fix(deps): update dependency pydantic-ai to >=1.107.2

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
pydantic-ai (changelog)	>=1.46.0 → >=1.107.2

---

Release Notes

pydantic/pydantic-ai (pydantic-ai)

v1.107.2: (2026-08-07)

Compare Source

🛡️ Security

Fixes an availability vulnerability: unbounded memory use when downloading remote content via the local web_fetch tool or FileUrl media downloads, which could exhaust process memory and crash the worker. Patched versions enforce a default 50 MiB download cap. See GHSA-v2xh-2vp8-57h8. Patched in 1.107.2 (v1) and 2.24.0 (v2).

What's Changed

🐛 Bug Fixes

• Bound HTTP response body sizes for web_fetch and media URL downloads by @​dsfaccini in #​7308

Full Changelog: pydantic/pydantic-ai@v1.107.1...v1.107.2

v1.107.1: (2026-07-10)

Compare Source

What's Changed

🛡️ Security

This release patches GHSA-jpr8-2v3g-wgf9 (moderate, CWE-863) on the v1 line. On the AG-UI serving path (Agent.to_ag_ui() / AGUIAdapter), UIAdapter.sanitize_messages anchored its dangling-tool-call strip to an index computed before sanitization. When a trailing client message was dropped during sanitization (for example a client system message under the default manage_system_prompt='server'), a preceding assistant response carrying an unresolved tool call could be re-exposed as the new tail and executed with client-chosen arguments.

• Affected: pydantic-ai / pydantic-ai-slim >= 1.88.0, < 1.107.1 (v1) and >= 2.0.0, < 2.5.0 (v2)
• Patched: 1.107.1 (v1) and 2.5.0 (v2)
• Not affected if every sensitive tool uses requires_approval=True / ApprovalRequiredToolset, or if your tool handlers validate their arguments and enforce authorization themselves.

See the advisory for details and workarounds.

🐛 Bug Fixes

• Fix sanitize_messages tail handling when a trailing client message is dropped by @​dsfaccini in #​6407

Full Changelog: pydantic/pydantic-ai@v1.107.0...v1.107.1

v1.107.0: (2026-06-10)

Compare Source

What's Changed

🛡️ Security

• Handle UploadedFile consistently with FileUrl in UI adapters by @​dsfaccini in #​5772
  • Security advisory: VercelAIAdapter trusts client-controlled provider metadata to construct UploadedFile references (confused-deputy file read) GHSA-h7p7-w5gc-xj3w
  • This fix went out in v1.106.0 and v2.0.0b6.
  • You are affected only if your application passes untrusted client-submitted message history to an agent through a UI adapter (e.g. VercelAIAdapter), AND your model-provider or cloud-storage account holds files referenceable by an attacker-guessable UploadedFile id or storage URI (e.g. s3://…, gs://…).
  • You are not affected if you do not pass untrusted client-submitted message history to the agent, or you strip UploadedFile parts before running it.
  • You are not affected via AGUIAdapter / Agent.to_ag_ui on defaults — the preserve_file_data flag that re-enables this path is off by default.

🚀 Features

• Add known_model_names() to enumerate KnownModelName members by @​dsfaccini in #​5803
• feat(openrouter): add CachePoint and prompt caching support by @​Adversarian in #​4604
• Add Claude Fable 5 (claude-fable-5) and Claude Mythos 5 (claude-mythos-5) support by @​dsfaccini in #​5849

🐛 Bug Fixes

• fix(anthropic): guard message=None Bedrock start events in stream path by @​Bartok9 in #​5818
• Fix AnthropicModel.count_tokens with native tools by @​kazmer97 in #​5704

📦 Dependencies

• chore(deps): bump the python-packages group across 1 directory with 18 updates by @​dependabot[bot] in #​5768

New Contributors

• @​Bartok9 made their first contribution in #​5818
• @​kazmer97 made their first contribution in #​5704

Full Changelog: pydantic/pydantic-ai@v1.106.0...v1.107.0

v1.106.0: (2026-06-04)

Compare Source

What's Changed

🛡️ Security

• Handle UploadedFile consistently with FileUrl in UI adapters by @​dsfaccini in #​5772
  • Security advisory: VercelAIAdapter trusts client-controlled provider metadata to construct UploadedFile references (confused-deputy file read) GHSA-h7p7-w5gc-xj3w
  • You are affected only if your application passes untrusted client-submitted message history to an agent through a UI adapter (e.g. VercelAIAdapter), AND your model-provider or cloud-storage account holds files referenceable by an attacker-guessable UploadedFile id or storage URI (e.g. s3://…, gs://…).
  • You are not affected if you do not pass untrusted client-submitted message history to the agent, or you strip UploadedFile parts before running it.
  • You are not affected via AGUIAdapter / Agent.to_ag_ui on defaults — the preserve_file_data flag that re-enables this path is off by default.

🚀 Features

• Map base seed setting to xAI by @​colesmcintosh in #​5741
• Add api_host and timeout to XaiProvider by @​colesmcintosh in #​5742

🐛 Bug Fixes

• Fix incomplete streamed response when event_stream_handler doesn't consume the stream by @​adtyavrdhn in #​5771
• fix(messages): from_data_uri crashes on a valid non-base64 data URI by @​devteamaegis in #​5779

New Contributors

• @​lonelyhty made their first contribution in #​5759
• @​devteamaegis made their first contribution in #​5779

Full Changelog: pydantic/pydantic-ai@v1.105.0...v1.106.0

v1.105.0: (2026-06-02)

Compare Source

What's Changed

🚀 Features

• feat: On-demand (deferred loading) capabilities, including instructions, tools, model settings, and hooks by @​adtyavrdhn in #​5230
• Add Grok 4.3 reasoning_effort support and current xAI model names by @​adtyavrdhn in #​5454

🐛 Bug Fixes

• Fix gateway/ model construction inside a Temporal workflow by passing provider SDKs through the sandbox by @​adtyavrdhn in #​5733
• Fix GoogleModelSettings.google_cached_content so request omits system_instruction, tools, and tool_config by @​gaurav0107 in #​5681

New Contributors

• @​gaurav0107 made their first contribution in #​5681

Full Changelog: pydantic/pydantic-ai@v1.104.0...v1.105.0

v1.104.0: (2026-05-28)

Compare Source

What's Changed

🚀 Features

• Add Claude Opus 4.8 support by @​dsfaccini in #​5709

🐛 Bug Fixes

• Forward thinking=False on hybrid OpenRouter/xAI/Bedrock routes, aligning silent-drop with direct routes by @​sarth6 in #​5433
• Fix Bedrock single-tool tool_choice cache preservation by @​dsfaccini in #​5674

Full Changelog: pydantic/pydantic-ai@v1.103.0...v1.104.0

v1.103.0: (2026-05-26)

Compare Source

What's Changed

🚀 Features

• Add list_prompts and get_prompt functionality to McpServer by @​bdore in #​3889
• Round-trip message timestamps through VercelAIAdapter's UIMessage.metadata by @​Genmin in #​5279
• Support anthropic_eager_input_streaming in OpenRouterModel by @​Alex-Resch in #​5656

🐛 Bug Fixes

• fix(bedrock): map malformed_model_output and malformed_tool_use to FinishReason.error by @​kuishou68 in #​5640
• fix(bedrock): recognize type='adaptive' in _is_thinking_enabled by @​sevakva in #​5651
• fix(ui): Strip force_download flag from client-submitted FileUrl parts in UIAdapter.sanitize_messages by @​colesmcintosh in #​5571
• fix(toolsets): warn when prepare callbacks return None by @​dfm88 in #​5188

New Contributors

• @​ejentum made their first contribution in #​5594
• @​kuishou68 made their first contribution in #​5640
• @​sevakva made their first contribution in #​5651
• @​bdore made their first contribution in #​3889
• @​Genmin made their first contribution in #​5279
• @​aryanmotgi made their first contribution in #​5667
• @​dfm88 made their first contribution in #​5188

Full Changelog: pydantic/pydantic-ai@v1.102.0...v1.103.0

v1.102.0: (2026-05-22)

Compare Source

What's Changed

🛡️ Security

• Expand IPv6 transition-form handling in URL validation by @​DouweM in #​5596
  • Security advisory: SSRF cloud-metadata blocklist bypass via additional IPv6 transition forms GHSA-cg7w-rg45-pc59
  • You are affected only if your application explicitly opts a FileUrl into force_download='allow-local' on a URL that is, or could be, influenced by untrusted input, AND runs on a NAT64- or ISATAP-configured network (e.g. some IPv6-only or dual-stack-with-NAT64 Kubernetes setups).
  • You are not affected if you run on a standard dual-stack cloud VM or container, which does not route these forms in practice.
  • You are not affected if you use any of the bundled integrations to ingest user input: Agent.to_web / clai web; VercelAIAdapter; AGUIAdapter / Agent.to_ag_ui

🐛 Bug Fixes

• Don't auto-promote strict=None tools to strict mode with Bedrock, and skip strict field when botocore is too old by @​shailendher in #​5580
• fix(bedrock): Disable Opus 4.7 native structured output by @​cosmopolitan033 in #​5582
• fix(instrumentation): Prevent false positive variable_instructions span attribute by @​madanlalit in #​5487
• Fix: VercelAIAdapter now accepts providerExecuted / title on dynamic-tool message parts by @​he-yufeng in #​5474
• Normalize trailing dot and case in WebFetchTool domain matching by @​DouweM in #​5592

New Contributors

• @​cosmopolitan033 made their first contribution in #​5582
• @​he-yufeng made their first contribution in #​5474

Full Changelog: pydantic/pydantic-ai@v1.101.0...v1.102.0

v1.101.0: (2026-05-21)

Compare Source

What's Changed

🚀 Features

• Add pending message queue (ctx.enqueue / agent_run.enqueue) by @​DouweM in #​4980
• Add support for MCP background tasks (SEP-1686) by @​Alex-Resch in #​5192
• Make XSearch capability model-agnostic via subagent fallback by @​colesmcintosh in #​5120
• Support top_k model setting in GoogleModel, AnthropicModel, and CohereModel by @​madanlalit in #​5558

🐛 Bug Fixes

• Fix AnthropicModel dropping code execution tool results when continuing a conversation by @​2830500285 in #​5568
• Fix thinking being silently dropped for Claude Sonnet 4.6 and Opus 4.6 on Bedrock, and support adaptive thinking efforts by @​sarth6 in #​5326
• Don't drop single BaseModel tool arguments sent in wrapped form when the model uses default extra='ignore' by @​macayu17 in #​5560
• Preserve Xai tool result IDs and require xai-sdk 1.6.0 by @​FU-max-boop in #​5355

📦 Dependencies

• Bump genai-prices minimum version by @​adtyavrdhn in #​5565

New Contributors

• @​FU-max-boop made their first contribution in #​5355
• @​putramkti made their first contribution in #​5559
• @​2830500285 made their first contribution in #​5568
• @​macayu17 made their first contribution in #​5560

Full Changelog: pydantic/pydantic-ai@v1.100.0...v1.101.0

v1.100.0: (2026-05-20)

Compare Source

What's Changed

🛡️ Security

• Normalize IPv6 transition forms in URL validation by @​DouweM in #​5528
  • Security advisory: SSRF cloud-metadata blocklist bypass via IPv6-encoded address forms GHSA-cqp8-fcvh-x7r3
  • This fix went out in yesterday's v1.99.0.
  • You are affected only if your application explicitly opts a FileUrl into force_download='allow-local' on a URL that is, or could be, influenced by untrusted input.
  • You are not affected if you use any of the bundled integrations to ingest user input: Agent.to_web / clai web; VercelAIAdapter; AGUIAdapter / Agent.to_ag_ui

🚀 Features

• Support Bedrock native JSON output + strict tool calls by @​shailendher in #​4237

🐛 Bug Fixes

• Ignore signatures on incomplete incoming thinking parts when Vercel AI by @​pydanty[bot] in #​5534

🆕 V2 Preparation

• Deprecate gateway/gemini: prefix in favor of gateway/google-cloud: by @​dsfaccini in #​5543
• Deprecate method-style StreamedResponse.usage(); raise on region-less Gateway API keys by @​dsfaccini in #​5546
• Deprecate positional construction of evals classes ahead of v2 kw-only flip by @​dmontagu in #​5547
• Deprecate evaluation_name / evaluator_version attribute pattern in favor of explicit accessor methods by @​dmontagu in #​5554

New Contributors

• @​shailendher made their first contribution in #​4237

Full Changelog: pydantic/pydantic-ai@v1.99.0...v1.100.0

v1.99.0: (2026-05-19)

Compare Source

What's Changed

🛡️ Security

• Normalize IPv6 transition forms in URL validation by @​DouweM in #​5528
  • Security advisory: SSRF cloud-metadata blocklist bypass via IPv6-encoded address forms GHSA-cqp8-fcvh-x7r3
  • You are affected only if your application explicitly opts a FileUrl into force_download='allow-local' on a URL that is, or could be, influenced by untrusted input.
  • You are not affected if you use any of the bundled integrations to ingest user input: Agent.to_web / clai web; VercelAIAdapter; AGUIAdapter / Agent.to_ag_ui

🚀 Features

• Add gemini-3.5-flash model by @​dsfaccini in #​5527

🐛 Bug Fixes

• Avoid OpenAI strict schemas with regex lookarounds by @​dsfaccini in #​5519

Full Changelog: pydantic/pydantic-ai@v1.98.0...v1.99.0

v1.98.0: (2026-05-18)

Compare Source

What's Changed

🚀 Features

• Add OpenAI Responses input token counting (OpenAIResponsesModel.count_tokens) by @​colesmcintosh in #​3951
• Replace Agent tool_retries=/output_retries= with retries: int | AgentRetries by @​Kludex in #​5500

🐛 Bug Fixes

• fix(mcp): Don't require fastmcp.server at runtime by @​Kymi808 in #​5514

🆕 V2 Preparation

• Deprecate pydantic_ai.ext.aci (tool_from_aci and ACIToolset) by @​dsfaccini in #​5510

New Contributors

• @​Kymi808 made their first contribution in #​5514

Full Changelog: pydantic/pydantic-ai@v1.97.0...v1.98.0

v1.97.0: (2026-05-15)

Compare Source

What's Changed

🚀 Features

• feat(evals): add OnlineEvaluator.run_on_errors to opt into evaluating failed calls by @​dmontagu in #​5456
• Split GoogleProvider(vertexai=True|False) into GoogleProvider + GoogleCloudProvider; rename provider ID google-gla: to google:, google-vertex: to google-cloud:; deprecate old names by @​dsfaccini in #​5336
• Add MCPToolset that uses fastmcp-slim[client], deprecate MCPServer* and FastMCPToolset by @​DouweM in #​5325
• Set ModelResponse.state to incomplete while response is still streaming by @​adtyavrdhn in #​5455
• Move pydantic_graph.beta API out of beta, deprecate old API by @​dmontagu in #​5306

🆕 V2 Preparation

• Deprecate stream_responses() for stream_response(); new singular yields ModelResponse instead of (ModelResponse, is_last) tuple by @​dsfaccini in #​5296
• Deprecate Agent.to_a2a() and bundled fasta2a integration; fasta2a has been adopted by DataLayer and users can use fasta2a.pydantic_ai (requires fasta2a v0.6.1) instead by @​dsfaccini in #​5426

New Contributors

• @​Quratulain-bilal made their first contribution in #​5439

Full Changelog: pydantic/pydantic-ai@v1.96.1...v1.97.0

v1.96.1: (2026-05-14)

Compare Source

What's Changed

🆕 V2 Preparation (coming in June)

• Deprecate Agent constructor prepare_tools=, prepare_output_tools=, event_stream_handler= in favor of PrepareTools, PrepareOutputTools, ProcessEventStream capabilities by @​dsfaccini in #​5335

🐛 Bug Fixes

• openai: omit input_fidelity when None in image generation tool by @​pydanty[bot] in #​5415
• openai: respect openai_system_prompt_role in OpenAIResponsesModel by @​navalprakhar in #​5430

New Contributors

• @​pydanty[bot] made their first contribution in #​5415

Full Changelog: pydantic/pydantic-ai@v1.96.0...v1.96.1

v1.96.0: (2026-05-13)

Compare Source

What's Changed

🆕 V2 Preparation (coming in June)

• Add openai-chat: prefix and warn on bare openai: which will switch to use the Responses API in v2 by @​dsfaccini in #​5334
• Deprecate Agent(history_processors=) in favor of capabilities=[ProcessHistory(...)] by @​dsfaccini in #​5425
• Deprecate method-style result.usage(), result.timestamp(), stream.get() in favor of property-style result.usage, result.timestamp, stream.response by @​dsfaccini in #​5263
• Deprecate AGUIApp, Agent.to_ag_ui(), and pydantic_ai.ag_ui shim in favor of AGUIAdapter by @​dsfaccini in #​5345
• Deprecate OutlinesModel and OutlinesProvider by @​DouweM in #​5432

Full Changelog: pydantic/pydantic-ai@v1.95.1...v1.96.0

v1.95.1: (2026-05-13)

Compare Source

What's Changed

🐛 Bug Fixes

• fix: make current_otel_traceparent imports eager (unbreak agent runs in Temporal workflows) by @​DouweM in #​5422
• fix: un-deprecate Agent.instrument setter and InstrumentedModel by @​DouweM in #​5427

Full Changelog: pydantic/pydantic-ai@v1.95.0...v1.95.1

v1.95.0: (2026-05-12)

Compare Source

What's Changed

🚀 Features

• feat: native Tool Search on Anthropic and OpenAI, with custom search strategies on any provider by @​DouweM in #​5143
• Add Instrumentation capability; deprecate Agent(instrument=...) by @​DouweM in #​4967
• feat(google): support structured output + tool combination for Gemini 3 by @​dsfaccini in #​4848

🆕 V2 Preparation (coming in June)

• Rename “built-in tools” to “native tools”; deprecate old fields; register via capabilities=[NativeTool(...)] by @​DouweM in #​5338
• Add local= opt-in for provider-adaptive capability fallback; deprecate auto-fallback by @​DouweM in #​5331

🐛 Bug Fixes

• Restore ability to swap the Bedrock client at runtime by @​DouweM in #​5392
• fix(anthropic): normalize Bedrock model IDs for capability profile lookup by @​DouweM in #​5395
• fix(vercel_ai): emit tool-input-(available|error) on FunctionToolCallEvent by @​sadra-barikbin in #​5292

📦 Dependencies

• Reinstate mistral as default dependency, exclude compromised 2.4.6 by @​dsfaccini in #​5393

New Contributors

• @​sadra-barikbin made their first contribution in #​5292

Full Changelog: pydantic/pydantic-ai@v1.94.0...v1.95.0

v1.94.0: (2026-05-12)

Compare Source

What's Changed

🚀 Features

• feat(openai): add openai_chat_supports_multiple_system_messages profile flag by @​DouweM in #​5375

📦 Dependencies

• Drop mistralai as dependency from pydantic-ai by @​Kludex in #​5384

Full Changelog: pydantic/pydantic-ai@v1.93.0...v1.94.0

v1.93.0: (2026-05-08)

Compare Source

What's Changed

🚀 Features

• Add tool_choice setting by @​dsfaccini in #​3611
• Yield OutputToolCallEvent/OutputToolResultEvent for output tool calls; deprecate function-tool events for failing output tool calls by @​DouweM in #​5320

🐛 Bug Fixes

• Drain spawned tasks during agent cancellation by @​adtyavrdhn in #​5341

New Contributors

• @​DhruvGarg111 made their first contribution in #​4958

Full Changelog: pydantic/pydantic-ai@v1.92.0...v1.93.0

v1.92.0: (2026-05-07)

Compare Source

What's Changed

🚀 Features

• Add Anthropic task budget support by @​dsfaccini in #​5140
• Add runtime output_retries override + deprecate retries + internal retry-field rename by @​dsfaccini in #​5075

🐛 Bug Fixes

• Fix: Clean up streaming responses on cancellation by @​adtyavrdhn in #​5313
• Fix attempted exit cancel scope in different task by running MCP session in a dedicated task by @​dsfaccini in #​4514
• Populate for_run RunContext with run_id, conversation_id, and metadata by @​DouweM in #​5330
• fix(evals): guarantee CaseLifecycle.teardown() by @​voorhs in #​5322

New Contributors

• @​voorhs made their first contribution in #​5322

Full Changelog: pydantic/pydantic-ai@v1.91.0...v1.92.0

v1.91.0: (2026-05-06)

Compare Source

What's Changed

🚀 Features

• feat(openai): support gpt-image-2 options by @​banteg in #​5234
• feat(deepseek): add support for deepseek-v4-flash anddeepseek-v4-pro by @​SuperMarioYL in #​5195

🐛 Bug Fixes

• fix(evals): preserve Unicode in YAML datasets by @​Kcstring in #​5245
• Skip empty ModelResponse in OpenAI Chat assistant message mapping by @​DouweM in #​5300
• Fix MCP history replay for empty tool arguments by @​adtyavrdhn in #​5314

New Contributors

• @​Kcstring made their first contribution in #​5245
• @​khaldon made their first contribution in #​5301
• @​SuperMarioYL made their first contribution in #​5195
• @​banteg made their first contribution in #​5234

Full Changelog: pydantic/pydantic-ai@v1.90.0...v1.91.0

v1.90.0: (2026-05-04)

Compare Source

What's Changed

🚀 Features

• feat: add OpenAI Conversations API state support via OpenAIResponsesModelSettings.openai_conversation_id by @​corytomlinson in #​5224
• feat: typed OTel metadata for code tool call syntax highlighting by @​DouweM in #​5297

📦 Dependencies

• Upgrade web UI to pydantic/ai-chat-ui 1.2.0 by @​johnthagen in #​5246

New Contributors

• @​johnthagen made their first contribution in #​5246
• @​Acacian made their first contribution in #​4888
• @​VeniVeci made their first contribution in #​5283

Full Changelog: pydantic/pydantic-ai@v1.89.1...v1.90.0

v1.89.1: (2026-05-01)

Compare Source

What's Changed

🤖 Coding Agent Experience

• Add bundled Library Skills(https://library-skills.io) for improved coding-agent support by @​adtyavrdhn in #​5271

🐛 Bug Fixes

• fix: restore wrap_validation_errors on ToolManager function-tool methods by @​DouweM in #​5275
• Defer anyio.Lock creation via cached_property to bind to running loop by @​Kludex in #​5265

New Contributors

• @​dependabot[bot] made their first contribution in #​5268

Full Changelog: pydantic/pydantic-ai@v1.89.0...v1.89.1

v1.89.0: (2026-04-30)

Compare Source

What's Changed

🚀 Features

• feat: add conversation_id for cross-run correlation by @​DouweM in #​5251
• feat(capabilities): support dynamic capabilities via callables in capabilities list by @​DouweM in #​5252
• feat: add builtin_tools to agent.override by @​mplemay in #​5248

🐛 Bug Fixes

• fix(evals): use non-daemon thread for background evaluators by @​alexmojaki in #​5247

Full Changelog: pydantic/pydantic-ai@v1.88.0...v1.89.0

v1.88.0: (2026-04-28)

Compare Source

What's Changed

🚀 Features

• feat(capabilities)!: output validate/process hooks; scope prepare_tools to function tools, add prepare_output_tools by @​DouweM in #​4859
• feat: cross-provider service_tier model setting; Anthropic + Gemini API + Vertex Priority PayGo support by @​markmcd in #​4926
• Add anthropic speed, fast mode for opus 4.6 by @​bohdanhr in #​4300
• feat: support OpenAI Responses phase on assistant messages by @​DouweM in #​5229
• feat(ui): add UIAdapter.sanitize_messages and allowed_file_url_schemes by @​DouweM in #​5228

🐛 Bug Fixes

• fix: restore per-block cache_control for anthropic_cache_messages by @​Wh1isper in #​5227
• fix: propagate original error when CallToolsNode stream fails by @​thejens in #​4799
• fix: propagate Agent(retries=...) to user-provided toolsets by @​dsfaccini in #​4745

New Contributors

• @​markmcd made their first contribution in #​4926

Full Changelog: pydantic/pydantic-ai@v1.87.0...v1.88.0

v1.87.0: (2026-04-24)

Compare Source

What's Changed

🚀 Features

• Add HandleDeferredToolCalls capability and handle_deferred_tool_calls hook by @​DouweM in #​5142
• Add ProcessEventStream capability by @​DouweM in #​5141
• Handle thinking setting for GPT-5.5 by @​dsfaccini in #​5196

Full Changelog: pydantic/pydantic-ai@v1.86.1...v1.87.0

v1.86.1: (2026-04-23)

Compare Source

What's Changed

🐛 Bug Fixes

• fix(openai): guard against choices=None in streamed chunks (#​5165) by @​adtyavrdhn in #​5170
• fix(anthropic): send container_id as string on reuse; unwrap broken {id: x} shape by @​adtyavrdhn in #​5168
• fix: preserve validation error input on tool-call retries by @​DouweM in #​5181
• fix(toolsets): prevent MCPServer.__aexit__ called more times than __aenter__ in DynamicToolset by @​anishesg in #​5171
• Warn about dict fields with Anthropic strict mode by @​rahulmansharamani14 in #​4321
• Set gen_ai.operation.name=execute_tool on tool-execution spans by @​DouweM in #​5182
• fix: avoid stale client references in model and embedding classes by @​Deeven-Seru in #​4276

New Contributors

• @​anishesg made their first contribution in #​5171
• @​rahulmansharamani14 made their first contribution in #​4321
• @​Deeven-Seru made their first contribution in #​4276

Full Changelog: pydantic/pydantic-ai@v1.86.0...v1.86.1

v1.86.0: (2026-04-22)

Compare Source

What's Changed

🚀 Features

• feat(ui): add UIAdapter.manage_system_prompt + ReinjectSystemPrompt capability by @​dsfaccini in #​4087

🐛 Bug Fixes

• fix(vercel-ai): allow regenerate requests without messageId by @​MukundaKatta in #​5156
• Handle dict reasoning_content from Gemini 2.5 models by @​JulieLiu99 in #​5155

New Contributors

• @​MukundaKatta made their first contribution in #​5156
• @​JulieLiu99 made their first contribution in #​5155

Full Changelog: pydantic/pydantic-ai@v1.85.1...v1.86.0

v1.85.1: (2026-04-21)

Compare Source

What's Changed

🐛 Bug Fixes

• fix: exclude validation error input from retry messages by @​navalprakhar in #​4947
• fix(vercel-ai): auto-detect deferred tool approval state in dump_messages() by @​tijmenhammer in #​4831

New Contributors

• @​abhicris made their first contribution in #​5149
• @​navalprakhar made their first contribution in #​4947
• @​tijmenhammer made their first contribution in #​4831

Full Changelog: pydantic/pydantic-ai@v1.85.0...v1.85.1

v1.85.0: (2026-04-21)

Compare Source

What's Changed

🚀 Features

• Online evaluation via OpenTelemetry events by @​dmontagu in #​5125

Full Changelog: pydantic/pydantic-ai@v1.84.1...v1.85.0

v1.84.1: (2026-04-17)

Compare Source

What's Changed

🐛 Bug Fixes

• Skip tool hooks for internal output tools by @​DouweM in #​5128
• Always pass dict-shaped validated args to hooks for single-BaseModel tools by @​DouweM in #​5137

Full Changelog: pydantic/pydantic-ai@v1.84.0...v1.84.1

v1.84.0: (2026-04-16)

Compare Source

What's Changed

🔒 Security

• Fix exponential-time regex in Google FileSearchTool response parsing by @​DouweM in #​5106. Thi

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.