adk-python
AI Agents & AssistantsAn open‑source, code‑first Python framework for building, evaluating, and deploying sophisticated AI agents with flexibility and control.
Features
- Graph‑based workflow runtime supporting routing, loops, retries, state management, dynamic nodes, human‑in‑the‑loop, and nested workflows
- Structured Task API for agent‑to‑agent delegation with multi‑turn tasks, single‑turn controlled output, mixed patterns, and task agents as workflow nodes
Security Response History
1 CVE| CVE | Severity | Disclosed | Patched (this tool) | vs Ecosystem Median |
|---|---|---|---|---|
| CVE-2026-42208 KEV |
critical
CVSS 9.8
|
2026-05-08 | 2026-05-08 | 21h |
Recent releases
View all 26 releases →
v1.33.0
Bug fix
patches CVE-2026-42208
Notable features
- Add BufferableSessionService
- Allow injecting credentials into ApigeeLlm
- Make ADK environment tools truncation limit configurable
Full changelog
1.33.0 (2026-05-08)
Features
- add BufferableSessionService (0bc767e)
- apigee: allow injecting credentials into ApigeeLlm (ce578ff)
- Make ADK environment tools truncation limit configurable (83ae405)
- models: add get_function_calls and get_function_responses to LlmResponse (22fae7e)
Bug Fixes
- catch genai.ClientError when sandbox is missing (69fa777), closes #5480
- double append bug (f8b4c59)
- Filter out video events with inline data from being stored in session (88421f8)
- fix fork detection, correct offload limits, and add response logging in BigQuery plugin (9d1bb4b)
- hot reload agents for adk web (740557c)
- Only append skills to system instruction if ListSkillsTool isn't available (01f1fc9)
- prevent state_delta overwrite on function_response-only events (fc27203, 211e2ce), closes #3178
- Raise a clear actionable error when CustomAuthScheme lacks a registered AuthProvider (83f9817)
- should use app_name instead of req.app_name (8286066)
- simulation: Add error message when LlmBackedUserSimulator returns empty response (fb92aad)
- Update expressmode api call to include default api key param (e833995)
- use asyncio.sleep to avoid blocking event loop (3a1eadc)
- Use project and location instead of API key when deploying to agent engine (398f28f)
Code Refactoring
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
About
Stars
19,955
Forks
3,489
Languages
Python
Jupyter Notebook
HTML
Install & Platforms
Install via
pip
