Release: v1.2.0

[kalenkevich]

Automated Release PR

adk: 1.2.0

1.2.0 (2026-06-02)

Features

• abort agent execution on HTTP connection disconnected (#382) (e7776cc)
• add pagination and sorting to listSessions (#331) (ed9b72b)
• add VertexRagRetrievalTool for Vertex AI RAG Engine grounding (#277) (14f5f17)
• Agent Engine Sandbox Code Executor (#317) (1138e3c)
• Google maps tool (#321) (d2b4e91)
• Implement customMetadata support in runAsync and runEphemeral. (#363) (faa458e)
• Implement the Agent Registry in adk-js (#358) (27e5a92)
• memory: implement Vertex AI Memory Bank service with tests (#291) (3d82451)
• openapi: implement auth helpers and credential exchangers (part 1) (#384) (86f794e)

Bug Fixes

• apply toolFilter in MCPToolset.getTools() (#312) (#313) (3cdc1fb)
• auth/oauth2: block SSRF via IPv4-mapped IPv6 and fix dead 172.16/12 check (#354) (57b0af7)
• core: wrap array responses in function tools to comply with Gemini API (#347) (af115b6)
• do not propagate skipSummarization to parent EventActions in AgentTool (#301) (b3eb611), closes #288
• filter temp: keys from sub-agent state delta in AgentTool (#271) (db1128b)
• filter thought parts in stringifyContent and AgentTool merged text (#323) (58dac0b)
• handle undefined type in toGeminiSchema for enum/const-only schemas (#370) (69f35b4)
• mcp_toolset: Implement close session method (#394) (4e3faa9)
• mcp: close MCP client session after listTools/callTool to fix Windows libuv assertion and process leak (#333) (dd5584a)
• StreamingResponseAggregator.close() drops final event when last chunk has no candidates (#289) (#311) (30ba5c8)
• streaming: suppress empty STOP chunks and preserve tool calls in SSE session history (#395) (e9e0fe6)

devtools: 1.2.0

1.2.0 (2026-06-02)

Features

• abort agent execution on HTTP connection disconnected (#382) (e7776cc)
• Add Agent Engine deployment support (#335) (3e901a5)

Bug Fixes

• mark lightningcss and jiti as external in agent_loader esbuild to fix adk web on missing optional deps (#319) (ab625c9)
• remove hardcoded Access-Control-Allow-Origin wildcard from run_sse (#360) (d2db989)
• replace unix cp with node.js fs.cp in dev/build.js for windows compatibility (#318) (53ee7eb)
• Resolve CORS vulnerability by disabling express.urlencoded parser (#378) (1fe631f)
• server: restrict AdkApiServer to listen on configured host (#383) (7be8c81)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @google/adk bumped from ^1.1.0 to ^1.2.0

main: 1.2.0

1.2.0 (2026-06-02)

Features

• abort agent execution on HTTP connection disconnected (#382) (e7776cc)
• Add Agent Engine deployment support (#335) (3e901a5)
• add pagination and sorting to listSessions (#331) (ed9b72b)
• add VertexRagRetrievalTool for Vertex AI RAG Engine grounding (#277) (14f5f17)
• Agent Engine Sandbox Code Executor (#317) (1138e3c)
• Google maps tool (#321) (d2b4e91)
• Implement customMetadata support in runAsync and runEphemeral. (#363) (faa458e)
• Implement the Agent Registry in adk-js (#358) (27e5a92)
• memory: implement Vertex AI Memory Bank service with tests (#291) (3d82451)
• openapi: implement auth helpers and credential exchangers (part 1) (#384) (86f794e)

Bug Fixes

• apply toolFilter in MCPToolset.getTools() (#312) (#313) (3cdc1fb)
• auth/oauth2: block SSRF via IPv4-mapped IPv6 and fix dead 172.16/12 check (#354) (57b0af7)
• core: wrap array responses in function tools to comply with Gemini API (#347) (af115b6)
• do not propagate skipSummarization to parent EventActions in AgentTool (#301) (b3eb611), closes #288
• filter temp: keys from sub-agent state delta in AgentTool (#271) (db1128b)
• filter thought parts in stringifyContent and AgentTool merged text (#323) (58dac0b)
• handle undefined type in toGeminiSchema for enum/const-only schemas (#370) (69f35b4)
• mark lightningcss and jiti as external in agent_loader esbuild to fix adk web on missing optional deps (#319) (ab625c9)
• mcp_toolset: Implement close session method (#394) (4e3faa9)
• mcp: close MCP client session after listTools/callTool to fix Windows libuv assertion and process leak (#333) (dd5584a)
• remove hardcoded Access-Control-Allow-Origin wildcard from run_sse (#360) (d2db989)
• replace unix cp with node.js fs.cp in dev/build.js for windows compatibility (#318) (53ee7eb)
• Resolve CORS vulnerability by disabling express.urlencoded parser (#378) (1fe631f)
• server: restrict AdkApiServer to listen on configured host (#383) (7be8c81)
• StreamingResponseAggregator.close() drops final event when last chunk has no candidates (#289) (#311) (30ba5c8)
• streaming: suppress empty STOP chunks and preserve tool calls in SSE session history (#395) (e9e0fe6)

---

This PR was generated with Release Please. See documentation.

[kalenkevich]

🤖 Created releases:

• main-v1.2.0
• adk-v1.2.0
• devtools-v1.2.0

🌻