Skip to content

chore(deps)(deps): bump the production-dependencies group across 1 directory with 2 updates#328

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/main/production-dependencies-4e6187a1b8
Open

chore(deps)(deps): bump the production-dependencies group across 1 directory with 2 updates#328
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/main/production-dependencies-4e6187a1b8

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 4, 2026

Bumps the production-dependencies group with 2 updates in the / directory: google-adk and litellm.

Updates google-adk from 1.25.1 to 1.31.1

Release notes

Sourced from google-adk's releases.

v1.31.1

1.32.0 (2026-04-21)

Bug Fixes

  • block RCE vulnerability via nested YAML configurations in ADK (e283ea0)
  • bump Vertex SDK version (21ebe29)
  • Disable bound token for mcp_tool (d0afddd)
  • web oauth flow and trace view (c3dafdb)

v1.31.0

1.31.0 (2026-04-16)

Features

  • New Live UI: Redesigned the real-time chat and testing interface for a cleaner, more responsive user experience.
  • Session Display Names: Added the ability to name and organize debug sessions for easier tracking.
  • New Events and Trace View: Overhauled the execution log into a structured trace for better visibility into agent logic.
  • New Graph View: Introduced a visual canvas to map out and manage agent architectures and node relationships.
  • Event Filtering: Added granular controls to filter the event stream by message type, tools, or errors.
  • New Computer Use View: Implemented a dedicated UI for visualizing screenshots and logs during computer-use tasks.
  • Add "google-adk" user agent to Parameter Manager and Secret Manager clients (b8e8f6b)
  • Add support for memories.ingest_events in VertexAiMemoryBankService (d69477f)
  • Add Vertex AI Agent Engine Sandbox integration for computer use (7686848)
  • Firestore support (1a9df8f)
  • live: Add live_session_id to LlmResponse (bf84e2c)

Bug Fixes

  • Bump minimum mcp version from 1.23.0 to 1.24.0 (494c360)
  • cli: correct console URL path after adk deploy agent_engine (64ed1a6), closes #5336
  • execute on_event_callback before append_event to persist plugin modifications (454188d), closes #3990
  • make _EvalMetricResultWithInvocation.expected_invocation Optional for conversation_scenario support (#5215) (a4c9387)
  • Pass in auth headers with header provider instead of connection params (e12b0af)
  • populate required fields in FunctionDeclaration json_schema fallback (9b9faa4)
  • Resolve BigQuery plugin issues with A2A transfers, spans, and metadata (9ca8c38)
  • upgrade google-genai lower bound (8bc5728)

Code Refactoring

  • live: Use send_client_content to send conversation history (67dc2eb)
  • live: Use send_tool_response for function responses (70c5fc8)

Documentation

... (truncated)

Changelog

Sourced from google-adk's changelog.

1.31.1 (2026-04-21)

Bug Fixes

  • block RCE vulnerability via nested YAML configurations in ADK (e283ea0)
  • bump Vertex SDK version (21ebe29)
  • Disable bound token for mcp_tool (d0afddd)
  • web oauth flow and trace view (c3dafdb)

1.31.0 (2026-04-16)

Features

  • Add "google-adk" user agent to Parameter Manager and Secret Manager clients (b8e8f6b)
  • Add support for memories.ingest_events in VertexAiMemoryBankService (d69477f)
  • Add Vertex AI Agent Engine Sandbox integration for computer use (7686848)
  • Firestore support (1a9df8f)
  • live: Add live_session_id to LlmResponse (bf84e2c)

Bug Fixes

  • Bump minimum mcp version from 1.23.0 to 1.24.0 (494c360)
  • cli: correct console URL path after adk deploy agent_engine (64ed1a6), closes #5336
  • execute on_event_callback before append_event to persist plugin modifications (454188d), closes #3990
  • make _EvalMetricResultWithInvocation.expected_invocation Optional for conversation_scenario support (#5215) (a4c9387)
  • Pass in auth headers with header provider instead of connection params (e12b0af)
  • populate required fields in FunctionDeclaration json_schema fallback (9b9faa4)
  • Resolve BigQuery plugin issues with A2A transfers, spans, and metadata (9ca8c38)
  • upgrade google-genai lower bound (8bc5728)

Code Refactoring

  • live: Use send_client_content to send conversation history (67dc2eb)
  • live: Use send_tool_response for function responses (70c5fc8)

Documentation

  • update MCP Toolbox branding, binary version, and asset references (47fa7b7)

1.30.0 (2026-04-13)

Features

  • Add Auth Provider support to agent registry (f2c68eb)

... (truncated)

Commits
  • fb77fad chore(release/candidate): release 1.31.1 (#5422)
  • e283ea0 fix: block RCE vulnerability via nested YAML configurations in ADK
  • 21ebe29 fix: bump Vertex SDK version
  • c3dafdb fix: web oauth flow and trace view
  • d0afddd fix: Disable bound token for mcp_tool
  • 61cca7e chore: update last-release-sha for next release
  • b2d81b3 chore(release/candidate): release 1.31.0 (#5360)
  • c486504 chore: default to info tab when graph is not available
  • d69477f feat: Add support for memories.ingest_events in VertexAiMemoryBankService
  • 1af1b4a chore: Remove adk_additional_tools and GetTimezone tool
  • Additional commits viewable in compare view

Updates litellm from 1.81.14 to 1.83.14

Release notes

Sourced from litellm's releases.

litellm-trace-dev-v1.81.16

What's Changed

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…rectory with 2 updates

Bumps the production-dependencies group with 2 updates in the / directory: [google-adk](https://github.com/google/adk-python) and [litellm](https://github.com/BerriAI/litellm).


Updates `google-adk` from 1.25.1 to 1.31.1
- [Release notes](https://github.com/google/adk-python/releases)
- [Changelog](https://github.com/google/adk-python/blob/v1.31.1/CHANGELOG.md)
- [Commits](google/adk-python@v1.25.1...v1.31.1)

Updates `litellm` from 1.81.14 to 1.83.14
- [Release notes](https://github.com/BerriAI/litellm/releases)
- [Commits](https://github.com/BerriAI/litellm/commits)

---
updated-dependencies:
- dependency-name: google-adk
  dependency-version: 1.31.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: litellm
  dependency-version: 1.83.14
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added automated dependencies Pull requests that update a dependency file labels May 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automated dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants