What's Changed
Features
- feat(mcp): discover and invoke agents by @EItanya in #3486
- feat(mcp): let embedders extend the /mcp server by @alan-bentley-pgh in #3495
Bug Fixes
- fix(adk): allow the Bedrock runtime origin in Harness egress by @xianshujun in #3438
- fix(helm): narrow and separate controller RBAC permissions by @EItanya in #3378
- fix(ui): remediate CVEs in ui by @Charlesthebird in #3489
- fix(adk): retry TaskStore calls through a controller restart by @adalundhe in #3391
- fix(adk): tell the model why a person rejected a tool call by @fiunchinho in #2947
Documentation
Testing
- test(e2e): deflake egress policy probes by @EItanya in #3488
- test(secretmaterial): cover ownership checks and Secret write paths by @vedantlavale in #3451
Other Changes
- adk/models: support Gemini endpoint overrides and Actor JWT auth by @shashankram in #3458
- chore(deps): update google-adk[a2a] requirement from <3,>=2.12.0 to >=2.13.0,<3 in /python by @dependabot[bot] in #3478
- chore(deps): bump opentelemetry-instrumentation-grpc from 0.66b1 to 0.66b2 in /python by @dependabot[bot] in #3482
- chore(deps): bump google-genai from 2.33.0 to 2.34.0 in /python in the python-google-ai group across 1 directory by @dependabot[bot] in #3485
- chore(deps): bump opentelemetry-api from 1.45.1 to 1.45.2 in /python in the python-opentelemetry group across 1 directory by @dependabot[bot] in #3473
- chore(deps): update anthropic[vertex] requirement from >=2.2.0 to >=2.3.0 in /python by @dependabot[bot] in #3481
- api/models: update ModelProviderConfig discovery contract by @shashankram in #3494
- ci: scope GITHUB_TOKEN to read-only in image-scan and migration-immutability by @ayushgharat234 in #3492
- Update metadata docs by @Stevenjin8 in #3447
- ci: run image scans daily instead of on every push by @timflannagan in #3496
- chore(deps): bump the npm-minor-patch group in /ui with 8 updates by @dependabot[bot] in #3472
- chore(deps): update langsmith[otel] requirement from >=0.14.11 to >=0.14.16 in /python by @dependabot[bot] in #3480
- chore(deps): bump astral-sh/setup-uv from 10.3.0 to 10.3.3 in the actions group across 1 directory by @dependabot[bot] in #3347
- chore(deps): bump the python-minor-patch group across 1 directory with 5 updates by @dependabot[bot] in #3476
- chore(deps): bump the go-minor-patch group across 1 directory with 17 updates by @dependabot[bot] in #3474
- chore(deps): upgrade Substrate to v1.0.0-rc2 by @EItanya in #3520
New Contributors
- @xianshujun made their first contribution in #3438
- @ayushgharat234 made their first contribution in #3492
- @alan-bentley-pgh made their first contribution in #3495
Full Changelog: v1.0.0-rc1...v1.0.0-rc2