security: restrict pickle deserialization in v0 schema and migration tool - #5635

Open

daridor9 wants to merge 114 commits into

google:mainfrom

daridor9:fix/restricted-unpickler-v0

Commits on Jun 4, 2026

security: add RestrictedUnpickler for safe v0 pickle deserialization
daridor9
committed
74daf17
security: use RestrictedUnpickler in v0 runtime read path
daridor9
committed
41df699
chore: retrigger CLA check after signing
daridor9
committed
99c79fb
security: add enum types to RestrictedUnpickler allowlist
daridor9
committed
e0ccf64
style: run pyink + isort on _safe_unpickle.py
daridor9
committed
7aeba1b
style: run pyink + isort on v0.py
daridor9
committed
37b8fed
style: run pyink + isort on migrate_from_sqlalchemy_pickle.py
daridor9
committed
fc1cad5
security: override result_processor for SQLite safe deserialization
daridor9
committed
c5218fa
Add unit tests for RestrictedUnpickler functionality
daridor9
committed
a9b863e
test: add real EventActions round-trip smoke tests
daridor9
committed
9f9c67e
fix(sessions): annotate result_processor for mypy-diff; pyink-format test file
daridor9
committed
5c0ba06

Commits on Jun 7, 2026

Merge branch 'main' into fix/restricted-unpickler-v0
daridor9
authored
705e2bf

Commits on Jun 8, 2026

ADK changes

sasha-gitg
authored and
copybara-github
committed
8098d76
chore: update runtime config

google-genai-bot
authored and
copybara-github
committed
ba69174
chore: Remove experimental tag from SkillToolset

wukath
authored and
copybara-github
committed
abdbb30
fix(cli): add missing newline at end of runtime-config.json

GWeale
authored and
copybara-github
committed
ddc0d82
fix(deps): pin yarl to <1.24

GWeale
authored and
copybara-github
committed
8537ccc
fix: constrain Agent Builder roots and block file path escapes

GWeale
authored and
copybara-github
committed
8c7145b
fix(flows): preserve transparent config on live session reconnect

GWeale
authored and
copybara-github
committed
ffef2d9
fix: constrain Agent Builder roots and block file path escapes

google-genai-bot
authored and
copybara-github
committed
1a356ef
feat: Add support for creating sandboxes from templates and snapshots

google-genai-bot
authored and
copybara-github
committed
cde8156
feat: Preserve transcription event order in conversation trajectory

google-genai-bot
authored and
copybara-github
committed
a279a2f
fix: resolve circular import caused by llm_request

GWeale
authored and
copybara-github
committed
bb6d132
feat(samples): Add chart generation and artifact loading to data agent

google-genai-bot
authored and
copybara-github
committed
3a5035f
fix: Use Pydantic TypeAdapter in FunctionTool for automatic argument coercion and validation

enisher
authored and
copybara-github
committed
1c8e831
feat: emit OTel gen_ai.client.* metrics natively

google-genai-bot
authored and
copybara-github
committed
2f698ea
fix: Use Pydantic TypeAdapter in FunctionTool for automatic argument coercion and validation

google-genai-bot
authored and
copybara-github
committed
c5fb92f
ADK changes

DeanChensj
authored and
copybara-github
committed
ce33b98
feat: support custom request metadata inside local Dev UI

google-genai-bot
authored and
copybara-github
committed
7310464
Chore: Updates the `open_source_workspace/` directory to align with the the main branch

DeanChensj
authored and
copybara-github
committed
8da01ef
fix: support PEP 604 union syntax in function tool parameters and ensure nested schema properties are retained

google-genai-bot
authored and
copybara-github
committed
8a3f7e1
chore: Synchronize packages under integrations/ and its unittests with public mirror

DeanChensj
authored and
copybara-github
committed
a3257d0
chore: Sync contributing/samples with main branch

DeanChensj
authored and
copybara-github
committed
708dc0e
fix(tools): don't close parent's plugins from AgentTool's sub-Runner

google-genai-bot
authored and
copybara-github
committed
3ee7c0b
chore: Provide a default value for the `author` field in Event

DeanChensj
authored and
copybara-github
committed
d3841d6
fix: Append trailing newline to runtime-config.json in ADK Web Server

google-genai-bot
authored and
copybara-github
committed
1fbba3b
feat: Add RubricBasedMultiTurnTrajectoryEvaluator which evaluates an entire trajectory on a user-defined set of rubric criteria

google-genai-bot
authored and
copybara-github
committed
eada370
chore: Provide a default value for the `author` field in Event

google-genai-bot
authored and
copybara-github
committed
d3167aa
ADK changes

google-genai-bot
authored and
copybara-github
committed
2084efc
feat(plugins): add AutoTracingPlugin for OpenTelemetry auto-instrumentation

shukladivyansh
authored and
copybara-github
committed
2e998d8
perf(flows): resolve agent tool unions in parallel

google-genai-bot
authored and
copybara-github
committed
ae44435
feat: Preserved A2A message metadata field into ADK event

google-genai-bot
authored and
copybara-github
committed
3b7d7a7
feat: Preserved A2A message metadata field into ADK event

google-genai-bot
authored and
copybara-github
committed
13ca145
chore: bring over v2

GWeale
authored and
copybara-github
committed
c7cacec
fix: Disable JSON_SCHEMA_FOR_FUNC_DECL by default

xuanyang15
authored and
copybara-github
committed
1ff5342
fix: guard peer agent mode access in agent transfer

GWeale
authored and
copybara-github
committed
05635a2
feat(plugins): drop-event observability, cross-region writes, and no duplicate OTel spans

haiyuan-eng-google
authored and
copybara-github
committed
72e0a74
fix: populate user_content in resumed invocations

GWeale
authored and
copybara-github
committed
db6cc52
chore: Add cli, integrations, and skills to GitHub issue triaging rubric

DeanChensj
authored and
copybara-github
committed
ef19613
fix(runners): fall back to root agent when a resumed call author is not in the tree

google-genai-bot
authored and
copybara-github
committed
750ea83
feat: Distinguish between input-required and auth-required states in A2A to ADK conversion

Tongzhou-Jiang
authored and
copybara-github
committed
7fd75b2
feat: Preserved A2A message metadata field into ADK event

google-genai-bot
authored and
copybara-github
committed
a1b7a4b
fix: scope telemetry metric assertions to the test's own agent

GWeale
authored and
copybara-github
committed
061d20c
fix: block path traversal in Agent Builder file tools

GWeale
authored and
copybara-github
committed
8b564f5
fix: Disable JSON_SCHEMA_FOR_FUNC_DECL by default

google-genai-bot
authored and
copybara-github
committed
56f5641
feat: Add sample agent demonstrating 2LO, 3LO, and API Key auth via GcpAuthProvider

google-genai-bot
authored and
copybara-github
committed
9133858
fix(workflow): Resolve raw Content output crash on rehydration

wyf7107
authored and
copybara-github
committed
428e789
test(events): add unit tests for Event helper methods

wyf7107
authored and
copybara-github
committed
2ad2005
fix(streaming): Ensure final partial=False frame is always yielded

wyf7107
authored and
copybara-github
committed
8befdb8
fix(migration): restrict unpickling of v0 actions blobs

wyf7107
authored and
copybara-github
committed
1d055e3
fix: retry TypeAdapter creation without config if it fails

google-genai-bot
authored and
copybara-github
committed
5b06baf
feat: include thoughts and tool calls in compaction summaries

wyf7107
authored and
copybara-github
committed
cd507c1
fix: allow internal builder assistant app name

wyf7107
authored and
copybara-github
committed
7e0c7e0
chore: update adk web, support a2ui and fix thought part

wyf7107
authored and
copybara-github
committed
50d00d2
refactor(tests): Consolidate event tests into test_event.py

wyf7107
authored and
copybara-github
committed
8f43f9c
chore: remove gemini-cli github action workflows due to security vulnerability

wyf7107
authored and
copybara-github
committed
f2d70c2
fix: add missing crop helper to data file helper lib

wyf7107
authored and
copybara-github
committed
09003fe
Merge branch 'main' into fix/restricted-unpickler-v0
daridor9
authored
e248323
fix(cli): Serialize LiteLlm graph models safely

wyf7107
authored and
copybara-github
committed
34b4de0
ADK changes

DeanChensj
authored and
copybara-github
committed
4eb337e
fix: Support generalized history config injection for Gemini 3.1 Live on Vertex AI

wyf7107
authored and
copybara-github
committed
e7eb5fe
No public description

wyf7107
authored and
copybara-github
committed
77356d8
feat: Support additional scopes and custom discovery doc in Google API Tools

wyf7107
authored and
copybara-github
committed
faca170
fix: accept Azure assistant file ids

wyf7107
authored and
copybara-github
committed
74cfad9
feat: expose httpx_client_factory on RestApiTool and OpenAPIToolset

wyf7107
authored and
copybara-github
committed
483b545
fix(a2a): Support to_a2a(Workflow) and reject non-agent root nodes

wyf7107
authored and
copybara-github
committed
254401d
chore: 2.2.0 release

DeanChensj
authored and
copybara-github
committed
7ab188c
fix: Fix path traversal in GCS skill extraction (Zip Slip)

wyf7107
authored and
copybara-github
committed
9799b49
fix(models): default grounding_metadata to empty for Gemini 3.1 live sessions

wukath
authored and
copybara-github
committed
1321bf4
feat(cli): Add --trigger_sources and service URIs to cli_deploy and api_server

GWeale
authored and
copybara-github
committed
0113324
ADK changes

DeanChensj
authored and
copybara-github
committed
3e588cf
feat: align OTel gen_ai.usage.* token telemetry with semconv v1.41.0

google-genai-bot
authored and
copybara-github
committed
77506f2
fix: parse noncanonical litellm tool call arguments

wyf7107
authored and
copybara-github
committed
851e888
feat: raise explicit error for unsupported LiteLlm file attachments

wyf7107
authored and
copybara-github
committed
8251dba
fix: preserve media blocks in ollama content flattening

wyf7107
authored and
copybara-github
committed
63ce7d3
chore: fix CI pre-commit

DeanChensj
authored and
copybara-github
committed
07a66b5
No public description

DeanChensj
authored and
copybara-github
committed
b29caaa
fix: validate session_id and enforce ownership in delete_session

wyf7107
authored and
copybara-github
committed
8ce0181
fix: add artifacts in each agent's .adk folder

wyf7107
authored and
copybara-github
committed
1be1bec
fix: fix compaction tests visibility

wikaaaaa
authored and
copybara-github
committed
ba4180f
refactor: centralize token usage telemetry logic

google-genai-bot
authored and
copybara-github
committed
53ede14
docs(skills): Update skill file formatting

Jacksunwei
authored and
copybara-github
committed
8fa47fb
ADK changes

DeanChensj
authored and
copybara-github
committed
c9006ad
chore: Sync missing cli changes from ffa057c on GitHub

DeanChensj
authored and
copybara-github
committed
d2e4d92
fix: restore Gemini 3.1 Flash Live 1007-error handling on Vertex

GWeale
authored and
copybara-github
committed
aaa1bbb
fix: restore GitHub-only changes dropped during v2 bring-over

GWeale
authored and
copybara-github
committed
5346305
Merge branch 'main' into fix/restricted-unpickler-v0
daridor9
authored
e1b513b

Commits on Jun 9, 2026

Commits on Jun 12, 2026

Merge branch 'main' into fix/restricted-unpickler-v0
daridor9
authored
fb2bdba

Commits on Jun 13, 2026

Commits on Aug 20, 2026