id on the node path (4d0d63c)
• prevent contextvars leak across async generators (bb86bdd), closes #​5722
• prevent duplicate function execution when support_cfc is enabled (c986ff0)
• prevent duplicate OAuth prompts and fix tool resumption (eaad2f8)
• prevent duplicate synthetic user event on single-turn agent resumption (e753651)
• prevent prompt injection via GitHub event data in workflows (4f558f1)
• rank and bound the results of InMemoryMemoryService.search_memory (f3fae72)
• re-raise agent errors from the synchronous Runner.run() (b55000d)
• read long-running function name from data, not metadata (029c17b), closes #​6295
• redact credentials from DebugLoggingPlugin output file (a86bd25)
• redact credentials from generate_content_config.http_options in debug logs (1cd6f46)
• reject negative recent-event limits (26110c7)
• reject tool confirmations arriving over A2A (9e9eaa6), closes #​6461
• report root_agent type mismatch instead of 'No root_agent found' (4f07c93), closes #​6606
• resolve Claude 5 model names in the LLM registry (42a4a5f)
• resolve NameError in legacy create-eval-set route (023f45c)
• resolve nested provider behind litellm_proxy prefix (602e58d), closes #​6538
• resolve server disconnect logs (3f2d399)
• resolve systemic parts[0] indexing bugs (2109ea9), closes #​6616
• Restore invocation_context.branch from session history when executing a non-root agent node or resuming a sub-agent in Runner (676d1e7)
• restrict unpickling of legacy v0 session event actions (97c2af0), closes #​5634
• resume an invocation whose user message leads with a non-text part (6d8c588)
• revert the A2A guard that broke every HITL tool confirmation (9a32eba)
• route workflow IDs and retry jitter through platform seams (8f85107)
• samples: widen numeric tool parameters to match their docstrings (0c67410)
• sanitize state deltas before writing them to JSON state columns (3f9e6be)
• send the required list on a CrewAI or LangChain function declaration (186d9f7)
• sessions: dedupe InMemorySessionService events by equality not id (c9323d5)
• sessions: load legacy v0 event actions with the restricted unpickler (fb15710)
• sessions: stop dropping event actions on v0 PostgreSQL migration (e3ae4ac)
• skills: skip search results that fail frontmatter validation (3c977bc), closes #​6838
• skip non-agent directories in AgentLoader.list_agents() (caac070)
• skip non-numeric response keys in generate_return_doc (920bc3e), closes #​6174
• stop re-sending thought summaries as conversation history (e4f5900, 3c1b1bc)
• stop RemoteA2aAgent forwarding credential requests to the remote peer (2aea859)
• stop the session liveness probe from crashing when the SDK moves its streams (d9f4d3d)
• strip internal planning tags from PlanReActPlanner output (ac8dad2), closes #​3378
• telemetry: End the inference span when the inference ends (ecc730c)
• telemetry: record call_llm span attributes when a plugin short-circuits the model call (0321136)
• tools: report no match instead of raising on empty retrieval (99660d9)
• tools: run AgentTool nested agent in unary mode (0d5752b)
• tools: run an agent tool under the caller's RunConfig (983c280)
• trigger Gemini 3.x Live response after sending conversation history (7616c78)
• use OAuth2 client-credentials scheme for OpenAPI SA helpers (9897217), closes #​6656
• use Unicode-aware keyword extraction in InMemoryMemoryService (b8ea1e8), closes #​5501
• validate session initialization events (3fa71b6), closes #​5290
• validate SQL identifiers in Spanner search tool (8d2f277), closes #​5913
• workflow: cancel parallel worker items when the worker is cancelled (dec729f)
• workflow: declare abc.ABC on BaseNode so abstract subclasses type-check (f3b59fd)
• workflow: do not act on function calls in partial events (816ada5), closes #​6583
• workflow: honor START as a satisfied JoinNode predecessor (d8df6fd)
• workflow: resume node auth from the node's own auth config (5b59139)

Performance Improvements

• buffer streamed function call arguments instead of concatenating (f604de2)
• key the Pub/Sub publisher cache on its options' value (51231cd)
• remove redundant event scans in prompt assembly (d7adc1c, e66fdd2)
• resolve the optional id-pairing providers once, not per request (203461c)
• run local code execution in a plain child interpreter (c244a9c)
• run the Google credential refresh off the event loop (2aa2b46)

Documentation

• add audio_stream_end documentation for realtime input (17cb265)
• correct node schema docstrings about which variants validate (e649a38)
• correct the documented contract of the invocation-subtree event filter (be8fcf4)
• fix typos and grammar in README (ffe518a)
• guides: add developer unit guide for BaseCodeExecutor (b370fc0)
• guides: add developer unit guide for BasePlanner (ea23a89)
• guides: add developer unit guide for Runner and Runner Live Streaming (1d89e0f)
• repair the workflow guides and document BaseNode (7c7d2ba)

v2.7.1

Compare Source

Bug Fixes

• deps: restore the OpenTelemetry 1.42.1 ceiling (8e6f361)
• validate session initialization events (e2b8ace), closes #​5290

v2.7.0

Compare Source

Highlights

A correctness release: most of the work went into what an agent sends to the model and what it gets back, alongside a long tail of fixes across tools, sessions, evaluation and the CLI.

• Models declare their own capabilities: an agent pairs an output schema with tools when the model actually supports it, instead of ADK inferring support from the model id. (2aff82c, dc5dbfa)
• Tools can return media: a tool's function response carries images and other media straight back to the model, on Gemini and on Anthropic, LiteLLM, Apigee and OCI alike. (df9d6de, 703cf43)
• Conversation history keeps what Gemini needs: thought signatures, server-side tool call parts, and every result of a parallel function call survive the round trip. (d4ed347, e908137, 93dff41)
• Jinja2 instruction templates: pass use_jinja2=True to inject_session_state and an instruction can use conditionals and loops over session state, with artifacts loaded through a {{ artifact("name") }} helper. Jinja2 stays an optional dependency and the regex engine remains the default. (4a00a34)
• Faster startup and hot paths: import google.adk does less work, and the request path avoids Pydantic round-trips and quadratic streaming accumulation in the LiteLLM adapter. (8806dc2, 9e1adde, 36fd2c8)

Breaking changes

• pyarrow left the gcp extra: it lives in the new bigquery-analytics extra, which takes roughly 50 MB off pip install google-adk[gcp]. If you use BigQueryAgentAnalyticsPlugin, install google-adk[bigquery-analytics]. (ac71709)

⚠ BREAKING CHANGES

• deps: move pyarrow out of the gcp extra

All 212 changes

Features

• accept a pre-configured client on the labs OpenAI model (461205c), closes #​4180
• add express mode telemetry logging for ADK CLI onboarding (4ccc6be)
• add gen_ai.agent.name attribute to execute_tool spans (1a80962)
• add Jinja2 templating with use_jinja2 flag (4a00a34), closes #​2942
• add option to save eval results to CSV (3bbc8ed), closes #​2652
• add parent terminal grouping and TTL pruning to ADK CLI telemetry (2c6a7ff)
• agent: add native task mode support to root LlmAgent (dd0de52)
• Allow clients using the load_artifacts_tool to customize how attachment data is fed to the LLM (b66cba2)
• capture TTY connectivity in CLI environment telemetry (c12a025)
• cli: auto-discover test_config.json for single eval file in adk eval (0477e57), closes #​4410
• enforce unit guide requirement for new Python files (942b38d)
• environment: Add support for executing skill scripts within an Environment (fa31b6c)
• evaluation: add optional eval set result persistence to AgentEvaluator (76027dd)
• eventarc: Support Context callables and correct OMIT behavior (a3bd111)
• Extend HTTP trace debugging to MCP Toolset operations (6d8045c)
• honor model-declared capabilities when pairing an output schema with tools (dc5dbfa)
• honor return_direct on Langchain tools wrapped by LangchainTool (c2249f3), closes #​2157
• Introduce a capability reporting system for LLM models (2aff82c)
• labs/antigravity: allow mode='single_turn' AntigravityAgents to be sub-agents (6ed484d)
• let McpToolset reuse the MCP server's tool list (9cd5975)
• let tools return media in the function response (df9d6de)
• live: forward safety_settings from generate_content_config to the Live API (0a6d05d)
• plugins: add BigQuery Agent Analytics delivery and termination observability (04b8b72)
• Promote Data Agent tools to stable (fd33158)
• record implicit vs explicit context cache type in analytics (5072828)
• skills: support non-blocking skill loading in async runtimes (61ddc5f), closes #​6057
• Stop using the obsolete Gemini 1.x / Gemini 2+ model-id check in ADK (745de0a)
• Stop using the obsolete Gemini 1.x / Gemini 2+ model-id check in ADK url context tool (eaab262)
• support audio_stream_end for realtime input (0f738a5)
• Support elicitation_callback in McpToolset (4824619)
• telemetry: add feature gate for experimental telemetry (75fb254)
• telemetry: Expand load_skill telemetry (bddbb3d)
• update skill model to include its origin (08bd589)
• warn when agent transfer runs without a context cache config (0cf10a5)

Bug Fixes

• a2a: adopt a directly supplied agent card's description (4f58306)
• a2a: flatten human-input responses on resume to avoid mixing them with text (aec7aa3)
• add .adk/ to the .gitignore generated by adk create (374aab3), closes #​6647
• add 20MB file size validation to SaveFilesAsArtifactsPlugin (9827790), closes #​3751
• Add regional and MREP endpoint routing for DataAgentToolset (20842eb)
• adk: share a single component-owner map between the triaging agents (1ad0543)
• allow injecting credentials into VertexAiMemoryBankService (18903ca)
• artifacts: list artifacts nested under another artifact from disk (a5864a0)
• artifacts: reject rooted, drive-qualified and traversing artifact paths (2716ad5)
• artifacts: sort and guard GCS artifact version listing (1f354b8)
• artifacts: stop conflating an artifact with the artifacts nested under it (08d21cc)
• attribute a compaction summary to the agent reading it (c20ccef)
• auth: set a request timeout on OAuth2 token exchange and refresh (3f3c8f5)
• block the whole standard library in agent-config code references (a16f6da)
• bound Apigee completions HTTP client timeout and redirects (f57a67d)
• bound the entries and bytes read from a skill zip archive (fa136c4)
• bqaa: skip synchronous log flush to prevent blocking responses (6fd7eaf)
• call build_planning_instruction on custom planners (2bdf4de)
• ci: run the update-constraints hook in check mode (74e7167)
• ci: stop CI resolving against half-published PyPI releases (f4b432d)
• cli: implement early telemetry recording for long-running web servers and log successful exit code upon routine teardown (77726c5)
• cli: normalize trigger user ids for sessions (e03dbab)
• cli: stream_reasoning_engine raises StopIteration RuntimeError on sync generators (aa9c187)
• cli: track full server duration and log routine Ctrl+C termination as success (0fcfe99)
• cli: update gcloud command to use beta flag (9630559)
• coerce non-string enum values to strings on string-typed Gemini schemas (30f32e3), closes #​3401
• collect eval state from workflow nodes (568b4f6)
• constrain the RPC targets of a network-fetched A2A agent card (16cbb7d)
• core: stop the Cloud Run sandbox executor waiting forever (a39e71a)
• declare the redis extra that RedisSessionService asks for (957dc2b)
• deps: exclude LangGraph releases with unsafe checkpoint loading (1b12ee3)
• deps: exclude nltk 3.10.1, which breaks venvs living inside the working directory (1a0c3bd)
• deps: stop the published constraints from pinning google-adk itself (c44c543)
• disable dev endpoints for production deployment both AE and Cloud Run (b795a9b)
• emit additional_properties with value type schema in dict branch (93f57f4), closes #​4868
• eval: fail the eval when an agent crashes before any metric runs (efeec70)
• eval: grade judge metrics against the criterion's threshold (bcce415)
• eval: grade rouge metric against its criterion threshold (83f7912)
• evaluation: validate path segments in GCS eval set/result managers (a56f6e1)
• fix inconsistencies in sample paper content and naming (423434a), closes #​6651
• Fix permissions for release cherry pick workflow (07a37da)
• flows: count compositional function calling against max_llm_calls (bb9709d)
• flows: inject transfer_to_agent tool for HITL confirmation resume (0897bee), closes #​5633
• gate --sandbox-launcher behind gcloud beta run deploy (547f1eb), closes #​6511
• guard reads in the local API server against DNS rebinding (2cf4fd1)
• handle non-numeric OpenAPI response keys in return-doc generation (b5be64c)
• handle optional and union pydantic models with string annotations (94d08cd)
• honor Apigee request timeouts (2547db6)
• honor num_recent_events=0 in VertexAiSessionService.get_session (923dee7)
• ignore unsafe A2A peer-supplied event actions metadata (0ba7d3c)
• import jinja2 lazily so it is not a required dependency (f828667)
• install every optional runtime dependency with the all extra (f5c09dc)
• isolate per-toolset failures in additional-tools resolution (cdf895f)
• keep agent instructions out of the published A2A agent card (efdecf4)
• keep preloaded context turn-scoped (be103fb)
• keep regular-tool FRs on mixed task turns (4cab3ac), closes #​6581
• keep server-side tool call parts in conversation history (e908137)
• keep subpackages reachable as attributes of a lazy package (ae5118d)
• keep thought signature parts in conversation history (d4ed347)
• keep thought signatures when merging streamed text (fae470f)
• Key directory-loaded skill resources with forward slashes (bc2c97c)
• key in-memory memory store by app_name and user_id tuple (fd8f7eb)
• kill runaway code on timeout in container and local executors (27548e3)
• labs/antigravity: report node input and output from AntigravityAgent (fd7df0e)
• lift file references and nested parts out of tool results (22f5546), closes #​2577
• litellm: convert http_options.timeout from milliseconds to seconds (e74917e)
• live: end the Live agent when task_completed is called in parallel (cebfd74)
• live: transfer to the target agent regardless of function response order (c198695)
• lower oneOf to anyOf so a union schema reaches Gemini intact (4da8dd7)
• make advertised tool names match the names tools are registered under (b26d4f6)
• make parallel worker failure propagation test deterministic (308c818)
• mark the session type decorators as safe for statement caching (e182146)
• mcp: bound the wait for an MCP session to become ready (de200b5)
• mcp: reject stdio MCP servers declared in agent configs by default (a61d8ec)
• memory: scope Vertex RAG retrieval to the requesting app and user (fbeab00)
• models: honor an LLM registered after that name was resolved (03f44c8)
• models: keep streamed usage metadata when a later chunk reports none (aebb2a1)
• models: report a missing Anthropic credential when the client is built (42f220a)
• models: report Anthropic thinking tokens without double counting output (a95b008)
• models: use the reported total token count for interactions usage (955325d)
• models: wrap Anthropic rate limit errors (cde301b)
• narrow broad except in OAuth2 credential refresher (7d16478)
• omit HTTP options from Gemini debug logs (d63a255)
• order database sessions deterministically (8455cf8), closes #​6272
• order list_sessions results by last update time (53e1afb), closes #​6272 #​6431
• prefer application/json for OpenAPI return type docs (9b4b2c5)
• preserve all tool results for parallel function calls (93dff41), closes #​6589
• preserve function-tool preflight in thread pool (0156bc5)
• preserve per-part media fields across A2A conversion (1a9d003)
• preserve required body properties (9b31268), closes #​6503
• preserve turns when stale compaction loses (40ccbee)
• prevent update_constraints.sh from rewriting files when dependencies are unchanged (470d59e)
• propagate context cache config to the AgentTool sub-runner (5835f5a)
• propagate context cache config to the AgentTool sub-runner (9488408)
• prune orphaned function responses instead of failing the request (73e8625)
• read and write eval data files as utf-8 (2e878ed)
• redact credential values from auto-tracing span attributes (fd44a63)
• redact database password from session service errors and logs (4ad3ecc)
• redact secret credentials from AuthCredential repr and error messages ([beb66ee](https://redirect.

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.