chore: merge release v2.0.0a2 to v2#5019

Closed

Jacksunwei wants to merge 11 commits intov2from

release/v2.0.0-alpha.2

Commits on Mar 26, 2026

fix: Exclude compromised LiteLLM versions from dependencies pin to 1.82.6

GWeale
authored and
sasha-gitg
committed
fix: add protection for arbitrary module imports

GWeale
authored and
sasha-gitg
committed
fix: gate builder endpoints behind web flag
sasha-gitg
committed
fix: add agent name validation to prevent arbitrary module imports
sasha-gitg
committed
fix: Default to ClusterIP so GKE deployment isn't publicly exposed by default
sasha-gitg
committed
fix: Update eval extras to Vertex SDK package version with constrained LiteLLM upperbound
sasha-gitg
committed
fix: enforce allowed file extensions for GET requests in the builder API
sasha-gitg
committed
Merge pull request #5013 from google/v2-cherry-pick
sasha-gitg
authored
chore(release/v2-candidate): release 2.0.0-alpha.2 (#5017)
Jacksunwei
authored
chore: update last-release-sha for next v2 release
Jacksunwei
committed

Commits on Mar 27, 2026

Update version.py
GWeale
authored