chore(python): bump a2a-sdk to 0.3.23 (#1326)

The main motivation is that it includes this fix:

- a2aproject/a2a-python#614

It's described in more detail from a kagent perspective here:

- #1268

Signed-off-by: Peter Lithammer <peter.lithammer@embark-studios.com>

Author: lithammer

python/packages/kagent-adk/pyproject.toml

@@ -30,7 +30,7 @@ dependencies = [
   "pydantic>=2.5.0",
   "typing-extensions>=4.8.0",
   "jsonref>=1.1.0",
-  "a2a-sdk>=0.3.22",
+  "a2a-sdk>=0.3.23",
   # Security: pin minimum versions for CVE fixes in transitive dependencies
   "urllib3>=2.6.3",  # CVE-2025-66418, CVE-2025-66471, CVE-2026-21441: unbounded decompression DoS
   "filelock>=3.20.3",  # CVE-2025-68146, CVE-2026-22701: TOCTOU symlink race condition
@@ -64,4 +64,4 @@ extend = "../../pyproject.toml"
 [tool.pytest.ini_options]
 testpaths = ["tests"]
 asyncio_default_fixture_loop_scope = "function"
-asyncio_mode = "auto"
+asyncio_mode = "auto"

python/packages/kagent-core/pyproject.toml

@@ -9,7 +9,7 @@ description = "kagent common library for kagent python packages"
 readme = "README.md"
 requires-python = ">=3.11.0"
 dependencies = [
-  "a2a-sdk[http-server]>=0.3.9",
+  "a2a-sdk[http-server]>=0.3.23",
   "opentelemetry-api>=1.36.0",
   "opentelemetry-sdk>=1.36.0",
   "opentelemetry-exporter-otlp-proto-grpc>=1.36.0",
@@ -24,4 +24,4 @@ dependencies = [
 extend = "../../pyproject.toml"
 
 [tool.hatch.build.targets.wheel]
-packages = ["src/kagent"]
+packages = ["src/kagent"]

python/packages/kagent-crewai/pyproject.toml

@@ -15,7 +15,7 @@ dependencies = [
   "pydantic>=2.0.0",
   "typing-extensions>=4.0.0",
   "uvicorn>=0.20.0",
-  "a2a-sdk[http-server]>=0.3.1",
+  "a2a-sdk[http-server]>=0.3.23",
   "kagent-core",
   "opentelemetry-instrumentation-crewai>=0.47.3",
   "google-genai>=1.21.1"
@@ -38,4 +38,4 @@ kagent-core = {workspace = true}
 packages = ["src/kagent"]
 
 [tool.ruff]
-extend = "../../pyproject.toml"
+extend = "../../pyproject.toml"

python/packages/kagent-langgraph/pyproject.toml

@@ -12,7 +12,7 @@ dependencies = [
   "pydantic>=2.0.0",
   "typing-extensions>=4.0.0",
   "uvicorn>=0.20.0",
-  "a2a-sdk>=0.2.16",
+  "a2a-sdk>=0.3.23",
   "kagent-core",
   "langsmith[otel]>=0.4.30",
 ]

python/packages/kagent-openai/pyproject.toml

@@ -7,7 +7,7 @@ requires-python = ">=3.13"
 dependencies = [
   "openai>=1.72.0",
   "openai-agents>=0.4.0",
-  "a2a-sdk>=0.3.1",
+  "a2a-sdk>=0.3.23",
   "kagent-core",
   "kagent-skills",
   "httpx>=0.25.0",