v4.2.0

Highlights

• Resolves Dependabot security alerts by updating dependencies across all packages (#1164).
• Migrates to zod 4.
• Adds support for @google/adk v2 in @hashgraph/hedera-agent-kit-adk.

Packages

Package	Version
@hashgraph/hedera-agent-kit	4.2.0
@hashgraph/hedera-agent-kit-adk	2.1.0
@hashgraph/hedera-agent-kit-ai-sdk	2.1.0
@hashgraph/hedera-agent-kit-elizaos	2.1.0
@hashgraph/hedera-agent-kit-langchain	2.1.0
@hashgraph/hedera-agent-kit-mcp	1.2.0

Upgrade notes

• zod 4: the packages now depend on zod@4. If you write custom tools, define their parameters with zod 4 schemas (import { z } from 'zod' with zod@^4 installed).
• @hiero-ledger/sdk peer dependency is now ^2.90.1 (was ^2.86.2).
• @google/adk peer dependency now accepts ^1.4.0 || ^2.3.0.
• update_topic tool: expirationTime now accepts only an ISO 8601 string. Date objects are no longer accepted.
• elizaos: on parameter validation failure, the callback's content.error now uses the z.treeifyError() shape (previously ZodError.format()).

Other changes

• create_erc721: tool description now states that baseURI is optional (defaults to an empty string).
• update_token: clarified that metadata should be passed exactly as provided by the user.

What's Changed

• chore: Add new maintainers to CODEOWNERS file by @jeromy-cannon in #1158
• fix: resolve Dependabot security alerts by @kacpers-blocky in #1164
• chore: bump package versions to v4.2.0 by @skurzyp-blockydevs in #1165

New Contributors

• @jeromy-cannon made their first contribution in #1158

Full Changelog: v4.1.1...v4.2.0