Update dependency pydantic-ai to v2

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
pydantic-ai (changelog)	<2.0.0 → <2.11.1

---

Release Notes

pydantic/pydantic-ai (pydantic-ai)

v2.11.0: (2026-07-15)

Compare Source

What's Changed

🚀 Features

• feat: export HistoryProcessor and add actionable hints to usage-limit and tool-retry errors by @​DouweM in #​6346

🐛 Bug Fixes

• Fix MistralStreamedResponse streamed number/integer validation to accept int-valued numbers and reject bools by @​pydanty[bot] in #​6479
• fix(onboarding): suggest Agent('test') when provider credentials are missing by @​DouweM in #​6342
• fix(anthropic): transform native output schema when reached via profile={"default_structured_output_mode": "native"} by @​dsfaccini in #​6521
• Fix Bedrock profile={'default_structured_output_mode': 'native'} sending untransformed schema by @​dsfaccini in #​6539

Full Changelog: pydantic/pydantic-ai@v2.10.0...v2.11.0

v2.10.0: (2026-07-14)

Compare Source

What's Changed

🚀 Features

• Make message_history provider-valid out of the box (repair tool-call/result pairing) by @​DouweM in #​6319
• Add support for OpenAI background mode and handle Anthropic stop_reason=pause_turn by @​DouweM in #​6303

🐛 Bug Fixes

• Fix has_values() returning True for all-zero usage details by @​sean-kim05 in #​6466
• Fix RenamedToolset silently dropping a tool on a name collision by @​sean-kim05 in #​6462
• Preserve invalid UTF-8 bytes in instrumentation serialization by @​alexmojaki in #​6483
• Fix event-loop affinity in run_stream_sync by @​adtyavrdhn in #​6454
• Attach xAI ToolCallPart to the preceding reasoning message by @​dsfaccini in #​5924
• Filter unconfigured Anthropic native tool calls by @​hxaxd in #​6463
• Fix DeferredToolResults resume when an output tool call was settled in the same batch as deferred calls by @​DouweM in #​6491

📦 Dependencies

• Bump transformers floor to >=5.5.0 for CVE-2026-5241 by @​hramezani in #​6482

New Contributors

• @​sean-kim05 made their first contribution in #​6466
• @​ShawnChen-Sirius made their first contribution in #​6467
• @​deepakdevp made their first contribution in #​4718
• @​hxaxd made their first contribution in #​6463

Full Changelog: pydantic/pydantic-ai@v2.9.1...v2.10.0

v2.9.1: (2026-07-13)

Compare Source

What's Changed

🐛 Bug Fixes

• Fix typed composition members recursion in JsonSchemaTransformer by @​pydanty[bot] in #​6440
• fix: handle int timeout values in MistralModel._get_timeout_ms by @​Ricardo-M-L in #​5019
• Remove retired models from KnownModelName and restore Gateway-supported models by @​adtyavrdhn in #​5843

📦 Dependencies

• fix(deps): bump soupsieve to 2.8.4 to fix ReDoS (CVE-2026-49477) by @​hramezani in #​6442

Full Changelog: pydantic/pydantic-ai@v2.9.0...v2.9.1

v2.9.0: (2026-07-10)

Compare Source

What's Changed

🛡️ Security

A moderate advisory, GHSA-jpr8-2v3g-wgf9 (CWE-863), affecting the AG-UI UIAdapter.sanitize_messages dangling-tool-call strip, was fixed in 2.5.0 and backported to 1.107.1 on the v1 line. If you are on 2.5.0 or later you already have the fix; this note calls it out now that the advisory is public.

• Affected: pydantic-ai / pydantic-ai-slim >= 2.0.0, < 2.5.0 (v2) and >= 1.88.0, < 1.107.1 (v1)
• Patched: 2.5.0 (v2) and 1.107.1 (v1)
• Not affected if every sensitive tool uses requires_approval=True / ApprovalRequiredToolset, or if your tool handlers validate their arguments and enforce authorization themselves.

🚀 Features

• Add /usage slash command to clai CLI for cumulative token usage by @​adtyavrdhn in #​6245
• feat(openai): add GPT-5.6 models and reasoning mode by @​Wh1isper in #​6414
• feat(RunContext): expose the run's usage_limits to tools and capabilities by @​DouweM in #​6341

🐛 Bug Fixes

• Auto-enable Anthropic Files API beta when messages contain UploadedFile by @​gaurav0107 in #​5815
• Fix repr() crash on message parts whose field != returns a non-bool (#​6415) by @​hramezani in #​6421
• fix: mark non-crypto hashes with usedforsecurity=False (FIPS precaution) by @​stef41 in #​5053
• Guard against id-less MCPToolset on the DBOSAgent wrapper path by @​dsfaccini in #​6406
• fix: make nested capture_run_messages capture correctly (#​1568) by @​DouweM in #​6345
• Fix cancellation deadlock when a wrapped model request or agent run survives cancellation by @​0ywfe in #​6426
• Honor end_strategy='early' for NativeOutput, PromptedOutput, and image output by @​DouweM in #​6427

New Contributors

• @​stef41 made their first contribution in #​5053
• @​0ywfe made their first contribution in #​6426

Full Changelog: pydantic/pydantic-ai@v2.8.0...v2.9.0

v2.8.0: (2026-07-09)

Compare Source

What's Changed

🚀 Features

• Allow to_cli() to pass model for unset-model agents by @​hramezani in #​6384
• Bump bundled chat UI to 2.0.0 and target sdk_version=7 in Agent.to_web() by @​dsfaccini in #​6296

🐛 Bug Fixes

• fix: validate Tool max_retries and timeout parameters by @​isheng-eqi in #​6375
• fix: validate ToolOutput max_retries by @​isheng-eqi in #​6377
• fix: validate Agent tool_timeout by @​isheng-eqi in #​6383
• fix: validate max_queued in ConcurrencyLimit and ConcurrencyLimiter by @​isheng-eqi in #​6373
• Fix JsonSchemaTransformer to recurse into allOf composition by @​pydanty[bot] in #​6394
• Fix empty and thinking-only responses reusing earlier text as the run output by @​DouweM in #​6403

New Contributors

• @​isheng-eqi made their first contribution in #​6375

Full Changelog: pydantic/pydantic-ai@v2.7.0...v2.8.0

v2.7.0: (2026-07-08)

Compare Source

What's Changed

🚀 Features

• Support azure-responses:[model-id] shorthand by @​hramezani in #​6355
• Add xAI grok-4.5 model by @​dsfaccini in #​6362

🐛 Bug Fixes

• fix: handle boolean JSON Schema nodes in function signature walker by @​hramezani in #​6314
• fix(gateway): preserve HTTPX event hooks by @​VectorPeak in #​6327
• Allow override(model=...) on an agent with no model set by @​hramezani in #​6357
• Disable document input for AlibabaProvider (Chat Completions API) by @​dsfaccini in #​5727

New Contributors

• @​lxingy3 made their first contribution in #​6349

Full Changelog: pydantic/pydantic-ai@v2.6.0...v2.7.0

v2.6.0: (2026-07-07)

Compare Source

What's Changed

🚀 Features

• Record time-to-first-token for streaming model requests by @​dmontagu in #​5967
• feat: Add files support to CodeExecutionTool for Anthropic and OpenAI by @​HenryYYang in #​4338
• Add Bedrock model profiles for Writer, Z.AI, and Moonshot AI, and refresh LatestBedrockModelNames by @​DouweM in #​6318

🐛 Bug Fixes

• Forward WebSearchTool domain filters to Groq search_settings by @​Iam-Mil in #​6160
• Give a clear error for non-positive concurrency max_running by @​VectorPeak in #​6282
• fix(evals): constrain judge_output reason to be concise and retry-safe by @​anmolg1997 in #​5089
• Re-enable Prefect test suite and fix PrefectAgent cache-key drift by @​adtyavrdhn in #​6313
• fix(google): recover Gemini 3+ File Search grounding dropped with native tool parts by @​adtyavrdhn in #​6216
• fix: serialize callable thinking delta provider details by @​hramezani in #​6294
• Resolve capability for_run once per run and preserve resolved native tools under override(native_tools=...) by @​DouweM in #​6332
• Reject conflicting native tool IDs within a capability layer by @​hramezani in #​6242

📦 Dependencies

• deps: bump torch floor to 2.12.1 to close CVE-2025-3000 by @​hramezani in #​6309
• deps: bump transformers floor to 5.3.0 to close CVE-2026-4372 by @​hramezani in #​6310
• Bump genai-prices to 0.0.70 by @​adtyavrdhn in #​6330

New Contributors

• @​anmolg1997 made their first contribution in #​5089
• @​HenryYYang made their first contribution in #​4338

Full Changelog: pydantic/pydantic-ai@v2.5.1...v2.6.0

v2.5.1: (2026-07-06)

Compare Source

What's Changed

🐛 Bug Fixes

• fix(bedrock): handle toolResult attachment co-location per-model via bedrock_tool_result_colocatable_content by @​Hasnaathussain in #​6098
• fix(groq): map unified thinking setting to Groq reasoning_effort by @​dsfaccini in #​6231
• fix(evals): reject non-positive OnlineEvaluator.max_concurrency by @​VectorPeak in #​6267
• fix: write relative schema refs for AgentSpec files by @​VectorPeak in #​6251
• send retry prompt for empty model responses instead of silent resubmit by @​dcosson in #​5643
• Preserve FileUrl.force_download in UI round-trips by @​HarperZ9 in #​6205
• Exclude deprecated Bedrock gateway model anthropic.claude-3-5-sonnet-20240620-v1:0 by @​ddanielcruzz in #​6297
• fix: preserve union NativeOutput description instead of last member's docstring by @​dsfaccini in #​6265
• fix(bedrock): deliver unsupported tool-return media to models that isolate toolResult turns by @​DouweM in #​6259
• Accept thinking-only responses when output_type allows None by @​kmike in #​5146
• Omit empty ModelResponse from Mistral and Cohere request payloads by @​DouweM in #​6302

New Contributors

• @​Hasnaathussain made their first contribution in #​6098
• @​saime428 made their first contribution in #​6268
• @​NotFoundOvO made their first contribution in #​6285
• @​dcosson made their first contribution in #​5643
• @​HarperZ9 made their first contribution in #​6205
• @​kmike made their first contribution in #​5146

Full Changelog: pydantic/pydantic-ai@v2.5.0...v2.5.1

v2.5.0: (2026-07-03)

Compare Source

What's Changed

🚀 Features

• Add sanitize_messages for inbound message-history hardening by @​dsfaccini in #​6169
• Round-trip multimodal tool returns through the AG-UI and Vercel AI adapters (history and streaming) by @​dsfaccini in #​5255

🐛 Bug Fixes

• Document why _clean_message_history merges consecutive ModelRequests regardless of conversation_id/metadata by @​adtyavrdhn in #​6221
• Align LLMJudge _build_prompt section order with its few-shot examples by @​immuhammadfurqan in #​6111
• Reject duplicate deferred tool call IDs by @​hramezani in #​6241
• Fix MoonshotAI Kimi thinking support and add models to KnownModelNames by @​SuperMarioYL in #​6208
• fix(dbos,prefect): preserve runtime toolsets in durable runs by @​Trollgeir in #​6076
• Exclude first-class token counts from gen_ai.usage.details.* OTel attributes to fix double-counting by @​adtyavrdhn in #​6244
• fix(dbos,prefect): preserve runtime event stream handlers by @​Trollgeir in #​6093
• Reject non-object agent spec inputs by @​Ghraven in #​5820
• Run the sync streaming wrappers on an anyio portal thread; fix async stream_text early-break teardown by @​DouweM in #​6199
• fix(bedrock): only synthesize a leading user message for models that require it by @​DouweM in #​6255
• fix(bedrock): correct bedrock_supported_media_kinds_in_tool_returns for Meta, Mistral, and Qwen by @​DouweM in #​6254

📦 Dependencies

• Avoid Python 3.14 numpy source builds in examples by @​hramezani in #​6246

New Contributors

• @​pragnyanramtha made their first contribution in #​5490
• @​Sehlani042 made their first contribution in #​6200
• @​ChunkyTortoise made their first contribution in #​5739

Full Changelog: pydantic/pydantic-ai@v2.4.0...v2.5.0

v2.4.0: (2026-07-02)

Compare Source

What's Changed

🚀 Features

• Split preserve_file_data into allow_uploaded_files (inbound security) and an AG-UI representation opt-in by @​DouweM in #​6232
• Add GEval evaluator and standard quality metric rubrics for LLMJudge by @​dmontagu in #​5129
• Add agentic span-based evaluators (ToolCorrectness, TrajectoryMatch, ArgumentCorrectness, MaxToolCalls, MaxModelRequests) by @​dmontagu in #​5130

🐛 Bug Fixes

• fix(xai): update XSearchTool handle limit by @​gyx09212214-prog in #​5979
• Handle None metadata in Gradio weather agent example by @​hramezani in #​6214
• fix(mistral): preserve extended usage fields from API response by @​felipebridge in #​5693
• Avoid mutable default argument in process_tool_calls by @​kratos0718 in #​6189
• feat: forward WebSearchTool.user_location to xAI web search by @​manan-tech in #​6181
• Clean up the pending task and streams on KeyboardInterrupt in synchronous run_until_complete wrappers by @​DouweM in #​6198
• fix(tool-search): drop redundant description from ToolSearchMatch by @​serozhenka in #​5654
• fix(temporal): pass through genai_prices and httpx2 for workflow cost() by @​syf2211 in #​6219
• fix(evals): reject non-positive max_concurrency by @​VectorPeak in #​6228
• Lazy-start run_stream_events() background task on first event iteration by @​DouweM in #​6234

📦 Dependencies

• Bump genai-prices to >=0.0.69 by @​adtyavrdhn in #​6212

New Contributors

• @​raullenchai made their first contribution in #​5008
• @​gyx09212214-prog made their first contribution in #​5979
• @​felipebridge made their first contribution in #​5693
• @​kratos0718 made their first contribution in #​6189
• @​serozhenka made their first contribution in #​5654

Full Changelog: pydantic/pydantic-ai@v2.3.0...v2.4.0

v2.3.0: (2026-07-01)

Compare Source

What's Changed

🚀 Features

• Add native Z.AI (Zhipu AI) provider with thinking support by @​eliasaronson in #​4273

🐛 Bug Fixes

• fix(test): set provider_name on TestModel non-streaming responses by @​syf2211 in #​6066
• Keep Bedrock tool results non-empty for empty lists by @​Whning0513 in #​6155
• fix(huggingface): don't silently drop file content in tool returns by @​HaozheZhang6 in #​5881
• fix: skip OpenAI thinking-only chat history messages by @​adtyavrdhn in #​6182
• Don't send defer_loading without tool_search on models without native tool search by @​adtyavrdhn in #​6144
• Route remaining instrumentation serialization through safe_to_json by @​dsfaccini in #​6073
• fix: reconstruct multimodal ToolReturnPart.content via a ToolReturnContent discriminator by @​DouweM in #​6191
• Fix AGUIAdapter.dump_messages reordering ToolReturnPart after UserPromptPart by @​amarjaleelbanbhan in #​5969
• fix: track new_messages() boundary by position so a rebuilt resumed request isn't leaked by @​klplentific in #​6034
• Preserve tool_kind in Vercel AI and AG-UI message round-trips by @​adtyavrdhn in #​5873
• Make durable-exec MCP get_tools caching replay-deterministic by @​dsfaccini in #​5883
• Preserve FilePart.content.vendor_metadata in AG-UI and Vercel AI adapter round-trips by @​Navaneethp007 in #​6095
• Resolve dynamic toolset get_instructions in an activity under Temporal by @​dsfaccini in #​5925

New Contributors

• @​Whning0513 made their first contribution in #​6155
• @​eliasaronson made their first contribution in #​4273
• @​amarjaleelbanbhan made their first contribution in #​5969
• @​klplentific made their first contribution in #​6034
• @​Navaneethp007 made their first contribution in #​6095

Full Changelog: pydantic/pydantic-ai@v2.2.0...v2.3.0

v2.2.0: (2026-06-30)

Compare Source

What's Changed

🚀 Features

• feat: add TwelveLabs Pegasus video-understanding example by @​mohit-twelvelabs in #​6061
• Add Claude Sonnet 5 (claude-sonnet-5) support by @​dsfaccini in #​6161
• Allow factory functions as lifecycle arg for Dataset.evaluate by @​nlsfnr in #​6107
• feat: Add prompt and completions cost fields to OpenRouter by @​ali-corpo in #​4899
• feat: add retry_options parameter to GoogleProvider by @​graydeon in #​4966

🐛 Bug Fixes

• Forward image detail from vendor_metadata for GroqModel and MistralModel by @​pydanty[bot] in #​6014
• fix(utils): run sync callbacks inline on Pyodide/emscripten by default by @​syf2211 in #​6088
• Fix group_by_temporal emitting first item alone when delayed past soft_max_interval by @​pydanty[bot] in #​5947
• Fix missing output_audio_tokens in usage accumulation by @​jnMetaCode in #​4594
• fix(heroku): route model names through family profiles so thinking isn't dropped by @​Bartok9 in #​6070
• Guard TogetherProvider.model_profile against model names without a / by @​immuhammadfurqan in #​6113
• fix(GoogleModel): include CodeExecutionTool in include_server_side_tool_invocations check by @​aarsh767 in #​6052
• fix(groq): surface reasoning_tokens in usage details by @​tcconnally in #​5986
• Fix map downstream_join_id double-firing the join on a non-empty iterable by @​clavedeluna in #​6009
• fix: de-duplicate output_audio_tokens accumulation in _incr_usage_tokens by @​dsfaccini in #​6141
• Suppress ClosedResourceError when cancelling a graph run mid-send by @​conradlee in #​6149
• fix(ui): round-trip file vendor_metadata through Vercel AI & AG-UI adapters by @​Bartok9 in #​5790
• Handle CRLF markdown JSON fences in strip_markdown_fences by @​CodingFeng101 in #​6090
• fix(heroku): avoid duplicating /v1 in base_url by @​VectorPeak in #​6142
• Fix absolute schema_path handling in Dataset.to_file by @​VectorPeak in #​6143
• Fix deps deserialization in non-streaming Temporal model-request activity by @​dsfaccini in #​5900

New Contributors

• @​Iam-Mil made their first contribution in #​6132
• @​jnMetaCode made their first contribution in #​4594
• @​mohit-twelvelabs made their first contribution in #​6061
• @​immuhammadfurqan made their first contribution in #​6113
• @​aarsh767 made their first contribution in #​6052
• @​tcconnally made their first contribution in #​5986
• @​clavedeluna made their first contribution in #​6009
• @​VectorPeak made their first contribution in #​6140
• @​nlsfnr made their first contribution in #​6107
• @​CodingFeng101 made their first contribution in #​6090
• @​ali-corpo made their first contribution in #​4899

Full Changelog: pydantic/pydantic-ai@v2.1.0...v2.2.0

v2.1.0: (2026-06-29)

Compare Source

What's Changed

🚀 Features

• feat: Add Anthropic _20260209 web tools with server-tool replay by @​adtyavrdhn in #​4844
• Serialize instrumentation message attributes with to_json instead of json.dumps by @​Kludex in #​6045
• Add TypeAdapter for EvaluatorContext by @​hon-gyu in #​3373

🐛 Bug Fixes

• Convert ExceptionGroup-wrapped tool errors to ModelRetry in MCPToolset by @​dmontagu in #​6004
• fix: prevent cancel() from flipping complete state on finished stream by @​Oxygen56 in #​5795
• fix(temporal): add return type annotation to PydanticAIPlugin.__init__ by @​syf2211 in #​6065
• fix(anthropic): support Bedrock token counting by @​dyscott in #​5480

New Contributors

• @​lucaszhu-hue made their first contribution in #​5982
• @​syf2211 made their first contribution in #​6065
• @​dyscott made their first contribution in #​5480
• @​hon-gyu made their first contribution in #​3373

Full Changelog: pydantic/pydantic-ai@v2.0.0...v2.1.0

v2.0.0: (2026-06-23)

Compare Source

🎉 Pydantic AI V2.0 is here!

After seven betas, Pydantic AI V2 is now stable. V2 leans into a harness-first design with capabilities as a core primitive — a single composable unit that bundles an agent's tools, hooks, instructions, and model settings, reaching every layer of the agent through one concept.

Install it with:

uv add pydantic-ai

See the Upgrade Guide for everything that's changed and the recommended path from V1.

---

What's Changed

🚀 Features

• Add gemini-embedding-2 embedding model by @​dsfaccini in #​5887
• Map AG-UI interrupts to DeferredTools in AGUIAdapter by @​jjmllr in #​5441
• Add google_task text-prefix conditioning for gemini-embedding-2 embeddings by @​dsfaccini in #​5894
• feat: add xai_max_turns to XaiModelSettings by @​manan-tech in #​5978
• Pydantic AI V2 by @​DouweM in #​5451

🐛 Bug Fixes

• Don't send Gemini function_calling_config without function declarations by @​glendigity in #​5791
• fix(openai): map image UploadedFile parts to input_image by @​Oxygen56 in #​5809
• Fix unified thinking handling for Groq qwen3 and Cerebras gpt-oss by @​dsfaccini in #​5850
• Disallow non-finite Evaluator outputs by @​alexmojaki in #​5863
• Fix AnthropicModel.count_tokens divergence on ToolSearchTool replay history by @​dsfaccini in #​5855
• Send reasoning_content on synthesized tool-call turns for DeepSeek thinking models by @​adtyavrdhn in #​5842
• Validate UploadedFile.provider_name in tool returns and consolidate the guard into Model._validate_uploaded_file_provider by @​Oxygen56 in #​5860
• Replay Cerebras zai-glm reasoning in <think> tags and bump to zai-glm-4.7 by @​dsfaccini in #​5891
• Retain dropped usage fields across GoogleModel streaming chunks by @​dsfaccini in #​5886
• Accumulate output_audio_tokens in RunUsage by @​HaozheZhang6 in #​5904
• fix(output): validate union kind discriminator in text output by @​ret2libc in #​5845
• fix(openai): prevent AG-UI stalls during multi-server MCP discovery by @​cooleryu in #​5443
• Forward additionalModelRequestFields in Bedrock count_tokens by @​dsfaccini in #​5910
• Fix MCPToolset(http_client=...) crash on FastMCP's follow_redirects kwarg by @​he-yufeng in #​5694
• fix(cohere): forward tool_choice from ModelSettings to v2 chat API by @​Julien-ser in #​5833
• Route max_tokens to max_completion_tokens or max_tokens via OpenAIModelProfile flag by @​dsfaccini in #​5926
• Forward top_k model setting to Bedrock additionalModelRequestFields by @​dsfaccini in #​5922
• Fix FallbackModel declaring an unassigned _model_name dataclass field by @​dorukgezici in #​5932
• fix(groq): add groq_reasoning_effort setting by @​Oxygen56 in #​5797
• fix: use running loop in chat app example by @​Ghraven in #​5971
• fix(cohere): forward usage.cached_tokens as cache_read_tokens by @​bdpgmbv in #​5957
• fix(mistral): forward penalties in completions by @​he-yufeng in #​5695
• Emit reasoning_effort='none' for Cerebras, deprecate cerebras_disable_reasoning, add cerebras_clear_thinking by @​dsfaccini in #​5897

New Contributors

• @​glendigity made their first contribution in #​5791
• @​Oxygen56 made their first contribution in #​5809
• @​HaozheZhang6 made their first contribution in #​5904
• @​ret2libc made their first contribution in #​5845
• @​cooleryu made their first contribution in #​5443
• @​jjmllr made their first contribution in #​5441
• @​strickvl made their first contribution in #​5908
• @​Julien-ser made their first contribution in #​5833
• @​MylittleQueercat made their first contribution in #​5876
• @​Kropiunig made their first contribution in #​5928
• @​Nukually made their first contribution in #​5813
• @​MakenRosa made their first contribution in #​5997
• @​manan-tech made their first contribution in #​5978
• @​MeloMei made their first contribution in #​5950
• @​kaxil made their first contribution in #​5984
• @​pranavmutatkar made their first contribution in #​5991
• @​Ghraven made their first contribution in #​5971
• @​bdpgmbv made their first contribution in #​5957

Full Changelog: pydantic/pydantic-ai@v2.0.0b7...v2.0.0

v1.107.1: (2026-07-10)

Compare Source

What's Changed

🛡️ Security

This release patches GHSA-jpr8-2v3g-wgf9 (moderate, CWE-863) on the v1 line. On the AG-UI serving path (Agent.to_ag_ui() / AGUIAdapter), UIAdapter.sanitize_messages anchored its dangling-tool-call strip to an index computed before sanitization. When a trailing client message was dropped during sanitization (for example a client system message under the default manage_system_prompt='server'), a preceding assistant response carrying an unresolved tool call could be re-exposed as the new tail and executed with client-chosen arguments.

• Affected: pydantic-ai / pydantic-ai-slim >= 1.88.0, < 1.107.1 (v1) and >= 2.0.0, < 2.5.0 (v2)
• Patched: 1.107.1 (v1) and 2.5.0 (v2)
• Not affected if every sensitive tool uses requires_approval=True / ApprovalRequiredToolset, or if your tool handlers validate their arguments and enforce authorization themselves.

See the advisory for details and workarounds.

🐛 Bug Fixes

• Fix sanitize_messages tail handling when a trailing client message is dropped by @​dsfaccini in #​6407

Full Changelog: pydantic/pydantic-ai@v1.107.0...v1.107.1

---

Configuration

📅 Schedule: (in timezone Europe/Zurich)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.