Merge branch 'workflow-branch' of https://github.com/Ganga4060/mcp-toolbox-sdk-python into workflow-branch

Author: Ganga4060

.github/workflows/lint-toolbox-core.yaml

@@ -57,7 +57,7 @@ jobs:
               console.log('Failed to remove label. Another job may have already removed it!');
             }
       - name: Checkout code
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}

.github/workflows/lint-toolbox-langchain.yaml

@@ -57,7 +57,7 @@ jobs:
               console.log('Failed to remove label. Another job may have already removed it!');
             }
       - name: Checkout code
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}

.github/workflows/lint-toolbox-llamaindex.yaml

@@ -57,7 +57,7 @@ jobs:
               console.log('Failed to remove label. Another job may have already removed it!');
             }
       - name: Checkout code
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           repository: ${{ github.event.pull_request.head.repo.full_name }}

.github/workflows/sync-labels.yaml

@@ -29,7 +29,7 @@ jobs:
       issues: 'write'
       pull-requests: 'write'
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
       - uses: micnncim/action-label-syncer@3abd5ab72fda571e69fffd97bd4e0033dd5f495c # v1.3.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.release-please-manifest.json

@@ -1 +1 @@
-{"packages/toolbox-langchain":"0.5.2","packages/toolbox-core":"0.5.2","packages/toolbox-llamaindex":"0.5.2"}
+{"packages/toolbox-langchain":"0.5.3","packages/toolbox-core":"0.5.3","packages/toolbox-llamaindex":"0.5.3"}

packages/toolbox-core/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## [0.5.3](https://github.com/googleapis/mcp-toolbox-sdk-python/compare/toolbox-core-v0.5.2...toolbox-core-v0.5.3) (2025-11-18)
+
+
+### Miscellaneous Chores
+
+* **ci:** Updated the toolbox server version for CI and integration tests ([#388](https://github.com/googleapis/mcp-toolbox-sdk-python/issues/388)), ([#414](https://github.com/googleapis/mcp-toolbox-sdk-python/issues/414)), ([#421](https://github.com/googleapis/mcp-toolbox-sdk-python/issues/421), [#395](https://github.com/googleapis/mcp-toolbox-sdk-python/issues/395)).
+* **deps:** Updated dependencies: `aiohttp` to v3.13.0 ([#389](https://github.com/googleapis/mcp-toolbox-sdk-python/issues/389)), `google-auth` to v2.41.1 ([#383](https://github.com/googleapis/mcp-toolbox-sdk-python/issues/383)), `isort` to v7 ([#393](https://github.com/googleapis/mcp-toolbox-sdk-python/issues/393)), `pytest` to v9 ([#416](https://github.com/googleapis/mcp-toolbox-sdk-python/issues/416)), and other non-major Python dependencies ([#386](https://github.com/googleapis/mcp-toolbox-sdk-python/issues/386)), ([#387](https://github.com/googleapis/mcp-toolbox-sdk-python/issues/387)), ([#427](https://github.com/googleapis/mcp-toolbox-sdk-python/issues/427)).
+
 ## [0.5.2](https://github.com/googleapis/mcp-toolbox-sdk-python/compare/toolbox-core-v0.5.1...toolbox-core-v0.5.2) (2025-09-22)
 
 

packages/toolbox-core/integration.cloudbuild.yaml

@@ -47,5 +47,5 @@ options:
   logging: CLOUD_LOGGING_ONLY
 substitutions:
   _VERSION: '3.13'
-  _TOOLBOX_VERSION: '0.19.1'
+  _TOOLBOX_VERSION: '0.21.0'
   _TOOLBOX_MANIFEST_VERSION: '34'

packages/toolbox-core/pyproject.toml

@@ -4,7 +4,7 @@ dynamic = ["version"]
 readme = "README.md"
 description = "Python Base SDK for interacting with the Toolbox service"
 license = {file = "LICENSE"}
-requires-python = ">=3.9"
+requires-python = ">=3.10"
 authors = [
     {name = "Google LLC", email = "[email protected]"}
 ]
@@ -22,7 +22,6 @@ classifiers = [
     "License :: OSI Approved :: Apache Software License",
     "Programming Language :: Python",
     "Programming Language :: Python :: 3",
-    "Programming Language :: Python :: 3.9",
     "Programming Language :: Python :: 3.10",
     "Programming Language :: Python :: 3.11",
     "Programming Language :: Python :: 3.12",
@@ -44,16 +43,16 @@ Changelog = "https://github.com/googleapis/mcp-toolbox-sdk-python/blob/main/pack
 
 [project.optional-dependencies]
 test = [
-    "black[jupyter]==25.9.0",
-    "isort==6.1.0",
+    "black[jupyter]==25.11.0",
+    "isort==7.0.0",
     "mypy==1.18.2",
-    "pytest==8.4.2",
+    "pytest==9.0.1",
     "pytest-aioresponses==0.3.0",
-    "pytest-asyncio==1.2.0",
+    "pytest-asyncio==1.3.0",
     "pytest-cov==7.0.0",
     "pytest-mock==3.15.1",
-    "google-cloud-secret-manager==2.24.0",
-    "google-cloud-storage==3.4.0",
+    "google-cloud-secret-manager==2.25.0",
+    "google-cloud-storage==3.6.0",
     "aioresponses==0.7.8"
 ]
 [build-system]
@@ -67,6 +66,6 @@ target-version = ['py39']
 profile = "black"
 
 [tool.mypy]
-python_version = "3.9"
+python_version = "3.10"
 warn_unused_configs = true
 disallow_incomplete_defs = true

packages/toolbox-core/requirements.txt

@@ -1,5 +1,5 @@
-aiohttp==3.13.0
-pydantic==2.11.10
-deprecated==1.2.18
+aiohttp==3.13.2
+pydantic==2.12.4
+deprecated==1.3.1
 requests==2.32.5
-google-auth==2.41.1
+google-auth==2.43.0

packages/toolbox-core/src/toolbox_core/client.py

@@ -19,8 +19,10 @@
 from aiohttp import ClientSession
 from deprecated import deprecated
 
-from .protocol import ManifestSchema, ToolSchema
+from .itransport import ITransport
+from .protocol import ToolSchema
 from .tool import ToolboxTool
+from .toolbox_transport import ToolboxTransport
 from .utils import identify_auth_requirements, resolve_value
 
 
@@ -33,9 +35,7 @@ class ToolboxClient:
     is not provided.
     """
 
-    __base_url: str
-    __session: ClientSession
-    __manage_session: bool
+    __transport: ITransport
 
     def __init__(
         self,
@@ -56,15 +56,8 @@ def __init__(
                 should typically be managed externally.
             client_headers: Headers to include in each request sent through this client.
         """
-        self.__base_url = url
-
-        # If no aiohttp.ClientSession is provided, make our own
-        self.__manage_session = False
-        if session is None:
-            self.__manage_session = True
-            session = ClientSession()
-        self.__session = session
 
+        self.__transport = ToolboxTransport(url, session)
         self.__client_headers = client_headers if client_headers is not None else {}
 
     def __parse_tool(
@@ -103,8 +96,7 @@ def __parse_tool(
         )
 
         tool = ToolboxTool(
-            session=self.__session,
-            base_url=self.__base_url,
+            transport=self.__transport,
             name=name,
             description=schema.description,
             # create a read-only values to prevent mutation
@@ -149,8 +141,7 @@ async def close(self):
         If the session was provided externally during initialization, the caller
         is responsible for its lifecycle.
         """
-        if self.__manage_session and not self.__session.closed:
-            await self.__session.close()
+        await self.__transport.close()
 
     async def load_tool(
         self,
@@ -191,16 +182,7 @@ async def load_tool(
             for name, val in self.__client_headers.items()
         }
 
-        # request the definition of the tool from the server
-        url = f"{self.__base_url}/api/tool/{name}"
-        async with self.__session.get(url, headers=resolved_headers) as response:
-            if not response.ok:
-                error_text = await response.text()
-                raise RuntimeError(
-                    f"API request failed with status {response.status} ({response.reason}). Server response: {error_text}"
-                )
-            json = await response.json()
-        manifest: ManifestSchema = ManifestSchema(**json)
+        manifest = await self.__transport.tool_get(name, resolved_headers)
 
         # parse the provided definition to a tool
         if name not in manifest.tools:
@@ -274,16 +256,8 @@ async def load_toolset(
             header_name: await resolve_value(original_headers[header_name])
             for header_name in original_headers
         }
-        # Request the definition of the toolset from the server
-        url = f"{self.__base_url}/api/toolset/{name or ''}"
-        async with self.__session.get(url, headers=resolved_headers) as response:
-            if not response.ok:
-                error_text = await response.text()
-                raise RuntimeError(
-                    f"API request failed with status {response.status} ({response.reason}). Server response: {error_text}"
-                )
-            json = await response.json()
-        manifest: ManifestSchema = ManifestSchema(**json)
+
+        manifest = await self.__transport.tools_list(name, resolved_headers)
 
         tools: list[ToolboxTool] = []
         overall_used_auth_keys: set[str] = set()