Skip to content

Release: v1.6.0 - #586

Merged
kalenkevich merged 2 commits into
mainfrom
release-please--branches--main
Aug 6, 2026
Merged

Release: v1.6.0#586
kalenkevich merged 2 commits into
mainfrom
release-please--branches--main

Conversation

@kalenkevich

@kalenkevich kalenkevich commented Jul 30, 2026 •
edited
Loading

Copy link
Copy Markdown
Collaborator

Automated Release PR

adk: 1.6.0

1.6.0 (2026-08-05)

Features

  • Add bearerTokenUserBuilder for A2A authentication (Part 1/2) (#562) (f077722)
  • CLI-level A2A authenticator for the dev server and Cloud Run deploy (Part 2/2) (#559) (0c0bba2)
  • Support ttl and expireTime session-expiration options in VertexAiSessionService.createSession (#561) (b390217)
  • tools: add getUserChoiceTool and requestInputTool for parity with adk-python (#506) (03abf76)
  • Validate tool callback response types and prevent state event pollution (#505) (b99f21b)

Bug Fixes

  • a2a: stop restoring event branch from A2A peer metadata (#606) (0000925)
  • accept the derived allowedTools alias in skill frontmatter validation (#560) (fcfd043)
  • artifacts: isolate in-memory composite keys (#576) (693a1d7)
  • core: fall back to node:crypto so randomUUID cannot throw on Node (#599) (3dc1b20)
  • core: use a cryptographically secure source for randomUUID (#577) (81bcc8d)
  • detect PowerShell 7+ (pwsh) in the UnsafeLocalCodeExecutor SHELL branch (#568) (ce0e474)
  • fail fast when a Vertex AI Express Mode API key cannot be used (#563) (e1112c6)
  • gate the set_model_response workaround on canUseOutputSchemaWithTools (adk-python parity) (#580) (5b65ee1)
  • parse JSON bodies only in the toA2a server (drop express.urlencoded) (#558) (605b469)
  • pass -NoProfile to spawned PowerShell and /D to cmd.exe in UnsafeLocalCodeExecutor (#566) (b56761b)
  • reject zip-slip entries and non-bare skill names when loading zipped skills (adk-python parity) (#584) (4fe80b0)
  • runner: persist events returned by onEventCallback (#575) (c4c5582)
  • security: prevent prototype pollution via untrusted map keys (#619) (2c07ad3)
  • surface root-cause MCP session errors instead of swallowing them (#527) (13d7304)
  • treat @google/genai ApiError 404 as session not found in VertexAiSessionService (#567) (5331c77)
  • utils: fix sibling-directory escape in materializeFiles path check (#603) (868ca1f)
devtools: 1.6.0

1.6.0 (2026-08-05)

Features

  • CLI-level A2A authenticator for the dev server and Cloud Run deploy (Part 2/2) (#559) (0c0bba2)

Bug Fixes

  • cli: check isCancel before coercing the project prompt in adk create (#570) (c6f8b2f)
  • cli: make the getting-started path actually work (#624) (6ea645c)
  • create dev-package temp directories atomically with mkdtemp (no predictable parent) (#615) (81c1422)
  • deploy: reject unsafe appName/project/region in generated Dockerfile (#604) (dadce1a)
  • make streaming and stateDelta optional on RunAgentRequest (#585) (1df47e9)
  • security: prevent prototype pollution via untrusted map keys (#619) (2c07ad3)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @google/adk bumped from ^1.5.0 to ^1.6.0
integrations: 1.6.0

1.6.0 (2026-08-05)

Miscellaneous Chores

  • integrations: Synchronize adk versions

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @google/adk bumped from ^1.5.0 to ^1.6.0
main: 1.6.0

1.6.0 (2026-08-05)

Features

  • Add bearerTokenUserBuilder for A2A authentication (Part 1/2) (#562) (f077722)
  • CLI-level A2A authenticator for the dev server and Cloud Run deploy (Part 2/2) (#559) (0c0bba2)
  • Support ttl and expireTime session-expiration options in VertexAiSessionService.createSession (#561) (b390217)
  • tools: add getUserChoiceTool and requestInputTool for parity with adk-python (#506) (03abf76)
  • Validate tool callback response types and prevent state event pollution (#505) (b99f21b)

Bug Fixes

  • a2a: stop restoring event branch from A2A peer metadata (#606) (0000925)
  • accept the derived allowedTools alias in skill frontmatter validation (#560) (fcfd043)
  • add explicit per-test timeout to real-PowerShell skill-script integration test (#550) (e4d3bea)
  • artifacts: isolate in-memory composite keys (#576) (693a1d7)
  • cli: check isCancel before coercing the project prompt in adk create (#570) (c6f8b2f)
  • cli: make the getting-started path actually work (#624) (6ea645c)
  • core: fall back to node:crypto so randomUUID cannot throw on Node (#599) (3dc1b20)
  • core: use a cryptographically secure source for randomUUID (#577) (81bcc8d)
  • create dev-package temp directories atomically with mkdtemp (no predictable parent) (#615) (81c1422)
  • deploy: reject unsafe appName/project/region in generated Dockerfile (#604) (dadce1a)
  • deps: hoist @google/genai 2.x to the workspace root (#564) (00f3775)
  • detect PowerShell 7+ (pwsh) in the UnsafeLocalCodeExecutor SHELL branch (#568) (ce0e474)
  • fail fast when a Vertex AI Express Mode API key cannot be used (#563) (e1112c6)
  • gate the set_model_response workaround on canUseOutputSchemaWithTools (adk-python parity) (#580) (5b65ee1)
  • give build_setup integration hooks an explicit timeout to stop CI flakiness (#549) (64e80ad)
  • make streaming and stateDelta optional on RunAgentRequest (#585) (1df47e9)
  • parse JSON bodies only in the toA2a server (drop express.urlencoded) (#558) (605b469)
  • pass -NoProfile to spawned PowerShell and /D to cmd.exe in UnsafeLocalCodeExecutor (#566) (b56761b)
  • reject zip-slip entries and non-bare skill names when loading zipped skills (adk-python parity) (#584) (4fe80b0)
  • runner: persist events returned by onEventCallback (#575) (c4c5582)
  • security: prevent prototype pollution via untrusted map keys (#619) (2c07ad3)
  • surface root-cause MCP session errors instead of swallowing them (#527) (13d7304)
  • test: set integration hook/test timeouts in vitest.config.ts (#548) (3b3be2f)
  • treat @google/genai ApiError 404 as session not found in VertexAiSessionService (#567) (5331c77)
  • utils: fix sibling-directory escape in materializeFiles path check (#603) (868ca1f)

This PR was generated with Release Please. See documentation.

@kalenkevich kalenkevich changed the title Release: v1.5.1 Release: v1.6.0 Jul 30, 2026
@kalenkevich
kalenkevich force-pushed the release-please--branches--main branch 16 times, most recently from ea536b0 to 26bf0b3 Compare July 31, 2026 23:34
@AmaadMartin AmaadMartin mentioned this pull request Aug 1, 2026
Open
@kalenkevich
kalenkevich force-pushed the release-please--branches--main branch 10 times, most recently from 7f5bfa7 to aa12060 Compare August 4, 2026 22:13
@kalenkevich
kalenkevich force-pushed the release-please--branches--main branch 4 times, most recently from 3f48e96 to b7ec20d Compare August 5, 2026 21:39
@kalenkevich
kalenkevich force-pushed the release-please--branches--main branch from b7ec20d to ae2a0df Compare August 5, 2026 22:30
@kalenkevich kalenkevich assigned kalenkevich and unassigned Varun-S10 Aug 5, 2026
@kalenkevich
kalenkevich requested a review from AmaadMartin August 5, 2026 23:01
AmaadMartin
AmaadMartin reviewed Aug 5, 2026
View reviewed changes

@AmaadMartin AmaadMartin left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The version bump is correct. All seven version locations, the manifest and the lockfile read 1.6.0, and the three compare links match the adk, devtools and integrations components in release-please-config.json.

I compared every commit on main since adk-v1.5.0 against the three changelogs. Six omissions are correct: two refactor commits are hidden by default, and four belong to the root package, which sets skip-changelog: true. Two omissions are not correct — see the inline comment.

No workflow validates the pull request title; validation.yaml runs run-tests only. A title check stops the next occurrence.

Comment thread core/CHANGELOG.md
@kalenkevich
chore(changelog): add missing #596 and #621 security fixes to adk 1.6.0
48059d5 
Both PR titles used "Fix <subject>" with no colon, so the squash subjects
were not conventional commits and release-please dropped them from the
generated changelog:

  d3f250e Fix unsafe A2A peer-supplied transferToAgent metadata (#596)
  7bc05f6 Fix zip-slip blacklist bypass in isDangerousZipEntryName (#621)

Both are core-only security fixes landed after adk-v1.5.0, so they belong
in the adk 1.6.0 Bug Fixes section. Entries are inserted in the position
release-please would have emitted them.
@kalenkevich
kalenkevich requested a review from AmaadMartin August 5, 2026 23:16
AmaadMartin
AmaadMartin approved these changes Aug 5, 2026
View reviewed changes

@AmaadMartin AmaadMartin left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved. 48059d5 adds the two missing entries and changes nothing else.

I verified both: the full SHAs resolve to #596 (d3f250e) and #621 (7bc05f6), the descriptions match what release-please renders for the other entries, and the alphabetical order of the Bug Fixes list still holds. Both commits touch core/src only, so core is the correct changelog. All four package versions still read 1.6.0, and main has not advanced past 2c07ad3, so the notes are complete as of now.

One note that is not your bug. run-tests (windows-latest) failed the first time on unsafe_local_code_executor_test.ts > should execute shell code and return stdout, with Test timed out in 5000ms. The code tree here is identical to the green parent commit — the only delta is two lines of Markdown — so the test is flaky on Windows. It passed on a re-run. The 5s limit is tight for a test that spawns a real PowerShell process; it is worth a longer timeout, in the same spirit as #548, #549 and #550.

@kalenkevich
kalenkevich merged commit 72f89b0 into main Aug 6, 2026
14 of 15 checks passed
@kalenkevich
kalenkevich deleted the release-please--branches--main branch August 6, 2026 00:45
@kalenkevich

kalenkevich commented Aug 6, 2026

Copy link
Copy Markdown
Collaborator Author

🤖 Created releases:

🌻

This was referenced Aug 7, 2026
Merged
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@AmaadMartin AmaadMartin AmaadMartin approved these changes

Assignees

@kalenkevich kalenkevich

Labels

autorelease: tagged

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@kalenkevich @AmaadMartin @Varun-S10