v0.53.0 - September 10, 2026

What's New

• HTTP client (sap_cloud_sdk.core.protocol.http): new package with HttpClient, XsuaaAuthProvider, AuthProvider, and HttpMethod. HttpClient composes with an AuthProvider and retries automatically on HTTP 401. XsuaaAuthProvider caches OAuth2 tokens per tenant, re-reads the service binding on every token refresh, and proactively evicts the cache when the secret directory mtime changes — enabling credential rotation.
• ConfigFactory (sap_cloud_sdk.core.secret_resolver): generic binding re-reader that tracks secret directory mtime for proactive rotation detection. All modules using service binding secrets now go through ConfigFactory.
• HTTP Client user guide: new core/protocol/http/user-guide.md documenting HttpClient, XsuaaAuthProvider, AuthProvider, binding rotation mechanics, and troubleshooting.

Improvements

• Agent Memory — transport layer replaced with HttpClient + XsuaaAuthProvider; credentials are re-read on every token refresh; 401 responses trigger a single automatic retry with fresh credentials.
• Destination — _http.py refactored to use HttpClient + XsuaaAuthProvider; create_client() return type now annotated as -> DestinationClient.
• Type narrowing — added isinstance(dest, Destination) guards in agentgateway/_lob.py, aicore/__init__.py, core/auditlog_ng/__init__.py, extensibility/_ums_transport.py, and outputmanagement/config.py so Destination | TransparentProxyDestination return types are handled correctly.
• Agent Memory payload constants — all payload dict keys in agent_memory/client.py extracted to module-level string constants (e.g. _AGENT_ID_KEY, _QUERY_KEY, _MESSAGE_DAYS_KEY).
• Binding rotation docs — agent_memory/user-guide.md and destination/user-guide.md now link to the new HTTP client guide explaining the two-layer rotation recovery model.

Contributors

• @cassiofariasmachado