Release v1.25.2

Fixes Gmail reply threading and label handling, adds recurring-event series support to Calendar, hardens Drive's inline base64 uploads with integrity checks and zip-bomb protection, and improves Word document text extraction fidelity.

What's Changed

• gappsscript: list_deployments now surfaces the bound versionNumber and reads descriptions from deploymentConfig, so deployment state is verifiable from the API (#922) by @WIZARD221 in #1063
• gdrive: inline base64 uploads are validated before hitting the Drive API, with SHA-256 integrity checks, a 100 MB payload ceiling, and zip-bomb / malformed-container rejection for Office and ODF files by @taylorwilsdon in #1066
• gmail: replies and reply drafts now target the latest non-draft, non-trash message in a thread by default, fixing cases where replies landed on an older message or an existing draft by @floriangaldo in #1065
• gmail: the add_labels / remove_labels schema is corrected so MCP clients render a proper array input instead of a broken text field by @Tethys0 in #1058
• gcalendar: get_events gains a single_events parameter, letting callers view recurring events as a collapsed series or as individual occurrences, with correct handling of exceptions, cancellations, and events that started in the past by @taylorwilsdon in #1067
• gdrive: Word document text extraction now joins runs without spurious spaces, separates paragraphs with newlines, and reads headers, footers, footnotes, and endnotes by @taylorwilsdon in #1071
• gmail: list_gmail_labels adds prefix, compact, and include_system parameters for efficient label-tree filtering (a 355-label account's 72 KB response drops to under 1 KB with a prefix filter) by @erikholz in #1041
• auth: OAuthProxy token-expiry thresholds are now configurable via WORKSPACE_MCP_OAUTH_PROXY_TOKEN_EXPIRY_THRESHOLD_SECONDS and WORKSPACE_MCP_OAUTH_PROXY_ACCESS_TOKEN_EXPIRY_SECONDS, reducing invalid_grant errors from refresh-token rotation races by @DrFaust92 in #1061
• auth: external OAuth token validation now runs off the event loop via asyncio.to_thread, preventing a slow Google userinfo call from blocking the entire server by @pavel-at-stacks in #1046

New Contributors

• @Tethys0 made their first contribution in #1058
• @pavel-at-stacks made their first contribution in #1046

Full Changelog: v1.25.1...v1.25.2