chore: update dependencies to address a CVE in google-adk 1.20.0 (#1010)

nan-yu · web-flow · commit 92b4c2da4fd0 · 2026-03-27T21:21:49.000Z
* chore: update dependencies to address a CVE in google-adk 1.20.0

* chore: upgrade google-adk to 1.28.0 across all agent samples and SDKs
diff --git a/agent_sdks/python/pyproject.toml b/agent_sdks/python/pyproject.toml
@@ -20,7 +20,7 @@ readme = "README.md"
 requires-python = ">=3.10"
 dependencies = [
   "a2a-sdk>=0.3.0",
-  "google-adk>=1.8.0",
+  "google-adk>=1.28.0",
   "google-genai>=1.27.0",
   "jsonschema>=4.0.0"
 ]
diff --git a/agent_sdks/python/uv.lock b/agent_sdks/python/uv.lock
diff --git a/samples/agent/adk/contact_lookup/pyproject.toml b/samples/agent/adk/contact_lookup/pyproject.toml
@@ -21,7 +21,7 @@ requires-python = ">=3.13"
 dependencies = [
     "a2a-sdk>=0.3.0",
     "click>=8.1.8",
-    "google-adk>=1.8.0",
+    "google-adk>=1.28.0",
     "google-genai>=1.27.0",
     "python-dotenv>=1.1.0",
     "litellm",
diff --git a/samples/agent/adk/contact_multiple_surfaces/pyproject.toml b/samples/agent/adk/contact_multiple_surfaces/pyproject.toml
@@ -21,7 +21,7 @@ requires-python = ">=3.13"
 dependencies = [
     "a2a-sdk>=0.3.0",
     "click>=8.1.8",
-    "google-adk>=1.8.0",
+    "google-adk>=1.28.0",
     "google-genai>=1.27.0",
     "python-dotenv>=1.1.0",
     "litellm",
diff --git a/samples/agent/adk/mcp_app_proxy/pyproject.toml b/samples/agent/adk/mcp_app_proxy/pyproject.toml
@@ -23,7 +23,7 @@ requires-python = ">=3.12"
 dependencies = [
     "a2a-sdk>=0.3.0",
     "click>=8.1.8",
-    "google-adk>=1.8.0",
+    "google-adk>=1.28.0",
     "google-genai>=1.27.0",
     "python-dotenv>=1.1.0",
     "litellm",
diff --git a/samples/agent/adk/orchestrator/pyproject.toml b/samples/agent/adk/orchestrator/pyproject.toml
@@ -21,7 +21,7 @@ requires-python = ">=3.13"
 dependencies = [
     "a2a-sdk>=0.3.0",
     "click>=8.1.8",
-    "google-adk>=1.8.0",
+    "google-adk>=1.28.0",
     "google-genai>=1.27.0",
     "python-dotenv>=1.1.0",
     "litellm",
@@ -39,8 +39,6 @@ build-backend = "hatchling.build"
 [tool.hatch.metadata]
 allow-direct-references = true
 
-[tool.uv.sources]
-google-adk = { git = "https://github.com/google/adk-python.git", rev = "143ad44" }
 
 [[tool.uv.index]]
 url = "https://pypi.org/simple"
diff --git a/samples/agent/adk/restaurant_finder/pyproject.toml b/samples/agent/adk/restaurant_finder/pyproject.toml
@@ -21,7 +21,7 @@ requires-python = ">=3.13"
 dependencies = [
     "a2a-sdk>=0.3.0",
     "click>=8.1.8",
-    "google-adk>=1.8.0",
+    "google-adk>=1.28.0",
     "google-genai>=1.27.0",
     "python-dotenv>=1.1.0",
     "litellm",
diff --git a/samples/agent/adk/rizzcharts/pyproject.toml b/samples/agent/adk/rizzcharts/pyproject.toml
@@ -21,7 +21,7 @@ requires-python = ">=3.13"
 dependencies = [
     "a2a-sdk>=0.3.0",
     "click>=8.1.8",
-    "google-adk>=1.8.0",
+    "google-adk>=1.28.0",
     "google-genai>=1.27.0",
     "python-dotenv>=1.1.0",
     "litellm",
diff --git a/samples/agent/adk/uv.lock b/samples/agent/adk/uv.lock
diff --git a/samples/agent/mcp/a2ui-over-mcp-recipe/uv.lock b/samples/agent/mcp/a2ui-over-mcp-recipe/uv.lock
diff --git a/samples/personalized_learning/agent/pyproject.toml b/samples/personalized_learning/agent/pyproject.toml
@@ -18,8 +18,8 @@ version = "0.1.0"
 description = "A2A Agent for generating personalized A2UI learning materials"
 requires-python = ">=3.11"
 dependencies = [
-    "google-adk>=0.3.0",
-    "google-genai>=1.0.0",
+    "google-adk>=1.28.0",
+    "google-genai>=1.27.0",
     "google-cloud-storage>=2.10.0",
     "python-dotenv>=1.0.0",
     "certifi>=2023.0.0",
diff --git a/samples/personalized_learning/agent/requirements.txt b/samples/personalized_learning/agent/requirements.txt
@@ -1,5 +1,5 @@
-google-adk>=0.3.0
-google-genai>=1.0.0
+google-adk>=1.28.0
+google-genai>=1.27.0
 google-cloud-storage>=2.10.0
 certifi>=2023.0.0
 python-dotenv>=1.0.0
diff --git a/samples/personalized_learning/quickstart_setup.sh b/samples/personalized_learning/quickstart_setup.sh
@@ -92,8 +92,8 @@ if [ "$SKIP_PIP" = false ]; then
         --index-url https://pypi.org/simple/ \
         --trusted-host pypi.org \
         --trusted-host files.pythonhosted.org \
-        "google-adk>=0.3.0" \
-        "google-genai>=1.0.0" \
+        "google-adk>=1.28.0" \
+        "google-genai>=1.27.0" \
         "google-cloud-storage>=2.10.0" \
         "python-dotenv>=1.0.0" \
         "vertexai" 2>/dev/null

Original file line number	Diff line number	Diff line change
`@@ -20,7 +20,7 @@ readme = "README.md"`
`20`	`20`	`requires-python = ">=3.10"`
`21`	`21`	`dependencies = [`
`22`	`22`	`"a2a-sdk>=0.3.0",`
`23`		`- "google-adk>=1.8.0",`
	`23`	`+ "google-adk>=1.28.0",`
`24`	`24`	`"google-genai>=1.27.0",`
`25`	`25`	`"jsonschema>=4.0.0"`
`26`	`26`	`]`