Merge https://github.com/google/adk-python/pull/6229
Pin third-party GitHub Actions to specific commit SHAs in CI and release workflows to harden supply-chain security.
PiperOrigin-RevId: 949177003
Add a CI job that runs the A2A test suite against a2a-sdk 0.3.x in addition to
the version resolved by the main test run, so the adk/a2a/_compat.py
compatibility shim stays verified against both SDK majors.
PiperOrigin-RevId: 940935952
scripts/compliance_checks.py documents and matches the very patterns it
forbids, so the compliance-checks hook (which scanned every .py file)
flagged itself and failed on every PR running pre-commit on all files.
Skip the dev-only scripts/ directory. Also clears pre-existing pyink and
end-of-file drift surfaced by the same all-files run.
Co-authored-by: George Weale <gweale@google.com>
PiperOrigin-RevId: 940618068
1. Enable caching for `setup-uv` in `continuous-integration.yml` and
`release-publish.yml` to speed up CI runs.
2. Secure JSON passing in `discussion_answering.yml` by using an environment
variable instead of writing it via inline bash heredoc to prevent potential
script injection.
Co-authored-by: Shangjie Chen <deanchen@google.com>
PiperOrigin-RevId: 940546688
Move custom file compliance checks (logger pattern, future annotations,
cli imports, mTLS endpoints) from GHA inline bash scripts to a unified
python script (compliance_checks.py) and expose it as a local pre-commit hook.
Remove the compliance-check job from CI workflow.
Co-authored-by: Shangjie Chen <deanchen@google.com>
PiperOrigin-RevId: 940081615
Integrate the custom linter and compliance checks from check-file-contents.yml as a parallel 'compliance-check' job in continuous-integration.yml. This job is restricted to run only on pull_request events to preserve its git-diff based incremental analysis logic.
This change deletes the now redundant check-file-contents.yml file, further consolidating our GitHub Actions infrastructure and reducing status check clutter on PR pages.
Co-authored-by: Shangjie Chen <deanchen@google.com>
PiperOrigin-RevId: 936313070
Consolidate the pre-commit, mypy-new-errors, and python-unit-tests workflows into a single parallelized pipeline in continuous-integration.yml. This significantly reduces notification spam by reporting only one status card per push/pull request.
Co-authored-by: Shangjie Chen <deanchen@google.com>
PiperOrigin-RevId: 936280226
George Weale