[Release] google/adk-python v1.31.1: v1.31.1

Google ADK Python v1.32.0 release addresses critical security vulnerabilities and improves SDK compatibility. Key updates include blocking RCE attacks via nested YAML configurations, upgrading the Vertex SDK version, disabling bound tokens for MCP tools, and fixing web OAuth flow and trace view functionality. This release prioritizes security hardening and stability improvements for the AI agent development platform.

Key Points

• •Block RCE vulnerability in nested YAML configurations to prevent remote code execution attacks
• •Upgrade Vertex SDK version for improved compatibility and feature support
• •Disable bound token authentication for MCP tools to enhance security posture
• •Fix web OAuth flow implementation for proper authentication handling
• •Resolve trace view functionality issues for better debugging and monitoring
• •Security-focused release addressing critical vulnerabilities in configuration parsing
• •Maintain backward compatibility while strengthening security controls

Workflow Diagram

Concepts