deps(deps): bump the npm-major group across 1 directory with 2 updates

[dependabot]

Bumps the npm-major group with 2 updates in the / directory: canonicalize and @google/adk.

Updates canonicalize from 3.0.0 to 4.0.0

Release notes

Sourced from canonicalize's releases.

v4.0.0

Breaking Changes

• Lone surrogates now throw an error — Strings containing lone Unicode surrogates (unpaired high or low surrogates) now throw a TypeError instead of being serialized. This aligns with RFC 8785 §3.2.2.2 which requires implementations to reject ill-formed strings.

What you need to do

If your code passes strings with lone surrogates to canonicalize(), you will now get an error. Validate or sanitize input strings before calling canonicalize(), or wrap the call in a try/catch.

Commits

• c1b08c3 4.0.0
• 63c3410 Clarify trailing surrogate handling
• c7e852a Reject lone Unicode surrogates
• See full diff in compare view

Updates @google/adk from 1.6.0 to 2.0.0

Release notes

Sourced from @​google/adk's releases.

adk: v2.0.0

2.0.0 (2026-08-20)

⚠ BREAKING CHANGES

• workflow: LLMAgentWrapper and LLMAgentWrapperConfig are removed. An agent is a workflow node as itself — pass it to an edge or node() directly. A non-LlmAgent agent used as a node no longer has the node input appended to its conversation, nor its final model text promoted to the node output.
• workflow: InvocationContext.agent is now optional. Code reading it outside an agent's own execution must handle undefined; inside one, prefer requireAgent(ctx).
• agents: constructing a SequentialAgent, ParallelAgent or LoopAgent now logs a deprecation warning once per class per process. The classes are otherwise unchanged and keep working.
• agents: BaseAgent now extends BaseNode, so subclasses inherit rerunOnResume, waitForOutput, retryConfig, timeout, inputSchema, outputSchema and stateSchema. A subclass that declares a field of the same name now collides with the inherited one. BaseAgent.description is also no longer undefined when unset.
• workflow: a dynamic ctx.runNode() child that raises an interrupt and re-reads ctx.resumeInputs on re-run must now declare rerunOnResume: true. With the default it is completed with the raw reply as its output instead of re-running. Workflow is still @​experimental.
• workflow: add engine core — execution model, graph, and node registry (Part 2) (#588)

Features

• agents: deprecate SequentialAgent, ParallelAgent and LoopAgent (#679) (63927e2)
• agents: make BaseAgent a BaseNode (#667) (4b0c605)
• core: accept a bare Workflow as a root — runner, App and agent loader (#680) (b3497e0)
• core: graduate RoutedAgent and RoutedLlm out of experimental (#783) (36e3fcb)
• core: implement Runner.runLive and LlmAgent live flow (#523) (48165a8)
• dev: render graph workflows in the dev UI agent graph (#654) (434a43e)
• Honor GOOGLE_GENAI_USE_ENTERPRISE in getExpressModeApiKey() (adk-python parity) (#569) (444f30b)
• plugins: add before/after node callbacks (#659) (e03bbad)
• Port the environment abstraction (BaseEnvironment, ExecutionResult, LocalEnvironment) from adk-python (#582) (f7f541e)
• tools: FunctionTool require_confirmation — HITL approval (Part 7) (#594) (d2ae57b)
• utils: enforce schemas declared in the genai dialect, not just Zod (#663) (392511a)
• workflow: add engine core — execution model, graph, and node registry (Part 2) (#588) (672dbde)
• workflow: built-in Function and Tool nodes (Part 3) (#590) (68aebdb)
• workflow: drive workflows as nodes and remove WorkflowAgent (#688) (534546f)
• workflow: enforce a node's declared stateSchema (#713) (379e45c)
• workflow: let ctx.runNode() take what edges take (#683) (53535d3)
• workflow: LLM-agent-as-node, task mode, and node-as-tool (Part 6) (#593) (5334b45)
• workflow: make isolationScope real by filtering LLM contents on it (#656) (bdc9090)
• workflow: ParallelWorker and JoinNode (Part 4) (#591) (13f9995)
• workflow: record a failed node as a NodeErrorEvent (#657) (e5025e9)
• workflow: trace workflow and node execution with OpenTelemetry (#653) (d0f19c5)
• workflow: workflow runner and public API (Part 5) (#592) (1b90f3b)

Bug Fixes

• agents: bind a human-in-the-loop confirmation to the action it approves (#771) (2d1bb44)
• agents: keep usage metadata from content-less streaming responses (#646) (2e58422), closes #645
• agents: persist processLlmRequest state changes (#630) (9360bf2)
• agents: stop warning about transfer config the author never set (#746) (5860560), closes #725 #726
• auth: bind a credential response to the request that asked for it (#775) (10ae7bd)
• cli: keep one broken agent from killing the dev server; surface HITL prompts and errors in adk run (#633) (a98d132)
• dev: stop an empty node response vanishing from the transcript (#765) (af3a821), closes #728
• encode and validate OpenAPI path parameters in RestApiTool (#638) (cedd2a5)
• models: consult GOOGLE_API_KEY on the Gemini API path (#748) (60a3c67), closes #712

... (truncated)

Commits

• 4f44910 Release: v2.0.0 (#629)
• 5ee247e ci: check the PR title against release-please's commit notation (#787)
• 8786718 fix(workflow): fail a node that reports an error instead of throwing (#776)
• 2ea08cf fix(skills): materialize script output into a dedicated dir, not process.cwd(...
• a5cdc38 perf(core): make situational subsystems optional peers, 591 → 172 packages on...
• 67d5246 fix(workflow): resume a waiting parent on its original input (#760)
• 36e3fcb feat(core): graduate RoutedAgent and RoutedLlm out of experimental (#783)
• 9c3121f fix(dev): keep the adk run REPL alive when a turn fails (#780)
• 2f534b7 fix(dev): print a node's output when it emitted no text (#779)
• 19c50ef fix(workflow): refuse a reply that answers no open interrupt (#777)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions