What's Changed
- fix(core,a2a): group cancelled tool responses and coalesce consecutive roles to prevent 400 Bad Request by @luisfelipe-alt in #28407
- feat(caretaker-triage): implement LLM triage orchestrator and container build by @chadd28 in #28345
- refactor(cli): align macOS permissive Seatbelt profiles with deny-default model by @ompatel-aiml in #28424
- fix(core): mitigate infinite ReAct loops and prompt injection loops by @amelidev in #28429
- fix(a2a-server): enforce workspace trust and task isolation to prevent RCE by @luisfelipe-alt in #28470
- fix(core): sequentially verify cached credentials and restore GOOGLE_APPLICATION_CREDENTIALS fallback by @luisfelipe-alt in #28472
- feat(evals): add eval coverage report command by @ved015 in #28169
Full Changelog: v0.52.0...v0.53.0