Skip to content

chore(deps)(deps): bump a2a-sdk from 0.3.1 to 1.0.2 in /python/x402_a2a#114

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python/x402_a2a/a2a-sdk-1.0.2
Open

chore(deps)(deps): bump a2a-sdk from 0.3.1 to 1.0.2 in /python/x402_a2a#114
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python/x402_a2a/a2a-sdk-1.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 24, 2026

Copy link
Copy Markdown
Contributor

Bumps a2a-sdk from 0.3.1 to 1.0.2.

Release notes

Sourced from a2a-sdk's releases.

v1.0.2

1.0.2 (2026-04-24)

Features

  • helpers: add non-text Part, Message, and Artifact helpers (#1004) (cfdbe4c)

Bug Fixes

  • proto: use field.label instead of is_repeated for protobuf compatibility (#1010) (7d197db)
  • server: deliver push notifications across all owners (#1016) (c24ae05)

v1.0.1

1.0.1 (2026-04-22)

Bug Fixes

  • compat: avoid unconditional grpc import in v0.3 context builders (#1006) (6b46ceb)

v1.0.0

1.0.0 (2026-04-20)

See the v0.3 → v1.0 migration guide and changelog entries for alpha versions below.

⚠ BREAKING CHANGES

  • remove Vertex AI Task Store integration (#999)

Bug Fixes

  • rely on agent executor implementation for stream termination (#988) (d77cd68)

Documentation

  • add comprehensive v0.3 to v1.0 migration guide (#987) (10dea8b)

Miscellaneous Chores

v1.0.0-alpha.3

1.0.0-alpha.3 (2026-04-17)

... (truncated)

Changelog

Sourced from a2a-sdk's changelog.

1.0.2 (2026-04-24)

Features

  • helpers: add non-text Part, Message, and Artifact helpers (#1004) (cfdbe4c)

Bug Fixes

  • proto: use field.label instead of is_repeated for protobuf compatibility (#1010) (7d197db)
  • server: deliver push notifications across all owners (#1016) (c24ae05)

1.0.1 (2026-04-22)

Bug Fixes

  • compat: avoid unconditional grpc import in v0.3 context builders (#1006) (6b46ceb)

1.0.0 (2026-04-20)

See the v0.3 → v1.0 migration guide and changelog entries for alpha versions below.

⚠ BREAKING CHANGES

  • remove Vertex AI Task Store integration (#999)

Bug Fixes

  • rely on agent executor implementation for stream termination (#988) (d77cd68)

Documentation

  • add comprehensive v0.3 to v1.0 migration guide (#987) (10dea8b)

Miscellaneous Chores

1.0.0-alpha.3 (2026-04-17)

Bug Fixes

  • update with_a2a_extensions to append instead of overwriting (#985) (e1d0e7a)

... (truncated)

Commits
  • eb37091 chore(main): release 1.0.2 (#1012)
  • c24ae05 fix(server): deliver push notifications across all owners (#1016)
  • a470bae test: test push notifications in itk (#1009)
  • cfdbe4c feat(helpers): add non-text Part, Message, and Artifact helpers (#1004)
  • d02ae4e chore(docs): document strict AgentExecutor streaming rules in v1.0 guide (#1014)
  • 8a0f38d ci(linter): show which step failed (#1013)
  • 7d197db fix(proto): use field.label instead of is_repeated for protobuf compatibility...
  • b3d1ad6 chore(docs): update migration README.md (#1003)
  • e3e089b chore(deps): bump cryptography from 46.0.5 to 46.0.7 (#993)
  • 237621d chore(deps-dev): bump pytest from 9.0.2 to 9.0.3 (#966)
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [a2a-sdk](https://github.com/a2aproject/a2a-python) from 0.3.1 to 1.0.2.
- [Release notes](https://github.com/a2aproject/a2a-python/releases)
- [Changelog](https://github.com/a2aproject/a2a-python/blob/main/CHANGELOG.md)
- [Commits](a2aproject/a2a-python@v0.3.1...v1.0.2)

---
updated-dependencies:
- dependency-name: a2a-sdk
  dependency-version: 1.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github May 24, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: python. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label May 24, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 24, 2026 23:32
lingzhong added a commit to lingzhong/a2a-x402 that referenced this pull request Jun 5, 2026
* chore(ci-deps): bump github-actions group (google-agentic-commerce#111)

- astral-sh/setup-uv v5.4.2/v6 -> v8.1.0
- pypa/gh-action-pypi-publish v1.12.4 -> v1.14.0
- googleapis/release-please-action v4 -> v5

* chore(deps): batch safe dependency updates for x402_a2a

Combines these upstream Dependabot PRs into one re-locked batch:
- google-agentic-commerce#112 pydantic 2.11.7 -> 2.13.4 (prod group)
- google-agentic-commerce#113 dev group: mypy 1.18.2->1.20.2, pytest-mock 3.14.1->3.15.1, ruff 0.13.1->0.15.13, trio 0.30.0->0.33.0
- google-agentic-commerce#115 pytest-cov 6.2.1 -> 7.1.0
- google-agentic-commerce#122 aiohttp 3.13.4 -> 3.14.0
- google-agentic-commerce#108 idna 3.10 -> 3.15
- google-agentic-commerce#106 protobuf 6.32.0 -> 6.33.5
- google-agentic-commerce#100 pyasn1 0.6.1 -> 0.6.3
- google-agentic-commerce#103 pygments 2.19.2 -> 2.20.0
- google-agentic-commerce#105 requests 2.32.4 -> 2.33.0
- google-agentic-commerce#104 werkzeug 3.1.3 -> 3.1.6
- google-agentic-commerce#96 urllib3 2.5.0 -> 2.7.0
- google-agentic-commerce#101 flask 3.1.1 -> 3.1.3

Re-locked with uv; pytest (3 passed) and ruff check/format pass.
Excludes majors x402 2.8.0 (google-agentic-commerce#117), a2a-sdk 1.0.2 (google-agentic-commerce#114), starlette 1.0.1 (google-agentic-commerce#123).

* chore(deps): batch safe dependency updates for adk-demo

Combines upstream Dependabot PRs:
- google-agentic-commerce#116 adk-demo-safe group: google-adk 1.14.1->1.33.0, click 8.2.1->8.3.3,
  uvicorn 0.35.0->0.46.0, web3 7.10.0->7.16.0, cdp-sdk 1.32.0->1.46.0,
  ruff 0.13.1->0.15.12, plus transitive cascade
- google-agentic-commerce#118 pytest-cov: obviated (google-adk 1.33 no longer pulls pytest-cov)

Re-locked with uv (181 packages); uv sync --group lint and ruff check/format pass.

* chore(deps): bump starlette 0.47.2 -> 1.0.1 in x402_a2a (google-agentic-commerce#123)

The one upstream major that re-locks and passes cleanly on top of the safe
batch. uv resolves starlette 1.0.1 without bumping a2a-sdk 0.3.1, i.e. a2a-sdk
0.3.1 already declares compatibility with starlette 1.0; package import, the
test suite (3 passed), and ruff check/format all pass.

Transitively pulls fastapi 0.116.1 -> 0.136.3 plus annotated-doc, fastar and
pydantic-extra-types.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants