[Release] google/adk-python v1.38.0: v1.38.0

Google ADK Python v1.38.0 release introduces safety settings forwarding to the Live API and addresses critical security and stability issues. Key improvements include preventing shell execution vulnerabilities in ReadFileTool, excluding problematic nltk dependency versions, fixing Live API agent transfers, and enhancing evaluation error handling. This release focuses on security hardening and reliability improvements for agent development.

Key Points

• •Forward safety_settings from generate_content_config to Live API for consistent content safety policies
• •Prevent shell execution vulnerabilities in ReadFileTool ranged reads to improve security
• •Maintain local environment file access within workspace boundaries for safer file operations
• •Exclude nltk 3.10.1 dependency that breaks virtual environments in working directories
• •Fix Live API agent transfers to work correctly regardless of function response ordering
• •Handle failed inference results without invocations in evaluation workflows
• •Port tool confirmation security and re-validation fixes to v1 branch for backward compatibility
• •Improve stability and security posture for production agent deployments

Workflow Diagram

Concepts