Skip to content

Release history

adk-python releases

An open-source, code-first Python toolkit for building, evaluating, and deploying sophisticated AI agents with flexibility and control.

All releases

26 shown

No immediate action
v1.34.2 Bug fix

Metadata & transcription fixes

No immediate action
v2.1.0 New feature

Chart generation + sandbox templates

No immediate action
v2.0.0 New feature

ADK v2.0 GA: workflow engine + dynamic collaboration

Config change
v1.34.0 New feature
Crypto / TLS Auth

Gemini Live, mTLS, A2A tasks, OAuth PKCE

v1.33.0 Bug fix patches CVE-2026-42208
Notable features
  • Add BufferableSessionService
  • Allow injecting credentials into ApigeeLlm
  • Make ADK environment tools truncation limit configurable
Full changelog

1.33.0 (2026-05-08)

Features

  • add BufferableSessionService (0bc767e)
  • apigee: allow injecting credentials into ApigeeLlm (ce578ff)
  • Make ADK environment tools truncation limit configurable (83ae405)
  • models: add get_function_calls and get_function_responses to LlmResponse (22fae7e)

Bug Fixes

  • catch genai.ClientError when sandbox is missing (69fa777), closes #5480
  • double append bug (f8b4c59)
  • Filter out video events with inline data from being stored in session (88421f8)
  • fix fork detection, correct offload limits, and add response logging in BigQuery plugin (9d1bb4b)
  • hot reload agents for adk web (740557c)
  • Only append skills to system instruction if ListSkillsTool isn't available (01f1fc9)
  • prevent state_delta overwrite on function_response-only events (fc27203, 211e2ce), closes #3178
  • Raise a clear actionable error when CustomAuthScheme lacks a registered AuthProvider (83f9817)
  • should use app_name instead of req.app_name (8286066)
  • simulation: Add error message when LlmBackedUserSimulator returns empty response (fb92aad)
  • Update expressmode api call to include default api key param (e833995)
  • use asyncio.sleep to avoid blocking event loop (3a1eadc)
  • Use project and location instead of API key when deploying to agent engine (398f28f)

Code Refactoring

  • adjust computation of workflow.steps metric and add new unit tests (03d6208)
  • remove input.type and output.type attributes from adk metrics (9559968)
v1.32.0 Security relevant
Security fixes
  • Block RCE vulnerability via nested YAML configurations in ADK
Notable features
  • Express mode onboarding support for `adk deploy` CLI
  • Native OpenTelemetry agentic metrics and tracing for event compaction
Full changelog

1.32.0 (2026-04-30)

Features

  • Add an option to prevent the SaveFilesAsArtifactsPlugin from attaching reference file parts to the message (987c809)
  • add credentials parameter to BigQueryAgentAnalyticsPlugin (34713fb)
  • Add express mode onboarding support to adk deploy cli (2b04996)
  • add native OpenTelemetry agentic metrics (6942aac)
  • Add OpenTelemetry tracing for event compaction (c65dd55)
  • Add sample agent demonstrating 2LO, 3LO, and API Key auth via GcpAuthProvider (909a8c2)
  • Add support for Anthropic's thinking blocks (16952bd)
  • Add support for excluding predefined functions in ComputerUseToolset (d760037)
  • Add support for refusal messages in ApigeeLlm (d6594a1)
  • Added indication of user message in history event list (662354a)
  • Allow user to define credential_key for McpToolset (282db87), closes #5103
  • analytics: add support for logging LLM cache metadata to BigQuery (02deeb9)
  • eval: add evaluate_full_response option to rubric-based evaluation (#5316) (7623ff1)
  • live: Add save_live_blob query parameter to /run_live endpoint (36ab8f1)
  • mcp: gracefully handle tool execution errors and transport crashes (7744cfe)

Bug Fixes

  • accumulate list values when merging parallel tool call state_delta (b0b8b31), closes #5190
  • Add support for overriding the API version in GoogleLLM (1cdd1e7)
  • auth: isolate resolved credentials in context to prevent race conditions and data leakage (5578772)
  • avoid double-execution of sync FunctionTools returning None (78a8851), closes #5284
  • block RCE vulnerability via nested YAML configurations in ADK (74f235b)
  • bump Vertex SDK version (6380f6a)
  • cancel siblings in parallel function calling on failure (49985c9)
  • Capture and include LLM usage metadata in summarized events (5ce33b9), closes #4014
  • catch ValueError in safe-JSON serializers for circular refs (70a7add), closes #5412
  • deps: bump litellm cap to >=1.83.7 to admit CVE patches (6d2ada8)
  • Disable bound token for mcp_tool (4c0c6db)
  • fix dataset location handling in BigQueryAgentAnalyticsPlugin (c263426)
  • Fix exception handling and argument order in ReflectRetryToolPlugin (1deab6d)
  • Fix GcpAuthProvider to return capitalized Bearer scheme (ad937fe)
  • fix lifecycle issues with credentials in BigQuery Agent Analytics Plugin (a69f861)
  • Fix malformated skill.md (9a0d2f7)
  • Fix misplaced pytest decorator on helper dataclass in 2LO integration tests (2343973)
  • Fix RecursionError in ADK framework by adding circular reference detection to schema resolution (7de5bc5)
  • fix rewind to preserve initial session state (af1b00a), closes #4933
  • Fix SSRF and local-file access in load_web_page (0447e93)
  • handle None state values in skill_toolset after session rewind (a977aa3)
  • litellm: emit input_audio for audio inline_data parts (4073238), closes #5406
  • live: mark all agents' Event as from other agents (48b7a64)
  • live: treat input transcription as user message (ae1f2e6)
  • optimization: handle None metric scores in LocalEvalSampler (#5415) (684a6e7)
  • otel: change gen_ai.tool_definitions to gen_ai.tool.definitions (029b87d)
  • preserve cache fingerprint stability on creation failure (4d5438c)
  • preserve empty-string text parts in A2A converter (2d61cb6)
  • preserve function call IDs for Anthropic models (f0c787f)
  • Prevent LoopAgent from resetting sub-agent state on pause (8846be5)
  • Quote user_id literals in VertexAiSessionService list filters (bdece00)
  • read_file/write_file path type mismatch in BaseEnvironment and LocalEnvironment (782796f)
  • relax EventActions.state_delta value type to Any (dbec8e9)
  • remove exclude_unset=True to correctly serialize pydantic types (f95ac48)
  • samples: Upgrade google-adk to 1.28.1 to fix vulnerability (b848390)
  • Sanitize user_id derived from PubSub subscription and Eventarc source (0c4f157), closes #5324
  • Scope Vertex RAG memory display names (784350d)
  • Use correct camelCase functionCallId (c87ee1e)
  • web oauth flow and trace view (87cd310)
  • yield tool_call_parts immediately in live mode to unblock Gemini 3.1 tool calls (f57b05d)

Performance Improvements

  • lazy-load optional providers and auth chain to cut cold start ~25% (66bfedc)

Code Refactoring

  • move exception handling from metric emission into instrumentation handlers (62d7ee0)
  • tests: Refactor tests to explicitly handle JSON_SCHEMA_FOR_FUNC_DECL feature flag (b580891)
  • Use artifact_service.load_artifact during rewind (c3d50db), closes #4932

Documentation

  • gemini: show subclass pattern for custom Client config (34c7505), closes #3628
  • update output_schema docstring to reflect support for tools and output_schema together (e1e652d)
  • Update README with instructions for installing ADK extensions (f2a1179)
  • use sphinx-click to generate docs for google.adk.cli (f455974)
v1.31.1 Security relevant
Security fixes
  • RCE vulnerability via nested YAML configurations
Full changelog

1.32.0 (2026-04-21)

Bug Fixes

  • block RCE vulnerability via nested YAML configurations in ADK (e283ea0)
  • bump Vertex SDK version (21ebe29)
  • Disable bound token for mcp_tool (d0afddd)
  • web oauth flow and trace view (c3dafdb)
v1.31.0 Breaking risk
Breaking changes
  • mcp minimum version bumped from 1.23.0 to 1.24.0
Notable features
  • Firestore integration
  • Vertex AI Agent Engine Sandbox integration for computer use
  • memories.ingest_events support in VertexAiMemoryBankService
Full changelog

1.31.0 (2026-04-16)

Features

  • Add "google-adk" user agent to Parameter Manager and Secret Manager clients (b8e8f6b)
  • Add support for memories.ingest_events in VertexAiMemoryBankService (d69477f)
  • Add Vertex AI Agent Engine Sandbox integration for computer use (7686848)
  • Firestore support (1a9df8f)
  • live: Add live_session_id to LlmResponse (bf84e2c)

Bug Fixes

  • Bump minimum mcp version from 1.23.0 to 1.24.0 (494c360)
  • cli: correct console URL path after adk deploy agent_engine (64ed1a6), closes #5336
  • execute on_event_callback before append_event to persist plugin modifications (454188d), closes #3990
  • make _EvalMetricResultWithInvocation.expected_invocation Optional for conversation_scenario support (#5215) (a4c9387)
  • Pass in auth headers with header provider instead of connection params (e12b0af)
  • populate required fields in FunctionDeclaration json_schema fallback (9b9faa4)
  • Resolve BigQuery plugin issues with A2A transfers, spans, and metadata (9ca8c38)
  • upgrade google-genai lower bound (8bc5728)

Code Refactoring

  • live: Use send_client_content to send conversation history (67dc2eb)
  • live: Use send_tool_response for function responses (70c5fc8)

Documentation

  • update MCP Toolbox branding, binary version, and asset references (47fa7b7)
v1.30.0 Security relevant
Security fixes
  • Credential leakage vulnerability in Agent Registry
  • Path traversal vulnerability in user_id and session_id handling
Notable features
  • Support for Gemma 4 models in ADK
  • Live avatar support and live session resumption updates
  • Auth Provider support to agent registry
v1.29.0 New feature
Notable features
  • EnvironmentToolset and LocalEnvironment
  • Easy GCP support
  • Resource limits in BashTool
v1.28.1 Breaking risk
Breaking changes
  • Builder endpoint (/builder) no longer accepts arguments
Notable features
  • Live model support for gemini-3.1-flash-live-preview
  • Tool call buffering for live mode
Full changelog

1.28.1 (2026-04-02)

Features

  • live: support live for gemini-3.1-flash-live-preview model (ee69661)

Bug Fixes

  • Disallow args on /builder and Add warning about Web UI usage to CLI help (f037f68)
  • live: Buffer tool calls and emit them together upon turn completion (081adbd)
v1.28.0 New feature
Notable features
  • A2A lifespan parameter support
  • Slack integration for ADK
  • Spanner Admin Toolset with fine-grained controls
v1.27.5 Bug fix

Eval extras updated with constrained LiteLLM version for Vertex SDK compatibility.

v1.27.4 Bug fix
Security fixes
  • Exclude compromised LiteLLM versions from dependencies
Full changelog

1.27.4 (2026-03-24)

Bug Fixes

  • Exclude compromised LiteLLM versions from dependencies pin to 1.82.6 (fa5e707)
  • gate builder endpoints behind web flag (44b3f72)
v1.27.3 Bug fix

## 1.27.3 (2026-03-23) ### Bug Fixes * add protection for arbitrary module imports

v1.27.0 New feature
Notable features
  • A2A request interceptors in RemoteA2aAgent
  • PDF support and streaming for Anthropic
  • GCS filesystem support for Skills
v1.26.0 New feature
Notable features
  • Agent Registry integration
  • Memory consolidation via Vertex AI
  • OAuth2 id_token support
v1.25.1 Bug fix

## 1.25.1 (2026-02-18) ### Bug Fixes * Fix pickling lock errors in McpSessionManager

v1.25.0 New feature
Notable features
  • Post-invocation token-threshold compaction
  • Prompt optimizer demo
  • Conformance test reporting
v1.24.1 Breaking risk

Minor fixes and improvements.

Full changelog

1.24.1 (2026-02-06)

Bug Fixes

  • Add back deprecated eval endpoint for web until we migrate(ae993e8)
  • Update eval dialog colors, and fix a2ui component types (3686a3a)
v1.24.0 Breaking risk
Breaking changes
  • Credential manager must accept tool_context instead of callback_context
Notable features
  • Consolidated Event View with click-to-expand
  • Arrow-key navigation for accessibility
  • A2UI v0.8 standard catalog integration
v1.23.0 Breaking risk
Breaking changes
  • BigQuery plugin tracing now uses OpenTelemetry instead of custom ContextVar
Notable features
  • Automatic session creation if not exists
  • AgentEngineSandboxCodeExecutor no longer experimental
  • Custom metrics support in adk eval
v1.22.1 Bug fix

### Bug Fixes * Add back `adk migrate session` CLI . * Escape database reserved keyword .

v1.22.0 New feature
Notable features
  • JSON-based database schema for DatabaseSessionService
  • Custom instructions for simulators
  • Post-hoc per-turn evaluator

Beta — feedback welcome: [email protected]