v0.36.2 - September 10, 2026

Bug Fixes

• adms.AsyncHttpClient: Fixed _resolve_token() to use inspect.iscoroutinefunction instead of asyncio.iscoroutinefunction. The asyncio variant does not detect coroutines wrapped by third-party decorators, causing async token callables to be called synchronously in some environments.
• core.telemetry.GenAIAttributeTransformer: Fixed a TypeError raised under OpenTelemetry 1.44.x where BoundedAttributes — the default span attribute container — is immutable. The transformer now copies the attributes to a plain dict before mutating them in-place.
• core.data_anonymization.HttpTransport: Fixed a ty type-checker error in _post_file_request. The file_value local variable is now explicitly typed as BinaryIO | bytes and a None-guard assertion is added in the else branch, satisfying the type contract of requests.Session.post's files parameter.

Dependency Upgrades

• OpenTelemetry: upgraded from ~=1.42.1 to ~=1.44.0 (opentelemetry-api, opentelemetry-sdk, opentelemetry-exporter-otlp-proto-grpc, opentelemetry-exporter-otlp-proto-http)
• protobuf: minimum raised from >=4.25.0 to >=7.36.0,<8
• protovalidate: minimum raised from >=0.13.0 to >=1.0.0,<2
• pypa/gh-action-pypi-publish: bumped from v1.14.0 to v1.14.2 in the release workflow