unstale

npm / @a2a-js/sdk

@a2a-js/sdk

What changed in @a2a-js/sdk 1, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-18.

1 security2 new APIs and options21 fixes and other

See which of these apply to your code, ranked, in your agent:

npx @unstale/cli init

@unstale/cli on npm

@a2a-js/sdk 124 changes

Security 1

  • The client caches the extended Agent Card only after signature verification.

    1.2.0release notes

New APIs and options 2

  • Adds database-backed stores for tasks and push notifications.

    1.3.0release notes

  • Introduces the server SettleByTaskId method.

    1.2.0release notes

Fixes and other changes 21

  • JSON-RPC dispatch now uses A2A-Version.

    1.2.1release notes

  • JSON-RPC errors are returned with HTTP 200.

    1.2.1release notes

  • JSON-RPC response versions are now validated.

    1.2.1release notes

  • The server adds optional media type validation against the agent's defaultInputModes.

    1.2.1release notes

  • Status or artifact event metadata now propagates to the task.

    1.2.1release notes

  • When creating push notification configs through REST, taskId is now correctly set from path parameters.

    1.2.1release notes

  • Avoids mutating the caller's message configuration.

    1.2.0release notes

  • Guards terminal state transitions and makes cancelTask atomic.

    1.2.0release notes

  • Rejects empty task IDs with RequestMalformedError.

    1.2.0release notes

  • Scopes the manager by tenant and owner to match TaskStore.

    1.2.0release notes

  • Accepts JSON-RPC calls with omitted params.

    1.2.0release notes

  • Rejects empty task IDs with RequestMalformedError.

    1.2.0release notes

  • Preserves HeadersInit in authenticating fetch.

    1.2.0release notes

  • Preserves historyLength=0 rather than treating it as absent.

    1.2.0release notes

  • Preserves call context for tenant requests.

    1.2.0release notes

  • Rejects invalid REST listTasks pageSize values.

    1.2.0release notes

  • Rejects invalid status filters with RequestMalformedError.

    1.2.0release notes

  • Missing push notification configs now return 404/-32001.

    1.2.0release notes

  • Rejects whitespace-only taskId values.

    1.2.0release notes

  • Stamps the resolved taskId onto sendMessage push configs.

    1.2.0release notes

  • Rejects missing required extensions before mutating task history.

    1.2.0release notes