Adk Js

From the release notes

2.1.0 (2026-09-14) Miscellaneous Chores integrations: Synchronize adk versions Dependencies The following workspace dependencies were updated dependencies @google/adk bumped from ^2.0.0 to ^2.1.0

From the release notes

2.1.0 (2026-09-14) Features Add ContainerCodeExecutor for Docker-sandboxed code execution (#541) (a52b669) dev: add --min_instances/--max_instances flags to agent_engine deploy (#899) (0dc138c) dev: add Origin validation to the dev server (DNS-rebinding defense in depth) (#557) (f280eba) Bug Fixes build: stop compiling the dev CLI entrypoint into dist/cjs (#861) (da9a492) cli: quit adk run on a whitespace-padded exit (#896) (0568990) cli: stop staging an empty node_modules and a zero-byte lockfile into the deploy image (#894) (fd4ac9a) cli: surface model errors and make agent stack traces readable (#625) (9508dee) cli: use GOOGLE_GENAI_USE_ENTERPRISE instead of deprecated GOOGLE_GENAI_USE_VERTEXAI (#897) (6dc4a3d) core: make transfer and runtime tool confirmation work across runtimes (#808) (6e251bb) deploy: pass shell:true to spawn on win32 to fix ENOENT for .cmd binaries (#888) (b46196b) dev: let --bundle false actually load an agent (#791) (91357fd), closes #714 dev: print the command help after a CLI usage error (#892) (206dc97) dev: route AgentFile.load multiple-apps/agents warnings through AdkLogger (#879) (905e730) guard reads in the dev server against DNS rebinding (#744) (0fe9581) remove the no-op @ts-ignore on the esbuild-shim-plugin import (#805) (9566743) Dependencies The following workspace dependencies were updated dependencies @google/adk bumped from ^2.0.0 to ^2.1.0

From the release notes

2.1.0 (2026-09-14) Features Add ContainerCodeExecutor for Docker-sandboxed code execution (#541) (a52b669) Add VertexAiRagMemoryService (Vertex AI RAG memory backend) (#543) (8543e9c) auth: emit a PKCE S256 code challenge on the OAuth2 authorization URI (#820) (6db4727) core: export resetLogger from the @google/adk public API (#882) (d4bdbd3) models: add a Chrome Prompt API BaseLlm for the on-device model (#843) (77b0803) plugins: add ReflectAndRetryToolPlugin and ReflectAndRetryModelPlugin for self-healing error recovery (#631) (1b6ea6d) Port the typed-errors module (errors/) from adk-python (#583) (fab19d0) Rethinking ForwardingArtifactService Interface (Part 2/2) (#510) (cea2dca) Rethinking ForwardingArtifactService Interface and Removing Unnecessary Parameters in ADK JS (Part 1/2) (#508) (77809e3) tools: port the adk-python v0.1.0 retrieval tools (#854) (5ec1c94) Bug Fixes a2a: harden agent-card resolution against SSRF and a silent file read (#832) (1bb1120) a2a: propagate request metadata to agent execution (#752) (#768) (bb2dd8f) agent-registry: declare the synthesised card default modes as media types (#878) (2024ab2) agents: carry request-input resume inputs in their own type (#822) (8664b6e) always emit an array for the OpenAPI argument schema required key (#895) (dc30492) artifacts: list artifacts nested under another artifact (#858) (caa2b4d) auth: redact OAuth2 authorization code from malformed-callback-URI log (#640) (08f4f24) auth: reject an empty credentialKey before storing the credential (#818) (8f792bb) build: make the web build loadable outside Node (#837) (5b9c306) check every function response, not just the first, when resolving which agent to resume (#810) (aee975f) close two remaining author-blind confirmation-resolution paths (#755) (f9d6d91) context: respect isolation scopes during compaction (#830) (cda8433) core: configure VertexAiSessionService from environment for vertexai:// URIs (#898) (600b756) core: drop the unused @mikro-orm/reflection dependency and pin the DB-driver manifest contract (#814) (6ea9ce5) core: gracefully handle unregistered tool calls (#790) (6be4195) core: keep winston out of the published browser build by splitting the logger by platform (#813) (c2c2ecb) core: load artifacts and MCP resources when other tools are call… (#639) (b723201) core: make built-in tools resolvable by name (#811) (e7fab37) core: make transfer and runtime tool confirmation work across runtimes (#808) (6e251bb) core: redact inline data payloads from the resumption debug event dump (#817) (0c9d9ba) core: render an empty code block when an executableCode part has no code (#868) (649afd0) core: stop a surviving grandchild from hanging code execution (#793) (173462a), closes #622 core: type the live session mock in gemini_llm_connection_test (#849) (bfe904e) drop the redundant ExtendedInteractionSSEEvent self-cast in the streaming loop (#827) (e9f187f) make the web build bundle and run in a b

From the release notes

2.1.0 (2026-09-14) Features Add ContainerCodeExecutor for Docker-sandboxed code execution (#541) (a52b669) Add VertexAiRagMemoryService (Vertex AI RAG memory backend) (#543) (8543e9c) auth: emit a PKCE S256 code challenge on the OAuth2 authorization URI (#820) (6db4727) core: export resetLogger from the @google/adk public API (#882) (d4bdbd3) dev: add --min_instances/--max_instances flags to agent_engine deploy (#899) (0dc138c) dev: add Origin validation to the dev server (DNS-rebinding defense in depth) (#557) (f280eba) models: add a Chrome Prompt API BaseLlm for the on-device model (#843) (77b0803) plugins: add ReflectAndRetryToolPlugin and ReflectAndRetryModelPlugin for self-healing error recovery (#631) (1b6ea6d) Port the typed-errors module (errors/) from adk-python (#583) (fab19d0) Rethinking ForwardingArtifactService Interface (Part 2/2) (#510) (cea2dca) Rethinking ForwardingArtifactService Interface and Removing Unnecessary Parameters in ADK JS (Part 1/2) (#508) (77809e3) tools: port the adk-python v0.1.0 retrieval tools (#854) (5ec1c94) Bug Fixes a2a: harden agent-card resolution against SSRF and a silent file read (#832) (1bb1120) a2a: propagate request metadata to agent execution (#752) (#768) (bb2dd8f) agent-registry: declare the synthesised card default modes as media types (#878) (2024ab2) agents: carry request-input resume inputs in their own type (#822) (8664b6e) always emit an array for the OpenAPI argument schema required key (#895) (dc30492) artifacts: list artifacts nested under another artifact (#858) (caa2b4d) auth: redact OAuth2 authorization code from malformed-callback-URI log (#640) (08f4f24) auth: reject an empty credentialKey before storing the credential (#818) (8f792bb) bind one appName in the Vertex AI compaction e2e test (#848) (675c2f3) build: make the web build loadable outside Node (#837) (5b9c306) build: stop compiling the dev CLI entrypoint into dist/cjs (#861) (da9a492) check every function response, not just the first, when resolving which agent to resume (#810) (aee975f) cli: quit adk run on a whitespace-padded exit (#896) (0568990) cli: stop staging an empty node_modules and a zero-byte lockfile into the deploy image (#894) (fd4ac9a) cli: surface model errors and make agent stack traces readable (#625) (9508dee) cli: use GOOGLE_GENAI_USE_ENTERPRISE instead of deprecated GOOGLE_GENAI_USE_VERTEXAI (#897) (6dc4a3d) close two remaining author-blind confirmation-resolution paths (#755) (f9d6d91) context: respect isolation scopes during compaction (#830) (cda8433) core: configure VertexAiSessionService from environment for vertexai:// URIs (#898) (600b756) core: drop the unused @mikro-orm/reflection dependency and pin the DB-driver manifest contract (#814) (6ea9ce5) core: gracefully handle unregistered tool calls (#790) (6be4195) core: keep winston out of the published browser build by splitting the logger by platform (#813) (c2c2ecb) core: load artifacts and MCP resources wh