v1.3.0.Final

A2A Java SDK 1.3.0.Final

Installation

Maven:

<dependency>
    <groupId>org.a2aproject.sdk</groupId>
    <artifactId>a2a-java-sdk-client</artifactId>
    <version>1.3.0.Final</version>
</dependency>

Gradle:

implementation 'org.a2aproject.sdk:a2a-java-sdk-client:1.3.0.Final'

Links

• Maven Central
• JavaDoc
• GitHub

Changes since v1.2.0.Final

Full Changelog

What's Changed

• docs: 1.2.0.Final release by @kabir in #1022
• chore: bump version to 1.2.1.Final-SNAPSHOT by @kabir in #1023
• chore: Announce 1.2.0.Final release by @kabir in #1011
• chore: Wrong date in 1.2.0.Final release announcement by @kabir in #1025
• chore: Add 1.2.0.Final to the docs version matrix by @kabir in #1036
• chore: bump groovy.version from 5.0.6 to 5.0.8 by @dependabot[bot] in #1050
• chore: bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1 in the maven-plugins group across 1 directory by @dependabot[bot] in #1002
• chore: improve and rename release skill to release-a2a by @kabir in #1024
• fix(itk): exclude Go v0.3 from HTTP JSON scenarios by @KXHXK in #999
• chore: bump the quarkus group with 2 updates by @dependabot[bot] in #1047
• chore: bump org.jspecify:jspecify from 1.0.0 to 1.0.1 by @dependabot[bot] in #1049
• fix(server-common): reject CR/LF in push notification headers (CWE-113) by @ehsavoie in #1053
• fix(security): enforce authorization for listTasks by @ez-lbz in #1038
• fix: guard limitTaskHistory against negative historyLength by @ez-lbz in #1039
• fix: return UnsupportedOperationError (-32004) when streaming is not supported by @ez-lbz in #1041
• fix: harden event consumer and queue by @ez-lbz in #1040
• chore: bump org.junit.jupiter:junit-jupiter-api from 6.1.2 to 6.1.3 in the testing group by @dependabot[bot] in #1048
• chore: address PR review cleanup from #1039 and #1040 by @kabir in #1055
• fix: enforce per-task push notification config limit by @ez-lbz in #1044
• fix: validate A2A version and extensions on all gRPC handler methods by @ez-lbz in #1042
• fix: enforce task state-machine transitions and serialize cancels by @ez-lbz in #1045
• fix: sanitize internal error messages in transport handlers by @ez-lbz in #1046
• ci(itk): switch to v2 itk launcher by @JakubWorek in #1063
• ci(itk): scope safe.directory to launcher cache repos, not wildcard by @JakubWorek in #1064
• fix(jsonrpc): prefer a populated content key when decoding a Part by @rmlopes in #1061
• fix(jsonrpc): reject Part with multiple populated content keys by @kabir in #1065
• fix: defer AgentCard resolution to prevent eager startup failures by @kabir in #1058
• chore: Don't deploy tests and examples to Maven by @kabir in #1069
• fix: make InMemoryPushNotificationConfigStore thread-safe by @kabir in #1057
• fix: wrong name for docs/ artifact by @kabir in #1070
• fix: validate A2A version and extensions on all JSON-RPC and REST operations by @omatheusmesmo in #1066
• chore: bump the quarkus group with 2 updates by @dependabot[bot] in #1074
• chore: bump docker/build-push-action from 6 to 7 by @dependabot[bot] in #1075
• chore: bump org.codehaus.gmavenplus:gmavenplus-plugin from 5.0.0 to 5.1.0 by @dependabot[bot] in #1080
• chore: bump io.smallrye.reactive:mutiny-zero from 1.1.1 to 1.3.0 by @dependabot[bot] in #1079
• chore: bump io.github.ascopes:protobuf-maven-plugin from 5.1.7 to 5.1.8 by @dependabot[bot] in #1077
• chore: bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #1072
• feat(http-client): add CDI provider and priority-ordered factory fallback by @ehsavoie in #1071
• feat: make AgentExecutor a functional interface with default cancel m… by @malladinagarjuna2 in #1028
• fix(grpc): transport validation and error message by @malladinagarjuna2 in #1026
• chore: bump actions/cache from 4 to 6 by @dependabot[bot] in #1073
• chore: bump org.mock-server:mockserver-netty from 6.1.0 to 7.5.0 by @dependabot[bot] in #1076
• chore: bump groovy.version from 5.0.8 to 5.1.0 by @dependabot[bot] in #1078
• docs(security): add threat model to SECURITY.md by @ehsavoie in #1090
• feat(server)!: add multitenancy support with per-tenant routing by @ehsavoie in #1084
• fix!: enforce fail-closed default for task authorization by @kabir in #1095
• fix: prevent SSRF via push notification URL validation by @ehsavoie in #1096
• chore: bump com.uber.nullaway:nullaway from 0.13.4 to 0.14.0 by @dependabot[bot] in #1089
• chore: bump the quarkus group with 2 updates by @dependabot[bot] in #1085
• feat(itk): use shared scenarios by @JakubWorek in #1094
• fix: Add optional name to FilePart by @kabir in #1091
• chore: bump org.jboss.weld.se:weld-se-core from 5.1.7.Final to 6.0.4.Final by @dependabot[bot] in #1088
• fix: prevent credential leakage via header injection and redirects by @kabir in #1097
• chore: bump ch.qos.logback:logback-classic from 1.5.18 to 1.5.34 by @dependabot[bot] in #915
• chore(deps): bump mapstruct-spi-protobuf to 1.66.0 and mockserver to 7.6.0 by @ehsavoie in #1098
• chore: release 1.3.0.Final by @kabir in #1099

New Contributors

• @KXHXK made their first contribution in #999
• @ez-lbz made their first contribution in #1038
• @rmlopes made their first contribution in #1061
• @omatheusmesmo made their first contribution in #1066
• @malladinagarjuna2 made their first contribution in #1028

Full Changelog: v1.2.0.Final...v1.3.0.Final