Skip to content

chore(deps)(deps): bump a2a-sdk from 0.3.26 to 1.1.2 in /sdk - #289

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/sdk/a2a-sdk-1.1.2
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/sdk/a2a-sdk-1.1.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor

Bumps a2a-sdk from 0.3.26 to 1.1.2.

Release notes

Sourced from a2a-sdk's releases.

v1.1.2

1.1.2 (2026-07-20)

Features

  • server: add aclose() to drain ActiveTask background tasks (#1101) (#1105) (9801f46)

Bug Fixes

  • agent_execution: resolve ActiveTask 'destroyed but pending' warning during teardown (#1122) (d19c4d2)
  • persist early producer failure as FAILED with originating message (#1106) (4e3d724)

v1.1.1

1.1.1 (2026-07-15)

Bug Fixes

  • server: improve Swagger /docs example annotations for A2A routes (#1092) (46b292b)

Miscellaneous Chores

  • grpc: eliminate third-party grpcio-status dependency (#1130) (723880e)
  • http: eliminate httpx-sse dependency (#1132) (0d82ab9)

v1.1.0

1.1.0 (2026-05-29)

Features

  • server: restore FastAPI /docs visibility for A2A routes (#1024) (1122d4e)

Bug Fixes

  • compat: remove ListTasks from v0.3 REST adapter (#1043) (#1068) (5c88793)
  • properly convert metadata to dict in RequestContext.metadata (#1081) (d2f2e18)
  • raise on append=True for unknown artifact_id (#1038) (#1077) (fe1f24b)
  • release reference count on non-terminal exit to prevent stale registry entries (#1079) (501255c)
  • server: preserve non-ASCII characters in streaming JSON responses (#1080) (d46c6f9)
  • telemetry: don't mark QueueShutDown as an error span (#1075) (54a485c)

Documentation

... (truncated)

Changelog

Sourced from a2a-sdk's changelog.

1.1.2 (2026-07-20)

Features

  • server: add aclose() to drain ActiveTask background tasks (#1101) (#1105) (9801f46)

Bug Fixes

  • agent_execution: resolve ActiveTask 'destroyed but pending' warning during teardown (#1122) (d19c4d2)
  • persist early producer failure as FAILED with originating message (#1106) (4e3d724)

1.1.1 (2026-07-15)

Bug Fixes

  • server: improve Swagger /docs example annotations for A2A routes (#1092) (46b292b)

Miscellaneous Chores

  • grpc: eliminate third-party grpcio-status dependency (#1130) (723880e)
  • http: eliminate httpx-sse dependency (#1132) (0d82ab9)

1.1.0 (2026-05-29)

Features

  • server: restore FastAPI /docs visibility for A2A routes (#1024) (1122d4e)

Bug Fixes

  • compat: remove ListTasks from v0.3 REST adapter (#1043) (#1068) (5c88793)
  • properly convert metadata to dict in RequestContext.metadata (#1081) (d2f2e18)
  • raise on append=True for unknown artifact_id (#1038) (#1077) (fe1f24b)
  • release reference count on non-terminal exit to prevent stale registry entries (#1079) (501255c)
  • server: preserve non-ASCII characters in streaming JSON responses (#1080) (d46c6f9)
  • telemetry: don't mark QueueShutDown as an error span (#1075) (54a485c)

Documentation

Miscellaneous Chores

... (truncated)

Commits
  • 3e6fa6a chore(main): release 1.1.2 (#1139)
  • 9801f46 feat(server): add aclose() to drain ActiveTask background tasks (#1101) (#1105)
  • d19c4d2 fix(agent_execution): resolve ActiveTask 'destroyed but pending' warning duri...
  • 4e3d724 fix: persist early producer failure as FAILED with originating message (#1106)
  • 86c6b0d chore(main): release 1.1.1 (#1103)
  • 0d82ab9 refactor(http): eliminate third-party httpx-sse dependency (#1132)
  • 723880e refactor(grpc): remove grpcio-status dependency (#1130)
  • 343373b test: expand itk scenarios with ts java and rust agents (#1129)
  • e7eafe3 chore(deps): bump cryptography from 48.0.0 to 48.0.1 (#1109)
  • 46b292b fix(server): improve Swagger /docs example annotations for A2A routes (#1092)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [a2a-sdk](https://github.com/a2aproject/a2a-python) from 0.3.26 to 1.1.2.
- [Release notes](https://github.com/a2aproject/a2a-python/releases)
- [Changelog](https://github.com/a2aproject/a2a-python/blob/main/CHANGELOG.md)
- [Commits](a2aproject/a2a-python@v0.3.26...v1.1.2)

---
updated-dependencies:
- dependency-name: a2a-sdk
  dependency-version: 1.1.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file sdk SDK package changes labels Sep 14, 2026
@pontino

pontino commented Sep 18, 2026

Copy link
Copy Markdown
Collaborator

Closing: a2a-sdk 1.x breaks the A2A adapter, and CI cannot see it because the test job installs without extras. Verified locally with a2a-sdk 1.1.2:

  • AgentCard has no url field (plugin.create_agent_card)
  • a2a.server.apps module no longer exists (plugin._start_a2a_server)
  • DataPart no longer importable from a2a.types (executor._send_agent_response)

The widened constraint >=0.3,<1.2 would also let a fresh pip install eggai[a2a] resolve to 1.1.2 and ship the broken adapter. The migration lives in #275 and should land instead.

@pontino pontino closed this Sep 18, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 18, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/pip/sdk/a2a-sdk-1.1.2 branch September 18, 2026 08:02
pontino added a commit that referenced this pull request Sep 18, 2026
mypy reported 18 errors in tracing.py and the a2a adapter when run with
all extras installed. CI never saw them because the lint and test jobs
install without extras. The same gap let #289 pass CI while breaking the
a2a adapter at runtime.

tracing.py: type the exporter argument, pass endpoint directly, import
the two OTLP exporters under distinct names, drop the dead provider
reassignment.

a2a: import SecurityScheme unconditionally, remove the executor fallback
that enqueued a raw dict.

CI: lint and test jobs install all extras.

test_tracing.py: skip on opentelemetry.sdk instead of the bare namespace
package, which resolves to an empty leftover directory after the extras
are uninstalled from a venv.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file sdk SDK package changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant